$ rpki-client -vvf rpki.apnic.net/member_repository/A91585F0/4BE69D02640011F0B1A1D57EC4F9AE02/qtagvMTbBX4UafHdswGbFlMwzkI.mft File: qtagvMTbBX4UafHdswGbFlMwzkI.mft (raw, json) Hash identifier: ls+RA9AoXk0rRR2ap+O2DldjDICvtgTPkzElu9ZcJwI= Subject key identifier: 73:AF:CA:4B:57:03:07:D7:3E:60:3B:7A:FE:86:7A:9E:D9:8D:0D:F4 Authority key identifier: AA:D6:A0:BC:C4:DB:05:7E:14:69:F1:DD:B3:01:9B:16:53:30:CE:42 Certificate issuer: /CN=A91585F0/serialNumber=AAD6A0BCC4DB057E1469F1DDB3019B165330CE42 Certificate serial: 0B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qtagvMTbBX4UafHdswGbFlMwzkI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91585F0/4BE69D02640011F0B1A1D57EC4F9AE02/qtagvMTbBX4UafHdswGbFlMwzkI.mft Manifest number: 07 Signing time: Sat 19 Jul 2025 07:02:01 +0000 Manifest this update: Sat 19 Jul 2025 07:02:00 +0000 Manifest next update: Sat 26 Jul 2025 07:02:00 +0000 Files and hashes: 1: qtagvMTbBX4UafHdswGbFlMwzkI.crl (hash: 2yuy/uLiSBzuytwmKa9DJabHjJSSH4Lj9inWQgXQoxY=) 2: 4282D1FE646E11F0B9817D36C4F9AE02.roa (hash: wD0psrpZ8N2yh6yYDhmlPC1nQhfBRq0VtHwYcpyvMJM=) 3: A73E47B6646611F092E66D56C4F9AE02.roa (hash: R9MuPEXmcb9QPVduJszFJZ3jI05Vo9fUIK/CYjPl3pQ=) 4: 1096927A646E11F08C8F9173C4F9AE02.roa (hash: Vi+X8eC77LW+19x04LHYzDEZAgS3KYmTg+MI+Li5Sts=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91585F0/4BE69D02640011F0B1A1D57EC4F9AE02/qtagvMTbBX4UafHdswGbFlMwzkI.crl rsync://rpki.apnic.net/member_repository/A91585F0/4BE69D02640011F0B1A1D57EC4F9AE02/qtagvMTbBX4UafHdswGbFlMwzkI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qtagvMTbBX4UafHdswGbFlMwzkI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 07:02:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11 (0xb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91585F0, serialNumber=AAD6A0BCC4DB057E1469F1DDB3019B165330CE42 Validity Not Before: Jul 19 07:02:00 2025 GMT Not After : Jul 26 07:02:00 2025 GMT Subject: CN=687b42e9-dcbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:61:8f:31:1c:a8:c5:ae:19:27:62:77:f6:46: bb:29:c2:89:48:1a:ab:c8:12:aa:bf:e0:21:fb:85: 55:69:0a:75:c7:f0:6b:f6:8c:ed:5d:9e:ad:cf:2b: 9a:08:65:31:1f:e6:6b:26:33:fc:97:c8:92:7b:24: d3:2f:93:fa:37:99:fc:ee:d9:2a:26:14:e2:fb:8c: e4:94:9e:b5:93:6f:82:e9:bd:55:0a:9c:0e:3c:07: 56:61:79:92:c7:ec:36:37:91:ee:75:a6:8d:3b:61: c9:71:f6:50:29:92:84:1a:6b:f1:d2:e1:1b:91:c1: c5:47:d3:a1:5f:fd:dc:69:d6:f7:84:b7:27:78:f5: 93:79:8b:11:65:59:97:96:50:ed:2c:6c:db:55:04: 7b:b8:a8:e0:d9:51:f4:95:1d:f5:c9:a2:68:54:f0: 27:a3:f9:99:2d:42:35:c9:bd:d6:c2:9b:fb:3a:d3: 7d:39:d4:10:d6:f9:c6:ff:7a:47:9b:10:9f:ff:1c: 7c:75:0b:1f:4a:ef:4c:7b:08:0e:b9:d9:0c:ed:c2: ca:db:46:36:8e:3a:9b:ee:89:72:6d:d9:54:f5:5f: 05:3f:b7:6b:0c:0a:33:1d:7a:63:23:e3:fc:d5:5a: a0:64:97:71:ec:52:b8:c7:62:26:a4:13:1e:f8:6c: 95:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:AF:CA:4B:57:03:07:D7:3E:60:3B:7A:FE:86:7A:9E:D9:8D:0D:F4 X509v3 Authority Key Identifier: keyid:AA:D6:A0:BC:C4:DB:05:7E:14:69:F1:DD:B3:01:9B:16:53:30:CE:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91585F0/4BE69D02640011F0B1A1D57EC4F9AE02/qtagvMTbBX4UafHdswGbFlMwzkI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qtagvMTbBX4UafHdswGbFlMwzkI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91585F0/4BE69D02640011F0B1A1D57EC4F9AE02/qtagvMTbBX4UafHdswGbFlMwzkI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:ea:64:b4:97:87:cd:35:78:e9:ae:e1:36:c4:e9:18:e4:dc: d3:33:ec:5d:a8:14:52:00:2f:fc:86:c7:86:20:b7:58:5c:10: ea:47:2a:72:3a:49:15:03:3b:07:24:f0:ab:81:0f:ae:fe:1d: 6f:d6:ed:8b:a4:05:51:04:b4:d8:ba:ff:d9:a9:16:7e:95:f1: 4f:b5:a4:f8:5e:d2:81:4c:f5:22:0d:d1:b3:54:73:7a:3e:bb: 3d:01:90:95:6a:df:9e:f3:b0:98:55:c4:f0:79:f9:a1:28:06: d6:eb:68:e4:0d:82:52:0f:9a:42:32:67:7f:02:c8:e3:6f:42: 4a:17:b3:fc:38:30:d6:16:73:71:ba:7f:37:05:0a:24:3d:be: 9b:ca:9b:91:e2:39:90:fa:cc:12:2d:71:2d:15:a8:56:e8:e1: ea:2b:74:a4:b7:44:01:ba:0b:e2:56:f8:7c:ee:ab:2e:e1:a9: 32:32:a0:04:47:22:28:fc:a3:ae:54:2d:91:cd:de:e1:18:48: e8:17:ff:08:7d:e0:af:e7:e0:43:e6:96:8d:3b:49:f6:c3:75: e4:c3:f8:e8:f7:dd:bb:47:ca:67:6c:c4:0b:5d:52:18:b4:ca: 30:aa:13:48:d9:20:d7:ad:64:3a:d2:14:69:5e:76:85:dd:d0: e9:a1:7e:6e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 ODVGMDExMC8GA1UEBRMoQUFENkEwQkNDNERCMDU3RTE0NjlGMUREQjMwMTlCMTY1 MzMwQ0U0MjAeFw0yNTA3MTkwNzAyMDBaFw0yNTA3MjYwNzAyMDBaMBgxFjAUBgNV BAMTDTY4N2I0MmU5LWRjYmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDHYY8xHKjFrhknYnf2RrspwolIGqvIEqq/4CH7hVVpCnXH8Gv2jO1dnq3PK5oI ZTEf5msmM/yXyJJ7JNMvk/o3mfzu2SomFOL7jOSUnrWTb4LpvVUKnA48B1ZheZLH 7DY3ke51po07Yclx9lApkoQaa/HS4RuRwcVH06Ff/dxp1veEtyd49ZN5ixFlWZeW UO0sbNtVBHu4qODZUfSVHfXJomhU8Cej+ZktQjXJvdbCm/s603051BDW+cb/ekeb EJ//HHx1Cx9K70x7CA652QztwsrbRjaOOpvuiXJt2VT1XwU/t2sMCjMdemMj4/zV WqBkl3HsUrjHYiakEx74bJX5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUc6/KS1cD B9c+YDt6/oZ6ntmNDfQwHwYDVR0jBBgwFoAUqtagvMTbBX4UafHdswGbFlMwzkIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU4NUYwLzRCRTY5RDAyNjQw MDExRjBCMUExRDU3RUM0RjlBRTAyL3F0YWd2TVRiQlg0VWFmSGRzd0diRmxNd3pr SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvcXRhZ3ZNVGJCWDRVYWZIZHN3R2JGbE13emtJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU4 NUYwLzRCRTY5RDAyNjQwMDExRjBCMUExRDU3RUM0RjlBRTAyL3F0YWd2TVRiQlg0 VWFmSGRzd0diRmxNd3prSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGzqZLSXh801eOmu4TbE6Rjk3NMz7F2oFFIAL/yGx4Ygt1hcEOpHKnI6 SRUDOwck8KuBD67+HW/W7YukBVEEtNi6/9mpFn6V8U+1pPhe0oFM9SIN0bNUc3o+ uz0BkJVq357zsJhVxPB5+aEoBtbraOQNglIPmkIyZ38CyONvQkoXs/w4MNYWc3G6 fzcFCiQ9vpvKm5HiOZD6zBItcS0VqFbo4eordKS3RAG6C+JW+Hzuqy7hqTIyoARH Iij8o65ULZHN3uEYSOgX/wh94K/n4EPmlo07SfbDdeTD+Oj33btHymdsxAtdUhi0 yjCqE0jZINetZDrSFGledoXd0Omhfm4= -----END CERTIFICATE-----Generated at Sun Jul 20 16:31:52 2025 by rpki-client