$ rpki-client -vvf rpki.apnic.net/member_repository/A91443DC/97DF7A12306211EF978B4764C4F9AE02/_qutkjWu8XAjzc-xYZAm887bLH8.mft File: _qutkjWu8XAjzc-xYZAm887bLH8.mft (raw, json) Hash identifier: BlzZQG3TLVL+CUNROEyFAYBCu36P171Rg7YXZQnQQu0= Subject key identifier: F2:67:D6:B8:92:01:7B:B7:F6:7F:05:A4:83:C8:95:DB:F7:1B:1B:D4 Authority key identifier: FE:AB:AD:92:35:AE:F1:70:23:CD:CF:B1:61:90:26:F3:CE:DB:2C:7F Certificate issuer: /CN=A91443DC/serialNumber=FEABAD9235AEF17023CDCFB1619026F3CEDB2C7F Certificate serial: D3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_qutkjWu8XAjzc-xYZAm887bLH8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91443DC/97DF7A12306211EF978B4764C4F9AE02/_qutkjWu8XAjzc-xYZAm887bLH8.mft Manifest number: CF Signing time: Wed 23 Jul 2025 05:59:38 +0000 Manifest this update: Wed 23 Jul 2025 05:59:38 +0000 Manifest next update: Wed 30 Jul 2025 05:59:38 +0000 Files and hashes: 1: _qutkjWu8XAjzc-xYZAm887bLH8.crl (hash: IiJfiqgbqVxPfRRSsZCxL+GFdl7ihGY/DKtBFMSb54o=) 2: D4F9C46CDCA511EF9BCCFC59C4F9AE02.roa (hash: OuazFSoXGYM6zJItNa4jp1IfJllzFolsgf+lOTd60NE=) 3: 557F3136DCA511EF98B72959C4F9AE02.roa (hash: YFXHXJDviBoPayGDb4OGE7GmrzEy24l7DcHuFpblUcg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91443DC/97DF7A12306211EF978B4764C4F9AE02/_qutkjWu8XAjzc-xYZAm887bLH8.crl rsync://rpki.apnic.net/member_repository/A91443DC/97DF7A12306211EF978B4764C4F9AE02/_qutkjWu8XAjzc-xYZAm887bLH8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_qutkjWu8XAjzc-xYZAm887bLH8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Jul 2025 05:32:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 211 (0xd3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91443DC, serialNumber=FEABAD9235AEF17023CDCFB1619026F3CEDB2C7F Validity Not Before: Jul 23 05:59:38 2025 GMT Not After : Jul 30 05:59:38 2025 GMT Subject: CN=68807a4a-f1e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:29:d7:1d:a8:90:d2:3e:c9:b9:d8:80:07:40: a8:27:03:f6:b5:27:47:13:d9:07:d7:c8:a5:77:49: bd:b1:d5:be:53:83:c3:18:64:a3:89:5e:1c:34:b9: 76:71:9b:03:53:60:85:ea:f0:58:fb:45:4a:56:81: c9:47:43:e7:3c:0d:dc:4f:82:85:5d:c4:23:52:57: 31:f9:63:9c:05:97:25:99:03:3d:38:46:cd:4d:12: c9:0e:dc:c2:dd:95:71:97:91:22:d5:b7:5b:21:8b: 1c:26:a1:f5:da:e3:d9:36:52:d3:24:d2:ba:e6:9a: fd:6d:b8:e9:83:d7:83:6e:14:ab:f8:9b:96:4b:b9: 78:1b:30:9a:5b:f8:19:c1:7e:77:40:ad:aa:60:59: 63:c5:9a:29:d5:47:2b:8e:e7:79:1a:80:b7:3e:75: 98:ff:e4:8b:ba:08:dd:2c:4a:18:9a:12:31:eb:22: e7:c2:64:3c:f8:18:71:a5:3d:ca:37:a8:af:74:65: 9c:10:f9:92:b3:a7:86:37:25:27:b3:b2:ae:35:df: 85:5b:aa:37:fe:30:38:8f:04:fc:7b:34:75:76:47: a3:df:f5:83:fd:cb:da:27:d8:3f:0e:56:86:6d:d4: 36:70:07:7c:b8:86:7f:75:a7:69:06:b2:db:fd:7a: 6b:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:67:D6:B8:92:01:7B:B7:F6:7F:05:A4:83:C8:95:DB:F7:1B:1B:D4 X509v3 Authority Key Identifier: keyid:FE:AB:AD:92:35:AE:F1:70:23:CD:CF:B1:61:90:26:F3:CE:DB:2C:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91443DC/97DF7A12306211EF978B4764C4F9AE02/_qutkjWu8XAjzc-xYZAm887bLH8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_qutkjWu8XAjzc-xYZAm887bLH8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91443DC/97DF7A12306211EF978B4764C4F9AE02/_qutkjWu8XAjzc-xYZAm887bLH8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:39:b6:4e:c1:7d:b3:0f:e8:80:04:f9:38:a3:e0:d7:94:9f: 58:ba:22:fe:b7:f9:a3:8c:c4:bd:30:e6:55:25:48:54:e6:2c: 35:d7:ee:5b:ef:f2:66:bd:70:d0:0a:11:41:67:e4:45:76:a3: dc:65:bd:93:3a:3b:f8:b6:a1:ff:40:e9:12:76:ca:b1:b4:e4: c0:7f:68:4c:a5:a4:6d:c4:f4:06:4b:67:ba:21:57:1d:f9:8c: a8:cb:e9:be:7d:73:d6:4b:72:98:a2:a1:39:4f:41:29:85:2a: 50:16:8f:fb:34:a3:97:56:51:0b:53:dd:53:9b:8a:42:e5:ae: 1c:a3:c5:fc:ab:21:7c:84:05:72:8b:46:3e:2d:3b:08:5b:9f: 51:6e:20:ef:76:14:35:06:2a:b3:57:fd:67:4e:b0:36:24:04: d5:74:1a:8a:aa:4e:a1:c7:49:bf:09:75:40:8f:d1:71:0d:29: 14:4b:d4:46:e6:70:5c:92:90:92:74:68:1e:38:c5:d7:73:d8: 5b:ed:77:bb:2a:f3:9a:8f:8c:b1:7a:38:86:79:1c:e7:c8:9c: f4:0c:50:ee:ca:28:d4:c4:09:a2:20:64:ee:7c:02:40:77:cd: f1:27:0e:d3:90:1d:cf:6f:1e:ca:3c:3e:0c:fe:f3:2b:71:4a: 6c:17:a4:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQzREMxMTAvBgNVBAUTKEZFQUJBRDkyMzVBRUYxNzAyM0NEQ0ZCMTYxOTAyNkYz Q0VEQjJDN0YwHhcNMjUwNzIzMDU1OTM4WhcNMjUwNzMwMDU1OTM4WjAYMRYwFAYD VQQDEw02ODgwN2E0YS1mMWU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvinXHaiQ0j7JudiAB0CoJwP2tSdHE9kH18ild0m9sdW+U4PDGGSjiV4cNLl2 cZsDU2CF6vBY+0VKVoHJR0PnPA3cT4KFXcQjUlcx+WOcBZclmQM9OEbNTRLJDtzC 3ZVxl5Ei1bdbIYscJqH12uPZNlLTJNK65pr9bbjpg9eDbhSr+JuWS7l4GzCaW/gZ wX53QK2qYFljxZop1Ucrjud5GoC3PnWY/+SLugjdLEoYmhIx6yLnwmQ8+BhxpT3K N6ivdGWcEPmSs6eGNyUns7KuNd+FW6o3/jA4jwT8ezR1dkej3/WD/cvaJ9g/DlaG bdQ2cAd8uIZ/dadpBrLb/XpruwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPJn1riS AXu39n8FpIPIldv3GxvUMB8GA1UdIwQYMBaAFP6rrZI1rvFwI83PsWGQJvPO2yx/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDNEQy85N0RGN0ExMjMw NjIxMUVGOTc4QjQ3NjRDNEY5QUUwMi9fcXV0a2pXdThYQWp6Yy14WVpBbTg4N2JM SDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL19xdXRrald1OFhBanpjLXhZWkFtODg3YkxIOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDNEQy85N0RGN0ExMjMwNjIxMUVGOTc4QjQ3NjRDNEY5QUUwMi9fcXV0a2pXdThY QWp6Yy14WVpBbTg4N2JMSDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbObZOwX2zD+iABPk4o+DXlJ9YuiL+t/mjjMS9MOZVJUhU5iw11+5b 7/JmvXDQChFBZ+RFdqPcZb2TOjv4tqH/QOkSdsqxtOTAf2hMpaRtxPQGS2e6IVcd +Yyoy+m+fXPWS3KYoqE5T0EphSpQFo/7NKOXVlELU91Tm4pC5a4co8X8qyF8hAVy i0Y+LTsIW59RbiDvdhQ1BiqzV/1nTrA2JATVdBqKqk6hx0m/CXVAj9FxDSkUS9RG 5nBckpCSdGgeOMXXc9hb7Xe7KvOaj4yxejiGeRznyJz0DFDuyijUxAmiIGTufAJA d83xJw7TkB3Pbx7KPD4M/vMrcUpsF6RY -----END CERTIFICATE-----Generated at Wed Jul 23 12:16:51 2025 by rpki-client