$ rpki-client -vvf rpki.apnic.net/member_repository/A915912F/0A0679080A5111EE8D75B66BC4F9AE02/qYtNdTqE39Sdp-IwfjGSqMT_mJU.mft File: qYtNdTqE39Sdp-IwfjGSqMT_mJU.mft (raw, json) Hash identifier: FRcxGTekujl0TWoyXCFHVOF4imEvQ7Bsh0/2H57NRnE= Subject key identifier: 2D:2C:6B:DF:07:0C:A9:1A:CF:F3:D4:3D:0A:E3:37:25:62:66:E2:85 Authority key identifier: A9:8B:4D:75:3A:84:DF:D4:9D:A7:E2:30:7E:31:92:A8:C4:FF:98:95 Certificate issuer: /CN=A915912F/serialNumber=A98B4D753A84DFD49DA7E2307E3192A8C4FF9895 Certificate serial: 01C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qYtNdTqE39Sdp-IwfjGSqMT_mJU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915912F/0A0679080A5111EE8D75B66BC4F9AE02/qYtNdTqE39Sdp-IwfjGSqMT_mJU.mft Manifest number: 01A7 Signing time: Mon 21 Jul 2025 03:36:14 +0000 Manifest this update: Mon 21 Jul 2025 03:36:13 +0000 Manifest next update: Mon 28 Jul 2025 03:36:13 +0000 Files and hashes: 1: qYtNdTqE39Sdp-IwfjGSqMT_mJU.crl (hash: xnwKSC734+jSMFoGiJg5EInjwzjz1VL5gzCwLAIYJDQ=) 2: 92A66D260C6D11EFBF1F4756C4F9AE02.roa (hash: v6bUH5gUXHcbmbYeCisrmgZnqrIm3B73ZbS6V+sJrrI=) 3: C9DBA6A666A211EE8C285556C4F9AE02.roa (hash: r7MoQr3dXrf0T5yV0rt7SwJ3dYQT9NnjnIFvWPF1B7o=) 4: 8EAA5C7E4FBF11EFBA8E5F12C4F9AE02.roa (hash: 3+A/zZ2nI6uBIIm2F4XRnIuGc+RZ2gQ3mx4iS5OMfsc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915912F/0A0679080A5111EE8D75B66BC4F9AE02/qYtNdTqE39Sdp-IwfjGSqMT_mJU.crl rsync://rpki.apnic.net/member_repository/A915912F/0A0679080A5111EE8D75B66BC4F9AE02/qYtNdTqE39Sdp-IwfjGSqMT_mJU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qYtNdTqE39Sdp-IwfjGSqMT_mJU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 03:36:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 448 (0x1c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915912F, serialNumber=A98B4D753A84DFD49DA7E2307E3192A8C4FF9895 Validity Not Before: Jul 21 03:36:13 2025 GMT Not After : Jul 28 03:36:13 2025 GMT Subject: CN=687db5ae-ece4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:44:2d:54:a4:6b:2b:1e:1f:66:4b:0e:c2:36: 48:eb:4a:90:92:41:67:28:50:e2:8b:09:57:09:4e: 33:f7:50:f7:a3:5a:81:b7:c4:d3:5e:5a:cf:08:e4: 9b:f2:a4:60:34:66:b3:38:b6:95:b4:c1:cc:04:8b: f1:19:64:5e:b2:fb:8e:02:18:cb:09:ab:40:9d:3d: 77:0b:a9:b5:66:f6:5b:d7:b4:fb:c6:be:e4:29:75: 12:0a:9b:53:52:76:e1:b3:5b:a8:fb:5a:c9:3b:6a: 8f:a5:72:70:0c:ff:f9:99:2c:79:40:23:8a:8f:a0: d6:f9:9c:7f:29:0e:e1:be:d2:69:34:be:ff:8a:f2: e4:30:b5:89:77:f3:54:4a:80:3b:76:2c:6a:a5:62: 7c:7c:eb:1e:84:46:5b:30:b3:9e:6d:66:34:0f:83: 5c:7c:9c:7e:b6:7d:11:e5:48:fc:0a:a5:7d:2d:65: 05:96:73:be:99:0c:00:c1:b4:06:d6:84:24:d4:86: e2:e2:be:95:e7:2f:a2:44:80:f0:35:7a:f5:47:e4: d5:7f:33:a8:4e:53:27:94:14:a9:0f:da:f5:1c:9d: 40:a6:9f:e8:87:a3:53:cb:e6:d0:cb:91:17:8e:52: 66:c5:73:60:b2:cc:92:72:19:d6:74:7e:e2:e0:ea: 97:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:2C:6B:DF:07:0C:A9:1A:CF:F3:D4:3D:0A:E3:37:25:62:66:E2:85 X509v3 Authority Key Identifier: keyid:A9:8B:4D:75:3A:84:DF:D4:9D:A7:E2:30:7E:31:92:A8:C4:FF:98:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915912F/0A0679080A5111EE8D75B66BC4F9AE02/qYtNdTqE39Sdp-IwfjGSqMT_mJU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qYtNdTqE39Sdp-IwfjGSqMT_mJU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915912F/0A0679080A5111EE8D75B66BC4F9AE02/qYtNdTqE39Sdp-IwfjGSqMT_mJU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:c0:8c:a2:b5:5d:a2:97:d9:f3:81:81:66:35:83:08:2c:3a: 22:4b:0b:d1:4f:27:99:45:ab:35:68:3a:a8:b3:47:0e:93:08: 2c:d2:a4:70:eb:14:d9:ce:f8:5e:09:3c:f6:17:35:db:90:54: 89:00:e3:ce:77:5a:e2:a0:2b:b6:24:dd:fc:87:e0:ad:9e:3a: 46:52:59:35:b9:7a:40:34:de:b4:32:46:fc:2f:58:e9:68:ce: 5b:ad:69:6d:08:b1:66:01:ca:98:58:43:af:c4:04:75:54:44: 31:14:8d:a0:72:cd:14:f0:24:c3:a8:74:da:cb:5f:1e:cf:fa: 41:26:68:9d:bc:3c:b9:48:f3:99:f1:8e:5b:81:73:38:a8:61: 0c:71:be:5e:24:b6:a1:43:ba:ab:ab:9f:64:4d:d6:4d:53:7f: c2:21:e7:23:fe:ee:00:68:fc:0e:09:60:d8:a3:71:68:40:37: e4:f9:bc:9f:e6:64:f9:76:14:e8:51:b8:4d:be:85:a9:48:f4: 2b:fc:27:f8:2b:55:c1:b6:ae:7f:da:27:e3:7e:30:8b:f2:29: 02:ff:fc:e4:7b:f8:82:b3:9c:6d:3b:42:72:d9:25:bc:54:f8: 8a:bd:dc:a9:fe:b9:a5:8d:21:4a:2e:7d:21:79:66:1f:7b:a5: d7:8e:ec:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTkxMkYxMTAvBgNVBAUTKEE5OEI0RDc1M0E4NERGRDQ5REE3RTIzMDdFMzE5MkE4 QzRGRjk4OTUwHhcNMjUwNzIxMDMzNjEzWhcNMjUwNzI4MDMzNjEzWjAYMRYwFAYD VQQDEw02ODdkYjVhZS1lY2U0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsUQtVKRrKx4fZksOwjZI60qQkkFnKFDiiwlXCU4z91D3o1qBt8TTXlrPCOSb 8qRgNGazOLaVtMHMBIvxGWResvuOAhjLCatAnT13C6m1ZvZb17T7xr7kKXUSCptT Unbhs1uo+1rJO2qPpXJwDP/5mSx5QCOKj6DW+Zx/KQ7hvtJpNL7/ivLkMLWJd/NU SoA7dixqpWJ8fOsehEZbMLOebWY0D4NcfJx+tn0R5Uj8CqV9LWUFlnO+mQwAwbQG 1oQk1Ibi4r6V5y+iRIDwNXr1R+TVfzOoTlMnlBSpD9r1HJ1App/oh6NTy+bQy5EX jlJmxXNgssySchnWdH7i4OqX6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC0sa98H DKkaz/PUPQrjNyViZuKFMB8GA1UdIwQYMBaAFKmLTXU6hN/UnafiMH4xkqjE/5iV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OTEyRi8wQTA2NzkwODBB NTExMUVFOEQ3NUI2NkJDNEY5QUUwMi9xWXROZFRxRTM5U2RwLUl3ZmpHU3FNVF9t SlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FZdE5kVHFFMzlTZHAtSXdmakdTcU1UX21KVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OTEyRi8wQTA2NzkwODBBNTExMUVFOEQ3NUI2NkJDNEY5QUUwMi9xWXROZFRxRTM5 U2RwLUl3ZmpHU3FNVF9tSlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCwwIyitV2il9nzgYFmNYMILDoiSwvRTyeZRas1aDqos0cOkwgs0qRw 6xTZzvheCTz2FzXbkFSJAOPOd1rioCu2JN38h+CtnjpGUlk1uXpANN60Mkb8L1jp aM5brWltCLFmAcqYWEOvxAR1VEQxFI2gcs0U8CTDqHTay18ez/pBJmidvDy5SPOZ 8Y5bgXM4qGEMcb5eJLahQ7qrq59kTdZNU3/CIecj/u4AaPwOCWDYo3FoQDfk+byf 5mT5dhToUbhNvoWpSPQr/Cf4K1XBtq5/2ifjfjCL8ikC//zke/iCs5xtO0Jy2SW8 VPiKvdyp/rmljSFKLn0heWYfe6XXjuzl -----END CERTIFICATE-----Generated at Tue Jul 22 12:13:27 2025 by rpki-client