$ rpki-client -vvf rpki.apnic.net/member_repository/A91650A5/17DFB35A46E611E5B08DA17BC4F9AE02/QIyZnDwewBZElFs0d6nyI061eRw.mft File: QIyZnDwewBZElFs0d6nyI061eRw.mft (raw, json) Hash identifier: WD3orDgVz0qxul4DB540L6dnMRSWiWG7JBa0iavt3mw= Subject key identifier: 6B:77:30:88:38:14:88:43:99:05:3B:F2:79:5D:DC:4E:6D:2B:1E:BD Authority key identifier: 40:8C:99:9C:3C:1E:C0:16:44:94:5B:34:77:A9:F2:23:4E:B5:79:1C Certificate issuer: /CN=A91650A5/serialNumber=408C999C3C1EC01644945B3477A9F2234EB5791C Certificate serial: 24BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QIyZnDwewBZElFs0d6nyI061eRw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91650A5/17DFB35A46E611E5B08DA17BC4F9AE02/QIyZnDwewBZElFs0d6nyI061eRw.mft Manifest number: 249F Signing time: Fri 18 Jul 2025 15:53:05 +0000 Manifest this update: Fri 18 Jul 2025 15:53:05 +0000 Manifest next update: Fri 25 Jul 2025 15:53:05 +0000 Files and hashes: 1: QIyZnDwewBZElFs0d6nyI061eRw.crl (hash: 8HlYq835nqKk2+dIIh6t2fKg78tYqQUV0ZdMUYxexSQ=) 2: 50A2F64264BC11E8ACC7951EC4F9AE02.roa (hash: mECvLTKiNtfSmorR6F/JjM52Np+0S4zr3je4uTIkUj8=) 3: 2486E806F0E311EAA1C58D62C4F9AE02.roa (hash: dltD8ogNsgEp1LNwu/hSjpxIyXjpYdO8Yd4ZGWGZBuI=) 4: ABA9F4B8AF8411EABF9F844DC4F9AE02.roa (hash: tv9RdWOPyxWE44FO50AuecGDdKWojTS5Z904qdTlAMc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91650A5/17DFB35A46E611E5B08DA17BC4F9AE02/QIyZnDwewBZElFs0d6nyI061eRw.crl rsync://rpki.apnic.net/member_repository/A91650A5/17DFB35A46E611E5B08DA17BC4F9AE02/QIyZnDwewBZElFs0d6nyI061eRw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QIyZnDwewBZElFs0d6nyI061eRw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 15:53:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9407 (0x24bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91650A5, serialNumber=408C999C3C1EC01644945B3477A9F2234EB5791C Validity Not Before: Jul 18 15:53:05 2025 GMT Not After : Jul 25 15:53:05 2025 GMT Subject: CN=687a6de1-7974 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:99:11:fb:aa:e6:c9:03:0a:cd:f4:d5:f2:75: 63:30:11:8d:53:51:b2:1a:dd:8d:a3:c7:b0:35:da: 15:0e:23:97:50:32:5b:55:89:04:c6:bd:90:28:d7: b3:41:85:03:d6:f4:c5:4f:75:9d:a8:66:b3:97:c7: 3a:80:dd:71:54:4a:66:2f:ba:09:f0:56:21:74:7d: 46:38:bf:58:03:3a:d5:c7:5c:ae:25:32:80:f2:aa: 5b:0b:99:63:ce:46:ca:88:18:c8:52:07:d8:71:3b: 67:50:ee:00:3e:4f:ce:87:37:2f:fa:ef:51:db:46: 7c:f6:24:d0:e7:75:3f:2f:46:d3:da:bd:84:1d:99: 7e:ae:87:8d:8c:32:32:72:d8:36:e1:c7:e4:56:58: d0:92:fe:fd:39:21:00:aa:6d:8b:12:77:a6:6f:f6: 29:16:e9:6c:07:e7:b1:46:d1:37:5b:a2:b4:af:95: b2:7d:77:97:88:c1:09:28:9d:fd:f4:59:84:52:98: fe:5b:12:6d:44:a8:eb:62:5e:4b:e6:d3:dd:12:50: 69:e2:57:0f:f9:c5:98:00:ae:a9:b0:39:7c:2d:2e: da:dc:29:34:c1:6a:c7:a6:90:39:88:ab:26:37:35: 66:02:85:f7:9f:f8:5a:5c:ec:38:b6:fe:f7:83:06: 60:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:77:30:88:38:14:88:43:99:05:3B:F2:79:5D:DC:4E:6D:2B:1E:BD X509v3 Authority Key Identifier: keyid:40:8C:99:9C:3C:1E:C0:16:44:94:5B:34:77:A9:F2:23:4E:B5:79:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91650A5/17DFB35A46E611E5B08DA17BC4F9AE02/QIyZnDwewBZElFs0d6nyI061eRw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QIyZnDwewBZElFs0d6nyI061eRw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91650A5/17DFB35A46E611E5B08DA17BC4F9AE02/QIyZnDwewBZElFs0d6nyI061eRw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cb:2a:23:c5:c9:c1:c5:5a:76:3e:79:2b:dd:49:61:cf:de:09: b3:5b:d8:c9:54:f2:2d:b9:b8:ec:24:66:77:48:67:6f:8f:e2: 9b:2f:08:15:2d:2e:84:d0:41:06:17:30:8d:5c:f4:c6:29:f8: 8a:00:cd:58:07:59:4b:78:04:97:d3:d6:ab:5e:48:09:37:70: d5:f1:40:4a:90:80:c7:14:d1:30:69:47:82:a4:d9:47:1a:c8: 51:ae:a2:2e:5c:ac:2c:50:b0:25:a6:e5:89:2d:6f:2d:e4:eb: f3:43:75:e3:8a:80:1c:cd:4f:bf:79:e1:4f:27:e1:87:4c:55: 2e:e9:37:12:dc:7f:93:55:78:84:2b:c2:6b:bd:19:f5:20:24: 47:52:23:a0:cf:0c:f6:5d:4a:1d:db:4c:78:72:03:43:55:3b: 88:43:b3:1f:38:82:6a:f2:29:95:40:db:81:01:27:59:13:50: ec:21:bc:25:8d:bf:f0:1f:3d:2a:0f:81:5e:1b:21:51:ae:f6: 1c:b5:33:ee:a2:a2:5a:0f:d4:ea:9f:aa:35:0d:12:1d:c9:30: 45:f4:35:c7:1a:f4:39:02:ff:fe:f4:d2:37:67:cd:45:48:e7: 9e:0d:6f:b3:8a:0f:ab:1f:81:68:83:67:91:ae:53:00:95:1e: 9a:65:05:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJL8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjUwQTUxMTAvBgNVBAUTKDQwOEM5OTlDM0MxRUMwMTY0NDk0NUIzNDc3QTlGMjIz NEVCNTc5MUMwHhcNMjUwNzE4MTU1MzA1WhcNMjUwNzI1MTU1MzA1WjAYMRYwFAYD VQQDEw02ODdhNmRlMS03OTc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAypkR+6rmyQMKzfTV8nVjMBGNU1GyGt2No8ewNdoVDiOXUDJbVYkExr2QKNez QYUD1vTFT3WdqGazl8c6gN1xVEpmL7oJ8FYhdH1GOL9YAzrVx1yuJTKA8qpbC5lj zkbKiBjIUgfYcTtnUO4APk/Ohzcv+u9R20Z89iTQ53U/L0bT2r2EHZl+roeNjDIy ctg24cfkVljQkv79OSEAqm2LEnemb/YpFulsB+exRtE3W6K0r5WyfXeXiMEJKJ39 9FmEUpj+WxJtRKjrYl5L5tPdElBp4lcP+cWYAK6psDl8LS7a3Ck0wWrHppA5iKsm NzVmAoX3n/haXOw4tv73gwZgvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGt3MIg4 FIhDmQU78nld3E5tKx69MB8GA1UdIwQYMBaAFECMmZw8HsAWRJRbNHep8iNOtXkc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTBBNS8xN0RGQjM1QTQ2 RTYxMUU1QjA4REExN0JDNEY5QUUwMi9RSXlabkR3ZXdCWkVsRnMwZDZueUkwNjFl UncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FJeVpuRHdld0JaRWxGczBkNm55STA2MWVSdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NTBBNS8xN0RGQjM1QTQ2RTYxMUU1QjA4REExN0JDNEY5QUUwMi9RSXlabkR3ZXdC WkVsRnMwZDZueUkwNjFlUncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDLKiPFycHFWnY+eSvdSWHP3gmzW9jJVPItubjsJGZ3SGdvj+KbLwgV LS6E0EEGFzCNXPTGKfiKAM1YB1lLeASX09arXkgJN3DV8UBKkIDHFNEwaUeCpNlH GshRrqIuXKwsULAlpuWJLW8t5OvzQ3XjioAczU+/eeFPJ+GHTFUu6TcS3H+TVXiE K8JrvRn1ICRHUiOgzwz2XUod20x4cgNDVTuIQ7MfOIJq8imVQNuBASdZE1DsIbwl jb/wHz0qD4FeGyFRrvYctTPuoqJaD9Tqn6o1DRIdyTBF9DXHGvQ5Av/+9NI3Z81F SOeeDW+zig+rH4Fog2eRrlMAlR6aZQXw -----END CERTIFICATE-----Generated at Sun Jul 20 07:44:08 2025 by rpki-client