$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB04D/E958AFE6019C11EC91644B7BC4F9AE02/qhOo9ipv0n6bme44axRRnm_MhjI.mft File: qhOo9ipv0n6bme44axRRnm_MhjI.mft (raw, json) Hash identifier: 9mxjPszX3WPm1xRhKTiU5N59LC1L5LQYmUtTNPPLGi0= Subject key identifier: E4:A3:28:C8:F5:BC:FD:D2:6C:3C:2A:AB:5D:10:63:58:14:D8:65:85 Authority key identifier: AA:13:A8:F6:2A:6F:D2:7E:9B:99:EE:38:6B:14:51:9E:6F:CC:86:32 Certificate issuer: /CN=A91DB04D/serialNumber=AA13A8F62A6FD27E9B99EE386B14519E6FCC8632 Certificate serial: 0539 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qhOo9ipv0n6bme44axRRnm_MhjI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB04D/E958AFE6019C11EC91644B7BC4F9AE02/qhOo9ipv0n6bme44axRRnm_MhjI.mft Manifest number: 0533 Signing time: Wed 02 Jul 2025 23:51:51 +0000 Manifest this update: Wed 02 Jul 2025 23:51:50 +0000 Manifest next update: Wed 09 Jul 2025 23:51:50 +0000 Files and hashes: 1: qhOo9ipv0n6bme44axRRnm_MhjI.crl (hash: EN6SFwRLJYWJ3cyo8edcKiGUJlXBXGe4dzCIE7V3KVI=) 2: 5913DBAA01A011ECBFF72849C4F9AE02.roa (hash: L2t/K4jYZMjKtZ2tLHjje+iSEvp8dgbz2aouwvg2y60=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB04D/E958AFE6019C11EC91644B7BC4F9AE02/qhOo9ipv0n6bme44axRRnm_MhjI.crl rsync://rpki.apnic.net/member_repository/A91DB04D/E958AFE6019C11EC91644B7BC4F9AE02/qhOo9ipv0n6bme44axRRnm_MhjI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qhOo9ipv0n6bme44axRRnm_MhjI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 23:51:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1337 (0x539) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB04D, serialNumber=AA13A8F62A6FD27E9B99EE386B14519E6FCC8632 Validity Not Before: Jul 2 23:51:50 2025 GMT Not After : Jul 9 23:51:50 2025 GMT Subject: CN=6865c617-2ff8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:52:4f:3d:47:4c:71:6f:45:da:46:ee:d6:9d: 41:ee:05:18:e0:79:3f:a8:6d:ad:16:ff:fd:3c:9e: cc:76:70:2a:de:09:82:ee:17:43:1d:93:60:e4:60: 75:34:2c:aa:fa:99:18:60:97:f1:35:83:a1:ce:df: 52:a3:ff:9c:ed:cd:70:3f:1c:b5:dc:d8:1e:29:93: e1:6f:a7:8b:4d:82:59:bf:95:0b:65:51:12:8d:f9: 55:f2:c1:1b:a5:c1:32:14:59:db:d2:5a:ba:4e:8b: 9c:39:e3:64:de:16:c7:fb:eb:89:17:54:20:3a:00: ea:ff:37:80:ac:10:9b:f0:0e:a9:15:b7:90:b7:6f: f2:de:f8:03:ca:29:6d:eb:29:82:eb:3d:f9:83:3d: 7b:2d:40:c7:3b:9a:45:30:11:9b:9b:ef:cb:43:b9: 92:b1:f8:29:da:46:38:42:59:2d:c3:5d:95:15:6e: 71:d9:f7:f0:46:13:08:48:00:98:15:80:45:06:51: 66:82:ad:54:ce:6f:de:14:11:a6:f2:0c:89:b5:4f: 30:2f:80:50:7f:07:71:16:11:00:75:20:e9:a6:d9: 9d:4f:44:8e:2d:5b:4f:ec:6b:72:76:ff:8f:10:f2: 4d:d7:2f:b1:76:23:df:e9:2b:1e:1d:68:5d:d0:52: af:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:A3:28:C8:F5:BC:FD:D2:6C:3C:2A:AB:5D:10:63:58:14:D8:65:85 X509v3 Authority Key Identifier: keyid:AA:13:A8:F6:2A:6F:D2:7E:9B:99:EE:38:6B:14:51:9E:6F:CC:86:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB04D/E958AFE6019C11EC91644B7BC4F9AE02/qhOo9ipv0n6bme44axRRnm_MhjI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qhOo9ipv0n6bme44axRRnm_MhjI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB04D/E958AFE6019C11EC91644B7BC4F9AE02/qhOo9ipv0n6bme44axRRnm_MhjI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:79:e2:b1:16:dd:c8:da:da:6f:5b:3d:3e:df:f7:ee:65:68: 98:09:dc:1a:93:bd:04:e9:c5:c4:fc:bc:78:f4:0c:09:2f:20: 4e:67:8b:e3:fb:b5:27:fa:03:fd:d3:77:dc:6a:b3:c1:60:55: 92:9e:62:d9:69:a4:90:22:7b:12:02:41:bc:02:7a:fa:dd:35: 2f:98:81:1c:91:0e:1f:3e:bb:52:59:34:90:b9:47:ad:ec:6b: c6:a4:c6:d8:bc:c1:f8:17:fa:39:09:39:e7:60:3d:2e:fb:15: ff:7b:90:f3:9c:b2:62:85:80:47:4d:ef:23:84:39:5d:93:6d: d4:fd:e4:87:43:39:10:ab:98:74:3c:c8:68:0a:56:ee:de:8f: ec:21:92:7e:08:58:0d:53:19:95:af:7b:9e:76:7b:4e:4a:16: 28:b1:c4:4c:68:5f:ac:fd:c2:3e:cb:ca:85:1e:85:ae:93:06: 0e:4e:a7:f5:83:fc:45:e6:27:75:3b:80:ee:c8:dd:9f:96:7d: b3:ac:bf:af:48:80:9a:63:77:3c:16:54:15:50:8b:61:ef:d7: c1:37:5d:7b:7e:99:bd:31:25:e2:5a:5d:53:23:fd:25:30:5b: c6:2e:cc:1f:df:6b:1e:c2:db:cf:86:72:eb:7a:5e:a2:0f:30: 50:70:42:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBTkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REIwNEQxMTAvBgNVBAUTKEFBMTNBOEY2MkE2RkQyN0U5Qjk5RUUzODZCMTQ1MTlF NkZDQzg2MzIwHhcNMjUwNzAyMjM1MTUwWhcNMjUwNzA5MjM1MTUwWjAYMRYwFAYD VQQDEw02ODY1YzYxNy0yZmY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7FJPPUdMcW9F2kbu1p1B7gUY4Hk/qG2tFv/9PJ7MdnAq3gmC7hdDHZNg5GB1 NCyq+pkYYJfxNYOhzt9So/+c7c1wPxy13NgeKZPhb6eLTYJZv5ULZVESjflV8sEb pcEyFFnb0lq6ToucOeNk3hbH++uJF1QgOgDq/zeArBCb8A6pFbeQt2/y3vgDyilt 6ymC6z35gz17LUDHO5pFMBGbm+/LQ7mSsfgp2kY4Qlktw12VFW5x2ffwRhMISACY FYBFBlFmgq1Uzm/eFBGm8gyJtU8wL4BQfwdxFhEAdSDpptmdT0SOLVtP7Gtydv+P EPJN1y+xdiPf6SseHWhd0FKvZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOSjKMj1 vP3SbDwqq10QY1gU2GWFMB8GA1UdIwQYMBaAFKoTqPYqb9J+m5nuOGsUUZ5vzIYy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjA0RC9FOTU4QUZFNjAx OUMxMUVDOTE2NDRCN0JDNEY5QUUwMi9xaE9vOWlwdjBuNmJtZTQ0YXhSUm5tX01o akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FoT285aXB2MG42Ym1lNDRheFJSbm1fTWhqSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjA0RC9FOTU4QUZFNjAxOUMxMUVDOTE2NDRCN0JDNEY5QUUwMi9xaE9vOWlwdjBu NmJtZTQ0YXhSUm5tX01oakkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSeeKxFt3I2tpvWz0+3/fuZWiYCdwak70E6cXE/Lx49AwJLyBOZ4vj +7Un+gP903fcarPBYFWSnmLZaaSQInsSAkG8Anr63TUvmIEckQ4fPrtSWTSQuUet 7GvGpMbYvMH4F/o5CTnnYD0u+xX/e5DznLJihYBHTe8jhDldk23U/eSHQzkQq5h0 PMhoClbu3o/sIZJ+CFgNUxmVr3uedntOShYoscRMaF+s/cI+y8qFHoWukwYOTqf1 g/xF5id1O4DuyN2fln2zrL+vSICaY3c8FlQVUIth79fBN117fpm9MSXiWl1TI/0l MFvGLswf32sewtvPhnLrel6iDzBQcEJo -----END CERTIFICATE-----Generated at Thu Jul 3 10:03:20 2025 by rpki-client