$ rpki-client -vvf rpki.apnic.net/member_repository/A911E509/79EA591EA7BD11EAAAA62948C4F9AE02/qo4b42JCQNwzAgR_tBp9TkeAjvg.mft File: qo4b42JCQNwzAgR_tBp9TkeAjvg.mft (raw, json) Hash identifier: /NAgFeVHfERFuYjFlG9TFVr7v467ffbfZbddw5UlKrc= Subject key identifier: F0:08:B2:3C:98:E2:C0:4B:2B:68:15:92:80:73:9A:FE:7A:A5:53:28 Authority key identifier: AA:8E:1B:E3:62:42:40:DC:33:02:04:7F:B4:1A:7D:4E:47:80:8E:F8 Certificate issuer: /CN=A911E509/serialNumber=AA8E1BE3624240DC3302047FB41A7D4E47808EF8 Certificate serial: 0978 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qo4b42JCQNwzAgR_tBp9TkeAjvg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E509/79EA591EA7BD11EAAAA62948C4F9AE02/qo4b42JCQNwzAgR_tBp9TkeAjvg.mft Manifest number: 0953 Signing time: Mon 21 Jul 2025 00:21:26 +0000 Manifest this update: Mon 21 Jul 2025 00:21:26 +0000 Manifest next update: Mon 28 Jul 2025 00:21:26 +0000 Files and hashes: 1: qo4b42JCQNwzAgR_tBp9TkeAjvg.crl (hash: B1dD87txT6BFbcBSmbIh/NzYfEBYIFa6Qixt8SUyxRY=) 2: 2E18EB105D0C11EE873B1C2AC4F9AE02.roa (hash: y+1LcMZWVq0sxCzTaWENpdmxk9z32hroZYUL1UHWPKM=) 3: 31AFACDC349211F0BA15B357C4F9AE02.roa (hash: PUqEA442AAa7n+fxZ3wZ6UWoFba4yC5gZ7zTzgopBgo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E509/79EA591EA7BD11EAAAA62948C4F9AE02/qo4b42JCQNwzAgR_tBp9TkeAjvg.crl rsync://rpki.apnic.net/member_repository/A911E509/79EA591EA7BD11EAAAA62948C4F9AE02/qo4b42JCQNwzAgR_tBp9TkeAjvg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qo4b42JCQNwzAgR_tBp9TkeAjvg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 00:21:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2424 (0x978) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E509, serialNumber=AA8E1BE3624240DC3302047FB41A7D4E47808EF8 Validity Not Before: Jul 21 00:21:26 2025 GMT Not After : Jul 28 00:21:26 2025 GMT Subject: CN=687d8806-e95a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f7:0f:80:38:49:14:2a:62:77:b4:b4:48:1a: 61:c4:78:f1:1f:f0:f0:c8:0b:a8:78:df:63:c3:71: e1:98:0e:a5:87:fb:70:fa:28:44:fd:46:0e:f3:ac: d7:7f:ae:3c:d0:c7:b5:7f:b6:25:62:11:70:a5:ae: cc:fe:ea:3f:fe:cf:31:d5:3a:30:a0:7a:d8:88:64: 97:47:cb:d3:f2:0f:75:6d:97:9a:d1:7b:62:fa:e5: 92:50:50:77:be:14:36:b5:f4:50:07:bb:3b:25:6a: 5c:22:e9:60:f4:e2:d7:ce:88:42:59:e2:29:80:ef: 74:4a:48:f8:93:b2:89:6e:2d:d8:32:3d:f6:b2:6b: 0b:dc:48:cb:ad:cc:f6:c7:88:70:66:bf:a2:3e:e7: 86:65:0c:89:b4:d2:03:31:40:95:ad:a9:ab:81:73: 4c:bf:d1:f9:d8:e0:c6:6e:27:68:34:fc:e2:8b:cb: 4f:64:6b:33:c5:ec:5b:c0:6f:e2:fb:88:29:92:84: 04:c4:b3:2f:ae:d6:a7:49:0e:ae:a4:6c:f1:f4:8d: e4:65:a7:10:34:06:e1:ed:0c:52:0c:64:c6:65:81: 0d:c0:41:ad:a5:3c:0d:89:e3:2a:51:7c:62:6c:18: 36:61:30:58:e2:07:93:d0:9a:6b:5e:f8:d4:91:44: d5:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:08:B2:3C:98:E2:C0:4B:2B:68:15:92:80:73:9A:FE:7A:A5:53:28 X509v3 Authority Key Identifier: keyid:AA:8E:1B:E3:62:42:40:DC:33:02:04:7F:B4:1A:7D:4E:47:80:8E:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E509/79EA591EA7BD11EAAAA62948C4F9AE02/qo4b42JCQNwzAgR_tBp9TkeAjvg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qo4b42JCQNwzAgR_tBp9TkeAjvg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E509/79EA591EA7BD11EAAAA62948C4F9AE02/qo4b42JCQNwzAgR_tBp9TkeAjvg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:39:58:13:17:5a:f9:a6:88:49:7a:15:bb:7b:4b:a4:08:64: da:d8:4b:bf:89:ba:f2:44:4d:e9:6a:33:a9:f0:a6:8e:ae:31: d3:8e:6a:c6:a1:6b:af:6f:52:6d:f8:2f:b7:84:05:23:bb:57: e4:af:8b:65:b5:46:d2:18:c8:ae:27:3b:35:ec:c8:e0:5f:42: 1b:b0:72:c3:25:93:e3:3b:71:a6:74:6a:d0:5e:ea:01:10:88: 3d:5d:68:f6:4c:9f:25:fc:7d:89:4b:69:c2:dc:b4:66:36:97: 1c:0d:cc:58:66:05:b6:6d:f9:fa:70:7d:c7:c3:6b:bc:4a:31: 05:d2:a7:74:b0:e9:d7:75:9f:51:fc:58:6d:ef:dc:70:eb:99: da:c9:91:aa:41:e7:14:42:86:b7:8b:96:4d:e3:f4:3a:d0:5d: 40:f6:e0:3f:ec:ac:a6:cb:2d:d4:08:b7:8e:e9:07:bc:46:d1: 5a:8c:7c:a1:24:fc:e4:13:f5:d0:36:6f:0d:06:ee:9a:92:3e: cd:7d:32:53:e3:00:a9:98:af:4c:65:e3:d1:f9:8b:65:f8:9c: 95:ba:b6:f5:d4:a9:7f:cf:5a:22:da:b2:f8:2a:b4:29:88:43: 3a:41:8d:fb:a7:4e:44:09:54:eb:85:3d:cb:14:be:c6:46:a0: e8:82:43:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCXgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUU1MDkxMTAvBgNVBAUTKEFBOEUxQkUzNjI0MjQwREMzMzAyMDQ3RkI0MUE3RDRF NDc4MDhFRjgwHhcNMjUwNzIxMDAyMTI2WhcNMjUwNzI4MDAyMTI2WjAYMRYwFAYD VQQDEw02ODdkODgwNi1lOTVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwfcPgDhJFCpid7S0SBphxHjxH/DwyAuoeN9jw3HhmA6lh/tw+ihE/UYO86zX f6480Me1f7YlYhFwpa7M/uo//s8x1TowoHrYiGSXR8vT8g91bZea0Xti+uWSUFB3 vhQ2tfRQB7s7JWpcIulg9OLXzohCWeIpgO90Skj4k7KJbi3YMj32smsL3EjLrcz2 x4hwZr+iPueGZQyJtNIDMUCVramrgXNMv9H52ODGbidoNPzii8tPZGszxexbwG/i +4gpkoQExLMvrtanSQ6upGzx9I3kZacQNAbh7QxSDGTGZYENwEGtpTwNieMqUXxi bBg2YTBY4geT0JprXvjUkUTVNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPAIsjyY 4sBLK2gVkoBzmv56pVMoMB8GA1UdIwQYMBaAFKqOG+NiQkDcMwIEf7QafU5HgI74 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTUwOS83OUVBNTkxRUE3 QkQxMUVBQUFBNjI5NDhDNEY5QUUwMi9xbzRiNDJKQ1FOd3pBZ1JfdEJwOVRrZUFq dmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FvNGI0MkpDUU53ekFnUl90QnA5VGtlQWp2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RTUwOS83OUVBNTkxRUE3QkQxMUVBQUFBNjI5NDhDNEY5QUUwMi9xbzRiNDJKQ1FO d3pBZ1JfdEJwOVRrZUFqdmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNOVgTF1r5pohJehW7e0ukCGTa2Eu/ibryRE3pajOp8KaOrjHTjmrG oWuvb1Jt+C+3hAUju1fkr4tltUbSGMiuJzs17MjgX0IbsHLDJZPjO3GmdGrQXuoB EIg9XWj2TJ8l/H2JS2nC3LRmNpccDcxYZgW2bfn6cH3Hw2u8SjEF0qd0sOnXdZ9R /Fht79xw65nayZGqQecUQoa3i5ZN4/Q60F1A9uA/7Kymyy3UCLeO6Qe8RtFajHyh JPzkE/XQNm8NBu6akj7NfTJT4wCpmK9MZePR+Ytl+JyVurb11Kl/z1oi2rL4KrQp iEM6QY37p05ECVTrhT3LFL7GRqDogkMg -----END CERTIFICATE-----Generated at Mon Jul 21 12:47:54 2025 by rpki-client