$ rpki-client -vvf rpki.apnic.net/member_repository/A91423C1/0E0DFA988CCF11EE96F4E65AC4F9AE02/QVO6SZpE5-wQQcYO9_NprGI1eqg.mft File: QVO6SZpE5-wQQcYO9_NprGI1eqg.mft (raw, json) Hash identifier: sFHIHNY0yPROH5qnprPuliLiIkGVDfA50v21fVMYKeA= Subject key identifier: FE:8F:54:7D:DC:B8:DA:89:7D:A2:DA:13:65:8A:D1:3B:CE:E5:C1:1A Authority key identifier: 41:53:BA:49:9A:44:E7:EC:10:41:C6:0E:F7:F3:69:AC:62:35:7A:A8 Certificate issuer: /CN=A91423C1/serialNumber=4153BA499A44E7EC1041C60EF7F369AC62357AA8 Certificate serial: 014D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVO6SZpE5-wQQcYO9_NprGI1eqg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91423C1/0E0DFA988CCF11EE96F4E65AC4F9AE02/QVO6SZpE5-wQQcYO9_NprGI1eqg.mft Manifest number: 0143 Signing time: Sat 19 Jul 2025 04:42:16 +0000 Manifest this update: Sat 19 Jul 2025 04:42:15 +0000 Manifest next update: Sat 26 Jul 2025 04:42:15 +0000 Files and hashes: 1: QVO6SZpE5-wQQcYO9_NprGI1eqg.crl (hash: +PCrY5BzUziiq+lK36q2wqc/5rbKoY10CyW8kw7fSVA=) 2: 3B83B2F4E30611EFA4B67C52C4F9AE02.roa (hash: FYt2RufvdZwSZ5zQDPicr3Fxe0XZIP7npmhW3SH2a8Y=) 3: 5A5E75E2E30611EFAD52D552C4F9AE02.roa (hash: nu5dbwOLlZ13YTkUDnySdOEtRFAsDLmzMv0XGB5W4wE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91423C1/0E0DFA988CCF11EE96F4E65AC4F9AE02/QVO6SZpE5-wQQcYO9_NprGI1eqg.crl rsync://rpki.apnic.net/member_repository/A91423C1/0E0DFA988CCF11EE96F4E65AC4F9AE02/QVO6SZpE5-wQQcYO9_NprGI1eqg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVO6SZpE5-wQQcYO9_NprGI1eqg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 04:42:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 333 (0x14d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91423C1, serialNumber=4153BA499A44E7EC1041C60EF7F369AC62357AA8 Validity Not Before: Jul 19 04:42:15 2025 GMT Not After : Jul 26 04:42:15 2025 GMT Subject: CN=687b2228-5ab5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:eb:71:a0:63:89:65:60:d8:92:62:41:82:85: 12:41:51:16:eb:9c:b9:58:98:5d:18:c5:c3:49:bd: 1c:96:47:30:39:fc:c3:15:62:e0:b9:1f:6d:86:e5: 6e:7d:66:a7:7e:96:8c:b5:7a:ec:94:08:6a:c2:bd: 87:21:46:2c:a4:3e:69:83:f5:2a:f3:3c:7e:30:98: 36:b9:ce:46:f8:84:3c:5c:13:34:8a:ab:90:11:86: 19:7c:d8:71:a4:be:43:cc:38:bd:0f:bc:ea:ba:20: 6d:a3:c0:cf:58:f4:3b:a2:ae:6a:40:ee:6b:34:81: 19:2b:cb:6f:30:35:cb:40:dd:89:52:d6:44:b3:98: 71:2f:5b:93:b9:61:89:ce:6d:48:86:52:b6:98:2a: 1a:ab:1c:9e:6d:8d:13:6a:92:cd:8f:e3:e5:ff:92: b3:d0:a4:7a:31:b5:28:2a:ab:a7:5e:03:7f:2b:de: b9:4a:55:b5:15:eb:ae:fb:2e:ff:45:76:f8:27:ec: 8e:96:33:98:18:02:bb:78:0a:4c:2a:86:fb:4b:f4: e0:38:60:9c:45:f4:19:1b:95:42:7a:e2:df:2b:a4: 3a:73:51:18:65:12:24:6f:d1:34:06:49:15:7a:ce: 97:13:4a:25:ab:13:69:12:86:55:b3:c6:e1:f2:e5: 87:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:8F:54:7D:DC:B8:DA:89:7D:A2:DA:13:65:8A:D1:3B:CE:E5:C1:1A X509v3 Authority Key Identifier: keyid:41:53:BA:49:9A:44:E7:EC:10:41:C6:0E:F7:F3:69:AC:62:35:7A:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91423C1/0E0DFA988CCF11EE96F4E65AC4F9AE02/QVO6SZpE5-wQQcYO9_NprGI1eqg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVO6SZpE5-wQQcYO9_NprGI1eqg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91423C1/0E0DFA988CCF11EE96F4E65AC4F9AE02/QVO6SZpE5-wQQcYO9_NprGI1eqg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:8b:44:a7:54:b2:6d:27:dd:8d:47:fc:2b:15:88:39:58:1e: fa:22:4c:61:fa:66:da:1b:6a:3c:5f:ae:04:8b:3e:47:f8:38: 52:90:d4:39:69:1d:68:f3:28:d5:73:48:95:bd:98:59:ac:7e: da:c7:5a:2e:eb:df:a4:18:d0:81:3d:9e:a4:5d:ae:6e:34:07: 18:bd:41:79:cb:5f:d4:65:df:bb:b4:3e:0d:17:23:e4:0f:9f: fa:4c:2f:db:93:c1:f0:09:6c:a2:cb:43:9a:4b:a8:19:c5:08: 48:a6:ac:b8:c6:1d:42:26:c6:34:ea:fe:d4:98:55:54:a9:a1: 6d:a7:e3:d0:20:a6:0a:57:fe:f4:e3:00:22:68:d8:d3:3b:b3: 37:e5:50:0e:67:b6:1e:1f:8e:36:c0:41:a9:96:ee:aa:1b:a0: a4:eb:3d:1d:64:04:ef:3a:ea:d4:56:db:09:fe:67:95:67:78: db:2d:5c:86:ac:4e:49:ac:9c:d0:a2:bd:68:df:b7:b5:8b:a5: 6b:2e:59:37:f7:bd:ba:67:f7:a2:10:07:b3:c5:9d:78:54:9c: 2a:1f:a3:66:a7:e9:d1:50:2a:d3:5e:db:bb:1b:45:ce:9a:04: 74:17:84:49:cb:9f:68:e2:97:65:20:79:95:91:b2:fc:50:48: 86:91:04:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAU0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDIzQzExMTAvBgNVBAUTKDQxNTNCQTQ5OUE0NEU3RUMxMDQxQzYwRUY3RjM2OUFD NjIzNTdBQTgwHhcNMjUwNzE5MDQ0MjE1WhcNMjUwNzI2MDQ0MjE1WjAYMRYwFAYD VQQDEw02ODdiMjIyOC01YWI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0etxoGOJZWDYkmJBgoUSQVEW65y5WJhdGMXDSb0clkcwOfzDFWLguR9thuVu fWanfpaMtXrslAhqwr2HIUYspD5pg/Uq8zx+MJg2uc5G+IQ8XBM0iquQEYYZfNhx pL5DzDi9D7zquiBto8DPWPQ7oq5qQO5rNIEZK8tvMDXLQN2JUtZEs5hxL1uTuWGJ zm1IhlK2mCoaqxyebY0TapLNj+Pl/5Kz0KR6MbUoKqunXgN/K965SlW1Feuu+y7/ RXb4J+yOljOYGAK7eApMKob7S/TgOGCcRfQZG5VCeuLfK6Q6c1EYZRIkb9E0BkkV es6XE0olqxNpEoZVs8bh8uWHEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP6PVH3c uNqJfaLaE2WK0TvO5cEaMB8GA1UdIwQYMBaAFEFTukmaROfsEEHGDvfzaaxiNXqo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjNDMS8wRTBERkE5ODhD Q0YxMUVFOTZGNEU2NUFDNEY5QUUwMi9RVk82U1pwRTUtd1FRY1lPOV9OcHJHSTFl cWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FWTzZTWnBFNS13UVFjWU85X05wckdJMWVxZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjNDMS8wRTBERkE5ODhDQ0YxMUVFOTZGNEU2NUFDNEY5QUUwMi9RVk82U1pwRTUt d1FRY1lPOV9OcHJHSTFlcWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWi0SnVLJtJ92NR/wrFYg5WB76Ikxh+mbaG2o8X64Eiz5H+DhSkNQ5 aR1o8yjVc0iVvZhZrH7ax1ou69+kGNCBPZ6kXa5uNAcYvUF5y1/UZd+7tD4NFyPk D5/6TC/bk8HwCWyiy0OaS6gZxQhIpqy4xh1CJsY06v7UmFVUqaFtp+PQIKYKV/70 4wAiaNjTO7M35VAOZ7YeH442wEGplu6qG6Ck6z0dZATvOurUVtsJ/meVZ3jbLVyG rE5JrJzQor1o37e1i6VrLlk39726Z/eiEAezxZ14VJwqH6Nmp+nRUCrTXtu7G0XO mgR0F4RJy59o4pdlIHmVkbL8UEiGkQQg -----END CERTIFICATE-----Generated at Sun Jul 20 19:00:17 2025 by rpki-client