$ rpki-client -vvf rpki.apnic.net/member_repository/A9192A47/EEB94D72B82011EFAAE6F567C4F9AE02/qG5dQKoVKdT_IrMsTpMAbQ-iynQ.mft File: qG5dQKoVKdT_IrMsTpMAbQ-iynQ.mft (raw, json) Hash identifier: rFbXMskKgQEiiVMoJk3tgV/fk23FwCwirteEwTqEL04= Subject key identifier: 79:61:76:18:94:63:99:64:CF:1E:7D:D6:13:B1:A8:87:3E:F3:76:FA Authority key identifier: A8:6E:5D:40:AA:15:29:D4:FF:22:B3:2C:4E:93:00:6D:0F:A2:CA:74 Certificate issuer: /CN=A9192A47/serialNumber=A86E5D40AA1529D4FF22B32C4E93006D0FA2CA74 Certificate serial: 71 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qG5dQKoVKdT_IrMsTpMAbQ-iynQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192A47/EEB94D72B82011EFAAE6F567C4F9AE02/qG5dQKoVKdT_IrMsTpMAbQ-iynQ.mft Manifest number: 71 Signing time: Sat 19 Jul 2025 07:08:11 +0000 Manifest this update: Sat 19 Jul 2025 07:08:10 +0000 Manifest next update: Sat 26 Jul 2025 07:08:10 +0000 Files and hashes: 1: qG5dQKoVKdT_IrMsTpMAbQ-iynQ.crl (hash: j3gsQScCOUBRErtWSOq4DvR6ZUjJzGEgs9Ya+XsiboY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192A47/EEB94D72B82011EFAAE6F567C4F9AE02/qG5dQKoVKdT_IrMsTpMAbQ-iynQ.crl rsync://rpki.apnic.net/member_repository/A9192A47/EEB94D72B82011EFAAE6F567C4F9AE02/qG5dQKoVKdT_IrMsTpMAbQ-iynQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qG5dQKoVKdT_IrMsTpMAbQ-iynQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 07:08:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 113 (0x71) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192A47, serialNumber=A86E5D40AA1529D4FF22B32C4E93006D0FA2CA74 Validity Not Before: Jul 19 07:08:10 2025 GMT Not After : Jul 26 07:08:10 2025 GMT Subject: CN=687b445a-be1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:15:86:a6:76:cc:73:ce:5f:ba:39:c8:ed:2d: 54:75:16:f5:4f:2a:a8:3e:cd:85:12:81:b5:8a:3b: 20:80:43:7b:e5:9e:7a:f1:b0:a0:5c:bd:4d:f4:8d: b6:79:ea:cf:65:2d:a5:ce:18:a0:32:5a:c2:64:d1: 0d:0f:c3:0b:b8:24:0a:a0:c4:7c:87:d8:fb:65:38: b6:f4:3c:f3:da:f3:ca:64:c3:0c:0d:cd:96:02:a4: a5:72:42:11:a1:80:23:19:7b:44:9b:11:53:8b:11: 8a:09:58:7f:64:e9:41:81:b1:5e:9b:37:d2:c5:c9: 51:3d:ec:30:0f:7d:60:30:06:2d:40:b3:a5:a2:b9: 1d:d0:92:48:50:76:7b:3e:ce:ca:ee:1c:0f:c1:9d: 22:b0:7c:65:13:b0:f0:d4:9d:cb:d5:a2:c7:b2:e1: c2:68:e3:8c:11:bf:a1:31:bf:55:03:bc:13:1c:2c: 0d:f2:61:94:50:0b:1b:51:73:4f:b0:2f:55:f7:62: e5:14:b1:b4:d8:da:42:64:2b:31:40:b8:ba:56:32: b3:ea:0b:3b:49:83:90:7e:91:f9:5f:4d:19:46:c4: ba:ef:04:8b:c7:77:8d:c4:64:eb:d9:63:72:5f:34: 6d:d9:88:56:30:c1:da:b8:ff:bc:c4:de:85:01:2d: 4c:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:61:76:18:94:63:99:64:CF:1E:7D:D6:13:B1:A8:87:3E:F3:76:FA X509v3 Authority Key Identifier: keyid:A8:6E:5D:40:AA:15:29:D4:FF:22:B3:2C:4E:93:00:6D:0F:A2:CA:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192A47/EEB94D72B82011EFAAE6F567C4F9AE02/qG5dQKoVKdT_IrMsTpMAbQ-iynQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qG5dQKoVKdT_IrMsTpMAbQ-iynQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192A47/EEB94D72B82011EFAAE6F567C4F9AE02/qG5dQKoVKdT_IrMsTpMAbQ-iynQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:1f:02:84:7c:ef:58:e3:be:d7:78:43:33:23:67:8d:3a:ba: 1a:51:77:a4:10:f9:8b:57:10:13:7d:94:c1:3b:77:22:e0:49: 8c:0d:ba:e0:52:e1:34:24:d9:0a:81:07:b9:38:0e:d8:12:60: 3b:70:65:ea:ba:8d:71:39:a3:bc:bb:14:b0:3d:77:c0:96:ad: 93:be:cd:c5:08:77:4a:c5:76:93:25:5d:98:69:e7:42:73:12: 72:c5:80:d8:ae:1a:40:a6:63:37:55:de:09:0e:58:85:b0:2e: 15:eb:86:bc:e9:c8:e5:fc:05:9e:a3:12:37:1d:fa:44:1e:9a: 25:07:cd:04:e5:66:40:33:1d:5c:2e:ac:7f:70:8a:29:f5:f5: c2:35:44:80:e8:f4:1f:8d:6c:4e:f5:02:80:b5:df:12:ef:27: 88:14:8e:40:e2:29:ae:c6:ee:96:84:5d:d6:91:88:e4:a6:b5: cd:d4:b9:1b:fa:a5:0f:7d:c8:7c:f9:f3:1a:31:14:8c:87:2c: 23:6a:b1:c2:82:1c:65:d8:b3:6b:1a:89:da:64:50:b5:8d:28: 89:ad:cc:e8:d1:f1:e5:8f:96:f2:f1:40:60:d9:e3:3e:50:7c: 3b:12:60:a0:60:ef:68:57:2f:99:f8:4f:62:aa:72:8a:7a:99: 1a:1c:65:7b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBcTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 MkE0NzExMC8GA1UEBRMoQTg2RTVENDBBQTE1MjlENEZGMjJCMzJDNEU5MzAwNkQw RkEyQ0E3NDAeFw0yNTA3MTkwNzA4MTBaFw0yNTA3MjYwNzA4MTBaMBgxFjAUBgNV BAMTDTY4N2I0NDVhLWJlMWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDKFYamdsxzzl+6OcjtLVR1FvVPKqg+zYUSgbWKOyCAQ3vlnnrxsKBcvU30jbZ5 6s9lLaXOGKAyWsJk0Q0Pwwu4JAqgxHyH2PtlOLb0PPPa88pkwwwNzZYCpKVyQhGh gCMZe0SbEVOLEYoJWH9k6UGBsV6bN9LFyVE97DAPfWAwBi1As6WiuR3QkkhQdns+ zsruHA/BnSKwfGUTsPDUncvVosey4cJo44wRv6Exv1UDvBMcLA3yYZRQCxtRc0+w L1X3YuUUsbTY2kJkKzFAuLpWMrPqCztJg5B+kflfTRlGxLrvBIvHd43EZOvZY3Jf NG3ZiFYwwdq4/7zE3oUBLUyhAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUeWF2GJRj mWTPHn3WE7Gohz7zdvowHwYDVR0jBBgwFoAUqG5dQKoVKdT/IrMsTpMAbQ+iynQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkyQTQ3L0VFQjk0RDcyQjgy MDExRUZBQUU2RjU2N0M0RjlBRTAyL3FHNWRRS29WS2RUX0lyTXNUcE1BYlEtaXlu US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcUc1ZFFLb1ZLZFRfSXJNc1RwTUFiUS1peW5RLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTky QTQ3L0VFQjk0RDcyQjgyMDExRUZBQUU2RjU2N0M0RjlBRTAyL3FHNWRRS29WS2RU X0lyTXNUcE1BYlEtaXluUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALofAoR871jjvtd4QzMjZ406uhpRd6QQ+YtXEBN9lME7dyLgSYwNuuBS 4TQk2QqBB7k4DtgSYDtwZeq6jXE5o7y7FLA9d8CWrZO+zcUId0rFdpMlXZhp50Jz EnLFgNiuGkCmYzdV3gkOWIWwLhXrhrzpyOX8BZ6jEjcd+kQemiUHzQTlZkAzHVwu rH9wiin19cI1RIDo9B+NbE71AoC13xLvJ4gUjkDiKa7G7paEXdaRiOSmtc3UuRv6 pQ99yHz58xoxFIyHLCNqscKCHGXYs2saidpkULWNKImtzOjR8eWPlvLxQGDZ4z5Q fDsSYKBg72hXL5n4T2Kqcop6mRocZXs= -----END CERTIFICATE-----Generated at Sun Jul 20 07:39:44 2025 by rpki-client