$ rpki-client -vvf rpki.apnic.net/member_repository/A91536E1/989F3A0A0EA611EBB2672786C4F9AE02/qWaisn_hSTe-NtJ9tfTXaICEfdc.mft File: qWaisn_hSTe-NtJ9tfTXaICEfdc.mft (raw, json) Hash identifier: nYg0iEIDDm6kMBxicvn1+f4kurVmwwI83pJAT419E2I= Subject key identifier: D1:63:E5:7D:38:8A:0D:FC:C8:8F:3D:6E:19:F0:6E:16:14:84:F7:52 Authority key identifier: A9:66:A2:B2:7F:E1:49:37:BE:36:D2:7D:B5:F4:D7:68:80:84:7D:D7 Certificate issuer: /CN=A91536E1/serialNumber=A966A2B27FE14937BE36D27DB5F4D76880847DD7 Certificate serial: 07A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qWaisn_hSTe-NtJ9tfTXaICEfdc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91536E1/989F3A0A0EA611EBB2672786C4F9AE02/qWaisn_hSTe-NtJ9tfTXaICEfdc.mft Manifest number: 07A0 Signing time: Sun 20 Jul 2025 21:27:22 +0000 Manifest this update: Sun 20 Jul 2025 21:27:22 +0000 Manifest next update: Sun 27 Jul 2025 21:27:22 +0000 Files and hashes: 1: qWaisn_hSTe-NtJ9tfTXaICEfdc.crl (hash: 7e1zRE4Lpw+TbmoFW/JEBxpmMSCXACZ7ayUFX0XoJgs=) 2: 41C97D600EA811EB8E9A770CC4F9AE02.roa (hash: o8ES5sVXjZZWJ8HjjyGv8mKYMdzoHknglpOG5+B569s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91536E1/989F3A0A0EA611EBB2672786C4F9AE02/qWaisn_hSTe-NtJ9tfTXaICEfdc.crl rsync://rpki.apnic.net/member_repository/A91536E1/989F3A0A0EA611EBB2672786C4F9AE02/qWaisn_hSTe-NtJ9tfTXaICEfdc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qWaisn_hSTe-NtJ9tfTXaICEfdc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 21:27:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1958 (0x7a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91536E1, serialNumber=A966A2B27FE14937BE36D27DB5F4D76880847DD7 Validity Not Before: Jul 20 21:27:22 2025 GMT Not After : Jul 27 21:27:22 2025 GMT Subject: CN=687d5f3a-6217 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:5c:83:96:b6:e2:b3:38:13:57:9a:c3:d0:5f: 06:d9:02:c0:d5:ab:b6:8d:30:e2:25:f2:90:7d:5e: e7:99:31:af:bd:95:df:c0:36:f5:84:f6:97:76:9a: 6b:73:b2:be:02:e3:4b:23:ef:5b:92:41:f4:a4:14: d1:3a:96:a5:7a:b3:0b:76:b2:64:f2:c3:9d:d9:4a: 69:8d:5e:67:c8:eb:ef:1d:e7:25:f6:31:9e:c6:bb: cf:22:e1:91:28:13:52:e6:c3:95:7b:bc:8f:7f:89: f7:11:bc:24:06:1d:36:aa:17:e9:50:77:8e:d1:bd: 9d:58:69:1a:bd:90:73:1f:5f:20:21:ff:b1:e3:e6: ab:92:42:a7:a4:31:27:fb:11:ac:b2:3b:07:ae:ff: 70:7b:f3:d6:2d:ed:4e:13:b8:28:53:8a:ee:9b:56: d1:e4:40:ac:35:d8:47:81:cf:fb:51:5e:51:39:c2: d5:a7:3a:fe:74:c5:e7:74:9d:09:93:68:52:c0:7c: 5f:8a:67:e1:81:77:2c:30:0d:d1:2b:1a:e2:58:62: 11:c7:30:1a:7f:83:b4:08:71:d0:8d:57:8b:07:7b: b4:ea:5f:20:a9:a6:23:de:61:51:ed:42:d2:f4:14: 65:b4:f4:fe:60:a3:76:d9:08:d8:64:03:83:ed:5a: c8:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:63:E5:7D:38:8A:0D:FC:C8:8F:3D:6E:19:F0:6E:16:14:84:F7:52 X509v3 Authority Key Identifier: keyid:A9:66:A2:B2:7F:E1:49:37:BE:36:D2:7D:B5:F4:D7:68:80:84:7D:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91536E1/989F3A0A0EA611EBB2672786C4F9AE02/qWaisn_hSTe-NtJ9tfTXaICEfdc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qWaisn_hSTe-NtJ9tfTXaICEfdc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91536E1/989F3A0A0EA611EBB2672786C4F9AE02/qWaisn_hSTe-NtJ9tfTXaICEfdc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d9:b2:b0:bc:6a:8c:05:c9:fb:42:21:cf:a2:74:30:c2:77:f2: 7a:b6:c2:7a:2c:11:d8:42:3a:74:b7:5e:1a:3d:0c:bd:cb:2a: 36:a0:74:e5:c8:5a:5b:68:b9:fd:c1:f0:0e:57:94:a8:88:95: e5:fb:fa:44:4b:9b:e3:94:79:85:03:8c:eb:79:e4:9c:62:54: 13:a3:58:7e:90:7f:11:72:f0:e3:72:dc:a8:1d:59:16:2a:76: 01:ce:2b:b4:e5:96:53:3c:04:60:42:d3:79:ed:36:88:d3:cd: ba:8d:92:0d:e6:43:c1:85:bf:a7:fa:8e:d9:d0:ba:da:9e:36: c6:5c:c7:4c:74:a6:bb:18:4c:ee:1d:06:7d:2b:f6:df:39:a5: ff:17:d3:96:ab:fb:5e:e8:5c:42:93:d6:17:15:90:05:5c:db: 2f:5e:c4:9e:b8:7b:d6:6d:2c:55:a3:82:21:51:0e:4c:bb:bb: d8:70:60:33:c6:56:89:89:c2:07:04:9e:71:c2:c3:a4:df:3a: ac:93:a6:b6:d4:8d:35:dd:04:d9:b3:6e:7f:97:20:f2:5f:68: 65:c3:66:30:93:a4:da:77:eb:73:5d:d9:2c:0b:f3:7d:0b:aa: df:ec:98:af:9e:1e:ad:d7:2a:06:64:5d:62:1f:17:93:4b:37: a5:8c:19:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB6YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTM2RTExMTAvBgNVBAUTKEE5NjZBMkIyN0ZFMTQ5MzdCRTM2RDI3REI1RjRENzY4 ODA4NDdERDcwHhcNMjUwNzIwMjEyNzIyWhcNMjUwNzI3MjEyNzIyWjAYMRYwFAYD VQQDEw02ODdkNWYzYS02MjE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA21yDlrbiszgTV5rD0F8G2QLA1au2jTDiJfKQfV7nmTGvvZXfwDb1hPaXdppr c7K+AuNLI+9bkkH0pBTROpalerMLdrJk8sOd2UppjV5nyOvvHecl9jGexrvPIuGR KBNS5sOVe7yPf4n3EbwkBh02qhfpUHeO0b2dWGkavZBzH18gIf+x4+arkkKnpDEn +xGssjsHrv9we/PWLe1OE7goU4rum1bR5ECsNdhHgc/7UV5ROcLVpzr+dMXndJ0J k2hSwHxfimfhgXcsMA3RKxriWGIRxzAaf4O0CHHQjVeLB3u06l8gqaYj3mFR7ULS 9BRltPT+YKN22QjYZAOD7VrIwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNFj5X04 ig38yI89bhnwbhYUhPdSMB8GA1UdIwQYMBaAFKlmorJ/4Uk3vjbSfbX012iAhH3X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzZFMS85ODlGM0EwQTBF QTYxMUVCQjI2NzI3ODZDNEY5QUUwMi9xV2Fpc25faFNUZS1OdEo5dGZUWGFJQ0Vm ZGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FXYWlzbl9oU1RlLU50Sjl0ZlRYYUlDRWZkYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MzZFMS85ODlGM0EwQTBFQTYxMUVCQjI2NzI3ODZDNEY5QUUwMi9xV2Fpc25faFNU ZS1OdEo5dGZUWGFJQ0VmZGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDZsrC8aowFyftCIc+idDDCd/J6tsJ6LBHYQjp0t14aPQy9yyo2oHTl yFpbaLn9wfAOV5SoiJXl+/pES5vjlHmFA4zreeScYlQTo1h+kH8RcvDjctyoHVkW KnYBziu05ZZTPARgQtN57TaI0826jZIN5kPBhb+n+o7Z0LranjbGXMdMdKa7GEzu HQZ9K/bfOaX/F9OWq/te6FxCk9YXFZAFXNsvXsSeuHvWbSxVo4IhUQ5Mu7vYcGAz xlaJicIHBJ5xwsOk3zqsk6a21I013QTZs25/lyDyX2hlw2Ywk6Tad+tzXdksC/N9 C6rf7Jivnh6t1yoGZF1iHxeTSzeljBmo -----END CERTIFICATE-----Generated at Mon Jul 21 12:51:13 2025 by rpki-client