$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC017/105AC8FC90C311EDBA1DCC23C4F9AE02/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.mft File: CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.mft (raw, json) Hash identifier: MPdNN49Axam2T/bX2dGg17/ZPCELkgu37oL0jvTPb5A= Subject key identifier: F7:13:45:94:2B:E6:A2:2A:9E:3E:1F:A2:71:53:0D:1B:52:02:2A:58 Authority key identifier: 0A:A5:DE:29:26:5A:08:E2:7A:58:1D:89:44:65:BD:CD:B7:37:09:BB Certificate issuer: /CN=A91DC017/serialNumber=0AA5DE29265A08E27A581D894465BDCDB73709BB Certificate serial: 01F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC017/105AC8FC90C311EDBA1DCC23C4F9AE02/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.mft Manifest number: 01DD Signing time: Tue 01 Jul 2025 03:15:53 +0000 Manifest this update: Tue 01 Jul 2025 03:15:52 +0000 Manifest next update: Tue 08 Jul 2025 03:15:52 +0000 Files and hashes: 1: CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.crl (hash: Tj3grqqlu5vlxdSrFHIjgyB4gGAqe8sOGo7x/xlqM1k=) 2: C0C268B8441C11EF9E110F1EC4F9AE02.roa (hash: jnHEv+tk9LEmiC9T0eLpIu0ka8tlgw/1HGmQA/hDw9s=) 3: 1B8DE01C641911EF83FFBF3CC4F9AE02.roa (hash: Tod+meVH3/YYDYyQo78I9vVyyLfaumC1ya5cnKT+hFM=) 4: 08A1C0B8DC5011EF9C212C5CC4F9AE02.roa (hash: 3zWqR+4/bbh/62pxX54wkuJs0uKg6zeZhN4dCLWwFho=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC017/105AC8FC90C311EDBA1DCC23C4F9AE02/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.crl rsync://rpki.apnic.net/member_repository/A91DC017/105AC8FC90C311EDBA1DCC23C4F9AE02/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 03:15:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 496 (0x1f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC017, serialNumber=0AA5DE29265A08E27A581D894465BDCDB73709BB Validity Not Before: Jul 1 03:15:52 2025 GMT Not After : Jul 8 03:15:52 2025 GMT Subject: CN=686352e8-3f7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:67:2b:d9:eb:8e:11:5f:7f:1e:49:85:5e:49: 79:86:d1:ea:34:a0:6d:56:de:73:1f:5b:51:2c:47: c0:b1:84:04:87:70:00:8a:4f:f2:e9:b1:d6:58:31: 9d:a8:8c:33:b2:f8:fd:ed:e3:56:41:31:e4:2c:a8: 40:ed:17:9c:1a:66:27:a5:85:c8:07:8c:ea:b5:d6: 2d:49:5d:15:7e:b5:f6:38:b0:6b:b2:ce:2f:8b:8f: 77:15:39:28:81:a9:3d:a0:3c:0e:a3:79:f5:90:1f: eb:65:28:9e:94:e4:7c:e7:ee:d1:4f:24:10:6c:84: 62:4f:43:57:33:89:06:3b:8d:c3:b3:1b:bb:e3:ce: c5:81:26:8b:79:3e:77:33:ee:3c:c2:fa:bb:48:55: f5:49:af:40:cb:9b:65:99:93:3b:87:c2:da:32:61: ce:2c:d2:56:cf:84:69:48:89:0b:27:3e:0c:9a:46: dd:d1:40:9f:eb:32:65:78:c6:84:ec:e8:f5:ea:e8: 66:ac:c5:6c:5f:b3:c3:5c:94:ea:87:96:ad:f9:63: 82:43:98:85:96:70:56:28:42:1c:20:3e:b9:4b:40: 94:29:fd:f8:2b:c3:d5:a3:9e:8b:bc:b7:d3:64:e7: 32:c5:63:c6:8a:c9:72:58:fc:99:d8:2a:b2:f4:f5: e3:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:13:45:94:2B:E6:A2:2A:9E:3E:1F:A2:71:53:0D:1B:52:02:2A:58 X509v3 Authority Key Identifier: keyid:0A:A5:DE:29:26:5A:08:E2:7A:58:1D:89:44:65:BD:CD:B7:37:09:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC017/105AC8FC90C311EDBA1DCC23C4F9AE02/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC017/105AC8FC90C311EDBA1DCC23C4F9AE02/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:16:b4:ad:c8:da:dc:52:2d:c1:15:28:4d:bb:03:ec:92:53: da:10:7c:d8:cf:bd:41:40:89:48:13:1e:88:27:e8:52:27:18: d3:0b:5a:47:6c:b4:1b:a3:c6:00:3b:e7:9c:da:3a:83:06:3f: bb:0f:c1:bf:ed:06:d8:bd:83:22:cd:26:c3:b2:19:7d:0d:1e: a4:1e:f4:88:6f:77:28:1b:3d:ec:bb:7b:f8:96:cb:2d:0b:7d: 0f:e0:aa:5e:75:81:5e:96:46:13:1c:20:8f:36:ef:1e:ea:1d: 2a:2f:ee:d6:91:14:8f:de:c7:a7:2a:fc:7a:23:b0:43:cd:a5: 19:ce:ed:0b:89:90:e1:63:7d:a7:cf:b5:9c:22:83:8a:90:0e: e8:14:8e:2f:6b:05:fb:c3:10:81:96:5e:7b:9d:16:2e:35:65: 60:34:15:ed:47:10:89:96:cf:70:d0:a3:74:98:e3:d5:24:d3: 77:f0:77:a1:d7:99:42:40:c7:3c:93:d3:c9:18:df:9d:48:74: ef:4e:cf:30:3f:cc:ad:35:d0:80:f6:28:7b:67:fd:4a:4c:d9: 2b:11:3d:54:52:21:a1:5f:f1:67:e4:f8:0f:de:9a:70:5b:a0: 29:c0:fd:46:a1:25:72:22:2b:4b:ed:7e:d3:86:3b:b8:15:18: 02:06:c2:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REMwMTcxMTAvBgNVBAUTKDBBQTVERTI5MjY1QTA4RTI3QTU4MUQ4OTQ0NjVCRENE QjczNzA5QkIwHhcNMjUwNzAxMDMxNTUyWhcNMjUwNzA4MDMxNTUyWjAYMRYwFAYD VQQDEw02ODYzNTJlOC0zZjdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArWcr2euOEV9/HkmFXkl5htHqNKBtVt5zH1tRLEfAsYQEh3AAik/y6bHWWDGd qIwzsvj97eNWQTHkLKhA7RecGmYnpYXIB4zqtdYtSV0VfrX2OLBrss4vi493FTko gak9oDwOo3n1kB/rZSielOR85+7RTyQQbIRiT0NXM4kGO43Dsxu7487FgSaLeT53 M+48wvq7SFX1Sa9Ay5tlmZM7h8LaMmHOLNJWz4RpSIkLJz4Mmkbd0UCf6zJleMaE 7Oj16uhmrMVsX7PDXJTqh5at+WOCQ5iFlnBWKEIcID65S0CUKf34K8PVo56LvLfT ZOcyxWPGislyWPyZ2Cqy9PXj1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPcTRZQr 5qIqnj4fonFTDRtSAipYMB8GA1UdIwQYMBaAFAql3ikmWgjielgdiURlvc23Nwm7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzAxNy8xMDVBQzhGQzkw QzMxMUVEQkExRENDMjNDNEY5QUUwMi9DcVhlS1NaYUNPSjZXQjJKUkdXOXpiYzND YnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NxWGVLU1phQ09KNldCMkpSR1c5emJjM0Nicy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzAxNy8xMDVBQzhGQzkwQzMxMUVEQkExRENDMjNDNEY5QUUwMi9DcVhlS1NaYUNP SjZXQjJKUkdXOXpiYzNDYnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBaFrStyNrcUi3BFShNuwPsklPaEHzYz71BQIlIEx6IJ+hSJxjTC1pH bLQbo8YAO+ec2jqDBj+7D8G/7QbYvYMizSbDshl9DR6kHvSIb3coGz3su3v4lsst C30P4KpedYFelkYTHCCPNu8e6h0qL+7WkRSP3senKvx6I7BDzaUZzu0LiZDhY32n z7WcIoOKkA7oFI4vawX7wxCBll57nRYuNWVgNBXtRxCJls9w0KN0mOPVJNN38Heh 15lCQMc8k9PJGN+dSHTvTs8wP8ytNdCA9ih7Z/1KTNkrET1UUiGhX/Fn5PgP3ppw W6ApwP1GoSVyIitL7X7Thju4FRgCBsIP -----END CERTIFICATE-----Generated at Tue Jul 1 10:04:51 2025 by rpki-client