$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/0Qb7lypx_rdAkuBjeNVM1Z5Z46M.mft File: 0Qb7lypx_rdAkuBjeNVM1Z5Z46M.mft (raw, json) Hash identifier: obsgSwLqutXNPYWXlh8h7ean4BHqpS5RmL2iIlCZGvs= Subject key identifier: EA:26:AD:6F:12:65:26:6E:F7:22:DA:5C:44:7C:F3:20:35:98:C0:A2 Authority key identifier: D1:06:FB:97:2A:71:FE:B7:40:92:E0:63:78:D5:4C:D5:9E:59:E3:A3 Certificate issuer: /CN=A91EEA4D/serialNumber=D106FB972A71FEB74092E06378D54CD59E59E3A3 Certificate serial: 0F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Qb7lypx_rdAkuBjeNVM1Z5Z46M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/0Qb7lypx_rdAkuBjeNVM1Z5Z46M.mft Manifest number: 1344 Signing time: Wed 02 Jul 2025 19:34:42 +0000 Manifest this update: Wed 02 Jul 2025 19:34:41 +0000 Manifest next update: Wed 09 Jul 2025 19:34:41 +0000 Files and hashes: 1: 0Qb7lypx_rdAkuBjeNVM1Z5Z46M.crl (hash: iuXKD6SmLPwovLHet1rxWzbe3csVgayg4yHzJMbbdPA=) 2: 6B6060E445A311F093AEF324C4F9AE02.roa (hash: KkaxMY/paqE0NvJV6adlijQxx/J7VWmCwLLLInlyw1A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/0Qb7lypx_rdAkuBjeNVM1Z5Z46M.crl rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/0Qb7lypx_rdAkuBjeNVM1Z5Z46M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Qb7lypx_rdAkuBjeNVM1Z5Z46M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 19:34:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15 (0xf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EEA4D, serialNumber=D106FB972A71FEB74092E06378D54CD59E59E3A3 Validity Not Before: Jul 2 19:34:41 2025 GMT Not After : Jul 9 19:34:41 2025 GMT Subject: CN=686589d2-403f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:db:92:f5:c4:91:b8:4d:c8:35:ca:fc:c5:4a: 63:87:2d:7c:92:20:75:2a:94:cc:a0:c9:0d:f8:92: 82:42:d7:7c:84:67:13:4b:b2:98:8b:4d:6c:37:3d: 05:8a:11:99:6c:ba:9f:cd:5f:de:6c:2e:da:ff:d3: ff:0b:83:f8:6f:d0:c6:41:71:58:16:8d:29:f3:55: c3:d9:64:1b:bb:7f:d6:84:b2:dc:ca:d2:2f:6c:6c: 68:da:00:32:02:41:9f:5e:1a:e0:f7:82:d6:85:dc: 08:e5:a8:1a:9a:78:d9:f2:4e:59:e5:26:a0:7d:48: 75:a1:63:fa:a5:ee:d8:61:5e:f2:7d:8a:56:50:2b: 63:35:2d:99:6f:e6:eb:ee:fe:65:b8:a8:32:ea:b2: cb:b8:7f:b8:54:39:d6:65:75:06:1e:52:d9:f9:34: b4:33:8c:7a:0f:5d:85:bd:64:fa:e1:d0:dc:bd:d4: d7:2f:3b:4a:fa:11:8e:08:21:6a:ac:8d:12:d8:37: a8:a7:c6:f8:a4:21:ce:ed:1d:c5:50:4f:b3:84:8a: 40:3d:17:78:3f:e2:91:04:dd:01:1b:93:cc:3c:2b: 36:68:29:06:2d:3d:8f:cd:62:32:3d:1a:a6:28:3c: a1:c4:93:fb:97:f3:f7:ee:93:8b:b1:e4:64:f4:37: 9a:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:26:AD:6F:12:65:26:6E:F7:22:DA:5C:44:7C:F3:20:35:98:C0:A2 X509v3 Authority Key Identifier: keyid:D1:06:FB:97:2A:71:FE:B7:40:92:E0:63:78:D5:4C:D5:9E:59:E3:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/0Qb7lypx_rdAkuBjeNVM1Z5Z46M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Qb7lypx_rdAkuBjeNVM1Z5Z46M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/0Qb7lypx_rdAkuBjeNVM1Z5Z46M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:02:b1:7c:a8:9f:fb:bf:c8:1a:9c:ca:81:86:92:7e:04:e5: 67:f5:11:67:1e:a2:93:6a:f4:58:2a:f7:71:66:8c:58:1e:4a: f4:a7:af:79:1f:9b:cb:75:30:98:aa:58:b1:aa:66:24:23:7c: 8f:d1:6f:95:06:d9:ac:b9:5c:36:0d:dd:c5:64:d1:42:06:6f: 36:57:ba:c8:6d:df:fd:3e:01:2e:08:d5:fb:49:70:25:37:87: ad:58:20:a5:1b:75:02:b3:79:cc:b7:87:6c:90:b3:be:93:d3: 5a:55:f2:b6:d2:dc:bc:c6:76:53:32:5e:81:01:b6:97:ee:79: 32:43:63:60:71:27:18:3b:4a:69:f6:d0:52:2e:1b:69:1a:6c: 26:4a:71:fa:62:4f:37:2a:ef:78:9d:0e:96:c1:b7:ec:70:e7: 85:b2:25:4b:90:b0:04:eb:78:c6:c4:5e:56:71:1b:93:de:53: e2:90:df:4a:db:1e:d5:02:6f:19:97:03:c1:36:87:e6:80:95: 89:41:33:6e:27:32:92:9f:59:07:56:90:7f:dd:0c:15:21:b1: f5:51:2c:ec:2a:b4:a9:11:de:90:a1:2a:d1:2c:df:b4:3e:e7: da:b4:ff:66:0a:28:df:bd:96:c0:05:e6:72:1e:e6:e6:9c:97: 9a:cb:0f:8e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF RUE0RDExMC8GA1UEBRMoRDEwNkZCOTcyQTcxRkVCNzQwOTJFMDYzNzhENTRDRDU5 RTU5RTNBMzAeFw0yNTA3MDIxOTM0NDFaFw0yNTA3MDkxOTM0NDFaMBgxFjAUBgNV BAMTDTY4NjU4OWQyLTQwM2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDF25L1xJG4Tcg1yvzFSmOHLXySIHUqlMygyQ34koJC13yEZxNLspiLTWw3PQWK EZlsup/NX95sLtr/0/8Lg/hv0MZBcVgWjSnzVcPZZBu7f9aEstzK0i9sbGjaADIC QZ9eGuD3gtaF3AjlqBqaeNnyTlnlJqB9SHWhY/ql7thhXvJ9ilZQK2M1LZlv5uvu /mW4qDLqssu4f7hUOdZldQYeUtn5NLQzjHoPXYW9ZPrh0Ny91NcvO0r6EY4IIWqs jRLYN6inxvikIc7tHcVQT7OEikA9F3g/4pEE3QEbk8w8KzZoKQYtPY/NYjI9GqYo PKHEk/uX8/fuk4ux5GT0N5oBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU6iatbxJl Jm73ItpcRHzzIDWYwKIwHwYDVR0jBBgwFoAU0Qb7lypx/rdAkuBjeNVM1Z5Z46Mw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVFQTRELzY2MUY3M0VDNDcz NzExRUFBQjE2QkI1MEM0RjlBRTAyLzBRYjdseXB4X3JkQWt1QmplTlZNMVo1WjQ2 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMFFiN2x5cHhfcmRBa3VCamVOVk0xWjVaNDZNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVF QTRELzY2MUY3M0VDNDczNzExRUFBQjE2QkI1MEM0RjlBRTAyLzBRYjdseXB4X3Jk QWt1QmplTlZNMVo1WjQ2TS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGUCsXyon/u/yBqcyoGGkn4E5Wf1EWceopNq9Fgq93FmjFgeSvSnr3kf m8t1MJiqWLGqZiQjfI/Rb5UG2ay5XDYN3cVk0UIGbzZXusht3/0+AS4I1ftJcCU3 h61YIKUbdQKzecy3h2yQs76T01pV8rbS3LzGdlMyXoEBtpfueTJDY2BxJxg7Smn2 0FIuG2kabCZKcfpiTzcq73idDpbBt+xw54WyJUuQsATreMbEXlZxG5PeU+KQ30rb HtUCbxmXA8E2h+aAlYlBM24nMpKfWQdWkH/dDBUhsfVRLOwqtKkR3pChKtEs37Q+ 59q0/2YKKN+9lsAF5nIe5uacl5rLD44= -----END CERTIFICATE-----Generated at Thu Jul 3 10:39:43 2025 by rpki-client