$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6E35/729CB23076FF11EBBFB60D14C4F9AE02/qg08vlkeG_ZBGL9vA2QSX6abipA.mft File: qg08vlkeG_ZBGL9vA2QSX6abipA.mft (raw, json) Hash identifier: +974Nk2MUFRzPa7Ssq+Awu1z+2MYo7fvijWmOyUl+NI= Subject key identifier: EF:7D:6A:8D:2D:24:64:36:90:1D:17:5A:96:30:CB:0C:EF:8F:EE:4B Authority key identifier: AA:0D:3C:BE:59:1E:1B:F6:41:18:BF:6F:03:64:12:5F:A6:9B:8A:90 Certificate issuer: /CN=A91D6E35/serialNumber=AA0D3CBE591E1BF64118BF6F0364125FA69B8A90 Certificate serial: 069A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qg08vlkeG_ZBGL9vA2QSX6abipA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6E35/729CB23076FF11EBBFB60D14C4F9AE02/qg08vlkeG_ZBGL9vA2QSX6abipA.mft Manifest number: 0691 Signing time: Wed 02 Jul 2025 22:31:42 +0000 Manifest this update: Wed 02 Jul 2025 22:31:42 +0000 Manifest next update: Wed 09 Jul 2025 22:31:42 +0000 Files and hashes: 1: qg08vlkeG_ZBGL9vA2QSX6abipA.crl (hash: Dx/pT7L5LtRl5IVZ9AJvNDld812uzEeUrtubxmYhLPo=) 2: EE188D209F2B11EDBB1C587AC4F9AE02.roa (hash: xunDUR+vk1rAB3LOb72QA9qMR5Y4O+s76u7aM9CtIVg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6E35/729CB23076FF11EBBFB60D14C4F9AE02/qg08vlkeG_ZBGL9vA2QSX6abipA.crl rsync://rpki.apnic.net/member_repository/A91D6E35/729CB23076FF11EBBFB60D14C4F9AE02/qg08vlkeG_ZBGL9vA2QSX6abipA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qg08vlkeG_ZBGL9vA2QSX6abipA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 22:31:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1690 (0x69a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6E35, serialNumber=AA0D3CBE591E1BF64118BF6F0364125FA69B8A90 Validity Not Before: Jul 2 22:31:42 2025 GMT Not After : Jul 9 22:31:42 2025 GMT Subject: CN=6865b34e-60db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:67:2e:30:b0:9a:d3:15:fb:92:67:6d:eb:01: bb:b9:fa:bd:84:21:ac:99:b4:db:61:2a:84:68:d3: 42:a2:fd:0b:c7:10:b1:e7:93:c9:c8:58:c4:97:fe: aa:ce:d8:33:4d:0d:83:42:b2:39:ed:21:54:02:19: e0:fa:10:8a:dd:95:0e:c6:c6:9c:47:04:84:07:27: a2:fc:4a:69:48:ff:62:2c:e9:7e:c0:40:1a:9f:f0: 19:cf:4e:2f:8d:0b:58:4b:45:e3:b1:96:2a:36:f9: 22:52:9e:e0:c5:5c:61:f7:aa:01:dc:4e:4d:b0:8d: 4d:ff:a7:65:d8:bb:ba:71:55:ff:f2:fb:16:be:13: 88:04:e6:f6:95:70:16:0a:ea:e2:26:d8:20:19:f9: 02:49:57:f6:36:97:b3:b9:1b:80:f8:04:54:44:69: 4b:a8:fe:8d:11:01:11:43:8e:32:f6:6b:eb:70:7f: 23:e6:10:8d:74:ac:fe:cd:9c:8a:d4:af:5a:87:f4: b9:22:67:e8:0e:ae:6b:d4:16:64:f4:bf:98:d8:ac: 49:17:b3:d2:1e:70:ab:90:74:4e:e3:9d:85:87:86: b9:46:1e:05:42:2a:b2:4a:56:cc:c1:21:bc:6f:4b: d6:21:7f:19:32:8b:c5:e3:09:59:1e:48:68:79:9b: b5:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:7D:6A:8D:2D:24:64:36:90:1D:17:5A:96:30:CB:0C:EF:8F:EE:4B X509v3 Authority Key Identifier: keyid:AA:0D:3C:BE:59:1E:1B:F6:41:18:BF:6F:03:64:12:5F:A6:9B:8A:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6E35/729CB23076FF11EBBFB60D14C4F9AE02/qg08vlkeG_ZBGL9vA2QSX6abipA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qg08vlkeG_ZBGL9vA2QSX6abipA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6E35/729CB23076FF11EBBFB60D14C4F9AE02/qg08vlkeG_ZBGL9vA2QSX6abipA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:68:66:b1:14:0e:d4:81:29:25:3b:fd:85:18:89:33:74:2d: 98:fa:91:f0:e0:46:af:13:b0:35:af:cf:6e:8b:d3:25:b4:b7: 46:ef:20:76:a7:d5:08:44:9e:b1:38:13:b4:13:14:9f:09:2c: 9a:8c:01:1c:de:4f:39:a1:e7:cf:96:25:96:20:9b:d5:c0:3f: 09:57:54:6d:78:1a:5a:d1:79:e8:61:e4:ad:d6:a6:29:b7:44: b7:8a:e1:41:58:1d:70:87:23:0a:65:e0:e5:25:39:bb:59:eb: 30:a4:37:1b:cb:4e:1d:cb:31:2c:05:1a:0e:90:db:58:c0:bc: a3:94:bd:77:4f:3c:2f:a1:de:e3:1f:a1:8f:27:9e:58:c0:9b: 51:63:4d:f7:a5:54:0a:a1:f1:ca:ab:c1:90:91:5a:63:b1:4e: 87:ac:27:28:40:91:81:19:b4:de:70:51:41:db:db:81:3c:dc: 76:9f:13:0a:3d:d0:89:bc:c3:08:5a:3e:95:f7:27:d0:d5:d0: 73:4e:2d:b5:e7:5d:05:de:9c:39:28:fe:4d:d6:82:ea:69:59: 16:57:31:8b:4c:33:d8:7f:52:65:16:68:99:5a:01:ee:ce:cb: 8b:b6:0c:9d:d8:ce:2f:3f:df:2e:bc:8b:a5:61:ab:31:7e:57: d0:83:f9:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBpowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDZFMzUxMTAvBgNVBAUTKEFBMEQzQ0JFNTkxRTFCRjY0MTE4QkY2RjAzNjQxMjVG QTY5QjhBOTAwHhcNMjUwNzAyMjIzMTQyWhcNMjUwNzA5MjIzMTQyWjAYMRYwFAYD VQQDEw02ODY1YjM0ZS02MGRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxmcuMLCa0xX7kmdt6wG7ufq9hCGsmbTbYSqEaNNCov0LxxCx55PJyFjEl/6q ztgzTQ2DQrI57SFUAhng+hCK3ZUOxsacRwSEByei/EppSP9iLOl+wEAan/AZz04v jQtYS0XjsZYqNvkiUp7gxVxh96oB3E5NsI1N/6dl2Lu6cVX/8vsWvhOIBOb2lXAW CuriJtggGfkCSVf2NpezuRuA+ARURGlLqP6NEQERQ44y9mvrcH8j5hCNdKz+zZyK 1K9ah/S5ImfoDq5r1BZk9L+Y2KxJF7PSHnCrkHRO452Fh4a5Rh4FQiqySlbMwSG8 b0vWIX8ZMovF4wlZHkhoeZu18QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO99ao0t JGQ2kB0XWpYwywzvj+5LMB8GA1UdIwQYMBaAFKoNPL5ZHhv2QRi/bwNkEl+mm4qQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENkUzNS83MjlDQjIzMDc2 RkYxMUVCQkZCNjBEMTRDNEY5QUUwMi9xZzA4dmxrZUdfWkJHTDl2QTJRU1g2YWJp cEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FnMDh2bGtlR19aQkdMOXZBMlFTWDZhYmlwQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NkUzNS83MjlDQjIzMDc2RkYxMUVCQkZCNjBEMTRDNEY5QUUwMi9xZzA4dmxrZUdf WkJHTDl2QTJRU1g2YWJpcEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXaGaxFA7UgSklO/2FGIkzdC2Y+pHw4EavE7A1r89ui9MltLdG7yB2 p9UIRJ6xOBO0ExSfCSyajAEc3k85oefPliWWIJvVwD8JV1RteBpa0XnoYeSt1qYp t0S3iuFBWB1whyMKZeDlJTm7WeswpDcby04dyzEsBRoOkNtYwLyjlL13Tzwvod7j H6GPJ55YwJtRY033pVQKofHKq8GQkVpjsU6HrCcoQJGBGbTecFFB29uBPNx2nxMK PdCJvMMIWj6V9yfQ1dBzTi21510F3pw5KP5N1oLqaVkWVzGLTDPYf1JlFmiZWgHu zsuLtgyd2M4vP98uvIulYasxflfQg/nG -----END CERTIFICATE-----Generated at Thu Jul 3 17:08:31 2025 by rpki-client