$ rpki-client -vvf rpki.apnic.net/member_repository/A913D6C9/73FBD332481D11ECB6FEDF77C4F9AE02/Qfi2tHutsA9vj-jn4BP_VaGOdCg.mft File: Qfi2tHutsA9vj-jn4BP_VaGOdCg.mft (raw, json) Hash identifier: 6nLirkHFIfOSq5/34nFSVcLYycCeiAXItLbTzmIVfWY= Subject key identifier: E6:E6:B4:1E:38:9A:C9:DD:52:BB:29:E3:FE:00:3D:C0:DD:96:5E:FE Authority key identifier: 41:F8:B6:B4:7B:AD:B0:0F:6F:8F:E8:E7:E0:13:FF:55:A1:8E:74:28 Certificate issuer: /CN=A913D6C9/serialNumber=41F8B6B47BADB00F6F8FE8E7E013FF55A18E7428 Certificate serial: 04A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qfi2tHutsA9vj-jn4BP_VaGOdCg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913D6C9/73FBD332481D11ECB6FEDF77C4F9AE02/Qfi2tHutsA9vj-jn4BP_VaGOdCg.mft Manifest number: 0496 Signing time: Mon 21 Jul 2025 00:15:12 +0000 Manifest this update: Mon 21 Jul 2025 00:15:11 +0000 Manifest next update: Mon 28 Jul 2025 00:15:11 +0000 Files and hashes: 1: Qfi2tHutsA9vj-jn4BP_VaGOdCg.crl (hash: NTOZ0U1qyq1oh6VEi1j2e2dPPt0wiGU1GbLiWSiiDFk=) 2: 54AC9B64C3B411EEBF90C180C4F9AE02.roa (hash: BPstFCUC7r4sqZcas3tBZS1NiGfkeUG5bomyvOkC2W0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913D6C9/73FBD332481D11ECB6FEDF77C4F9AE02/Qfi2tHutsA9vj-jn4BP_VaGOdCg.crl rsync://rpki.apnic.net/member_repository/A913D6C9/73FBD332481D11ECB6FEDF77C4F9AE02/Qfi2tHutsA9vj-jn4BP_VaGOdCg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qfi2tHutsA9vj-jn4BP_VaGOdCg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 00:15:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1184 (0x4a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913D6C9, serialNumber=41F8B6B47BADB00F6F8FE8E7E013FF55A18E7428 Validity Not Before: Jul 21 00:15:11 2025 GMT Not After : Jul 28 00:15:11 2025 GMT Subject: CN=687d8690-8c61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:43:3c:e8:83:20:42:99:e7:05:d2:8c:ca:8a: e3:20:fe:1b:bb:b1:41:01:48:a3:41:99:e9:13:4d: c3:78:6e:b5:d5:66:65:fc:e2:1a:bb:9a:a8:df:1c: 1c:ca:0b:f2:1f:c1:13:0d:5f:0e:75:dc:d1:19:41: 3f:8c:98:92:b3:41:2e:0c:3c:3f:92:d9:5f:56:cf: 93:fe:26:81:be:f1:b4:da:61:bc:db:2e:62:8a:60: 9d:cf:5d:9a:e3:85:06:d1:ca:00:c1:44:d9:5d:69: 47:19:76:e3:35:fd:f0:6a:69:af:b0:75:9f:9e:d5: 31:d3:0e:9a:bd:88:8c:71:c5:00:ce:0d:10:66:5b: d8:a4:5c:12:73:9b:27:36:cc:f9:3b:b9:55:16:67: 57:be:e0:8a:07:29:dd:16:b2:f2:ea:43:84:cd:f3: 7b:7c:0e:6f:a3:02:8f:b6:9d:f0:6e:5e:61:cb:2d: 13:61:c7:64:e1:f8:cc:20:4d:a0:4b:ee:40:1a:da: 3d:ea:71:53:36:5e:6b:c6:8b:a6:5e:e0:14:e1:60: eb:38:a6:49:1f:89:1e:05:62:82:cb:b2:03:06:da: a9:26:5d:9f:d2:fe:bc:b0:a9:f6:d4:df:96:af:97: e7:60:c5:84:d6:ed:e5:2f:61:7a:12:69:7b:df:f6: 1d:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:E6:B4:1E:38:9A:C9:DD:52:BB:29:E3:FE:00:3D:C0:DD:96:5E:FE X509v3 Authority Key Identifier: keyid:41:F8:B6:B4:7B:AD:B0:0F:6F:8F:E8:E7:E0:13:FF:55:A1:8E:74:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913D6C9/73FBD332481D11ECB6FEDF77C4F9AE02/Qfi2tHutsA9vj-jn4BP_VaGOdCg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qfi2tHutsA9vj-jn4BP_VaGOdCg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D6C9/73FBD332481D11ECB6FEDF77C4F9AE02/Qfi2tHutsA9vj-jn4BP_VaGOdCg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:94:e5:99:48:6d:02:76:48:d8:c1:a4:9d:a6:0b:28:36:c5: 6a:24:c8:99:a8:de:93:ad:8b:75:8f:ff:e0:fe:56:34:af:0e: 21:f7:ca:bc:be:f4:0d:dc:c2:47:6c:f5:56:cf:9f:17:f9:55: 4c:ff:48:74:43:e2:74:3e:41:e4:c9:35:55:4e:c4:a8:4c:9d: ff:05:14:b4:1d:ce:37:42:03:1b:87:c2:9a:00:a0:94:96:a0: 0c:d8:34:06:46:52:c4:5c:4c:a8:85:4e:ac:4f:b9:34:fc:b3: c9:3c:e3:cb:ae:35:55:e7:2f:3a:79:46:89:49:6a:9b:c5:f9: 0e:36:a5:70:52:e4:de:ce:e7:ac:73:dc:ac:4a:79:cc:17:d0: cf:a7:12:a1:c0:2c:8e:49:f0:90:0c:82:ad:71:a8:8a:dd:f7: f6:aa:02:57:43:b1:c9:82:6e:4a:ab:a1:60:ed:c4:2e:0a:31: ea:a7:bf:29:11:af:dd:d5:a8:ca:86:1c:8c:83:f3:b0:91:90: 5c:2e:20:60:63:46:0c:63:ce:f0:fc:d3:76:d6:fd:a7:0e:b8: ed:af:e8:b8:70:51:24:2c:cd:1c:7a:58:30:60:14:62:58:f8: 23:1c:30:ca:84:c5:7b:79:81:43:58:60:7c:d8:74:ba:7d:12: 5e:ab:15:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBKAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0Q2QzkxMTAvBgNVBAUTKDQxRjhCNkI0N0JBREIwMEY2RjhGRThFN0UwMTNGRjU1 QTE4RTc0MjgwHhcNMjUwNzIxMDAxNTExWhcNMjUwNzI4MDAxNTExWjAYMRYwFAYD VQQDEw02ODdkODY5MC04YzYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwEM86IMgQpnnBdKMyorjIP4bu7FBAUijQZnpE03DeG611WZl/OIau5qo3xwc ygvyH8ETDV8OddzRGUE/jJiSs0EuDDw/ktlfVs+T/iaBvvG02mG82y5iimCdz12a 44UG0coAwUTZXWlHGXbjNf3wammvsHWfntUx0w6avYiMccUAzg0QZlvYpFwSc5sn Nsz5O7lVFmdXvuCKByndFrLy6kOEzfN7fA5vowKPtp3wbl5hyy0TYcdk4fjMIE2g S+5AGto96nFTNl5rxoumXuAU4WDrOKZJH4keBWKCy7IDBtqpJl2f0v68sKn21N+W r5fnYMWE1u3lL2F6Eml73/Yd5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFObmtB44 msndUrsp4/4APcDdll7+MB8GA1UdIwQYMBaAFEH4trR7rbAPb4/o5+AT/1WhjnQo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRDZDOS83M0ZCRDMzMjQ4 MUQxMUVDQjZGRURGNzdDNEY5QUUwMi9RZmkydEh1dHNBOXZqLWpuNEJQX1ZhR09k Q2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FmaTJ0SHV0c0E5dmotam40QlBfVmFHT2RDZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RDZDOS83M0ZCRDMzMjQ4MUQxMUVDQjZGRURGNzdDNEY5QUUwMi9RZmkydEh1dHNB OXZqLWpuNEJQX1ZhR09kQ2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAklOWZSG0CdkjYwaSdpgsoNsVqJMiZqN6TrYt1j//g/lY0rw4h98q8 vvQN3MJHbPVWz58X+VVM/0h0Q+J0PkHkyTVVTsSoTJ3/BRS0Hc43QgMbh8KaAKCU lqAM2DQGRlLEXEyohU6sT7k0/LPJPOPLrjVV5y86eUaJSWqbxfkONqVwUuTezues c9ysSnnMF9DPpxKhwCyOSfCQDIKtcaiK3ff2qgJXQ7HJgm5Kq6Fg7cQuCjHqp78p Ea/d1ajKhhyMg/OwkZBcLiBgY0YMY87w/NN21v2nDrjtr+i4cFEkLM0celgwYBRi WPgjHDDKhMV7eYFDWGB82HS6fRJeqxX3 -----END CERTIFICATE-----Generated at Mon Jul 21 06:58:44 2025 by rpki-client