$ rpki-client -vvf rpki.apnic.net/member_repository/A91585F0/56356CD4640011F0B1A1D57EC4F9AE02/qfCsl7nBjDLiFpwBpJhsemwlX_4.mft File: qfCsl7nBjDLiFpwBpJhsemwlX_4.mft (raw, json) Hash identifier: +FsZy/StZ+7rjOrKpj3uTzXnNQHk9miBnDT1s4tzdAs= Subject key identifier: 11:0A:F0:90:2F:1D:06:C1:DD:01:30:12:E3:A2:EA:3C:CF:AF:7E:7F Authority key identifier: A9:F0:AC:97:B9:C1:8C:32:E2:16:9C:01:A4:98:6C:7A:6C:25:5F:FE Certificate issuer: /CN=A91585F0/serialNumber=A9F0AC97B9C18C32E2169C01A4986C7A6C255FFE Certificate serial: 06 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qfCsl7nBjDLiFpwBpJhsemwlX_4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91585F0/56356CD4640011F0B1A1D57EC4F9AE02/qfCsl7nBjDLiFpwBpJhsemwlX_4.mft Manifest number: 05 Signing time: Wed 23 Jul 2025 08:35:58 +0000 Manifest this update: Wed 23 Jul 2025 08:35:57 +0000 Manifest next update: Wed 30 Jul 2025 08:35:57 +0000 Files and hashes: 1: qfCsl7nBjDLiFpwBpJhsemwlX_4.crl (hash: 0GNzcu27hw5ow3BS03iVEIAruYLcm3BDPdL/DgFCSJE=) 2: C9479880646611F0B371D156C4F9AE02.roa (hash: ebNb1cqmZBUz7WL9tCF2PExl+FU65/gDmGjSUW9LYDU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91585F0/56356CD4640011F0B1A1D57EC4F9AE02/qfCsl7nBjDLiFpwBpJhsemwlX_4.crl rsync://rpki.apnic.net/member_repository/A91585F0/56356CD4640011F0B1A1D57EC4F9AE02/qfCsl7nBjDLiFpwBpJhsemwlX_4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qfCsl7nBjDLiFpwBpJhsemwlX_4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Jul 2025 08:35:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6 (0x6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91585F0, serialNumber=A9F0AC97B9C18C32E2169C01A4986C7A6C255FFE Validity Not Before: Jul 23 08:35:57 2025 GMT Not After : Jul 30 08:35:57 2025 GMT Subject: CN=68809eed-466d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:2e:97:a2:f8:ef:78:6f:84:be:08:58:a8:a4: 74:83:11:1a:37:7a:6f:1d:ed:84:26:55:03:c0:bd: 09:6f:7b:9f:8b:df:aa:79:9f:7d:36:fe:ab:2a:bc: ab:89:3a:0a:90:43:ed:da:ab:d1:90:b7:7a:2b:5a: e7:ad:7b:64:e9:44:0b:4c:2a:6d:55:34:de:f5:2e: 38:b6:6a:29:31:4d:0d:11:10:5e:d6:cd:1b:39:e7: 49:4d:30:bc:e3:ce:f0:0d:f5:43:db:8b:70:b4:08: 14:3c:df:7d:15:fa:44:62:21:9e:04:12:9c:d8:0b: ca:c1:ab:93:c6:6f:bd:3d:16:62:d7:d9:1f:b3:38: 4f:f6:e2:74:a0:77:3c:6d:7b:0f:68:03:c1:0a:7f: f7:c2:1a:8e:50:52:b9:b1:67:07:b1:27:1c:48:e3: 56:ff:56:cd:1f:bd:01:1a:2d:68:d7:f5:83:bc:c0: c7:ab:40:1e:2f:b9:70:e7:65:e6:ec:bb:a1:7e:a3: 61:ec:4a:bb:d3:eb:9e:fa:f3:6d:8d:d0:e1:8e:6e: c0:7e:b0:e3:34:05:d0:44:41:cf:e5:25:3b:88:38: 66:9f:40:11:f3:be:91:1c:57:29:ac:2f:9d:ae:67: b1:de:38:89:50:84:bf:8c:63:bb:74:0d:55:ab:c7: 48:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:0A:F0:90:2F:1D:06:C1:DD:01:30:12:E3:A2:EA:3C:CF:AF:7E:7F X509v3 Authority Key Identifier: keyid:A9:F0:AC:97:B9:C1:8C:32:E2:16:9C:01:A4:98:6C:7A:6C:25:5F:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91585F0/56356CD4640011F0B1A1D57EC4F9AE02/qfCsl7nBjDLiFpwBpJhsemwlX_4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qfCsl7nBjDLiFpwBpJhsemwlX_4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91585F0/56356CD4640011F0B1A1D57EC4F9AE02/qfCsl7nBjDLiFpwBpJhsemwlX_4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:8f:82:59:dd:14:d1:3d:78:53:9f:67:56:6c:c0:26:ce:cf: e5:06:f5:09:81:bf:6e:43:d5:ae:80:84:77:f2:f8:cb:99:78: c3:95:7e:1e:34:70:c9:9e:77:85:ec:c8:68:35:6e:36:ff:93: b9:de:cb:9d:78:81:87:28:21:f8:08:a1:e5:d2:26:05:60:9e: f7:53:56:99:36:6f:b8:8c:80:f5:7d:68:70:89:c8:c1:ab:a4: 59:10:a0:2e:4c:89:43:50:fd:f8:77:eb:cf:aa:02:59:e8:34: 94:35:c5:98:ab:b5:43:85:f9:09:49:5b:92:ac:59:36:d4:bc: a8:3e:9e:fb:1d:c8:a0:1f:3f:3a:51:77:68:64:25:98:60:76: e5:a2:5c:4c:ba:85:87:06:41:49:0e:95:ef:6f:b6:4b:e6:8c: 00:21:a0:4a:aa:6f:5c:f1:af:db:cc:f9:7a:a4:26:0a:91:ad: c1:94:58:62:68:1c:b8:39:9c:74:24:5c:26:c9:fe:56:ed:4b: 68:63:b4:be:94:98:92:5a:88:67:a6:76:12:79:03:6e:ea:b4: ff:0d:db:7b:1c:82:4c:23:82:23:58:15:51:c7:c1:9c:5b:69: bc:7f:68:a9:e9:50:8f:8e:86:fd:9b:9b:e3:38:b1:95:e9:07: f8:c6:b0:74 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 ODVGMDExMC8GA1UEBRMoQTlGMEFDOTdCOUMxOEMzMkUyMTY5QzAxQTQ5ODZDN0E2 QzI1NUZGRTAeFw0yNTA3MjMwODM1NTdaFw0yNTA3MzAwODM1NTdaMBgxFjAUBgNV BAMTDTY4ODA5ZWVkLTQ2NmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCnLpei+O94b4S+CFiopHSDERo3em8d7YQmVQPAvQlve5+L36p5n302/qsqvKuJ OgqQQ+3aq9GQt3orWuete2TpRAtMKm1VNN71Lji2aikxTQ0REF7WzRs550lNMLzj zvAN9UPbi3C0CBQ8330V+kRiIZ4EEpzYC8rBq5PGb709FmLX2R+zOE/24nSgdzxt ew9oA8EKf/fCGo5QUrmxZwexJxxI41b/Vs0fvQEaLWjX9YO8wMerQB4vuXDnZebs u6F+o2HsSrvT6576822N0OGObsB+sOM0BdBEQc/lJTuIOGafQBHzvpEcVymsL52u Z7HeOIlQhL+MY7t0DVWrx0i7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUEQrwkC8d BsHdATAS46LqPM+vfn8wHwYDVR0jBBgwFoAUqfCsl7nBjDLiFpwBpJhsemwlX/4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU4NUYwLzU2MzU2Q0Q0NjQw MDExRjBCMUExRDU3RUM0RjlBRTAyL3FmQ3NsN25CakRMaUZwd0JwSmhzZW13bFhf NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcWZDc2w3bkJqRExpRnB3QnBKaHNlbXdsWF80LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU4 NUYwLzU2MzU2Q0Q0NjQwMDExRjBCMUExRDU3RUM0RjlBRTAyL3FmQ3NsN25CakRM aUZwd0JwSmhzZW13bFhfNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAF2PglndFNE9eFOfZ1ZswCbOz+UG9QmBv25D1a6AhHfy+MuZeMOVfh40 cMmed4XsyGg1bjb/k7ney514gYcoIfgIoeXSJgVgnvdTVpk2b7iMgPV9aHCJyMGr pFkQoC5MiUNQ/fh368+qAlnoNJQ1xZirtUOF+QlJW5KsWTbUvKg+nvsdyKAfPzpR d2hkJZhgduWiXEy6hYcGQUkOle9vtkvmjAAhoEqqb1zxr9vM+XqkJgqRrcGUWGJo HLg5nHQkXCbJ/lbtS2hjtL6UmJJaiGemdhJ5A27qtP8N23scgkwjgiNYFVHHwZxb abx/aKnpUI+Ohv2bm+M4sZXpB/jGsHQ= -----END CERTIFICATE-----Generated at Wed Jul 23 18:49:32 2025 by rpki-client