$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBC50/E4858AC40CD411EBBCD79C69C4F9AE02/Q1TVz6Vk7nGzToh07rG5ho-IB90.mft File: Q1TVz6Vk7nGzToh07rG5ho-IB90.mft (raw, json) Hash identifier: CNW3zoIakuquygCt6TkZNcgKHkKkMcGQVG1tP0S/FMY= Subject key identifier: 4F:DC:41:55:DE:2A:BB:A8:55:DF:C4:E7:3A:E3:6C:D2:22:79:6D:64 Authority key identifier: 43:54:D5:CF:A5:64:EE:71:B3:4E:88:74:EE:B1:B9:86:8F:88:07:DD Certificate issuer: /CN=A91EBC50/serialNumber=4354D5CFA564EE71B34E8874EEB1B9868F8807DD Certificate serial: 07B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q1TVz6Vk7nGzToh07rG5ho-IB90.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBC50/E4858AC40CD411EBBCD79C69C4F9AE02/Q1TVz6Vk7nGzToh07rG5ho-IB90.mft Manifest number: 07A5 Signing time: Wed 02 Jul 2025 21:35:08 +0000 Manifest this update: Wed 02 Jul 2025 21:35:07 +0000 Manifest next update: Wed 09 Jul 2025 21:35:07 +0000 Files and hashes: 1: Q1TVz6Vk7nGzToh07rG5ho-IB90.crl (hash: VpkCvv4W92+sxKi6t1+etAxO1zd1UCZnRj0j8O+QQJw=) 2: A10812CA0CD511EB9433AE69C4F9AE02.roa (hash: Pp8lb1nzqx7e9rT/EQLbTNVmmjg6MQa2RdSIFuurOeU=) 3: 638149B88C2C11EBBB3B260BC4F9AE02.roa (hash: B/FCYm7yp7p+ieEmvmImAhcl/oemA2ZNjMcDSU18oaU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBC50/E4858AC40CD411EBBCD79C69C4F9AE02/Q1TVz6Vk7nGzToh07rG5ho-IB90.crl rsync://rpki.apnic.net/member_repository/A91EBC50/E4858AC40CD411EBBCD79C69C4F9AE02/Q1TVz6Vk7nGzToh07rG5ho-IB90.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q1TVz6Vk7nGzToh07rG5ho-IB90.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 21:35:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1971 (0x7b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBC50, serialNumber=4354D5CFA564EE71B34E8874EEB1B9868F8807DD Validity Not Before: Jul 2 21:35:07 2025 GMT Not After : Jul 9 21:35:07 2025 GMT Subject: CN=6865a60c-fcbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:1f:5d:1f:4f:a5:fe:6f:22:23:3a:47:66:53: 38:29:36:50:43:26:b8:0b:e6:24:7c:68:a1:d7:2c: 3b:62:2f:6b:cc:4c:20:59:5b:76:ed:d2:59:4c:a3: aa:2c:0d:47:42:26:4c:95:04:30:35:61:af:d7:a1: 8b:3a:ab:84:22:04:65:4a:a3:3b:04:58:1d:2b:b4: 5c:a3:35:e6:5c:7c:ab:f3:28:c7:e7:45:f9:ec:1e: 7a:c6:a9:49:4e:3f:b8:7f:3e:2d:5c:14:3d:3e:f3: 49:98:38:c4:c6:03:8c:7f:24:60:a1:f4:47:6f:a9: 45:01:51:f3:a0:39:b2:df:b7:59:fa:5d:a4:ff:f1: 76:5e:46:1c:2b:3c:d5:34:ec:41:7c:aa:fb:8c:fd: 30:36:8b:8d:c4:16:88:b6:27:77:28:e2:47:34:2c: 37:de:55:3c:60:76:3b:83:e9:3a:aa:9b:85:76:5d: 27:80:b4:9d:de:4c:57:0a:fb:a8:20:8d:7e:96:24: 46:11:54:a3:fd:a6:bc:50:31:fe:36:f6:1e:6a:38: 7c:26:9f:fc:da:8a:6a:87:10:e0:98:e6:e2:af:e3: d7:8c:5a:c9:41:8b:3c:b1:74:06:6b:74:e5:50:1d: 92:ec:8f:4b:0d:c5:01:3e:68:3a:64:aa:ed:b7:4a: e0:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:DC:41:55:DE:2A:BB:A8:55:DF:C4:E7:3A:E3:6C:D2:22:79:6D:64 X509v3 Authority Key Identifier: keyid:43:54:D5:CF:A5:64:EE:71:B3:4E:88:74:EE:B1:B9:86:8F:88:07:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBC50/E4858AC40CD411EBBCD79C69C4F9AE02/Q1TVz6Vk7nGzToh07rG5ho-IB90.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q1TVz6Vk7nGzToh07rG5ho-IB90.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBC50/E4858AC40CD411EBBCD79C69C4F9AE02/Q1TVz6Vk7nGzToh07rG5ho-IB90.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:24:61:c3:0b:31:54:dd:ea:6b:f8:da:6f:94:20:76:f5:fe: 82:11:74:48:13:36:43:8a:7d:b0:18:84:43:7c:a1:92:90:b0: 32:09:69:5d:30:64:56:af:e0:ff:15:77:32:3c:35:d2:53:67: 0a:db:ff:bb:9a:71:42:5a:34:48:f3:e2:23:17:17:aa:32:b1: da:b1:66:dc:0a:c3:3e:6f:df:84:11:d9:ed:17:8f:d0:ae:bf: 00:be:6e:1a:e9:7a:27:d2:20:66:b1:06:7f:e8:6b:b7:0c:d7: d3:9d:57:ef:a1:29:c6:2c:26:96:71:5c:d5:1b:76:69:6f:a6: 3c:d4:56:3a:b9:e2:ea:27:58:fb:d4:7b:21:c5:c8:8c:b9:0e: 64:58:84:35:84:c2:0a:ae:6b:8e:e4:45:f2:0e:ca:25:73:a5: c3:ec:d7:e0:69:3c:c6:f4:d1:e5:aa:25:14:10:3d:90:8d:6c: 0d:9f:59:59:98:a8:e9:79:25:aa:77:eb:0e:a6:e6:53:3e:d1: a2:0f:40:1d:0e:80:26:14:cc:ba:71:91:89:88:5d:09:ee:e3: e3:3c:92:8f:73:4b:d6:91:c6:5e:1d:ff:7d:b0:b8:df:7f:d9: 9a:43:89:df:c6:85:fa:02:eb:12:01:7e:76:53:ec:34:eb:8a: e0:74:0c:3e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB7MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUJDNTAxMTAvBgNVBAUTKDQzNTRENUNGQTU2NEVFNzFCMzRFODg3NEVFQjFCOTg2 OEY4ODA3REQwHhcNMjUwNzAyMjEzNTA3WhcNMjUwNzA5MjEzNTA3WjAYMRYwFAYD VQQDEw02ODY1YTYwYy1mY2JmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwx9dH0+l/m8iIzpHZlM4KTZQQya4C+YkfGih1yw7Yi9rzEwgWVt27dJZTKOq LA1HQiZMlQQwNWGv16GLOquEIgRlSqM7BFgdK7RcozXmXHyr8yjH50X57B56xqlJ Tj+4fz4tXBQ9PvNJmDjExgOMfyRgofRHb6lFAVHzoDmy37dZ+l2k//F2XkYcKzzV NOxBfKr7jP0wNouNxBaItid3KOJHNCw33lU8YHY7g+k6qpuFdl0ngLSd3kxXCvuo II1+liRGEVSj/aa8UDH+NvYeajh8Jp/82opqhxDgmObir+PXjFrJQYs8sXQGa3Tl UB2S7I9LDcUBPmg6ZKrtt0rgSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE/cQVXe KruoVd/E5zrjbNIieW1kMB8GA1UdIwQYMBaAFENU1c+lZO5xs06IdO6xuYaPiAfd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkM1MC9FNDg1OEFDNDBD RDQxMUVCQkNENzlDNjlDNEY5QUUwMi9RMVRWejZWazduR3pUb2gwN3JHNWhvLUlC OTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ExVFZ6NlZrN25HelRvaDA3ckc1aG8tSUI5MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QkM1MC9FNDg1OEFDNDBDRDQxMUVCQkNENzlDNjlDNEY5QUUwMi9RMVRWejZWazdu R3pUb2gwN3JHNWhvLUlCOTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASJGHDCzFU3epr+NpvlCB29f6CEXRIEzZDin2wGIRDfKGSkLAyCWld MGRWr+D/FXcyPDXSU2cK2/+7mnFCWjRI8+IjFxeqMrHasWbcCsM+b9+EEdntF4/Q rr8Avm4a6Xon0iBmsQZ/6Gu3DNfTnVfvoSnGLCaWcVzVG3Zpb6Y81FY6ueLqJ1j7 1HshxciMuQ5kWIQ1hMIKrmuO5EXyDsolc6XD7NfgaTzG9NHlqiUUED2QjWwNn1lZ mKjpeSWqd+sOpuZTPtGiD0AdDoAmFMy6cZGJiF0J7uPjPJKPc0vWkcZeHf99sLjf f9maQ4nfxoX6AusSAX52U+w064rgdAw+ -----END CERTIFICATE-----Generated at Thu Jul 3 03:52:41 2025 by rpki-client