$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3B2E/0F55C696D67D11ED86D33750C4F9AE02/QSPpAOai7I_ptdcDt5KA7yFAfIE.mft File: QSPpAOai7I_ptdcDt5KA7yFAfIE.mft (raw, json) Hash identifier: NEyMOWHiFqQON0CXfhKLpBsimqDdfVFLOnFjPy7JB5Y= Subject key identifier: 9E:AE:14:BF:D0:FC:59:AE:D9:36:47:0C:59:CD:34:91:93:3F:81:14 Authority key identifier: 41:23:E9:00:E6:A2:EC:8F:E9:B5:D7:03:B7:92:80:EF:21:40:7C:81 Certificate issuer: /CN=A91F3B2E/serialNumber=4123E900E6A2EC8FE9B5D703B79280EF21407C81 Certificate serial: 01D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSPpAOai7I_ptdcDt5KA7yFAfIE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3B2E/0F55C696D67D11ED86D33750C4F9AE02/QSPpAOai7I_ptdcDt5KA7yFAfIE.mft Manifest number: 01BC Signing time: Tue 01 Jul 2025 03:43:25 +0000 Manifest this update: Tue 01 Jul 2025 03:43:25 +0000 Manifest next update: Tue 08 Jul 2025 03:43:25 +0000 Files and hashes: 1: QSPpAOai7I_ptdcDt5KA7yFAfIE.crl (hash: 8PmWJ4g/0HesnbZQQEKt2tzjTQsK199HsDLoVncl1zA=) 2: A91AF6A8CE7811EF89FA3944C4F9AE02.roa (hash: xYipp+ZcmQFz/ogxlth1vHSd96eYxW/drt1nbOwk66E=) 3: 2B8EF9AA083911F0A051CE72C4F9AE02.roa (hash: NUJLc0QRL6TCVIjI3d7tAKvp2NahPW0NGI52wQUI1t4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3B2E/0F55C696D67D11ED86D33750C4F9AE02/QSPpAOai7I_ptdcDt5KA7yFAfIE.crl rsync://rpki.apnic.net/member_repository/A91F3B2E/0F55C696D67D11ED86D33750C4F9AE02/QSPpAOai7I_ptdcDt5KA7yFAfIE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSPpAOai7I_ptdcDt5KA7yFAfIE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 03:43:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 464 (0x1d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3B2E, serialNumber=4123E900E6A2EC8FE9B5D703B79280EF21407C81 Validity Not Before: Jul 1 03:43:25 2025 GMT Not After : Jul 8 03:43:25 2025 GMT Subject: CN=6863595d-284c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:12:7a:b0:2f:6b:b1:45:c4:98:c2:f4:e5:05: bd:aa:60:6a:f4:c8:2f:18:90:a4:0f:ba:36:d1:0f: b2:d6:c6:bd:30:75:31:b0:a4:21:04:ce:61:9c:36: aa:5a:43:f1:fb:59:de:75:be:9b:b7:b5:ea:5f:5f: 60:d4:10:b6:22:19:99:0c:ad:0e:b9:3a:e5:bb:4e: a6:e7:97:2e:b1:5e:2e:cf:f1:dc:70:d6:4b:b9:34: c6:1a:93:bd:7c:35:92:50:e2:71:38:5b:53:bd:70: 26:91:65:d3:00:ce:99:72:17:4a:8d:1b:e8:d6:78: 8f:64:55:a9:4c:84:ff:72:f3:4f:f9:6b:2d:e1:fa: ea:c5:55:e0:f4:64:6e:62:27:e9:5a:03:76:21:c3: f6:06:66:6d:86:fb:ae:77:ed:81:1b:47:bb:af:c4: db:21:80:4e:77:c3:eb:1f:3e:92:6c:e2:5e:ce:6c: e8:1f:e0:7d:5d:58:89:4e:83:8d:d4:50:b1:df:a4: bf:60:21:73:26:b9:23:b4:71:04:cb:76:78:d8:b8: de:b3:03:ef:3f:26:27:b4:f8:48:42:47:91:a1:57: e1:1a:40:f8:e6:1d:0d:b0:21:c5:0c:67:eb:d4:b3: 94:90:c9:d0:32:24:74:26:38:99:56:de:8b:43:d5: 41:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:AE:14:BF:D0:FC:59:AE:D9:36:47:0C:59:CD:34:91:93:3F:81:14 X509v3 Authority Key Identifier: keyid:41:23:E9:00:E6:A2:EC:8F:E9:B5:D7:03:B7:92:80:EF:21:40:7C:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3B2E/0F55C696D67D11ED86D33750C4F9AE02/QSPpAOai7I_ptdcDt5KA7yFAfIE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSPpAOai7I_ptdcDt5KA7yFAfIE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3B2E/0F55C696D67D11ED86D33750C4F9AE02/QSPpAOai7I_ptdcDt5KA7yFAfIE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:47:8e:24:fa:a4:2a:65:00:63:3d:7b:51:b8:fe:2f:d3:27: 4b:18:65:d4:be:5b:e2:cc:62:61:f0:fa:49:7f:b0:e9:52:f2: 82:da:d0:b4:4b:b7:ab:10:9d:b3:48:a5:6d:ac:72:b7:95:c7: a0:1c:bb:26:17:fc:91:37:51:65:18:fb:ec:de:7e:06:72:c3: f3:0c:86:a4:80:6c:a0:8d:ea:9e:df:4f:53:f3:15:1d:ef:f4: 77:3a:80:89:38:3a:98:34:5a:f9:33:60:6d:57:ef:f1:6a:47: 2d:02:8c:f2:82:0c:20:ad:47:e0:c2:d8:80:64:3c:90:dd:2b: 77:5b:21:1a:4b:e8:18:af:67:26:85:0c:e7:17:31:92:86:28: a0:ef:cd:91:33:bd:a6:a6:1f:d8:87:20:3c:92:47:1b:07:95: 13:69:1a:5e:ef:93:07:8b:65:a6:5f:51:81:48:53:8d:47:6f: 84:ff:a6:1d:ff:0b:62:17:a9:b6:06:de:c6:ca:39:07:92:f8: c7:be:b7:2a:4f:f0:32:52:64:ef:52:ae:fd:8b:0e:c8:d4:de: b8:f4:5e:a8:7f:9d:c0:4b:8c:a3:b8:f4:51:76:0c:63:b3:3c: 67:7b:46:8d:cf:37:a3:e0:11:9a:fb:ef:20:30:28:30:8b:fa: cf:1d:4b:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjNCMkUxMTAvBgNVBAUTKDQxMjNFOTAwRTZBMkVDOEZFOUI1RDcwM0I3OTI4MEVG MjE0MDdDODEwHhcNMjUwNzAxMDM0MzI1WhcNMjUwNzA4MDM0MzI1WjAYMRYwFAYD VQQDEw02ODYzNTk1ZC0yODRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwxJ6sC9rsUXEmML05QW9qmBq9MgvGJCkD7o20Q+y1sa9MHUxsKQhBM5hnDaq WkPx+1nedb6bt7XqX19g1BC2IhmZDK0OuTrlu06m55cusV4uz/HccNZLuTTGGpO9 fDWSUOJxOFtTvXAmkWXTAM6ZchdKjRvo1niPZFWpTIT/cvNP+Wst4frqxVXg9GRu YifpWgN2IcP2BmZthvuud+2BG0e7r8TbIYBOd8PrHz6SbOJezmzoH+B9XViJToON 1FCx36S/YCFzJrkjtHEEy3Z42LjeswPvPyYntPhIQkeRoVfhGkD45h0NsCHFDGfr 1LOUkMnQMiR0JjiZVt6LQ9VBqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ6uFL/Q /Fmu2TZHDFnNNJGTP4EUMB8GA1UdIwQYMBaAFEEj6QDmouyP6bXXA7eSgO8hQHyB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGM0IyRS8wRjU1QzY5NkQ2 N0QxMUVEODZEMzM3NTBDNEY5QUUwMi9RU1BwQU9haTdJX3B0ZGNEdDVLQTd5RkFm SUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FTUHBBT2FpN0lfcHRkY0R0NUtBN3lGQWZJRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG M0IyRS8wRjU1QzY5NkQ2N0QxMUVEODZEMzM3NTBDNEY5QUUwMi9RU1BwQU9haTdJ X3B0ZGNEdDVLQTd5RkFmSUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0R44k+qQqZQBjPXtRuP4v0ydLGGXUvlvizGJh8PpJf7DpUvKC2tC0 S7erEJ2zSKVtrHK3lcegHLsmF/yRN1FlGPvs3n4GcsPzDIakgGygjeqe309T8xUd 7/R3OoCJODqYNFr5M2BtV+/xakctAozyggwgrUfgwtiAZDyQ3St3WyEaS+gYr2cm hQznFzGShiig782RM72mph/YhyA8kkcbB5UTaRpe75MHi2WmX1GBSFONR2+E/6Yd /wtiF6m2Bt7GyjkHkvjHvrcqT/AyUmTvUq79iw7I1N649F6of53AS4yjuPRRdgxj szxne0aNzzej4BGa++8gMCgwi/rPHUs0 -----END CERTIFICATE-----Generated at Wed Jul 2 15:15:41 2025 by rpki-client