$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDD3F/C1A47FD895AF11E6B7854371C4F9AE02/p-QTTZsR3qt1sReR1V450XROC_E.mft File: p-QTTZsR3qt1sReR1V450XROC_E.mft (raw, json) Hash identifier: 7zcclRDtBV6DE5UsBQoz5blaMFLOws2N8hzU90y8pMQ= Subject key identifier: 71:D1:3D:6D:CC:45:2C:01:65:63:0A:EB:C4:F4:48:41:71:4B:14:2B Authority key identifier: A7:E4:13:4D:9B:11:DE:AB:75:B1:17:91:D5:5E:39:D1:74:4E:0B:F1 Certificate issuer: /CN=A91DDD3F/serialNumber=A7E4134D9B11DEAB75B11791D55E39D1744E0BF1 Certificate serial: 1DD9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-QTTZsR3qt1sReR1V450XROC_E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DDD3F/C1A47FD895AF11E6B7854371C4F9AE02/p-QTTZsR3qt1sReR1V450XROC_E.mft Manifest number: 1DD0 Signing time: Sat 28 Jun 2025 16:00:22 +0000 Manifest this update: Sat 28 Jun 2025 16:00:22 +0000 Manifest next update: Sat 05 Jul 2025 16:00:22 +0000 Files and hashes: 1: p-QTTZsR3qt1sReR1V450XROC_E.crl (hash: tW/As7W9W5fCY7m4lQsJSjrHuFfTLyVsJX/FYr8vjHU=) 2: AE58A24695B011E696EFE472C4F9AE02.roa (hash: iaqQr5dNZ60TDLIhN3MftiKcnJuy69N4C5+umHfRLFA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DDD3F/C1A47FD895AF11E6B7854371C4F9AE02/p-QTTZsR3qt1sReR1V450XROC_E.crl rsync://rpki.apnic.net/member_repository/A91DDD3F/C1A47FD895AF11E6B7854371C4F9AE02/p-QTTZsR3qt1sReR1V450XROC_E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-QTTZsR3qt1sReR1V450XROC_E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 16:00:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7641 (0x1dd9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DDD3F, serialNumber=A7E4134D9B11DEAB75B11791D55E39D1744E0BF1 Validity Not Before: Jun 28 16:00:22 2025 GMT Not After : Jul 5 16:00:22 2025 GMT Subject: CN=68601196-2067 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:3f:37:1a:fb:9e:3b:c2:65:b1:e9:c3:bf:bc: 04:85:8a:7c:d0:f4:bd:87:39:72:9b:d5:5f:80:a6: bb:52:53:91:9b:ff:7f:fe:fc:0b:d3:fb:6b:a1:c9: 75:80:60:eb:76:b1:66:b8:8f:b3:52:03:4d:92:9e: 47:fa:56:2d:e0:82:52:c1:ce:36:27:39:59:24:b4: 41:82:38:23:fc:70:be:f8:59:f3:79:c3:3a:ae:8d: 01:b0:64:d6:8f:51:e0:67:20:f8:ec:9f:a0:6c:64: 86:d6:9b:e9:63:a5:b9:c3:2d:10:10:70:0a:fd:4f: 3f:e4:27:0f:f5:3d:c2:1d:cb:0d:8a:ad:7c:8a:be: a8:f0:99:52:11:20:6a:bd:96:63:b4:da:6b:47:79: ce:2c:c3:0c:d8:81:97:e4:19:33:4a:d1:79:b1:a6: 8d:bc:4b:f2:48:0d:8e:fc:b9:07:18:fb:6f:88:5e: a2:42:d4:b6:d4:f3:a6:3b:19:64:6a:14:36:c4:5f: 3c:cf:04:c8:cf:a8:ee:cb:97:e3:1d:40:fa:35:84: 1c:b4:09:99:b2:f3:4b:0e:53:3c:4b:d2:58:60:19: 79:43:3c:5d:45:0e:8a:e6:0b:4c:5d:c6:06:75:a8: 27:d3:39:23:d3:c9:2b:72:04:4d:ec:eb:47:8e:31: 96:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:D1:3D:6D:CC:45:2C:01:65:63:0A:EB:C4:F4:48:41:71:4B:14:2B X509v3 Authority Key Identifier: keyid:A7:E4:13:4D:9B:11:DE:AB:75:B1:17:91:D5:5E:39:D1:74:4E:0B:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DDD3F/C1A47FD895AF11E6B7854371C4F9AE02/p-QTTZsR3qt1sReR1V450XROC_E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-QTTZsR3qt1sReR1V450XROC_E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDD3F/C1A47FD895AF11E6B7854371C4F9AE02/p-QTTZsR3qt1sReR1V450XROC_E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:24:08:52:8c:25:fa:c1:eb:86:e1:6d:31:51:ac:52:4c:74: 33:28:a4:bf:a2:22:9c:e1:e5:c2:6f:1d:cc:04:b6:24:de:2d: 75:32:cf:33:21:56:9b:15:c9:97:2a:cb:6e:6c:fc:f4:b6:0d: dc:fd:72:9e:3a:83:d9:88:e6:00:71:6a:6d:f9:5c:a4:35:d1: b7:c7:1d:3b:8c:61:79:06:2a:77:6a:b4:f7:01:6e:fd:79:4f: c7:d5:53:51:6d:31:6c:63:dc:6f:5f:bc:33:34:e6:3b:34:bf: eb:4a:bd:47:2e:c3:88:2b:eb:a3:a4:85:19:f0:24:cf:d5:d5: 54:b3:08:77:06:98:29:ef:96:f0:24:10:99:0f:4a:1b:73:88: 2d:cf:33:10:41:f8:45:9a:70:da:5c:1c:6a:da:9b:9a:bb:c0: bd:dc:47:58:d2:0f:99:12:02:23:6d:df:c9:66:89:4f:2c:40: e4:c2:85:4c:aa:4e:42:2c:15:3a:12:54:72:73:6d:54:c7:61: 43:c7:01:67:88:70:12:59:f6:11:a3:e0:13:97:11:1e:31:d2: c6:3f:b3:26:78:1a:97:f7:c6:e7:e2:48:ba:75:9e:3f:a9:1b: b1:0c:e6:eb:28:78:dd:7b:04:c9:d1:ae:2b:5b:5c:92:df:30: 03:57:15:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHdkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REREM0YxMTAvBgNVBAUTKEE3RTQxMzREOUIxMURFQUI3NUIxMTc5MUQ1NUUzOUQx NzQ0RTBCRjEwHhcNMjUwNjI4MTYwMDIyWhcNMjUwNzA1MTYwMDIyWjAYMRYwFAYD VQQDEw02ODYwMTE5Ni0yMDY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3T83GvueO8JlsenDv7wEhYp80PS9hzlym9VfgKa7UlORm/9//vwL0/trocl1 gGDrdrFmuI+zUgNNkp5H+lYt4IJSwc42JzlZJLRBgjgj/HC++FnzecM6ro0BsGTW j1HgZyD47J+gbGSG1pvpY6W5wy0QEHAK/U8/5CcP9T3CHcsNiq18ir6o8JlSESBq vZZjtNprR3nOLMMM2IGX5BkzStF5saaNvEvySA2O/LkHGPtviF6iQtS21POmOxlk ahQ2xF88zwTIz6juy5fjHUD6NYQctAmZsvNLDlM8S9JYYBl5QzxdRQ6K5gtMXcYG dagn0zkj08krcgRN7OtHjjGWNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHHRPW3M RSwBZWMK68T0SEFxSxQrMB8GA1UdIwQYMBaAFKfkE02bEd6rdbEXkdVeOdF0Tgvx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEREQzRi9DMUE0N0ZEODk1 QUYxMUU2Qjc4NTQzNzFDNEY5QUUwMi9wLVFUVFpzUjNxdDFzUmVSMVY0NTBYUk9D X0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3AtUVRUWnNSM3F0MXNSZVIxVjQ1MFhST0NfRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE REQzRi9DMUE0N0ZEODk1QUYxMUU2Qjc4NTQzNzFDNEY5QUUwMi9wLVFUVFpzUjNx dDFzUmVSMVY0NTBYUk9DX0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtJAhSjCX6weuG4W0xUaxSTHQzKKS/oiKc4eXCbx3MBLYk3i11Ms8z IVabFcmXKstubPz0tg3c/XKeOoPZiOYAcWpt+VykNdG3xx07jGF5Bip3arT3AW79 eU/H1VNRbTFsY9xvX7wzNOY7NL/rSr1HLsOIK+ujpIUZ8CTP1dVUswh3Bpgp75bw JBCZD0obc4gtzzMQQfhFmnDaXBxq2puau8C93EdY0g+ZEgIjbd/JZolPLEDkwoVM qk5CLBU6ElRyc21Ux2FDxwFniHASWfYRo+ATlxEeMdLGP7MmeBqX98bn4ki6dZ4/ qRuxDObrKHjdewTJ0a4rW1yS3zADVxWj -----END CERTIFICATE-----Generated at Sun Jun 29 18:00:42 2025 by rpki-client