$ rpki-client -vvf rpki.apnic.net/member_repository/A91178F4/D7065E34213211EA9A05FF40C4F9AE02/QvY5Q1NTT7CXXsweC49bZSOvr8U.mft File: QvY5Q1NTT7CXXsweC49bZSOvr8U.mft (raw, json) Hash identifier: JC5rHZ9iftzAs5K12np5Oou7yQqhjzIlymu1bL4XMUk= Subject key identifier: 24:DD:BC:30:63:1F:E2:28:DF:C9:E7:2E:B3:E6:CC:92:7F:AC:55:00 Authority key identifier: 42:F6:39:43:53:53:4F:B0:97:5E:CC:1E:0B:8F:5B:65:23:AF:AF:C5 Certificate issuer: /CN=A91178F4/serialNumber=42F6394353534FB0975ECC1E0B8F5B6523AFAFC5 Certificate serial: 0BD3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QvY5Q1NTT7CXXsweC49bZSOvr8U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91178F4/D7065E34213211EA9A05FF40C4F9AE02/QvY5Q1NTT7CXXsweC49bZSOvr8U.mft Manifest number: 0BD3 Signing time: Fri 18 Jul 2025 19:04:37 +0000 Manifest this update: Fri 18 Jul 2025 19:04:37 +0000 Manifest next update: Fri 25 Jul 2025 19:04:37 +0000 Files and hashes: 1: QvY5Q1NTT7CXXsweC49bZSOvr8U.crl (hash: 1oEKinCfRX+dClJctHlhp7vY1feYC7cvvrn9ioUtfX0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91178F4/D7065E34213211EA9A05FF40C4F9AE02/QvY5Q1NTT7CXXsweC49bZSOvr8U.crl rsync://rpki.apnic.net/member_repository/A91178F4/D7065E34213211EA9A05FF40C4F9AE02/QvY5Q1NTT7CXXsweC49bZSOvr8U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QvY5Q1NTT7CXXsweC49bZSOvr8U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 19:04:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3027 (0xbd3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91178F4, serialNumber=42F6394353534FB0975ECC1E0B8F5B6523AFAFC5 Validity Not Before: Jul 18 19:04:37 2025 GMT Not After : Jul 25 19:04:37 2025 GMT Subject: CN=687a9ac5-369f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:86:ca:e9:97:f4:bd:86:ee:0d:ae:ad:39:ea: a7:f9:6b:2f:aa:d3:fd:0e:01:1a:ba:57:3b:28:16: 7c:8e:ae:3f:90:62:8a:d2:0e:d2:f8:31:41:89:f4: eb:78:98:86:14:b4:97:95:8e:c0:bf:de:8f:dc:ee: 23:57:64:ff:8c:9b:9f:f1:74:2e:a4:b4:b6:8e:cf: a8:5d:7e:57:f7:4a:08:f2:ad:e0:42:b2:1f:47:5e: 06:6c:e6:bd:6b:5b:c6:ba:00:11:38:78:25:4a:da: d6:b2:59:f3:e0:ae:bc:2e:75:3c:76:a9:03:a1:6b: 5d:54:bb:11:34:71:56:ff:1e:86:ef:d4:6b:39:c9: 6c:4c:f9:e1:af:40:b7:d2:62:bd:08:af:b4:10:d8: f0:94:70:20:6a:50:73:41:54:2b:bb:69:31:5a:77: 34:3f:2e:b2:b4:86:e9:5f:3e:f8:db:00:27:a8:15: 18:4f:20:28:08:41:2f:d1:2c:13:eb:48:64:2c:ea: 2d:2d:7c:b0:92:d4:57:de:b4:ab:f6:e2:36:dc:fe: b2:6c:e5:1a:d8:97:b4:ff:cf:79:e2:24:d7:91:18: 4a:25:67:45:38:d7:76:bc:e2:c5:52:42:0a:bc:75: a6:0a:61:e9:c7:36:dc:e9:aa:d3:57:9d:72:bd:37: 5e:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:DD:BC:30:63:1F:E2:28:DF:C9:E7:2E:B3:E6:CC:92:7F:AC:55:00 X509v3 Authority Key Identifier: keyid:42:F6:39:43:53:53:4F:B0:97:5E:CC:1E:0B:8F:5B:65:23:AF:AF:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91178F4/D7065E34213211EA9A05FF40C4F9AE02/QvY5Q1NTT7CXXsweC49bZSOvr8U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QvY5Q1NTT7CXXsweC49bZSOvr8U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91178F4/D7065E34213211EA9A05FF40C4F9AE02/QvY5Q1NTT7CXXsweC49bZSOvr8U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:fe:a9:ee:9b:d1:a0:91:82:e7:b7:a9:08:5d:b5:68:0e:50: 43:89:99:17:e0:3f:2e:23:cd:04:b5:0f:a4:d7:a1:e4:ae:53: 6e:83:3e:83:cc:8d:fd:bd:3c:9c:71:d2:14:59:39:cf:bd:8c: fd:e6:d1:0d:c7:49:aa:85:e7:80:11:b0:e8:a9:6b:90:f4:4a: f1:7f:7a:40:d6:b0:9f:da:e5:58:28:ff:d4:8c:1d:3e:5f:a3: d1:66:aa:86:1a:e7:fe:a4:78:da:a7:8d:e7:98:bc:f2:3e:3c: 1a:d4:2e:09:2f:c4:67:e0:94:4b:27:a8:14:cd:6d:78:53:07: df:65:f4:25:d9:0a:23:73:9d:a9:a9:29:eb:71:f4:b6:70:00: 32:04:b3:cf:8c:f8:6f:22:7a:e0:2e:2c:13:54:d9:e3:e8:8e: 31:1e:b1:e9:f6:30:9f:4e:f5:a3:2e:45:91:bf:00:17:97:46: e6:b2:be:e3:96:7c:bc:e2:6c:46:b5:6b:00:3d:68:a2:2f:c0: ec:ab:d1:92:d0:76:e4:bd:3f:5f:21:f3:b5:52:ce:19:22:43: 18:25:b9:56:8a:f7:cd:3e:b6:96:8e:18:53:a2:75:0e:a5:63: 3b:63:20:12:45:3a:65:08:74:5c:db:3b:f4:1e:d0:47:aa:47: 68:1c:1c:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC9MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTc4RjQxMTAvBgNVBAUTKDQyRjYzOTQzNTM1MzRGQjA5NzVFQ0MxRTBCOEY1QjY1 MjNBRkFGQzUwHhcNMjUwNzE4MTkwNDM3WhcNMjUwNzI1MTkwNDM3WjAYMRYwFAYD VQQDEw02ODdhOWFjNS0zNjlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzIbK6Zf0vYbuDa6tOeqn+WsvqtP9DgEaulc7KBZ8jq4/kGKK0g7S+DFBifTr eJiGFLSXlY7Av96P3O4jV2T/jJuf8XQupLS2js+oXX5X90oI8q3gQrIfR14GbOa9 a1vGugAROHglStrWslnz4K68LnU8dqkDoWtdVLsRNHFW/x6G79RrOclsTPnhr0C3 0mK9CK+0ENjwlHAgalBzQVQru2kxWnc0Py6ytIbpXz742wAnqBUYTyAoCEEv0SwT 60hkLOotLXywktRX3rSr9uI23P6ybOUa2Je0/8954iTXkRhKJWdFONd2vOLFUkIK vHWmCmHpxzbc6arTV51yvTdeFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCTdvDBj H+Io38nnLrPmzJJ/rFUAMB8GA1UdIwQYMBaAFEL2OUNTU0+wl17MHguPW2Ujr6/F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzhGNC9ENzA2NUUzNDIx MzIxMUVBOUEwNUZGNDBDNEY5QUUwMi9Rdlk1UTFOVFQ3Q1hYc3dlQzQ5YlpTT3Zy OFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1F2WTVRMU5UVDdDWFhzd2VDNDliWlNPdnI4VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NzhGNC9ENzA2NUUzNDIxMzIxMUVBOUEwNUZGNDBDNEY5QUUwMi9Rdlk1UTFOVFQ3 Q1hYc3dlQzQ5YlpTT3ZyOFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCU/qnum9GgkYLnt6kIXbVoDlBDiZkX4D8uI80EtQ+k16HkrlNugz6D zI39vTyccdIUWTnPvYz95tENx0mqheeAEbDoqWuQ9Erxf3pA1rCf2uVYKP/UjB0+ X6PRZqqGGuf+pHjap43nmLzyPjwa1C4JL8Rn4JRLJ6gUzW14UwffZfQl2Qojc52p qSnrcfS2cAAyBLPPjPhvInrgLiwTVNnj6I4xHrHp9jCfTvWjLkWRvwAXl0bmsr7j lny84mxGtWsAPWiiL8Dsq9GS0HbkvT9fIfO1Us4ZIkMYJblWivfNPraWjhhTonUO pWM7YyASRTplCHRc2zv0HtBHqkdoHBwC -----END CERTIFICATE-----Generated at Sun Jul 20 07:40:37 2025 by rpki-client