$ rpki-client -vvf rpki.apnic.net/member_repository/A9131D5E/56DD48DED94711EB9A1A0D71C4F9AE02/QeLjUgZMov-eIcSENVrALkQHJY0.mft File: QeLjUgZMov-eIcSENVrALkQHJY0.mft (raw, json) Hash identifier: oeSFKlCq2hU6KBId/xdmDRLSIDd3i3SxfRzBaakjKMU= Subject key identifier: 32:F6:FA:28:69:A2:CF:17:2F:8A:1A:F9:9E:22:C9:88:57:E4:92:E1 Authority key identifier: 41:E2:E3:52:06:4C:A2:FF:9E:21:C4:84:35:5A:C0:2E:44:07:25:8D Certificate issuer: /CN=A9131D5E/serialNumber=41E2E352064CA2FF9E21C484355AC02E4407258D Certificate serial: 05A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QeLjUgZMov-eIcSENVrALkQHJY0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131D5E/56DD48DED94711EB9A1A0D71C4F9AE02/QeLjUgZMov-eIcSENVrALkQHJY0.mft Manifest number: 05A2 Signing time: Sun 20 Jul 2025 23:21:30 +0000 Manifest this update: Sun 20 Jul 2025 23:21:29 +0000 Manifest next update: Sun 27 Jul 2025 23:21:29 +0000 Files and hashes: 1: QeLjUgZMov-eIcSENVrALkQHJY0.crl (hash: H3ERP5EQI2qZ5+/WjhO2FRvk8l0LHEMQwfBMcUiKm3U=) 2: 9B41336A9ABB11EC9D11861FC4F9AE02.roa (hash: JjNvo6+sKFXJO5jB79ObwXmzISqdgMEQqhlFwLrXnJs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131D5E/56DD48DED94711EB9A1A0D71C4F9AE02/QeLjUgZMov-eIcSENVrALkQHJY0.crl rsync://rpki.apnic.net/member_repository/A9131D5E/56DD48DED94711EB9A1A0D71C4F9AE02/QeLjUgZMov-eIcSENVrALkQHJY0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QeLjUgZMov-eIcSENVrALkQHJY0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 23:21:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1449 (0x5a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131D5E, serialNumber=41E2E352064CA2FF9E21C484355AC02E4407258D Validity Not Before: Jul 20 23:21:29 2025 GMT Not After : Jul 27 23:21:29 2025 GMT Subject: CN=687d79f9-dd77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e7:1e:da:86:b7:db:7a:da:92:a3:02:32:ca: 62:1d:44:12:d0:19:b2:ee:a7:77:b0:65:ab:aa:f4: 94:a0:52:80:56:9b:2a:c0:4b:a5:5c:52:56:68:fe: 97:fc:58:68:eb:1f:95:74:46:df:88:ba:25:22:da: 39:f4:6e:e8:c9:09:1a:c5:79:ae:74:81:4d:29:12: 88:01:bc:d7:cc:fd:38:a4:d6:78:e2:22:63:86:91: 4b:11:3a:79:75:8e:d6:e1:7d:d2:c8:b3:a9:f0:54: e3:dc:13:5c:b9:08:83:c5:65:67:3e:a2:c2:20:88: 41:95:26:73:8a:5f:2c:f6:5c:cc:d4:87:ab:db:09: b8:42:04:6b:38:99:e1:3b:36:69:3a:64:35:7f:1c: 1d:5f:9f:d7:bd:30:9a:2b:b2:e5:b1:67:fa:68:9a: ef:10:74:53:d3:e4:ef:dc:e8:cd:56:6b:d7:e5:44: 80:38:cc:41:1f:08:60:ff:0b:c4:cb:af:cf:22:50: 4a:d9:08:16:4a:0c:eb:ac:97:4b:34:9e:7a:59:71: ca:61:fb:78:0a:49:64:00:1f:32:85:25:dd:17:04: 94:8f:21:11:31:f7:68:5f:24:cb:58:ab:68:f7:e6: 57:7d:9c:f3:58:4a:11:91:8d:03:d2:2d:fe:5a:15: 2b:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:F6:FA:28:69:A2:CF:17:2F:8A:1A:F9:9E:22:C9:88:57:E4:92:E1 X509v3 Authority Key Identifier: keyid:41:E2:E3:52:06:4C:A2:FF:9E:21:C4:84:35:5A:C0:2E:44:07:25:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131D5E/56DD48DED94711EB9A1A0D71C4F9AE02/QeLjUgZMov-eIcSENVrALkQHJY0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QeLjUgZMov-eIcSENVrALkQHJY0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131D5E/56DD48DED94711EB9A1A0D71C4F9AE02/QeLjUgZMov-eIcSENVrALkQHJY0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:64:05:a6:cb:ac:55:7d:39:6a:ba:5e:7c:19:dd:8d:48:99: 56:0b:2c:b2:5b:2a:f3:41:f8:d2:e0:3a:eb:1d:2c:1a:db:10: e7:83:9c:9e:d6:64:64:a2:9d:ca:87:f3:d5:a0:ec:6d:e7:15: c0:5e:de:0c:4c:e7:a7:59:b5:37:9e:04:84:0c:26:b4:48:3c: 5e:d8:f2:87:74:48:71:83:c2:e3:ec:4b:67:02:58:18:d8:46: 5e:41:d8:80:c3:56:36:64:86:f1:6c:b4:08:60:57:38:09:70: 7e:0b:49:11:d7:3a:32:e0:5a:d2:79:2d:13:21:a8:92:50:9f: 3b:77:fa:b8:4e:2f:32:63:8b:32:5f:a8:46:e7:74:14:b3:b8: 1c:c0:a9:4a:ab:2f:57:83:2f:07:81:fb:48:01:d6:64:e0:39: 18:60:d1:de:06:90:cd:ef:99:3b:94:7b:87:4f:0d:d6:6c:12: 28:1d:51:48:5e:d6:74:76:fa:b5:32:11:6c:3d:ef:52:b5:70: 33:9b:67:27:a7:91:9f:71:64:46:84:bd:3b:3a:14:30:36:fa: 31:b7:69:fe:55:92:24:ca:94:de:d0:41:0b:2b:9a:a3:ad:d3: 92:03:8c:18:69:4c:e3:2e:2d:e3:e5:e3:5b:e9:e4:79:db:fd: a8:de:b6:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBakwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzFENUUxMTAvBgNVBAUTKDQxRTJFMzUyMDY0Q0EyRkY5RTIxQzQ4NDM1NUFDMDJF NDQwNzI1OEQwHhcNMjUwNzIwMjMyMTI5WhcNMjUwNzI3MjMyMTI5WjAYMRYwFAYD VQQDEw02ODdkNzlmOS1kZDc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApOce2oa323rakqMCMspiHUQS0Bmy7qd3sGWrqvSUoFKAVpsqwEulXFJWaP6X /Fho6x+VdEbfiLolIto59G7oyQkaxXmudIFNKRKIAbzXzP04pNZ44iJjhpFLETp5 dY7W4X3SyLOp8FTj3BNcuQiDxWVnPqLCIIhBlSZzil8s9lzM1Ier2wm4QgRrOJnh OzZpOmQ1fxwdX5/XvTCaK7LlsWf6aJrvEHRT0+Tv3OjNVmvX5USAOMxBHwhg/wvE y6/PIlBK2QgWSgzrrJdLNJ56WXHKYft4CklkAB8yhSXdFwSUjyERMfdoXyTLWKto 9+ZXfZzzWEoRkY0D0i3+WhUrNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDL2+ihp os8XL4oa+Z4iyYhX5JLhMB8GA1UdIwQYMBaAFEHi41IGTKL/niHEhDVawC5EByWN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMUQ1RS81NkRENDhERUQ5 NDcxMUVCOUExQTBENzFDNEY5QUUwMi9RZUxqVWdaTW92LWVJY1NFTlZyQUxrUUhK WTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FlTGpVZ1pNb3YtZUljU0VOVnJBTGtRSEpZMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MUQ1RS81NkRENDhERUQ5NDcxMUVCOUExQTBENzFDNEY5QUUwMi9RZUxqVWdaTW92 LWVJY1NFTlZyQUxrUUhKWTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPZAWmy6xVfTlqul58Gd2NSJlWCyyyWyrzQfjS4DrrHSwa2xDng5ye 1mRkop3Kh/PVoOxt5xXAXt4MTOenWbU3ngSEDCa0SDxe2PKHdEhxg8Lj7EtnAlgY 2EZeQdiAw1Y2ZIbxbLQIYFc4CXB+C0kR1zoy4FrSeS0TIaiSUJ87d/q4Ti8yY4sy X6hG53QUs7gcwKlKqy9Xgy8HgftIAdZk4DkYYNHeBpDN75k7lHuHTw3WbBIoHVFI XtZ0dvq1MhFsPe9StXAzm2cnp5GfcWRGhL07OhQwNvoxt2n+VZIkypTe0EELK5qj rdOSA4wYaUzjLi3j5eNb6eR52/2o3rba -----END CERTIFICATE-----Generated at Mon Jul 21 06:50:48 2025 by rpki-client