$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6BFA/40D4B7EC660311EA99AD4F46C4F9AE02/qmLHn-GEOUEsWwLPS-tUqy674Yg.mft File: qmLHn-GEOUEsWwLPS-tUqy674Yg.mft (raw, json) Hash identifier: jh7z1ZE0qSSrW3RyjxW56YrACbKNj30QAgRimiXkj1A= Subject key identifier: 34:41:60:B9:F0:20:56:DF:BA:51:4D:05:D6:F9:A5:F7:ED:29:F8:9B Authority key identifier: AA:62:C7:9F:E1:84:39:41:2C:5B:02:CF:4B:EB:54:AB:2E:BB:E1:88 Certificate issuer: /CN=A91F6BFA/serialNumber=AA62C79FE18439412C5B02CF4BEB54AB2EBBE188 Certificate serial: 0A91 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qmLHn-GEOUEsWwLPS-tUqy674Yg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F6BFA/40D4B7EC660311EA99AD4F46C4F9AE02/qmLHn-GEOUEsWwLPS-tUqy674Yg.mft Manifest number: 0A76 Signing time: Sat 28 Jun 2025 19:21:16 +0000 Manifest this update: Sat 28 Jun 2025 19:21:15 +0000 Manifest next update: Sat 05 Jul 2025 19:21:15 +0000 Files and hashes: 1: qmLHn-GEOUEsWwLPS-tUqy674Yg.crl (hash: nagk2+gug9FSQf/ho/SKIjguvnULkbOTNlvNflnWwbM=) 2: 128651089A4C11EEBA49A012C4F9AE02.roa (hash: VmP7SNr/gbc8YQH8mhyiXgUhCSGimNKw35snjgd94pI=) 3: 3AFE6DA8F72911EDB956BA86C4F9AE02.roa (hash: NCtWjC1uM4+Sx0ntIvyY3s6R1AF8S0ZUO+CcBcvcH7w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F6BFA/40D4B7EC660311EA99AD4F46C4F9AE02/qmLHn-GEOUEsWwLPS-tUqy674Yg.crl rsync://rpki.apnic.net/member_repository/A91F6BFA/40D4B7EC660311EA99AD4F46C4F9AE02/qmLHn-GEOUEsWwLPS-tUqy674Yg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qmLHn-GEOUEsWwLPS-tUqy674Yg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 19:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2705 (0xa91) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F6BFA, serialNumber=AA62C79FE18439412C5B02CF4BEB54AB2EBBE188 Validity Not Before: Jun 28 19:21:15 2025 GMT Not After : Jul 5 19:21:15 2025 GMT Subject: CN=686040ab-71cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:53:37:06:52:da:29:3d:5f:68:c1:d6:f4:23: ab:96:cd:71:eb:75:56:b6:10:b0:d6:09:e8:e5:3e: 4a:bf:b4:72:35:54:a8:45:cf:6c:53:04:e4:08:d4: 89:63:81:1a:d2:33:fd:4f:6b:3a:46:8d:a0:f9:f9: d7:62:45:3d:21:bf:59:e6:e6:21:30:66:09:1b:1e: 11:c2:37:29:98:75:82:b1:49:a7:9a:a8:66:35:11: 4f:8a:58:a9:83:73:f8:e7:a3:35:9e:0e:92:ce:5b: e6:2f:86:62:79:93:1f:9d:80:93:d5:65:6c:22:f9: 42:4e:76:bc:13:04:6d:f5:6f:95:57:21:10:2d:0b: 84:8d:78:b5:47:49:b9:04:24:04:11:64:2d:1c:00: 1a:ce:72:dc:f2:47:c7:84:f0:65:3b:55:14:51:5d: aa:c5:cb:a1:9b:a2:13:07:1c:5b:1c:86:ee:49:db: 50:04:e5:37:65:7d:f4:b6:9c:eb:60:78:6e:1f:e3: ff:c0:c2:57:70:25:f4:e0:f4:ad:cb:97:47:8f:25: b6:8e:0d:d7:7f:fd:a2:8d:ed:6e:69:06:47:1b:e0: e8:64:15:b1:c3:5c:05:5a:a1:91:ff:27:dc:f0:c5: 52:5c:65:50:b9:8b:3d:e0:21:d8:73:e4:92:b5:54: 3c:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:41:60:B9:F0:20:56:DF:BA:51:4D:05:D6:F9:A5:F7:ED:29:F8:9B X509v3 Authority Key Identifier: keyid:AA:62:C7:9F:E1:84:39:41:2C:5B:02:CF:4B:EB:54:AB:2E:BB:E1:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F6BFA/40D4B7EC660311EA99AD4F46C4F9AE02/qmLHn-GEOUEsWwLPS-tUqy674Yg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qmLHn-GEOUEsWwLPS-tUqy674Yg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6BFA/40D4B7EC660311EA99AD4F46C4F9AE02/qmLHn-GEOUEsWwLPS-tUqy674Yg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:84:97:21:cc:95:ce:39:ca:ac:2e:f6:c2:33:61:69:15:1b: 00:73:5f:31:d4:e0:2d:76:27:50:2c:29:50:48:c1:af:5c:f6: 26:c8:01:65:72:72:77:98:cb:2f:44:da:1d:46:38:d6:ef:3c: 48:42:59:91:48:ff:b3:c9:e6:48:25:27:33:4f:d3:01:77:c6: f6:71:2b:47:c4:6e:67:8f:8c:b9:55:cf:79:30:e8:d5:3f:ab: 39:54:fc:70:bd:1a:61:02:83:f4:d3:37:21:80:ef:07:e9:6a: 25:78:23:db:60:1e:af:cc:de:a6:b7:56:1f:30:e5:0e:0f:0d: 18:4f:57:2c:a5:16:a0:4a:89:7f:63:41:4d:69:af:76:7a:02: 5d:40:21:7f:10:21:b8:92:26:d3:59:6e:d6:db:af:3e:2c:a9: 0c:5f:d1:eb:7d:74:dd:7b:1f:a7:32:56:fb:62:2d:a9:57:35: cc:cb:24:e5:e1:ca:d7:98:dd:d1:bd:82:99:82:e6:bb:8d:d5: ca:04:5f:72:12:e4:36:6e:03:b9:78:47:d5:fc:75:cf:b9:55: 5d:9f:79:7d:4e:48:95:c2:3d:ea:a1:02:69:b6:2a:ff:6c:5b: 9c:26:d8:64:05:25:64:d5:c4:69:e6:36:67:81:8e:d0:b9:e2: 90:00:1b:fa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCpEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjZCRkExMTAvBgNVBAUTKEFBNjJDNzlGRTE4NDM5NDEyQzVCMDJDRjRCRUI1NEFC MkVCQkUxODgwHhcNMjUwNjI4MTkyMTE1WhcNMjUwNzA1MTkyMTE1WjAYMRYwFAYD VQQDEw02ODYwNDBhYi03MWNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1lM3BlLaKT1faMHW9COrls1x63VWthCw1gno5T5Kv7RyNVSoRc9sUwTkCNSJ Y4Ea0jP9T2s6Ro2g+fnXYkU9Ib9Z5uYhMGYJGx4RwjcpmHWCsUmnmqhmNRFPilip g3P456M1ng6SzlvmL4ZieZMfnYCT1WVsIvlCTna8EwRt9W+VVyEQLQuEjXi1R0m5 BCQEEWQtHAAaznLc8kfHhPBlO1UUUV2qxcuhm6ITBxxbHIbuSdtQBOU3ZX30tpzr YHhuH+P/wMJXcCX04PSty5dHjyW2jg3Xf/2ije1uaQZHG+DoZBWxw1wFWqGR/yfc 8MVSXGVQuYs94CHYc+SStVQ8XwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDRBYLnw IFbfulFNBdb5pfftKfibMB8GA1UdIwQYMBaAFKpix5/hhDlBLFsCz0vrVKsuu+GI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNkJGQS80MEQ0QjdFQzY2 MDMxMUVBOTlBRDRGNDZDNEY5QUUwMi9xbUxIbi1HRU9VRXNXd0xQUy10VXF5Njc0 WWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FtTEhuLUdFT1VFc1d3TFBTLXRVcXk2NzRZZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NkJGQS80MEQ0QjdFQzY2MDMxMUVBOTlBRDRGNDZDNEY5QUUwMi9xbUxIbi1HRU9V RXNXd0xQUy10VXF5Njc0WWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfhJchzJXOOcqsLvbCM2FpFRsAc18x1OAtdidQLClQSMGvXPYmyAFl cnJ3mMsvRNodRjjW7zxIQlmRSP+zyeZIJSczT9MBd8b2cStHxG5nj4y5Vc95MOjV P6s5VPxwvRphAoP00zchgO8H6WoleCPbYB6vzN6mt1YfMOUODw0YT1cspRagSol/ Y0FNaa92egJdQCF/ECG4kibTWW7W268+LKkMX9HrfXTdex+nMlb7Yi2pVzXMyyTl 4crXmN3RvYKZgua7jdXKBF9yEuQ2bgO5eEfV/HXPuVVdn3l9TkiVwj3qoQJptir/ bFucJthkBSVk1cRp5jZngY7QueKQABv6 -----END CERTIFICATE-----Generated at Sun Jun 29 17:59:49 2025 by rpki-client