$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7C1D/A8070AF28AF011EAA9528309C4F9AE02/qK6pspMKYU1coxq59-hDeTYaL0M.mft File: qK6pspMKYU1coxq59-hDeTYaL0M.mft (raw, json) Hash identifier: u36UmZsgvp5Z+Ni1PzKxyReVj00yfuML4hUNqjuqya4= Subject key identifier: E6:72:09:F7:4C:FC:07:26:9F:CC:20:C4:72:5C:1A:01:38:84:6D:B2 Authority key identifier: A8:AE:A9:B2:93:0A:61:4D:5C:A3:1A:B9:F7:E8:43:79:36:1A:2F:43 Certificate issuer: /CN=A91D7C1D/serialNumber=A8AEA9B2930A614D5CA31AB9F7E84379361A2F43 Certificate serial: 09C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qK6pspMKYU1coxq59-hDeTYaL0M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D7C1D/A8070AF28AF011EAA9528309C4F9AE02/qK6pspMKYU1coxq59-hDeTYaL0M.mft Manifest number: 09B1 Signing time: Fri 04 Jul 2025 20:25:23 +0000 Manifest this update: Fri 04 Jul 2025 20:25:22 +0000 Manifest next update: Fri 11 Jul 2025 20:25:22 +0000 Files and hashes: 1: qK6pspMKYU1coxq59-hDeTYaL0M.crl (hash: 2+CbIYrJqtVarlZQdp/HF0swgxfISWbFeRb5hLIq6f0=) 2: A292E3529E9711EEB6899B1CC4F9AE02.roa (hash: Ogu9kxXrFRJanE7jcwo9P/mePv/PXm/3vRabACePad8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D7C1D/A8070AF28AF011EAA9528309C4F9AE02/qK6pspMKYU1coxq59-hDeTYaL0M.crl rsync://rpki.apnic.net/member_repository/A91D7C1D/A8070AF28AF011EAA9528309C4F9AE02/qK6pspMKYU1coxq59-hDeTYaL0M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qK6pspMKYU1coxq59-hDeTYaL0M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2496 (0x9c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D7C1D, serialNumber=A8AEA9B2930A614D5CA31AB9F7E84379361A2F43 Validity Not Before: Jul 4 20:25:22 2025 GMT Not After : Jul 11 20:25:22 2025 GMT Subject: CN=686838b2-7a95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:00:3e:77:c6:c4:87:4d:94:62:9f:2d:d9:f1: c8:d1:6c:c2:d5:0b:a7:d4:40:6a:22:1f:6f:54:e1: dc:f6:10:83:26:57:d6:57:ef:81:d3:70:90:56:61: af:9a:98:02:90:d4:0f:97:80:1f:33:e1:22:7c:a9: 7d:ad:03:7d:84:e0:be:91:c7:0b:a6:f2:75:27:ec: 5e:b7:8e:06:96:49:cd:4e:8b:13:1b:e6:8d:f8:7a: a0:ca:de:de:cd:af:78:52:a5:92:6a:39:7a:dd:d5: 93:1c:52:1e:95:11:e1:1f:10:3c:84:85:96:af:ef: df:c4:fd:c2:9d:e3:2c:79:7b:f7:e4:44:ac:cc:cc: 47:f9:9f:69:4b:12:be:29:62:02:a1:72:9c:d8:7a: ee:d7:da:f1:04:af:9e:03:87:ec:01:bc:c8:3b:56: 77:88:67:ff:90:bd:2c:ef:74:8e:d7:17:40:bc:dc: 0b:d8:4f:7a:a7:46:f9:e7:da:c2:b9:c6:d2:0f:7e: 09:ae:77:94:1a:82:d3:a7:3d:b1:ad:cf:d5:60:b4: 69:aa:61:b3:20:88:02:38:7d:76:f9:73:ab:6e:60: f2:23:74:80:f6:1d:a5:f8:31:a3:7b:43:e8:48:a8: fc:1b:59:11:b2:f1:23:fc:07:f6:f3:44:2e:49:8f: 12:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:72:09:F7:4C:FC:07:26:9F:CC:20:C4:72:5C:1A:01:38:84:6D:B2 X509v3 Authority Key Identifier: keyid:A8:AE:A9:B2:93:0A:61:4D:5C:A3:1A:B9:F7:E8:43:79:36:1A:2F:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D7C1D/A8070AF28AF011EAA9528309C4F9AE02/qK6pspMKYU1coxq59-hDeTYaL0M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qK6pspMKYU1coxq59-hDeTYaL0M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7C1D/A8070AF28AF011EAA9528309C4F9AE02/qK6pspMKYU1coxq59-hDeTYaL0M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:62:2d:8d:a5:a6:11:f4:80:97:fa:df:01:8b:74:37:06:c7: 7e:6d:10:0c:a8:2c:7f:5e:6c:e0:2b:f0:67:1b:4a:3d:63:74: fd:81:41:b8:20:b5:4a:75:cd:87:e9:c7:fd:f4:5b:76:08:65: 12:c3:db:b5:79:4b:48:93:5b:97:ff:05:90:03:89:a3:93:22: cd:ba:39:74:d8:c5:29:ba:74:f1:8e:7b:91:02:46:15:12:3f: 4c:1b:9f:03:17:53:09:9b:9a:5f:1b:44:25:b4:65:2d:08:89: 32:3f:4e:00:42:78:8b:fb:fb:46:1e:27:30:49:e0:6c:08:bc: 01:97:ee:e1:81:d1:c3:6f:bd:99:df:11:5e:ea:c6:d2:25:28: 0f:d1:24:70:51:05:f9:90:97:24:3a:d4:f3:f2:07:e4:cf:77: 47:13:3c:5b:43:41:ba:fa:be:3b:9c:95:a1:5e:fd:9c:d0:0b: 7f:61:f0:a9:1a:d6:c1:27:56:8f:32:ee:4a:52:3b:52:b9:20: 9f:65:9e:f7:49:9a:ca:0a:ea:95:23:b5:db:9a:c9:03:f1:44: 13:f1:6b:a8:6e:9f:d3:d0:46:be:15:d6:4a:bc:96:e7:77:94: ca:c1:c8:57:fe:66:9b:68:bb:c7:da:3d:ee:8d:53:b0:82:18: 35:8b:e5:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCcAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDdDMUQxMTAvBgNVBAUTKEE4QUVBOUIyOTMwQTYxNEQ1Q0EzMUFCOUY3RTg0Mzc5 MzYxQTJGNDMwHhcNMjUwNzA0MjAyNTIyWhcNMjUwNzExMjAyNTIyWjAYMRYwFAYD VQQDEw02ODY4MzhiMi03YTk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArwA+d8bEh02UYp8t2fHI0WzC1Qun1EBqIh9vVOHc9hCDJlfWV++B03CQVmGv mpgCkNQPl4AfM+EifKl9rQN9hOC+kccLpvJ1J+xet44GlknNTosTG+aN+Hqgyt7e za94UqWSajl63dWTHFIelRHhHxA8hIWWr+/fxP3CneMseXv35ESszMxH+Z9pSxK+ KWICoXKc2Hru19rxBK+eA4fsAbzIO1Z3iGf/kL0s73SO1xdAvNwL2E96p0b559rC ucbSD34JrneUGoLTpz2xrc/VYLRpqmGzIIgCOH12+XOrbmDyI3SA9h2l+DGje0Po SKj8G1kRsvEj/Af280QuSY8SNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOZyCfdM /Acmn8wgxHJcGgE4hG2yMB8GA1UdIwQYMBaAFKiuqbKTCmFNXKMauffoQ3k2Gi9D MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEN0MxRC9BODA3MEFGMjhB RjAxMUVBQTk1MjgzMDlDNEY5QUUwMi9xSzZwc3BNS1lVMWNveHE1OS1oRGVUWWFM ME0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FLNnBzcE1LWVUxY294cTU5LWhEZVRZYUwwTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE N0MxRC9BODA3MEFGMjhBRjAxMUVBQTk1MjgzMDlDNEY5QUUwMi9xSzZwc3BNS1lV MWNveHE1OS1oRGVUWWFMME0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArYi2NpaYR9ICX+t8Bi3Q3Bsd+bRAMqCx/XmzgK/BnG0o9Y3T9gUG4 ILVKdc2H6cf99Ft2CGUSw9u1eUtIk1uX/wWQA4mjkyLNujl02MUpunTxjnuRAkYV Ej9MG58DF1MJm5pfG0QltGUtCIkyP04AQniL+/tGHicwSeBsCLwBl+7hgdHDb72Z 3xFe6sbSJSgP0SRwUQX5kJckOtTz8gfkz3dHEzxbQ0G6+r47nJWhXv2c0At/YfCp GtbBJ1aPMu5KUjtSuSCfZZ73SZrKCuqVI7XbmskD8UQT8Wuobp/T0Ea+FdZKvJbn d5TKwchX/mabaLvH2j3ujVOwghg1i+Xu -----END CERTIFICATE-----Generated at Fri Jul 4 23:03:16 2025 by rpki-client