$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB2B8/3583E586516511F0BC1CAF75C4F9AE02/qJeuj_IUHLM06qS4gcw8VlbUdDY.mft File: qJeuj_IUHLM06qS4gcw8VlbUdDY.mft (raw, json) Hash identifier: JBJx9GYfsc0veDaqBbonpKAjLVp+EZCsIdcGFKKp1E8= Subject key identifier: AE:CF:54:CF:B2:41:4E:89:00:83:45:55:64:7F:6F:62:8C:9F:AE:83 Authority key identifier: A8:97:AE:8F:F2:14:1C:B3:34:EA:A4:B8:81:CC:3C:56:56:D4:74:36 Certificate issuer: /CN=A91EB2B8/serialNumber=A897AE8FF2141CB334EAA4B881CC3C5656D47436 Certificate serial: 05 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qJeuj_IUHLM06qS4gcw8VlbUdDY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB2B8/3583E586516511F0BC1CAF75C4F9AE02/qJeuj_IUHLM06qS4gcw8VlbUdDY.mft Manifest number: 05 Signing time: Thu 03 Jul 2025 02:18:13 +0000 Manifest this update: Thu 03 Jul 2025 02:18:12 +0000 Manifest next update: Thu 10 Jul 2025 02:18:12 +0000 Files and hashes: 1: qJeuj_IUHLM06qS4gcw8VlbUdDY.crl (hash: Ol/FGJoybaN0EaL92MJxlVgdYr4bkUxG2/pamkKSmYo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB2B8/3583E586516511F0BC1CAF75C4F9AE02/qJeuj_IUHLM06qS4gcw8VlbUdDY.crl rsync://rpki.apnic.net/member_repository/A91EB2B8/3583E586516511F0BC1CAF75C4F9AE02/qJeuj_IUHLM06qS4gcw8VlbUdDY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qJeuj_IUHLM06qS4gcw8VlbUdDY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 02:18:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5 (0x5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB2B8, serialNumber=A897AE8FF2141CB334EAA4B881CC3C5656D47436 Validity Not Before: Jul 3 02:18:12 2025 GMT Not After : Jul 10 02:18:12 2025 GMT Subject: CN=6865e865-62cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d4:b9:32:85:f0:0c:c1:c2:5c:a6:db:1b:25: c0:9f:fc:c5:ca:c5:4c:34:ef:86:69:af:c7:2e:ce: 9c:7a:7f:6b:33:66:a1:e3:b3:3c:70:d7:13:4b:81: 81:91:a2:5b:64:a2:df:cf:8c:f4:72:04:17:a0:91: 7b:0e:a2:2d:77:ab:d8:95:31:a9:77:da:82:67:a3: e8:a0:a2:18:ff:8a:70:3c:1a:21:c8:1b:b8:b5:40: 60:58:26:c7:13:08:a3:b6:e9:77:81:89:b8:96:32: 45:0b:81:98:15:b4:03:c6:06:02:d7:d3:08:97:95: b3:73:b3:05:c2:2b:f7:c2:3a:3c:e7:f8:16:b4:d3: bd:25:b0:88:25:d1:97:98:bf:49:40:23:3e:c4:64: 11:76:32:0a:cf:69:99:8f:0d:21:60:f4:ca:16:af: 9f:e4:b3:45:34:c1:1d:87:36:ee:4f:d3:99:8e:39: 99:4d:ed:80:e3:1c:2a:ba:41:fe:23:3a:7c:20:a3: 25:02:52:54:04:59:0d:eb:7f:32:37:17:d7:52:d0: 88:2c:9a:74:b9:fe:80:dc:e6:23:49:9b:c0:5d:1e: 1f:5f:fb:17:71:3a:38:07:71:60:2c:c7:85:0d:bb: 26:6e:2f:3b:e5:84:b0:5f:d9:13:b0:03:22:4c:48: 02:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:CF:54:CF:B2:41:4E:89:00:83:45:55:64:7F:6F:62:8C:9F:AE:83 X509v3 Authority Key Identifier: keyid:A8:97:AE:8F:F2:14:1C:B3:34:EA:A4:B8:81:CC:3C:56:56:D4:74:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB2B8/3583E586516511F0BC1CAF75C4F9AE02/qJeuj_IUHLM06qS4gcw8VlbUdDY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qJeuj_IUHLM06qS4gcw8VlbUdDY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB2B8/3583E586516511F0BC1CAF75C4F9AE02/qJeuj_IUHLM06qS4gcw8VlbUdDY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:ab:2a:95:65:7f:3d:c2:e3:9d:65:98:aa:74:77:1f:5d:cc: 09:57:cf:06:fc:a5:0f:1c:58:6b:07:0e:56:77:a8:2c:3f:5a: 6f:4e:8a:20:5c:e1:9a:8d:21:71:dc:10:25:11:e7:89:fe:5c: a0:c9:3c:c8:db:f5:9b:05:6d:82:c9:44:b8:21:49:37:b1:11: 95:de:3c:0f:09:e2:0d:0f:65:fd:83:a0:06:cb:90:e7:49:02: d2:bc:17:10:f8:be:f4:07:4f:22:6d:da:bc:57:e8:5b:19:0d: 51:c6:16:45:0a:0b:fc:8d:c5:ad:46:63:d0:77:f2:65:a3:45: 83:86:de:d6:24:27:ae:71:76:c4:7a:83:17:ef:fe:20:a7:c7: 60:0e:e9:78:09:17:23:5d:ac:3e:8c:d9:dc:d6:05:be:1c:04: 16:7f:17:dd:30:7f:61:69:26:0e:84:dc:e3:62:7b:82:5d:47: 2e:9d:2b:d4:21:a5:e3:4c:52:c6:f6:b2:aa:85:95:b3:71:c1: 28:1c:24:80:85:23:1a:2e:83:f7:52:cc:62:e2:77:65:4d:d7: 79:b0:ab:4b:f8:fc:b5:78:1c:97:15:67:28:99:ad:89:7c:d1: d0:5d:37:62:d6:9f:69:b0:c1:93:32:73:43:cb:30:1f:52:e5: b2:33:75:a2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF QjJCODExMC8GA1UEBRMoQTg5N0FFOEZGMjE0MUNCMzM0RUFBNEI4ODFDQzNDNTY1 NkQ0NzQzNjAeFw0yNTA3MDMwMjE4MTJaFw0yNTA3MTAwMjE4MTJaMBgxFjAUBgNV BAMTDTY4NjVlODY1LTYyY2MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDA1LkyhfAMwcJcptsbJcCf/MXKxUw074Zpr8cuzpx6f2szZqHjszxw1xNLgYGR oltkot/PjPRyBBegkXsOoi13q9iVMal32oJno+igohj/inA8GiHIG7i1QGBYJscT CKO26XeBibiWMkULgZgVtAPGBgLX0wiXlbNzswXCK/fCOjzn+Ba0070lsIgl0ZeY v0lAIz7EZBF2MgrPaZmPDSFg9MoWr5/ks0U0wR2HNu5P05mOOZlN7YDjHCq6Qf4j OnwgoyUCUlQEWQ3rfzI3F9dS0IgsmnS5/oDc5iNJm8BdHh9f+xdxOjgHcWAsx4UN uyZuLzvlhLBf2ROwAyJMSAJfAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUrs9Uz7JB TokAg0VVZH9vYoyfroMwHwYDVR0jBBgwFoAUqJeuj/IUHLM06qS4gcw8VlbUdDYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVCMkI4LzM1ODNFNTg2NTE2 NTExRjBCQzFDQUY3NUM0RjlBRTAyL3FKZXVqX0lVSExNMDZxUzRnY3c4VmxiVWRE WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvcUpldWpfSVVITE0wNnFTNGdjdzhWbGJVZERZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVC MkI4LzM1ODNFNTg2NTE2NTExRjBCQzFDQUY3NUM0RjlBRTAyL3FKZXVqX0lVSExN MDZxUzRnY3c4VmxiVWREWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKKrKpVlfz3C451lmKp0dx9dzAlXzwb8pQ8cWGsHDlZ3qCw/Wm9OiiBc 4ZqNIXHcECUR54n+XKDJPMjb9ZsFbYLJRLghSTexEZXePA8J4g0PZf2DoAbLkOdJ AtK8FxD4vvQHTyJt2rxX6FsZDVHGFkUKC/yNxa1GY9B38mWjRYOG3tYkJ65xdsR6 gxfv/iCnx2AO6XgJFyNdrD6M2dzWBb4cBBZ/F90wf2FpJg6E3ONie4JdRy6dK9Qh peNMUsb2sqqFlbNxwSgcJICFIxoug/dSzGLid2VN13mwq0v4/LV4HJcVZyiZrYl8 0dBdN2LWn2mwwZMyc0PLMB9S5bIzdaI= -----END CERTIFICATE-----Generated at Fri Jul 4 04:03:58 2025 by rpki-client