$ rpki-client -vvf rpki.apnic.net/member_repository/A915B978/FC4A2A20E90111E68C2CD311C4F9AE02/qDsByW55TejPjxyfqGQhKW2occQ.mft File: qDsByW55TejPjxyfqGQhKW2occQ.mft (raw, json) Hash identifier: g41WgVlYpLdY6pli8GlQf+t8u4RDbZ3ugOucwuhI1NA= Subject key identifier: 95:67:B0:C2:02:D6:6E:C1:34:DC:D6:DA:DC:74:64:12:19:0D:0B:B1 Authority key identifier: A8:3B:01:C9:6E:79:4D:E8:CF:8F:1C:9F:A8:64:21:29:6D:A8:71:C4 Certificate issuer: /CN=A915B978/serialNumber=A83B01C96E794DE8CF8F1C9FA86421296DA871C4 Certificate serial: 1C7F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qDsByW55TejPjxyfqGQhKW2occQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B978/FC4A2A20E90111E68C2CD311C4F9AE02/qDsByW55TejPjxyfqGQhKW2occQ.mft Manifest number: 1C5B Signing time: Fri 18 Jul 2025 16:19:01 +0000 Manifest this update: Fri 18 Jul 2025 16:19:00 +0000 Manifest next update: Fri 25 Jul 2025 16:19:00 +0000 Files and hashes: 1: qDsByW55TejPjxyfqGQhKW2occQ.crl (hash: ZIAt2wiuTaqUhshkH4jYvbSmoT6nxu8zXLEtVJGQE60=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B978/FC4A2A20E90111E68C2CD311C4F9AE02/qDsByW55TejPjxyfqGQhKW2occQ.crl rsync://rpki.apnic.net/member_repository/A915B978/FC4A2A20E90111E68C2CD311C4F9AE02/qDsByW55TejPjxyfqGQhKW2occQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qDsByW55TejPjxyfqGQhKW2occQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 16:19:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7295 (0x1c7f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B978, serialNumber=A83B01C96E794DE8CF8F1C9FA86421296DA871C4 Validity Not Before: Jul 18 16:19:00 2025 GMT Not After : Jul 25 16:19:00 2025 GMT Subject: CN=687a73f4-5e18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:d0:77:44:ae:fd:41:1e:aa:68:2f:11:1b:db: b0:e0:7e:82:6b:7a:75:96:e1:57:47:c3:e8:1e:83: d6:f9:13:48:59:5e:df:2f:55:ea:16:eb:85:4d:bc: 42:85:f8:33:31:3f:bd:39:e1:51:4e:b8:84:69:6e: c7:4a:86:6e:a2:a8:12:cc:49:29:73:88:b3:8f:b6: c5:18:6d:5d:6a:8c:53:9e:3c:c9:b1:9a:91:ce:aa: 92:85:c8:dd:1b:3f:c6:c7:a4:ad:4c:01:c9:73:7a: 30:ff:90:bf:26:9b:e8:74:96:1f:bd:cc:7b:30:70: 7b:25:2f:db:c6:9d:21:f4:51:d3:9b:1e:8a:fc:e8: 87:8a:78:d9:88:24:1c:76:12:84:0f:a7:d7:00:66: 80:a4:30:7d:3f:98:0d:2f:87:e0:14:24:81:9c:04: 0b:8e:ba:06:c1:08:da:ba:83:02:f3:db:5e:e5:ab: e3:42:70:40:7f:ae:60:c6:d8:27:41:e8:3c:af:c3: 4a:06:ca:8f:6d:cc:ca:22:05:b1:02:92:fc:00:b6: d4:b4:90:37:1f:13:dc:35:fb:94:68:b8:ee:85:e8: 6d:7c:50:16:1c:16:28:65:8a:44:ea:3c:86:c5:7c: d1:72:be:b2:5d:56:b5:43:6b:d7:62:42:67:4e:4b: cb:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:67:B0:C2:02:D6:6E:C1:34:DC:D6:DA:DC:74:64:12:19:0D:0B:B1 X509v3 Authority Key Identifier: keyid:A8:3B:01:C9:6E:79:4D:E8:CF:8F:1C:9F:A8:64:21:29:6D:A8:71:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B978/FC4A2A20E90111E68C2CD311C4F9AE02/qDsByW55TejPjxyfqGQhKW2occQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qDsByW55TejPjxyfqGQhKW2occQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B978/FC4A2A20E90111E68C2CD311C4F9AE02/qDsByW55TejPjxyfqGQhKW2occQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d2:6f:72:83:28:26:d3:a6:fc:9c:a3:63:09:9d:86:ae:05:ae: bd:ed:30:cd:bc:8c:a9:17:b0:a9:19:48:02:1c:e7:9f:a4:2f: aa:e2:72:d4:7b:28:ba:df:22:a5:f1:69:1c:a5:1f:41:77:ba: a7:9c:31:69:ae:bb:4c:b3:d9:53:8d:14:6a:43:cb:7e:ba:7b: 4b:27:fe:1c:74:7a:1d:fb:eb:21:8a:3d:14:38:99:a4:b0:4f: a4:8a:3a:1d:80:96:39:80:6f:6e:33:06:a9:f2:93:c4:74:60: 17:2b:0d:54:b7:e3:e3:a3:7e:0a:3e:07:f4:04:14:d4:12:f6: 1c:99:7d:f2:8b:be:84:c1:d3:f1:3f:97:21:0a:b9:10:c2:fa: 67:61:3f:9b:d8:fb:f9:af:41:f2:20:a8:b7:ce:d3:e0:3d:7c: ad:f5:fc:97:d7:0f:93:6f:e3:36:33:c5:0b:41:01:3a:6a:1f: b3:79:16:0d:cc:ff:8c:94:ab:6c:a9:93:95:eb:ab:ed:ba:d1: 45:e0:73:75:04:49:d8:43:17:54:6a:23:69:19:a4:fb:82:4e: 13:b0:31:3f:3b:3e:48:b3:b8:e8:0d:25:c7:4b:c8:fd:cb:44: a1:de:64:13:d8:48:84:b5:29:4a:24:19:1f:1e:ed:2c:67:83: 8f:34:28:1d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHH8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUI5NzgxMTAvBgNVBAUTKEE4M0IwMUM5NkU3OTRERThDRjhGMUM5RkE4NjQyMTI5 NkRBODcxQzQwHhcNMjUwNzE4MTYxOTAwWhcNMjUwNzI1MTYxOTAwWjAYMRYwFAYD VQQDEw02ODdhNzNmNC01ZTE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2NB3RK79QR6qaC8RG9uw4H6Ca3p1luFXR8PoHoPW+RNIWV7fL1XqFuuFTbxC hfgzMT+9OeFRTriEaW7HSoZuoqgSzEkpc4izj7bFGG1daoxTnjzJsZqRzqqShcjd Gz/Gx6StTAHJc3ow/5C/JpvodJYfvcx7MHB7JS/bxp0h9FHTmx6K/OiHinjZiCQc dhKED6fXAGaApDB9P5gNL4fgFCSBnAQLjroGwQjauoMC89te5avjQnBAf65gxtgn Qeg8r8NKBsqPbczKIgWxApL8ALbUtJA3HxPcNfuUaLjuhehtfFAWHBYoZYpE6jyG xXzRcr6yXVa1Q2vXYkJnTkvLYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJVnsMIC 1m7BNNzW2tx0ZBIZDQuxMB8GA1UdIwQYMBaAFKg7AclueU3oz48cn6hkISltqHHE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Qjk3OC9GQzRBMkEyMEU5 MDExMUU2OEMyQ0QzMTFDNEY5QUUwMi9xRHNCeVc1NVRlalBqeHlmcUdRaEtXMm9j Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FEc0J5VzU1VGVqUGp4eWZxR1FoS1cyb2NjUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 Qjk3OC9GQzRBMkEyMEU5MDExMUU2OEMyQ0QzMTFDNEY5QUUwMi9xRHNCeVc1NVRl alBqeHlmcUdRaEtXMm9jY1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDSb3KDKCbTpvyco2MJnYauBa697TDNvIypF7CpGUgCHOefpC+q4nLU eyi63yKl8WkcpR9Bd7qnnDFprrtMs9lTjRRqQ8t+untLJ/4cdHod++shij0UOJmk sE+kijodgJY5gG9uMwap8pPEdGAXKw1Ut+Pjo34KPgf0BBTUEvYcmX3yi76EwdPx P5chCrkQwvpnYT+b2Pv5r0HyIKi3ztPgPXyt9fyX1w+Tb+M2M8ULQQE6ah+zeRYN zP+MlKtsqZOV66vtutFF4HN1BEnYQxdUaiNpGaT7gk4TsDE/Oz5Is7joDSXHS8j9 y0Sh3mQT2EiEtSlKJBkfHu0sZ4OPNCgd -----END CERTIFICATE-----Generated at Sun Jul 20 07:55:31 2025 by rpki-client