$ rpki-client -vvf rpki.apnic.net/member_repository/A9192A47/E5BFEA46B82011EFAAE6F567C4F9AE02/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.mft File: Q7Ii_jvkka1wWL7TgEIUQl1pQbc.mft (raw, json) Hash identifier: 3vBLZ9G18/UgCJLnYjLlb/aJu6oeaVyOvxM+S4g6W2k= Subject key identifier: 41:51:BB:05:F6:E2:F4:76:6C:50:CF:56:6D:E2:49:5B:E4:53:C7:FE Authority key identifier: 43:B2:22:FE:3B:E4:91:AD:70:58:BE:D3:80:42:14:42:5D:69:41:B7 Certificate issuer: /CN=A9192A47/serialNumber=43B222FE3BE491AD7058BED3804214425D6941B7 Certificate serial: 71 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192A47/E5BFEA46B82011EFAAE6F567C4F9AE02/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.mft Manifest number: 71 Signing time: Sat 19 Jul 2025 07:08:06 +0000 Manifest this update: Sat 19 Jul 2025 07:08:05 +0000 Manifest next update: Sat 26 Jul 2025 07:08:05 +0000 Files and hashes: 1: Q7Ii_jvkka1wWL7TgEIUQl1pQbc.crl (hash: Y/J4Pz6NTRNpCCKNcmayTcnB3tmG7DSGYfo5acA1Tqk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192A47/E5BFEA46B82011EFAAE6F567C4F9AE02/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.crl rsync://rpki.apnic.net/member_repository/A9192A47/E5BFEA46B82011EFAAE6F567C4F9AE02/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 07:08:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 113 (0x71) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192A47, serialNumber=43B222FE3BE491AD7058BED3804214425D6941B7 Validity Not Before: Jul 19 07:08:05 2025 GMT Not After : Jul 26 07:08:05 2025 GMT Subject: CN=687b4456-b7f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:23:d1:03:a2:e3:81:10:91:bb:e1:5c:d6:26: f5:14:70:f2:48:7a:92:16:cb:85:3c:0c:fd:88:a2: 20:9b:c6:ce:bf:30:9b:43:46:1b:2b:7d:03:b3:9e: b9:a8:89:8c:80:51:dd:1a:e4:9f:cf:98:d6:a6:55: 5e:a0:70:32:e1:d1:b4:cc:df:5f:1b:b9:fc:10:74: 1d:99:1f:11:c9:04:62:28:33:37:43:39:ef:45:62: d3:1a:30:a5:e9:12:44:91:a6:8d:9d:6b:53:01:44: 16:01:ed:d3:99:ff:3c:49:e4:05:51:1a:cc:13:9b: 4c:98:36:7d:9b:07:13:a9:e8:ca:cd:9a:b3:82:9b: 67:ad:7a:07:dd:95:bb:e0:e7:aa:4d:a3:69:a4:55: 44:23:da:33:fc:f5:bf:19:78:34:4d:1d:d9:f5:36: 0b:14:d5:1e:1b:08:d5:34:b9:12:c4:0e:f4:0a:e8: 9a:32:7e:76:9a:c8:c9:38:de:3a:d0:f5:a5:02:33: 31:5e:a1:d7:08:11:c2:d3:f9:4c:b9:c2:b1:f7:00: 4c:7a:d5:04:b7:ce:a0:0b:47:51:92:47:ad:11:d3: 60:3e:c1:1e:b2:85:ac:77:46:99:bc:af:32:58:33: 52:3a:fb:6a:b9:d0:77:c9:0d:9f:0f:ff:46:e5:aa: 93:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:51:BB:05:F6:E2:F4:76:6C:50:CF:56:6D:E2:49:5B:E4:53:C7:FE X509v3 Authority Key Identifier: keyid:43:B2:22:FE:3B:E4:91:AD:70:58:BE:D3:80:42:14:42:5D:69:41:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192A47/E5BFEA46B82011EFAAE6F567C4F9AE02/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192A47/E5BFEA46B82011EFAAE6F567C4F9AE02/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:1e:7d:7a:9c:5c:5f:de:8b:64:6c:5f:79:00:ee:05:31:e6: 8e:18:6d:fe:ad:05:6e:65:0c:36:f8:52:12:ee:40:29:2f:f3: 0f:63:95:b3:d8:af:82:45:89:53:3f:b8:d3:d0:07:bf:76:c4: 0c:8e:06:af:26:77:63:3b:d1:27:a6:9f:b6:5c:f7:e3:af:de: ff:5d:c8:6a:e9:9d:8c:4b:e2:58:0c:d9:34:a7:56:b2:5a:f6: de:c4:87:39:92:f8:21:69:4a:6c:4e:a1:db:fa:1f:eb:07:49: e6:e3:7d:af:4f:aa:c8:2a:dd:de:7a:a8:c5:cb:90:db:e5:3d: 8c:97:ff:9d:eb:7c:ed:cf:07:4e:8c:c8:9e:d0:97:a5:0f:67: 55:17:f2:de:ea:6f:6d:b6:d4:31:51:72:ff:84:86:37:87:ce: 7b:58:a4:45:c5:d7:94:da:1d:2f:d9:66:70:7a:e1:ad:a8:5c: e5:bd:78:a0:02:b2:5d:eb:a5:19:d9:70:f8:8f:0b:eb:92:6a: 8c:2b:6c:ba:46:e1:12:ff:45:c2:6e:2c:fe:dc:82:d7:af:5b: aa:ba:9e:ea:fa:c1:8c:1d:4a:18:7f:05:ba:a1:2b:b7:75:d8: a5:bc:87:ad:49:03:6f:b3:76:47:82:2c:ce:6f:05:90:85:19: d8:b4:4a:ae -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBcTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 MkE0NzExMC8GA1UEBRMoNDNCMjIyRkUzQkU0OTFBRDcwNThCRUQzODA0MjE0NDI1 RDY5NDFCNzAeFw0yNTA3MTkwNzA4MDVaFw0yNTA3MjYwNzA4MDVaMBgxFjAUBgNV BAMTDTY4N2I0NDU2LWI3ZjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDOI9EDouOBEJG74VzWJvUUcPJIepIWy4U8DP2IoiCbxs6/MJtDRhsrfQOznrmo iYyAUd0a5J/PmNamVV6gcDLh0bTM318bufwQdB2ZHxHJBGIoMzdDOe9FYtMaMKXp EkSRpo2da1MBRBYB7dOZ/zxJ5AVRGswTm0yYNn2bBxOp6MrNmrOCm2etegfdlbvg 56pNo2mkVUQj2jP89b8ZeDRNHdn1NgsU1R4bCNU0uRLEDvQK6JoyfnaayMk43jrQ 9aUCMzFeodcIEcLT+Uy5wrH3AEx61QS3zqALR1GSR60R02A+wR6yhax3Rpm8rzJY M1I6+2q50HfJDZ8P/0blqpPNAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUQVG7Bfbi 9HZsUM9WbeJJW+RTx/4wHwYDVR0jBBgwFoAUQ7Ii/jvkka1wWL7TgEIUQl1pQbcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkyQTQ3L0U1QkZFQTQ2Qjgy MDExRUZBQUU2RjU2N0M0RjlBRTAyL1E3SWlfanZra2Exd1dMN1RnRUlVUWwxcFFi Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvUTdJaV9qdmtrYTF3V0w3VGdFSVVRbDFwUWJjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTky QTQ3L0U1QkZFQTQ2QjgyMDExRUZBQUU2RjU2N0M0RjlBRTAyL1E3SWlfanZra2Ex d1dMN1RnRUlVUWwxcFFiYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJcefXqcXF/ei2RsX3kA7gUx5o4Ybf6tBW5lDDb4UhLuQCkv8w9jlbPY r4JFiVM/uNPQB792xAyOBq8md2M70Semn7Zc9+Ov3v9dyGrpnYxL4lgM2TSnVrJa 9t7EhzmS+CFpSmxOodv6H+sHSebjfa9Pqsgq3d56qMXLkNvlPYyX/53rfO3PB06M yJ7Ql6UPZ1UX8t7qb2221DFRcv+EhjeHzntYpEXF15TaHS/ZZnB64a2oXOW9eKAC sl3rpRnZcPiPC+uSaowrbLpG4RL/RcJuLP7cgtevW6q6nur6wYwdShh/BbqhK7d1 2KW8h61JA2+zdkeCLM5vBZCFGdi0Sq4= -----END CERTIFICATE-----Generated at Sun Jul 20 08:01:54 2025 by rpki-client