$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0435/D2885BC4445D11EBA517457EC4F9AE02/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.mft File: QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.mft (raw, json) Hash identifier: oXFUbg4seeDGo9UbgVV23tPC1LTP165KxodKamnVz8w= Subject key identifier: 02:F1:F9:79:38:D3:4E:85:9F:07:2B:93:31:D9:B1:DD:B8:13:42:09 Authority key identifier: 42:91:1B:10:9D:46:E8:86:61:FA:85:61:6C:81:28:03:C5:AB:3C:64 Certificate issuer: /CN=A91E0435/serialNumber=42911B109D46E88661FA85616C812803C5AB3C64 Certificate serial: 0718 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0435/D2885BC4445D11EBA517457EC4F9AE02/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.mft Manifest number: 0712 Signing time: Wed 02 Jul 2025 22:10:15 +0000 Manifest this update: Wed 02 Jul 2025 22:10:14 +0000 Manifest next update: Wed 09 Jul 2025 22:10:14 +0000 Files and hashes: 1: QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.crl (hash: wy/tXtHt+yWrAMh64d8AVgWXXmGZBHkAwVKlRWJKfX4=) 2: FCC3542E445E11EBB692887EC4F9AE02.roa (hash: mIOY2vhOsc+nNqge7lnkHLB5M4DsgX2WsmX/mvk1lyU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0435/D2885BC4445D11EBA517457EC4F9AE02/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.crl rsync://rpki.apnic.net/member_repository/A91E0435/D2885BC4445D11EBA517457EC4F9AE02/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 22:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1816 (0x718) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0435, serialNumber=42911B109D46E88661FA85616C812803C5AB3C64 Validity Not Before: Jul 2 22:10:14 2025 GMT Not After : Jul 9 22:10:14 2025 GMT Subject: CN=6865ae47-1d1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:1f:9b:c7:53:8c:c0:a5:ea:73:a2:60:1c:b5: cb:3f:f8:9c:75:95:9b:34:80:ea:8a:80:55:d5:57: 41:ab:d1:d7:41:28:08:26:2c:85:e4:9d:4d:91:bd: a7:b1:ac:8d:a7:7b:f2:eb:64:dd:12:9a:7e:f1:46: 45:a1:9e:7f:67:70:66:6b:d5:10:5c:76:8d:d0:0d: 48:e8:7a:d8:14:02:8c:e2:c1:ab:62:f5:b6:ba:97: ec:9e:2e:0d:a0:ce:d2:28:ba:9e:7e:26:92:13:b9: 73:28:46:1d:ce:5d:43:4a:78:64:5e:02:d6:82:70: 98:90:04:c7:bf:ed:ab:f2:d6:de:94:7b:79:a9:33: 33:a6:d0:2b:9d:21:e3:fc:27:a6:e6:a0:1e:c5:1f: 26:56:9b:73:a1:0a:50:b8:2a:bf:fb:c7:63:05:b3: ce:0c:db:e5:09:f9:ad:92:2a:f4:03:49:ae:c6:9a: fd:71:b3:8b:d1:d9:63:51:a5:f7:3c:9d:71:38:1e: 5b:aa:04:64:72:98:dd:b2:4c:89:ad:7f:ee:de:ae: e7:b2:ed:38:50:44:53:7c:3b:38:24:bd:7e:2e:26: 3b:2b:c9:9a:10:75:ee:aa:96:8b:58:07:7a:d9:df: 3b:ca:93:4b:b0:1c:aa:66:c4:a7:03:cf:3b:c4:ba: 29:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:F1:F9:79:38:D3:4E:85:9F:07:2B:93:31:D9:B1:DD:B8:13:42:09 X509v3 Authority Key Identifier: keyid:42:91:1B:10:9D:46:E8:86:61:FA:85:61:6C:81:28:03:C5:AB:3C:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0435/D2885BC4445D11EBA517457EC4F9AE02/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0435/D2885BC4445D11EBA517457EC4F9AE02/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:79:c0:8c:d0:b0:c8:19:41:ef:76:d4:73:84:8f:26:3d:3c: b1:fd:7a:a4:55:bf:9a:4c:46:48:1d:31:d8:dd:bc:ec:26:b0: 97:1c:a4:fa:f6:1c:29:1b:09:83:28:9c:b1:21:0c:94:9c:10: 6d:0c:24:cb:ad:b1:15:5c:29:29:90:24:c5:19:d9:d0:9b:14: 4f:52:9b:b6:59:19:36:95:38:32:9e:9a:85:02:df:b5:6c:4b: 0c:b2:62:85:de:8c:93:66:e6:46:83:83:0f:2f:51:02:2e:8e: 76:30:be:a3:eb:d2:ab:97:b1:1b:e5:64:8d:6e:fd:c0:e1:f1: f4:4d:51:55:f7:0a:72:ff:66:8e:1c:47:ea:b6:84:67:80:20: ad:12:ba:d0:d4:1e:2c:aa:b6:9f:66:12:8e:7f:4b:da:a2:6b: 00:d5:ac:9d:87:21:b1:38:74:16:d5:c7:64:e7:c4:72:0b:94: 60:73:22:5f:92:47:5c:d7:f5:bc:24:b6:26:5d:44:36:9f:d0: b1:69:ad:ab:70:a2:46:eb:14:1b:c8:ad:71:df:0e:5d:40:40: cd:cc:16:da:b2:01:7d:3b:03:61:1f:54:25:34:85:40:22:3e: ad:70:59:59:89:92:2c:4e:0f:b2:d6:8f:e9:ca:0a:ba:f1:4d: ec:0b:70:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBxgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTA0MzUxMTAvBgNVBAUTKDQyOTExQjEwOUQ0NkU4ODY2MUZBODU2MTZDODEyODAz QzVBQjNDNjQwHhcNMjUwNzAyMjIxMDE0WhcNMjUwNzA5MjIxMDE0WjAYMRYwFAYD VQQDEw02ODY1YWU0Ny0xZDFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxB+bx1OMwKXqc6JgHLXLP/icdZWbNIDqioBV1VdBq9HXQSgIJiyF5J1Nkb2n sayNp3vy62TdEpp+8UZFoZ5/Z3Bma9UQXHaN0A1I6HrYFAKM4sGrYvW2upfsni4N oM7SKLqefiaSE7lzKEYdzl1DSnhkXgLWgnCYkATHv+2r8tbelHt5qTMzptArnSHj /Cem5qAexR8mVptzoQpQuCq/+8djBbPODNvlCfmtkir0A0muxpr9cbOL0dljUaX3 PJ1xOB5bqgRkcpjdskyJrX/u3q7nsu04UERTfDs4JL1+LiY7K8maEHXuqpaLWAd6 2d87ypNLsByqZsSnA887xLopIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFALx+Xk4 006FnwcrkzHZsd24E0IJMB8GA1UdIwQYMBaAFEKRGxCdRuiGYfqFYWyBKAPFqzxk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDQzNS9EMjg4NUJDNDQ0 NUQxMUVCQTUxNzQ1N0VDNEY5QUUwMi9RcEViRUoxRzZJWmgtb1ZoYklFb0E4V3JQ R1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FwRWJFSjFHNklaaC1vVmhiSUVvQThXclBHUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MDQzNS9EMjg4NUJDNDQ0NUQxMUVCQTUxNzQ1N0VDNEY5QUUwMi9RcEViRUoxRzZJ Wmgtb1ZoYklFb0E4V3JQR1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgecCM0LDIGUHvdtRzhI8mPTyx/XqkVb+aTEZIHTHY3bzsJrCXHKT6 9hwpGwmDKJyxIQyUnBBtDCTLrbEVXCkpkCTFGdnQmxRPUpu2WRk2lTgynpqFAt+1 bEsMsmKF3oyTZuZGg4MPL1ECLo52ML6j69Krl7Eb5WSNbv3A4fH0TVFV9wpy/2aO HEfqtoRngCCtErrQ1B4sqrafZhKOf0vaomsA1aydhyGxOHQW1cdk58RyC5RgcyJf kkdc1/W8JLYmXUQ2n9Cxaa2rcKJG6xQbyK1x3w5dQEDNzBbasgF9OwNhH1QlNIVA Ij6tcFlZiZIsTg+y1o/pygq68U3sC3B9 -----END CERTIFICATE-----Generated at Thu Jul 3 06:10:56 2025 by rpki-client