$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.mft File: qriBuCFHwwNrgPxnWTTcLkbOD38.mft (raw, json) Hash identifier: OLPcpYCqgIKlhWrg8Ci6+crCFTI5mJMV7aqtiw6NHDk= Subject key identifier: 4D:A4:5E:85:A5:E4:DE:2D:48:AD:42:FC:AA:7F:C2:7E:69:D8:F9:F7 Authority key identifier: AA:B8:81:B8:21:47:C3:03:6B:80:FC:67:59:34:DC:2E:46:CE:0F:7F Certificate issuer: /CN=A91F4EDE/serialNumber=AAB881B82147C3036B80FC675934DC2E46CE0F7F Certificate serial: 05EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qriBuCFHwwNrgPxnWTTcLkbOD38.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.mft Manifest number: 05E2 Signing time: Wed 02 Jul 2025 23:19:07 +0000 Manifest this update: Wed 02 Jul 2025 23:19:07 +0000 Manifest next update: Wed 09 Jul 2025 23:19:07 +0000 Files and hashes: 1: qriBuCFHwwNrgPxnWTTcLkbOD38.crl (hash: 6WbNSbxnMkUwtKsEXH9RY1FZHiw2/aLmfrIdU8aVM1I=) 2: 8C4BB9AED9DB11EF9AE05220C4F9AE02.roa (hash: zsrAxxFfRp403bl7GSNrqmEpDz70fh0k4+NlvivXGV8=) 3: 5A9BFC3ABE7C11EB8BC25C1CC4F9AE02.roa (hash: +PXzRKDa1pBP+673hTlbAtrA0Uh8pso6MOGI9Du2wJM=) 4: 7E859EFEE60411EF89467057C4F9AE02.roa (hash: G47KdDVGbUCyf898ZT3HzgYoD9VrL0ChsA84sDifaK4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.crl rsync://rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qriBuCFHwwNrgPxnWTTcLkbOD38.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 23:19:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1515 (0x5eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4EDE, serialNumber=AAB881B82147C3036B80FC675934DC2E46CE0F7F Validity Not Before: Jul 2 23:19:07 2025 GMT Not After : Jul 9 23:19:07 2025 GMT Subject: CN=6865be6b-05a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:61:f3:9e:2f:39:51:69:e6:8f:14:cb:69:c7: a8:d1:0b:ef:27:43:9d:f7:7b:02:75:df:29:d0:00: 21:0f:bb:35:29:62:e9:8a:c1:ea:19:8c:71:31:c4: b2:15:ec:2b:23:29:2e:80:90:49:4e:11:47:ff:ab: 50:ad:df:97:16:a5:e6:d7:7e:15:b2:9e:b1:f6:1b: 0b:e7:27:32:fe:0d:74:fc:31:79:8e:ac:d5:aa:c0: 8f:bc:e4:38:ff:26:1a:f8:e1:4f:01:32:73:fa:5a: fd:ab:fd:96:2d:b7:a4:c0:ae:73:3d:91:5a:47:50: ed:c8:17:97:9b:e4:3a:76:0d:2d:38:28:bd:64:bf: b7:2a:df:0a:b7:42:3a:ee:10:d2:3c:50:db:8e:2d: 87:21:74:0f:c0:1d:15:ae:ba:84:f5:63:47:bd:f5: 9f:80:23:26:db:1e:db:ae:8f:e4:2b:d2:79:f0:bd: ad:1a:00:93:ad:3d:5b:7e:d3:cf:cc:09:3b:6c:dc: 55:c9:ab:54:ae:91:29:bc:42:f9:60:66:e3:80:ac: d1:5f:f7:6c:74:e0:6b:13:0c:a4:29:dc:39:5d:6c: 17:42:51:ef:3f:2d:39:80:96:0c:80:dc:ea:ca:0f: 0b:d1:c5:48:27:a5:35:c9:f7:b6:40:17:40:19:5e: f1:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:A4:5E:85:A5:E4:DE:2D:48:AD:42:FC:AA:7F:C2:7E:69:D8:F9:F7 X509v3 Authority Key Identifier: keyid:AA:B8:81:B8:21:47:C3:03:6B:80:FC:67:59:34:DC:2E:46:CE:0F:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qriBuCFHwwNrgPxnWTTcLkbOD38.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:c2:31:da:f2:fb:a6:0e:51:f3:3e:5a:2b:f7:3a:71:c9:7c: 7c:09:b1:12:d2:c9:b8:80:32:12:07:35:8f:00:44:8f:61:47: 7a:a5:7a:03:6e:1b:76:ab:9d:6b:63:3b:00:d0:f1:83:d9:f2: 12:da:7e:32:4d:c8:ba:35:8c:be:4e:37:1f:9f:96:df:6c:2a: 7e:75:4d:a1:db:22:c0:8b:6d:85:4d:c6:5e:e1:81:2f:4b:50: a1:dc:cf:8c:9d:19:d7:d6:88:f5:8c:1c:52:07:5c:0e:72:06: e6:27:36:41:04:ea:c8:79:70:52:85:8d:d7:de:21:80:91:a4: 23:6f:60:3e:ba:e3:e5:03:81:3d:ce:f2:bd:d5:57:24:b7:70: f5:79:df:15:33:bb:95:30:59:1a:b8:58:a8:cc:42:5f:e0:92: 06:bd:b2:4e:37:62:ed:b6:73:bf:05:df:fe:b3:f8:ed:f4:8e: 1e:08:6c:4d:6c:4e:0a:25:f6:53:ad:27:a6:4e:99:e9:8c:73: 23:32:eb:1d:32:1f:58:f1:23:7a:f6:a0:08:9b:3b:05:0a:6f: 08:99:81:c1:2f:a4:87:ab:c3:d0:60:47:39:69:58:c8:87:d7: 7b:17:be:21:29:83:ee:98:df:a7:43:16:8a:46:90:49:c7:e4: d0:6d:aa:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBeswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjRFREUxMTAvBgNVBAUTKEFBQjg4MUI4MjE0N0MzMDM2QjgwRkM2NzU5MzREQzJF NDZDRTBGN0YwHhcNMjUwNzAyMjMxOTA3WhcNMjUwNzA5MjMxOTA3WjAYMRYwFAYD VQQDEw02ODY1YmU2Yi0wNWExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs2Hzni85UWnmjxTLaceo0QvvJ0Od93sCdd8p0AAhD7s1KWLpisHqGYxxMcSy FewrIykugJBJThFH/6tQrd+XFqXm134Vsp6x9hsL5ycy/g10/DF5jqzVqsCPvOQ4 /yYa+OFPATJz+lr9q/2WLbekwK5zPZFaR1DtyBeXm+Q6dg0tOCi9ZL+3Kt8Kt0I6 7hDSPFDbji2HIXQPwB0VrrqE9WNHvfWfgCMm2x7bro/kK9J58L2tGgCTrT1bftPP zAk7bNxVyatUrpEpvEL5YGbjgKzRX/dsdOBrEwykKdw5XWwXQlHvPy05gJYMgNzq yg8L0cVIJ6U1yfe2QBdAGV7x2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE2kXoWl 5N4tSK1C/Kp/wn5p2Pn3MB8GA1UdIwQYMBaAFKq4gbghR8MDa4D8Z1k03C5Gzg9/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNEVERS8yQ0IwMzI1OEJF NzkxMUVCOTUxMThCMTlDNEY5QUUwMi9xcmlCdUNGSHd3TnJnUHhuV1RUY0xrYk9E MzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FyaUJ1Q0ZId3dOcmdQeG5XVFRjTGtiT0QzOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NEVERS8yQ0IwMzI1OEJFNzkxMUVCOTUxMThCMTlDNEY5QUUwMi9xcmlCdUNGSHd3 TnJnUHhuV1RUY0xrYk9EMzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/wjHa8vumDlHzPlor9zpxyXx8CbES0sm4gDISBzWPAESPYUd6pXoD bht2q51rYzsA0PGD2fIS2n4yTci6NYy+Tjcfn5bfbCp+dU2h2yLAi22FTcZe4YEv S1Ch3M+MnRnX1oj1jBxSB1wOcgbmJzZBBOrIeXBShY3X3iGAkaQjb2A+uuPlA4E9 zvK91Vckt3D1ed8VM7uVMFkauFiozEJf4JIGvbJON2LttnO/Bd/+s/jt9I4eCGxN bE4KJfZTrSemTpnpjHMjMusdMh9Y8SN69qAImzsFCm8ImYHBL6SHq8PQYEc5aVjI h9d7F74hKYPumN+nQxaKRpBJx+TQbarc -----END CERTIFICATE-----Generated at Thu Jul 3 14:16:24 2025 by rpki-client