$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDEFE/1164CAE0A51611EF890ECD3EC4F9AE02/qCkvYgTIIT15H6bMqvV4UZTvgaA.mft File: qCkvYgTIIT15H6bMqvV4UZTvgaA.mft (raw, json) Hash identifier: ZQSG/CfAiz0ryveP08LsGmkBm/caCzwxW5lwHRVkeWU= Subject key identifier: 8B:DD:41:86:0E:7B:6C:1B:F1:61:5A:1F:2F:46:8A:A6:5B:A0:2C:14 Authority key identifier: A8:29:2F:62:04:C8:21:3D:79:1F:A6:CC:AA:F5:78:51:94:EF:81:A0 Certificate issuer: /CN=A91FDEFE/serialNumber=A8292F6204C8213D791FA6CCAAF5785194EF81A0 Certificate serial: 77 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qCkvYgTIIT15H6bMqvV4UZTvgaA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDEFE/1164CAE0A51611EF890ECD3EC4F9AE02/qCkvYgTIIT15H6bMqvV4UZTvgaA.mft Manifest number: 76 Signing time: Thu 03 Jul 2025 07:02:21 +0000 Manifest this update: Thu 03 Jul 2025 07:02:21 +0000 Manifest next update: Thu 10 Jul 2025 07:02:21 +0000 Files and hashes: 1: qCkvYgTIIT15H6bMqvV4UZTvgaA.crl (hash: ZQr8/VCBk3p6cssw+Gg7yPvxfE+CKIK4HlPIxRpfCVE=) 2: E7695EC6A53411EFB98AFE51C4F9AE02.roa (hash: Lu7YmWMIdl1OwrJtUhBGFe6+OAHwy7pjCKEXO1Xq/dY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDEFE/1164CAE0A51611EF890ECD3EC4F9AE02/qCkvYgTIIT15H6bMqvV4UZTvgaA.crl rsync://rpki.apnic.net/member_repository/A91FDEFE/1164CAE0A51611EF890ECD3EC4F9AE02/qCkvYgTIIT15H6bMqvV4UZTvgaA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qCkvYgTIIT15H6bMqvV4UZTvgaA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 119 (0x77) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDEFE, serialNumber=A8292F6204C8213D791FA6CCAAF5785194EF81A0 Validity Not Before: Jul 3 07:02:21 2025 GMT Not After : Jul 10 07:02:21 2025 GMT Subject: CN=68662afd-10f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:97:4a:65:b4:2f:6d:dc:27:52:de:89:d5:5a: 09:27:a4:60:60:0c:fa:1b:69:6d:d9:ae:ef:7c:14: f3:f3:c0:a2:6c:d3:cf:9b:22:b9:30:40:6b:1c:8d: 40:80:be:da:ce:b6:18:e8:13:15:55:0a:3d:c5:f3: 2e:8d:92:2f:bd:7d:19:10:9c:86:02:56:4d:fa:cb: f1:08:5d:16:38:61:69:cd:19:cc:db:87:10:4e:4a: 0d:db:59:b6:5a:40:7b:df:e8:68:7f:7c:6c:16:ee: e2:e9:4e:90:40:3a:dc:a8:1f:4d:37:c4:50:c0:8c: 8f:71:2e:59:f4:84:09:f8:c1:7d:30:39:9a:36:e3: 29:7f:77:5d:ba:e6:8a:a5:14:f8:d5:b6:e8:f1:27: 09:f3:8d:0a:fc:4a:f7:dd:d5:20:4b:8a:78:50:15: 2b:1f:f6:f4:58:1f:ed:e9:b2:32:c2:e2:04:83:9f: 8b:f7:a9:c1:00:71:d3:b7:ae:cc:9c:f9:85:15:89: d4:09:d4:cf:9b:11:f8:ec:ec:62:75:d2:0f:bb:27: cb:36:38:08:03:9a:8e:b5:a1:48:4d:c8:97:2e:12: 04:59:e0:c1:c0:64:80:1f:ac:f5:5a:e4:95:5d:5a: 4c:04:63:26:3e:0f:08:f4:7e:36:14:d1:a8:3a:85: 5d:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:DD:41:86:0E:7B:6C:1B:F1:61:5A:1F:2F:46:8A:A6:5B:A0:2C:14 X509v3 Authority Key Identifier: keyid:A8:29:2F:62:04:C8:21:3D:79:1F:A6:CC:AA:F5:78:51:94:EF:81:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDEFE/1164CAE0A51611EF890ECD3EC4F9AE02/qCkvYgTIIT15H6bMqvV4UZTvgaA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qCkvYgTIIT15H6bMqvV4UZTvgaA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDEFE/1164CAE0A51611EF890ECD3EC4F9AE02/qCkvYgTIIT15H6bMqvV4UZTvgaA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:66:a9:97:81:90:a2:8f:48:4b:63:97:95:d7:7e:a5:64:cf: 9d:c1:65:a0:0a:95:a2:ed:f5:4a:10:ea:5f:60:06:67:58:84: 05:2b:78:4b:db:9c:c5:28:fd:77:d0:c0:bf:2b:0e:b2:35:7f: 90:e5:9a:16:e4:a8:dc:34:36:4f:da:1a:09:ec:e9:df:3c:f4: 15:a0:8b:a6:2c:95:56:13:da:0e:33:dc:a5:73:84:7d:93:f9: 01:49:7e:62:c9:73:39:d8:47:88:a0:c4:3e:d7:d3:57:53:db: a1:cd:75:24:6d:85:21:fb:7e:ad:66:2b:ec:a5:c7:51:18:b4: 50:94:d0:40:e8:37:88:7a:80:1e:c6:da:f3:32:58:a0:df:39: f5:b5:43:eb:d9:93:ce:dc:85:9b:de:72:22:36:e6:3e:da:b8: 2a:65:5b:40:3d:c3:57:24:e6:57:e0:e8:aa:29:ff:a5:cf:3f: a7:a0:6f:83:7c:64:8c:f6:60:bc:21:fe:22:92:38:46:0d:c5: 70:47:fd:c5:ff:5b:85:94:6e:9e:48:0a:3c:88:41:0c:10:ac: ea:26:54:05:ef:40:de:58:c0:76:83:32:b8:cb:b8:9a:bc:68: b1:36:1b:c4:23:70:c7:63:36:73:8e:c9:aa:1c:ff:78:ac:8a: a5:40:62:a3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG REVGRTExMC8GA1UEBRMoQTgyOTJGNjIwNEM4MjEzRDc5MUZBNkNDQUFGNTc4NTE5 NEVGODFBMDAeFw0yNTA3MDMwNzAyMjFaFw0yNTA3MTAwNzAyMjFaMBgxFjAUBgNV BAMTDTY4NjYyYWZkLTEwZjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQChl0pltC9t3CdS3onVWgknpGBgDPobaW3Zru98FPPzwKJs08+bIrkwQGscjUCA vtrOthjoExVVCj3F8y6Nki+9fRkQnIYCVk36y/EIXRY4YWnNGczbhxBOSg3bWbZa QHvf6Gh/fGwW7uLpTpBAOtyoH003xFDAjI9xLln0hAn4wX0wOZo24yl/d1265oql FPjVtujxJwnzjQr8Svfd1SBLinhQFSsf9vRYH+3psjLC4gSDn4v3qcEAcdO3rsyc +YUVidQJ1M+bEfjs7GJ10g+7J8s2OAgDmo61oUhNyJcuEgRZ4MHAZIAfrPVa5JVd WkwEYyY+Dwj0fjYU0ag6hV33AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUi91Bhg57 bBvxYVofL0aKplugLBQwHwYDVR0jBBgwFoAUqCkvYgTIIT15H6bMqvV4UZTvgaAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZERUZFLzExNjRDQUUwQTUx NjExRUY4OTBFQ0QzRUM0RjlBRTAyL3FDa3ZZZ1RJSVQxNUg2Yk1xdlY0VVpUdmdh QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvcUNrdllnVElJVDE1SDZiTXF2VjRVWlR2Z2FBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZE RUZFLzExNjRDQUUwQTUxNjExRUY4OTBFQ0QzRUM0RjlBRTAyL3FDa3ZZZ1RJSVQx NUg2Yk1xdlY0VVpUdmdhQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAB5mqZeBkKKPSEtjl5XXfqVkz53BZaAKlaLt9UoQ6l9gBmdYhAUreEvb nMUo/XfQwL8rDrI1f5DlmhbkqNw0Nk/aGgns6d889BWgi6YslVYT2g4z3KVzhH2T +QFJfmLJcznYR4igxD7X01dT26HNdSRthSH7fq1mK+ylx1EYtFCU0EDoN4h6gB7G 2vMyWKDfOfW1Q+vZk87chZveciI25j7auCplW0A9w1ck5lfg6Kop/6XPP6egb4N8 ZIz2YLwh/iKSOEYNxXBH/cX/W4WUbp5ICjyIQQwQrOomVAXvQN5YwHaDMrjLuJq8 aLE2G8QjcMdjNnOOyaoc/3isiqVAYqM= -----END CERTIFICATE-----Generated at Thu Jul 3 23:34:00 2025 by rpki-client