$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC068/781E7DC4D51611EEB35E6A60C4F9AE02/qjbeqgtIjXQ9MJajdNPOwwNOado.mft File: qjbeqgtIjXQ9MJajdNPOwwNOado.mft (raw, json) Hash identifier: /cgyBnlIS7DoDK686C2NaD6+3lb6VrOiVd3F1OYHJ6I= Subject key identifier: 0E:8B:A3:10:BF:5C:8A:55:3F:87:63:AB:AF:7E:4A:DB:4C:97:89:BA Authority key identifier: AA:36:DE:AA:0B:48:8D:74:3D:30:96:A3:74:D3:CE:C3:03:4E:69:DA Certificate issuer: /CN=A91DC068/serialNumber=AA36DEAA0B488D743D3096A374D3CEC3034E69DA Certificate serial: 0106 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qjbeqgtIjXQ9MJajdNPOwwNOado.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC068/781E7DC4D51611EEB35E6A60C4F9AE02/qjbeqgtIjXQ9MJajdNPOwwNOado.mft Manifest number: 0102 Signing time: Sat 05 Jul 2025 05:25:20 +0000 Manifest this update: Sat 05 Jul 2025 05:25:20 +0000 Manifest next update: Sat 12 Jul 2025 05:25:20 +0000 Files and hashes: 1: qjbeqgtIjXQ9MJajdNPOwwNOado.crl (hash: SzF3UmATBxSbHxqChupOGoptTTjXZtRT0VGP/fli5b8=) 2: 4C798C5AD5DD11EEA5B1C711C4F9AE02.roa (hash: UehIW4ne9/pa7E+bJ7b7vlEagKFtkPy1RDy9gQNG8w4=) 3: 4CFFF0A6D5DD11EEA5B1C711C4F9AE02.roa (hash: 39NjyNN95zMryV/4gipoP40hgOhWq2OieGFrOUrcjx8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC068/781E7DC4D51611EEB35E6A60C4F9AE02/qjbeqgtIjXQ9MJajdNPOwwNOado.crl rsync://rpki.apnic.net/member_repository/A91DC068/781E7DC4D51611EEB35E6A60C4F9AE02/qjbeqgtIjXQ9MJajdNPOwwNOado.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qjbeqgtIjXQ9MJajdNPOwwNOado.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 262 (0x106) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC068, serialNumber=AA36DEAA0B488D743D3096A374D3CEC3034E69DA Validity Not Before: Jul 5 05:25:20 2025 GMT Not After : Jul 12 05:25:20 2025 GMT Subject: CN=6868b740-f62f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e7:e9:12:dc:1f:84:a8:18:cb:06:ae:c0:b5: 82:e3:e6:1e:83:33:a9:9d:ae:8a:34:ea:1b:88:22: 2d:73:95:75:a7:ce:47:b9:9e:c9:37:91:7f:46:77: 28:2d:b4:17:44:4c:94:bc:ec:2b:de:10:b5:ff:80: 9a:58:c4:56:06:ad:65:3d:03:e3:1c:e8:0f:27:fd: a2:6b:44:6b:c3:7d:9d:77:f8:f5:49:58:63:c3:86: f4:dd:4c:d3:30:e2:cf:4d:a1:b6:57:1e:c6:47:ee: 53:50:65:f8:82:ca:67:90:88:5c:43:8b:35:67:fe: fd:cd:e2:1e:54:a7:c6:d3:76:f9:7d:ea:9a:68:ac: 39:32:9b:7a:f3:70:e3:f7:02:ed:e4:62:49:b4:5c: b5:9f:66:b0:bb:ca:e4:0f:32:98:d3:65:d0:71:81: 1a:c8:44:df:a6:e8:ee:cb:11:ba:84:70:41:d5:4b: 4c:87:d0:bc:d7:db:c6:80:da:f8:98:4f:26:b5:be: 46:e4:82:45:71:6e:97:40:2a:48:72:d7:d3:60:e5: f4:c6:6f:5e:5d:17:f1:fe:ce:1f:6f:b8:e6:32:f7: 1d:1d:a1:58:7b:48:5e:9a:62:31:e5:0d:fb:6d:71: da:90:cf:1f:f2:2f:15:af:a5:9d:5e:aa:ca:06:9b: 53:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:8B:A3:10:BF:5C:8A:55:3F:87:63:AB:AF:7E:4A:DB:4C:97:89:BA X509v3 Authority Key Identifier: keyid:AA:36:DE:AA:0B:48:8D:74:3D:30:96:A3:74:D3:CE:C3:03:4E:69:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC068/781E7DC4D51611EEB35E6A60C4F9AE02/qjbeqgtIjXQ9MJajdNPOwwNOado.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qjbeqgtIjXQ9MJajdNPOwwNOado.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC068/781E7DC4D51611EEB35E6A60C4F9AE02/qjbeqgtIjXQ9MJajdNPOwwNOado.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:08:a5:ac:3c:95:5c:62:5f:82:d8:ef:93:a5:a2:96:bb:1a: 9d:e7:d3:4a:af:e6:c0:0c:9f:db:f1:9c:e4:80:8f:9f:71:29: df:1b:aa:b0:98:58:29:b5:8a:55:bd:b8:15:35:16:0d:05:72: 3d:01:75:77:d1:18:f9:d1:2d:5d:e8:e2:b6:25:1f:92:67:b2: 0a:56:b6:53:02:e0:b5:33:49:8c:ab:77:41:f2:68:8d:ef:25: 5c:1e:a4:2a:20:93:74:72:7e:ff:54:90:c7:cc:d8:4b:de:b1: 38:a6:af:64:bf:b5:75:27:9b:9d:7c:76:ec:53:9c:22:35:ca: 8e:ba:52:10:ca:57:90:12:f1:c6:5b:5c:d0:c1:04:e6:88:ab: 7d:4b:9d:2b:9d:ce:98:11:f3:14:f3:35:75:e6:94:97:35:4e: cb:b1:5a:0a:24:17:95:22:04:1d:79:0c:44:70:91:0d:a2:ed: 7e:19:e8:15:79:5a:f0:6b:45:b7:94:75:6e:c3:bf:77:79:11: c5:86:8d:c2:00:96:9f:c4:ec:d0:56:ea:52:f5:18:f6:64:65: 9d:0b:6e:73:48:5e:f2:75:b5:05:2b:eb:33:a1:e9:6f:c2:dc: 74:98:8e:a1:c3:68:eb:6b:5a:f3:37:08:00:ad:8b:79:94:e8: d7:57:00:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REMwNjgxMTAvBgNVBAUTKEFBMzZERUFBMEI0ODhENzQzRDMwOTZBMzc0RDNDRUMz MDM0RTY5REEwHhcNMjUwNzA1MDUyNTIwWhcNMjUwNzEyMDUyNTIwWjAYMRYwFAYD VQQDEw02ODY4Yjc0MC1mNjJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvufpEtwfhKgYywauwLWC4+YegzOpna6KNOobiCItc5V1p85HuZ7JN5F/Rnco LbQXREyUvOwr3hC1/4CaWMRWBq1lPQPjHOgPJ/2ia0Rrw32dd/j1SVhjw4b03UzT MOLPTaG2Vx7GR+5TUGX4gspnkIhcQ4s1Z/79zeIeVKfG03b5feqaaKw5Mpt683Dj 9wLt5GJJtFy1n2awu8rkDzKY02XQcYEayETfpujuyxG6hHBB1UtMh9C819vGgNr4 mE8mtb5G5IJFcW6XQCpIctfTYOX0xm9eXRfx/s4fb7jmMvcdHaFYe0hemmIx5Q37 bXHakM8f8i8Vr6WdXqrKBptTGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA6LoxC/ XIpVP4djq69+SttMl4m6MB8GA1UdIwQYMBaAFKo23qoLSI10PTCWo3TTzsMDTmna MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzA2OC83ODFFN0RDNEQ1 MTYxMUVFQjM1RTZBNjBDNEY5QUUwMi9xamJlcWd0SWpYUTlNSmFqZE5QT3d3Tk9h ZG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FqYmVxZ3RJalhROU1KYWpkTlBPd3dOT2Fkby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzA2OC83ODFFN0RDNEQ1MTYxMUVFQjM1RTZBNjBDNEY5QUUwMi9xamJlcWd0SWpY UTlNSmFqZE5QT3d3Tk9hZG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArCKWsPJVcYl+C2O+TpaKWuxqd59NKr+bADJ/b8ZzkgI+fcSnfG6qw mFgptYpVvbgVNRYNBXI9AXV30Rj50S1d6OK2JR+SZ7IKVrZTAuC1M0mMq3dB8miN 7yVcHqQqIJN0cn7/VJDHzNhL3rE4pq9kv7V1J5udfHbsU5wiNcqOulIQyleQEvHG W1zQwQTmiKt9S50rnc6YEfMU8zV15pSXNU7LsVoKJBeVIgQdeQxEcJENou1+GegV eVrwa0W3lHVuw793eRHFho3CAJafxOzQVupS9Rj2ZGWdC25zSF7ydbUFK+szoelv wtx0mI6hw2jra1rzNwgArYt5lOjXVwCm -----END CERTIFICATE-----Generated at Sat Jul 5 21:41:38 2025 by rpki-client