$ rpki-client -vvf rpki.apnic.net/member_repository/A91ECD98/7802048A66A411EA8FCB2B6FC4F9AE02/QcZcAPCmsH08D2sSkFZPv4OC2nM.mft File: QcZcAPCmsH08D2sSkFZPv4OC2nM.mft (raw, json) Hash identifier: wo6rE7Jh9TOj5rQ/VgFpDYAob0TiPVMfylcqmC5KNFM= Subject key identifier: 97:C8:C2:09:C2:9E:5F:B4:82:B4:FD:26:5A:DA:2D:B6:70:69:B9:E9 Authority key identifier: 41:C6:5C:00:F0:A6:B0:7D:3C:0F:6B:12:90:56:4F:BF:83:82:DA:73 Certificate issuer: /CN=A91ECD98/serialNumber=41C65C00F0A6B07D3C0F6B1290564FBF8382DA73 Certificate serial: 0A67 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QcZcAPCmsH08D2sSkFZPv4OC2nM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ECD98/7802048A66A411EA8FCB2B6FC4F9AE02/QcZcAPCmsH08D2sSkFZPv4OC2nM.mft Manifest number: 0A5F Signing time: Sat 28 Jun 2025 19:21:45 +0000 Manifest this update: Sat 28 Jun 2025 19:21:44 +0000 Manifest next update: Sat 05 Jul 2025 19:21:44 +0000 Files and hashes: 1: QcZcAPCmsH08D2sSkFZPv4OC2nM.crl (hash: uuN4UCeqrkk8/pR1+RPrqim20pUzVSH0dRVGRFx+gpk=) 2: F760C48ACE0111EB980FBD53C4F9AE02.roa (hash: lEjGikQ+ii4jtTGbAoJ/KSsQ3VS5/CajiRstqwCSiwQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ECD98/7802048A66A411EA8FCB2B6FC4F9AE02/QcZcAPCmsH08D2sSkFZPv4OC2nM.crl rsync://rpki.apnic.net/member_repository/A91ECD98/7802048A66A411EA8FCB2B6FC4F9AE02/QcZcAPCmsH08D2sSkFZPv4OC2nM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QcZcAPCmsH08D2sSkFZPv4OC2nM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 19:21:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2663 (0xa67) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ECD98, serialNumber=41C65C00F0A6B07D3C0F6B1290564FBF8382DA73 Validity Not Before: Jun 28 19:21:44 2025 GMT Not After : Jul 5 19:21:44 2025 GMT Subject: CN=686040c9-ad6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:dc:22:ce:41:41:12:7d:76:81:1f:03:79:f4: bc:42:c7:17:39:04:f6:78:04:b0:d6:7c:20:4e:b3: c6:5b:82:34:d1:e6:a9:ad:27:8a:9d:fe:cc:3b:ca: a3:df:9b:16:07:9a:b2:7b:1d:e0:74:62:6b:6d:56: f0:cf:5f:59:9e:62:a2:55:7f:5f:fd:f0:34:fa:18: f5:03:3c:0b:0d:e9:82:57:01:11:c6:e6:da:cb:c4: 3c:9e:df:f2:28:d9:4a:8a:88:ca:52:30:22:24:e2: 47:25:07:6d:ba:c6:6f:6a:cf:da:27:64:a7:7b:60: e9:c2:bb:39:05:9e:8d:85:97:1c:ee:11:45:db:1f: e0:73:9a:bc:99:10:d0:ce:f6:87:fa:39:d1:c4:3d: 10:a9:92:0e:38:94:18:61:f5:0f:19:14:4c:8d:06: 75:18:75:02:f9:f6:02:1a:8e:22:b3:fe:0c:7e:d5: 2c:41:ed:61:8e:1b:e4:e2:7f:c6:fa:80:14:4a:88: a3:a6:bd:c4:bb:ec:97:63:42:8a:0e:07:f5:c6:00: 89:24:7b:97:e4:f3:34:76:2e:6b:5e:62:f1:f0:78: d4:f9:7c:25:38:ed:88:48:a7:20:8b:80:76:cd:a6: 9c:af:bf:23:40:a9:1e:91:17:74:13:0b:26:ab:31: ac:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:C8:C2:09:C2:9E:5F:B4:82:B4:FD:26:5A:DA:2D:B6:70:69:B9:E9 X509v3 Authority Key Identifier: keyid:41:C6:5C:00:F0:A6:B0:7D:3C:0F:6B:12:90:56:4F:BF:83:82:DA:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ECD98/7802048A66A411EA8FCB2B6FC4F9AE02/QcZcAPCmsH08D2sSkFZPv4OC2nM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QcZcAPCmsH08D2sSkFZPv4OC2nM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ECD98/7802048A66A411EA8FCB2B6FC4F9AE02/QcZcAPCmsH08D2sSkFZPv4OC2nM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:43:9c:c2:aa:49:07:44:22:67:a2:5b:95:63:c2:08:f7:c5: 67:8a:a3:03:59:7c:28:4d:b4:c9:d9:b1:1f:95:2b:ae:29:ee: 03:f3:cf:ef:ec:1d:93:08:ec:a4:ec:11:ec:2c:44:98:26:e5: fc:f4:79:19:cc:5e:61:e6:d0:f5:d8:23:20:e4:d9:30:fc:9c: 9e:7f:44:44:65:46:70:a7:b1:80:1e:22:13:81:27:6c:75:fd: 09:44:88:8d:be:ba:ca:cf:09:9f:cf:98:f4:72:05:a4:b6:18: 81:5e:1d:42:33:fe:c1:a5:4d:39:1a:20:42:2c:e4:b3:69:90: 4c:96:11:b1:d4:61:7f:d7:f2:01:7b:82:bf:90:75:91:c5:69: 68:14:fe:cd:fc:8a:76:56:82:c1:fb:c0:3a:1e:9b:5a:27:28: 7d:41:53:3d:04:8b:c3:65:b7:6e:44:55:b4:55:bc:2a:01:b4: f1:c1:71:e0:16:27:e7:43:4d:60:a6:ec:84:14:19:ca:43:ee: 9a:92:d3:23:3b:65:ab:a0:ae:53:ce:69:e3:e6:30:03:75:11: 9a:34:4a:3c:d2:50:e6:66:37:b3:4d:fe:d3:f9:1b:b4:b2:74: 66:bd:a0:e7:7a:ce:5c:6a:36:06:76:c4:c2:45:87:7a:b0:3a: 45:31:71:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCmcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUNEOTgxMTAvBgNVBAUTKDQxQzY1QzAwRjBBNkIwN0QzQzBGNkIxMjkwNTY0RkJG ODM4MkRBNzMwHhcNMjUwNjI4MTkyMTQ0WhcNMjUwNzA1MTkyMTQ0WjAYMRYwFAYD VQQDEw02ODYwNDBjOS1hZDZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApdwizkFBEn12gR8DefS8QscXOQT2eASw1nwgTrPGW4I00eaprSeKnf7MO8qj 35sWB5qyex3gdGJrbVbwz19ZnmKiVX9f/fA0+hj1AzwLDemCVwERxubay8Q8nt/y KNlKiojKUjAiJOJHJQdtusZvas/aJ2Sne2Dpwrs5BZ6NhZcc7hFF2x/gc5q8mRDQ zvaH+jnRxD0QqZIOOJQYYfUPGRRMjQZ1GHUC+fYCGo4is/4MftUsQe1hjhvk4n/G +oAUSoijpr3Eu+yXY0KKDgf1xgCJJHuX5PM0di5rXmLx8HjU+XwlOO2ISKcgi4B2 zaacr78jQKkekRd0EwsmqzGsewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJfIwgnC nl+0grT9JlraLbZwabnpMB8GA1UdIwQYMBaAFEHGXADwprB9PA9rEpBWT7+Dgtpz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQ0Q5OC83ODAyMDQ4QTY2 QTQxMUVBOEZDQjJCNkZDNEY5QUUwMi9RY1pjQVBDbXNIMDhEMnNTa0ZaUHY0T0My bk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FjWmNBUENtc0gwOEQyc1NrRlpQdjRPQzJuTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF Q0Q5OC83ODAyMDQ4QTY2QTQxMUVBOEZDQjJCNkZDNEY5QUUwMi9RY1pjQVBDbXNI MDhEMnNTa0ZaUHY0T0Mybk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAsQ5zCqkkHRCJnoluVY8II98VniqMDWXwoTbTJ2bEflSuuKe4D88/v 7B2TCOyk7BHsLESYJuX89HkZzF5h5tD12CMg5Nkw/Jyef0REZUZwp7GAHiITgSds df0JRIiNvrrKzwmfz5j0cgWkthiBXh1CM/7BpU05GiBCLOSzaZBMlhGx1GF/1/IB e4K/kHWRxWloFP7N/Ip2VoLB+8A6HptaJyh9QVM9BIvDZbduRFW0VbwqAbTxwXHg FifnQ01gpuyEFBnKQ+6aktMjO2WroK5Tzmnj5jADdRGaNEo80lDmZjezTf7T+Ru0 snRmvaDnes5cajYGdsTCRYd6sDpFMXFE -----END CERTIFICATE-----Generated at Mon Jun 30 14:51:50 2025 by rpki-client