$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF1D9/E37F13822A6C11EC95EB263FC4F9AE02/Q-SoHdWUZzBR6Mfgsa29McSDtlM.mft File: Q-SoHdWUZzBR6Mfgsa29McSDtlM.mft (raw, json) Hash identifier: 22qWeqMLcijuyI0uTVDyuXZbdSO2y+KRZODCFb5SWWE= Subject key identifier: 33:CB:49:72:3A:29:43:50:E6:41:FE:61:45:FD:36:4B:C1:40:E0:84 Authority key identifier: 43:E4:A8:1D:D5:94:67:30:51:E8:C7:E0:B1:AD:BD:31:C4:83:B6:53 Certificate issuer: /CN=A91DF1D9/serialNumber=43E4A81DD594673051E8C7E0B1ADBD31C483B653 Certificate serial: 04D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-SoHdWUZzBR6Mfgsa29McSDtlM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF1D9/E37F13822A6C11EC95EB263FC4F9AE02/Q-SoHdWUZzBR6Mfgsa29McSDtlM.mft Manifest number: 04CF Signing time: Thu 03 Jul 2025 00:08:19 +0000 Manifest this update: Thu 03 Jul 2025 00:08:19 +0000 Manifest next update: Thu 10 Jul 2025 00:08:19 +0000 Files and hashes: 1: Q-SoHdWUZzBR6Mfgsa29McSDtlM.crl (hash: eVbJgajYukU/dV5zhjQk0PTOkcZNIX/pmwElYidZKdE=) 2: 083000C22A6F11EC9AD38840C4F9AE02.roa (hash: /P52dIbBCuZBok0CgnukmD2RJdXy7244gcQDCyE7vYQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF1D9/E37F13822A6C11EC95EB263FC4F9AE02/Q-SoHdWUZzBR6Mfgsa29McSDtlM.crl rsync://rpki.apnic.net/member_repository/A91DF1D9/E37F13822A6C11EC95EB263FC4F9AE02/Q-SoHdWUZzBR6Mfgsa29McSDtlM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-SoHdWUZzBR6Mfgsa29McSDtlM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 00:08:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1237 (0x4d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF1D9, serialNumber=43E4A81DD594673051E8C7E0B1ADBD31C483B653 Validity Not Before: Jul 3 00:08:19 2025 GMT Not After : Jul 10 00:08:19 2025 GMT Subject: CN=6865c9f3-82b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:56:5d:8b:c7:4b:99:3a:7b:35:c3:82:56:25: d7:4d:fc:6c:73:f7:89:c1:f7:b3:e6:c4:a8:87:67: bf:75:fc:ae:bc:83:77:5e:6c:58:9d:dc:c0:0e:29: 8f:4d:a1:ab:51:08:5f:33:58:0a:72:e8:3b:61:ac: c5:84:26:45:ef:7b:3f:40:1a:27:4e:59:1c:b5:75: 7e:92:2a:2c:b6:7d:55:3c:8e:92:f5:a9:08:cd:23: 75:2e:81:37:6f:12:dc:ab:69:d6:5d:24:31:8e:11: 7c:53:aa:56:9f:2d:1e:2d:14:e4:85:d2:04:a6:aa: 71:6f:12:5d:1e:50:b4:e4:0c:cc:a9:cb:31:f3:3a: 64:83:2e:be:a2:7c:fe:d6:5f:c8:cf:cd:fc:00:7f: 64:9e:2d:6d:b2:59:3e:02:13:bb:28:d8:eb:a1:81: 72:3d:f1:38:a1:14:b2:a8:81:a1:d1:82:0f:f4:88: fc:7e:30:d4:c6:75:cb:73:76:b8:6a:2c:02:2d:5c: 2c:87:e0:af:53:af:22:f5:2e:d8:26:39:64:e9:16: b8:78:85:1e:ed:ce:18:ed:df:0a:fb:14:65:f5:e0: 3a:d3:f6:7b:21:06:aa:e0:bb:bb:3c:ae:9e:53:fd: dd:14:1f:a4:3c:84:3f:ad:93:17:02:af:2b:e9:d4: e5:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:CB:49:72:3A:29:43:50:E6:41:FE:61:45:FD:36:4B:C1:40:E0:84 X509v3 Authority Key Identifier: keyid:43:E4:A8:1D:D5:94:67:30:51:E8:C7:E0:B1:AD:BD:31:C4:83:B6:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF1D9/E37F13822A6C11EC95EB263FC4F9AE02/Q-SoHdWUZzBR6Mfgsa29McSDtlM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-SoHdWUZzBR6Mfgsa29McSDtlM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF1D9/E37F13822A6C11EC95EB263FC4F9AE02/Q-SoHdWUZzBR6Mfgsa29McSDtlM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:4b:ad:15:57:7e:b5:e1:88:49:80:9d:2e:e3:fc:34:d1:fe: a0:b7:1b:15:83:9d:7c:5f:0a:ec:89:27:2f:b1:8d:a2:23:02: 9c:a1:59:e7:b4:35:21:2d:44:35:43:fb:d1:d1:b7:3c:1d:64: 37:cf:14:83:e5:9e:16:27:46:7d:e2:80:3a:8a:59:c1:b5:6e: 74:96:51:95:ed:80:38:7b:7c:a8:f6:3c:fc:92:a8:13:3f:90: 1b:9e:11:df:bd:35:dd:5f:79:ce:df:c4:b9:a5:8b:1c:8d:63: 04:a0:c5:e7:f1:6b:4f:10:85:33:c2:bc:1f:de:e3:86:c4:c3: cc:c8:56:6d:7a:67:d2:6e:ff:52:79:5b:7a:12:de:e0:0c:e9: d9:e5:cc:c2:92:17:57:8b:e3:ec:42:33:4c:a9:f3:9e:65:95: 1e:99:2c:ce:11:d7:cc:fe:7c:69:ab:58:c3:1b:b2:47:e7:1e: 65:0b:23:7d:b2:7c:b4:fb:18:23:09:be:21:01:de:96:6d:4b: 35:97:87:0a:f4:58:e0:6b:ba:49:43:8f:e0:fa:35:a2:2f:0f: f1:ed:1b:f7:51:bd:c3:35:93:33:75:86:f8:4d:28:2c:0a:8f: 71:f6:d8:a9:ff:ee:0c:4d:a2:a4:76:e5:97:75:69:a2:eb:69: 42:10:31:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBNUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REYxRDkxMTAvBgNVBAUTKDQzRTRBODFERDU5NDY3MzA1MUU4QzdFMEIxQURCRDMx QzQ4M0I2NTMwHhcNMjUwNzAzMDAwODE5WhcNMjUwNzEwMDAwODE5WjAYMRYwFAYD VQQDEw02ODY1YzlmMy04MmI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwlZdi8dLmTp7NcOCViXXTfxsc/eJwfez5sSoh2e/dfyuvIN3XmxYndzADimP TaGrUQhfM1gKcug7YazFhCZF73s/QBonTlkctXV+kiostn1VPI6S9akIzSN1LoE3 bxLcq2nWXSQxjhF8U6pWny0eLRTkhdIEpqpxbxJdHlC05AzMqcsx8zpkgy6+onz+ 1l/Iz838AH9kni1tslk+AhO7KNjroYFyPfE4oRSyqIGh0YIP9Ij8fjDUxnXLc3a4 aiwCLVwsh+CvU68i9S7YJjlk6Ra4eIUe7c4Y7d8K+xRl9eA60/Z7IQaq4Lu7PK6e U/3dFB+kPIQ/rZMXAq8r6dTlAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDPLSXI6 KUNQ5kH+YUX9NkvBQOCEMB8GA1UdIwQYMBaAFEPkqB3VlGcwUejH4LGtvTHEg7ZT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjFEOS9FMzdGMTM4MjJB NkMxMUVDOTVFQjI2M0ZDNEY5QUUwMi9RLVNvSGRXVVp6QlI2TWZnc2EyOU1jU0R0 bE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1EtU29IZFdVWnpCUjZNZmdzYTI5TWNTRHRsTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RjFEOS9FMzdGMTM4MjJBNkMxMUVDOTVFQjI2M0ZDNEY5QUUwMi9RLVNvSGRXVVp6 QlI2TWZnc2EyOU1jU0R0bE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCS60VV3614YhJgJ0u4/w00f6gtxsVg518XwrsiScvsY2iIwKcoVnn tDUhLUQ1Q/vR0bc8HWQ3zxSD5Z4WJ0Z94oA6ilnBtW50llGV7YA4e3yo9jz8kqgT P5AbnhHfvTXdX3nO38S5pYscjWMEoMXn8WtPEIUzwrwf3uOGxMPMyFZtemfSbv9S eVt6Et7gDOnZ5czCkhdXi+PsQjNMqfOeZZUemSzOEdfM/nxpq1jDG7JH5x5lCyN9 sny0+xgjCb4hAd6WbUs1l4cK9Fjga7pJQ4/g+jWiLw/x7Rv3Ub3DNZMzdYb4TSgs Co9x9tip/+4MTaKkduWXdWmi62lCEDGq -----END CERTIFICATE-----Generated at Thu Jul 3 07:06:07 2025 by rpki-client