$ rpki-client -vvf rpki.apnic.net/member_repository/A91E711B/505C9738F5DB11EC9D06777BC4F9AE02/Qi87B4JkeC6YeHPYanROKGHypQM.mft File: Qi87B4JkeC6YeHPYanROKGHypQM.mft (raw, json) Hash identifier: Ew/Rh81IruL+aOytzNG7c7QUOlXSHOZvcJbDnuhaYvU= Subject key identifier: 11:66:90:B4:46:EA:6D:EE:FE:4E:CA:F8:DF:2F:F3:BE:63:5A:82:E5 Authority key identifier: 42:2F:3B:07:82:64:78:2E:98:78:73:D8:6A:74:4E:28:61:F2:A5:03 Certificate issuer: /CN=A91E711B/serialNumber=422F3B078264782E987873D86A744E2861F2A503 Certificate serial: 02CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qi87B4JkeC6YeHPYanROKGHypQM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E711B/505C9738F5DB11EC9D06777BC4F9AE02/Qi87B4JkeC6YeHPYanROKGHypQM.mft Manifest number: 02C6 Signing time: Tue 01 Jul 2025 02:03:52 +0000 Manifest this update: Tue 01 Jul 2025 02:03:52 +0000 Manifest next update: Tue 08 Jul 2025 02:03:52 +0000 Files and hashes: 1: Qi87B4JkeC6YeHPYanROKGHypQM.crl (hash: GA8AFebvtMNwsB6BBq3CI8nKdrmRusBtSTZSPhCszbA=) 2: 819F3DD6F5E111EC9754EB85C4F9AE02.roa (hash: hbDMnvq+3uPhy+l00wQh92gtO222M2b23uJyUw6S38s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E711B/505C9738F5DB11EC9D06777BC4F9AE02/Qi87B4JkeC6YeHPYanROKGHypQM.crl rsync://rpki.apnic.net/member_repository/A91E711B/505C9738F5DB11EC9D06777BC4F9AE02/Qi87B4JkeC6YeHPYanROKGHypQM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qi87B4JkeC6YeHPYanROKGHypQM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 02:03:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 715 (0x2cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E711B, serialNumber=422F3B078264782E987873D86A744E2861F2A503 Validity Not Before: Jul 1 02:03:52 2025 GMT Not After : Jul 8 02:03:52 2025 GMT Subject: CN=68634208-2111 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:4f:77:82:70:00:58:f4:ca:45:7c:1a:ed:dc: 9f:ae:ff:c1:9c:da:4a:8a:56:eb:8a:4a:b2:d3:9e: 81:57:3f:4f:9c:9a:31:79:ba:30:55:b1:5d:f7:f0: e4:3a:35:01:c5:85:93:d1:21:25:f9:fb:4d:a7:54: 4b:82:54:7b:e0:e3:da:3a:c4:38:f0:c1:82:59:84: 3c:66:b0:e8:33:89:8e:2a:08:c2:a1:c0:44:51:ac: 6a:3a:ed:bf:a1:46:1e:d2:77:42:64:fd:b9:ff:04: 79:50:11:b8:9a:fc:4b:0b:27:62:89:ec:c1:c7:29: 6d:cf:0d:3e:84:d7:58:81:03:69:48:83:d1:2f:95: 45:c8:0e:4b:83:b9:f2:f0:ae:50:d1:0f:35:c4:93: c1:ff:97:d6:41:7e:af:d5:40:f7:6b:a8:55:18:45: c8:22:95:f4:cc:43:70:0a:04:42:81:54:b9:55:66: 1d:78:a6:4b:92:e6:68:bd:2a:68:c2:16:e4:a9:f1: 33:ec:67:46:7b:30:4c:24:dc:f1:93:68:a3:d5:76: 6c:82:d7:b2:eb:a0:27:b0:2e:c2:99:c0:da:06:f5: db:ca:dc:d1:5c:7a:81:8e:27:c7:f2:64:a0:08:24: fe:c9:42:16:f1:cc:09:2e:a6:dd:97:1d:cf:a3:5f: e4:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:66:90:B4:46:EA:6D:EE:FE:4E:CA:F8:DF:2F:F3:BE:63:5A:82:E5 X509v3 Authority Key Identifier: keyid:42:2F:3B:07:82:64:78:2E:98:78:73:D8:6A:74:4E:28:61:F2:A5:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E711B/505C9738F5DB11EC9D06777BC4F9AE02/Qi87B4JkeC6YeHPYanROKGHypQM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qi87B4JkeC6YeHPYanROKGHypQM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E711B/505C9738F5DB11EC9D06777BC4F9AE02/Qi87B4JkeC6YeHPYanROKGHypQM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:3c:a3:94:c2:f0:5e:4d:e6:ee:73:a4:fe:2e:b5:56:a3:ea: c7:d6:16:dd:a7:5d:26:4e:93:71:ca:51:d2:25:20:1a:55:1c: 6e:79:e2:b6:92:68:df:9e:1b:2b:ee:c4:bf:0e:bd:5c:ea:5e: 6f:94:2c:a4:85:ab:a4:7a:25:bf:0f:77:e1:62:1e:59:90:c7: dd:ed:fe:c4:4f:55:72:6b:48:47:e9:60:13:6c:3f:38:91:52: 7b:db:cf:f7:8f:b4:33:72:d4:c4:4f:ab:18:2a:11:3f:8b:ba: b7:37:f4:25:0e:ac:9b:80:8a:eb:48:d9:c0:e6:17:f0:b9:3f: c6:70:68:f5:3e:b5:31:74:01:09:b6:ff:6d:92:e9:5c:db:bf: ee:26:68:e1:02:d2:ad:8d:63:0b:62:b2:04:5e:49:af:17:c7: 61:7f:20:9f:af:c6:79:c6:ce:3a:56:74:69:fa:4c:93:d0:9e: 96:0a:1c:ee:e2:10:92:23:04:ef:c7:84:6f:13:f5:1c:f6:dd: 34:c6:4b:78:9a:e6:f7:26:6e:2b:40:6c:6b:c4:4e:e3:b1:18: dd:6b:6f:39:8e:06:82:1f:75:11:cd:d4:29:21:d6:1c:94:2f: f3:b9:72:23:a8:2e:1c:1d:89:8f:71:bd:87:31:3b:93:22:7d: 35:f6:62:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAsswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTcxMUIxMTAvBgNVBAUTKDQyMkYzQjA3ODI2NDc4MkU5ODc4NzNEODZBNzQ0RTI4 NjFGMkE1MDMwHhcNMjUwNzAxMDIwMzUyWhcNMjUwNzA4MDIwMzUyWjAYMRYwFAYD VQQDEw02ODYzNDIwOC0yMTExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2U93gnAAWPTKRXwa7dyfrv/BnNpKilbrikqy056BVz9PnJoxebowVbFd9/Dk OjUBxYWT0SEl+ftNp1RLglR74OPaOsQ48MGCWYQ8ZrDoM4mOKgjCocBEUaxqOu2/ oUYe0ndCZP25/wR5UBG4mvxLCydiiezBxyltzw0+hNdYgQNpSIPRL5VFyA5Lg7ny 8K5Q0Q81xJPB/5fWQX6v1UD3a6hVGEXIIpX0zENwCgRCgVS5VWYdeKZLkuZovSpo whbkqfEz7GdGezBMJNzxk2ij1XZsgtey66AnsC7CmcDaBvXbytzRXHqBjifH8mSg CCT+yUIW8cwJLqbdlx3Po1/kVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBFmkLRG 6m3u/k7K+N8v875jWoLlMB8GA1UdIwQYMBaAFEIvOweCZHgumHhz2Gp0Tihh8qUD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzExQi81MDVDOTczOEY1 REIxMUVDOUQwNjc3N0JDNEY5QUUwMi9RaTg3QjRKa2VDNlllSFBZYW5ST0tHSHlw UU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FpODdCNEprZUM2WWVIUFlhblJPS0dIeXBRTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzExQi81MDVDOTczOEY1REIxMUVDOUQwNjc3N0JDNEY5QUUwMi9RaTg3QjRKa2VD NlllSFBZYW5ST0tHSHlwUU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADPKOUwvBeTebuc6T+LrVWo+rH1hbdp10mTpNxylHSJSAaVRxueeK2 kmjfnhsr7sS/Dr1c6l5vlCykhaukeiW/D3fhYh5ZkMfd7f7ET1Vya0hH6WATbD84 kVJ728/3j7QzctTET6sYKhE/i7q3N/QlDqybgIrrSNnA5hfwuT/GcGj1PrUxdAEJ tv9tkulc27/uJmjhAtKtjWMLYrIEXkmvF8dhfyCfr8Z5xs46VnRp+kyT0J6WChzu 4hCSIwTvx4RvE/Uc9t00xkt4mub3Jm4rQGxrxE7jsRjda285jgaCH3URzdQpIdYc lC/zuXIjqC4cHYmPcb2HMTuTIn019mJj -----END CERTIFICATE-----Generated at Wed Jul 2 12:30:00 2025 by rpki-client