$ rpki-client -vvf rpki.apnic.net/member_repository/A91977F9/2AECE66A27BD11EDB5884D5FC4F9AE02/qleQsPfXYr6TK53GEbfWm5BoWk4.mft File: qleQsPfXYr6TK53GEbfWm5BoWk4.mft (raw, json) Hash identifier: pTW7s2Dtna/nRAbtovrUSMz0pZu+HfLwvVEuTP9xPL0= Subject key identifier: 4B:8A:C9:EA:03:80:1E:C3:03:1E:EF:41:72:5C:23:EA:EA:EB:52:F5 Authority key identifier: AA:57:90:B0:F7:D7:62:BE:93:2B:9D:C6:11:B7:D6:9B:90:68:5A:4E Certificate issuer: /CN=A91977F9/serialNumber=AA5790B0F7D762BE932B9DC611B7D69B90685A4E Certificate serial: 0252 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qleQsPfXYr6TK53GEbfWm5BoWk4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91977F9/2AECE66A27BD11EDB5884D5FC4F9AE02/qleQsPfXYr6TK53GEbfWm5BoWk4.mft Manifest number: 024E Signing time: Sat 19 Jul 2025 02:16:08 +0000 Manifest this update: Sat 19 Jul 2025 02:16:08 +0000 Manifest next update: Sat 26 Jul 2025 02:16:08 +0000 Files and hashes: 1: qleQsPfXYr6TK53GEbfWm5BoWk4.crl (hash: JgwOTlegJnlBNmaD6HMDp0be7fT2pL+CFmb+CShTl7w=) 2: 728286AE27BF11EDA6A02960C4F9AE02.roa (hash: DvV5HozP+sR1ACB5NUpTfiC/G52OiXFRlLclsmTMjHI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91977F9/2AECE66A27BD11EDB5884D5FC4F9AE02/qleQsPfXYr6TK53GEbfWm5BoWk4.crl rsync://rpki.apnic.net/member_repository/A91977F9/2AECE66A27BD11EDB5884D5FC4F9AE02/qleQsPfXYr6TK53GEbfWm5BoWk4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qleQsPfXYr6TK53GEbfWm5BoWk4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 02:16:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 594 (0x252) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91977F9, serialNumber=AA5790B0F7D762BE932B9DC611B7D69B90685A4E Validity Not Before: Jul 19 02:16:08 2025 GMT Not After : Jul 26 02:16:08 2025 GMT Subject: CN=687affe8-3161 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:1e:8e:d6:55:c6:c4:a5:18:f8:d6:94:d6:27: 99:1a:13:af:ef:7b:65:b3:5f:6a:fb:d1:fa:6b:9d: e3:3f:4d:74:c4:cc:8a:34:bc:d5:c0:91:e6:dc:27: 20:7a:18:f2:40:05:2f:62:05:75:cf:e7:0a:54:a9: 64:b5:7b:5a:c2:c5:4d:2f:09:46:cb:b1:df:ce:e1: 02:fc:d4:5e:5c:07:62:bb:aa:09:9a:0a:81:15:75: 41:aa:d4:3d:c1:a1:03:12:da:55:89:49:d6:9c:a7: c8:4c:6d:f3:8d:fb:ef:f5:03:91:29:3c:ba:18:fd: 3e:6e:44:42:0c:ef:d7:26:0e:6c:27:2c:c9:de:14: 95:4d:b3:8f:4e:52:b3:6e:b0:bc:cf:e3:e0:b0:e1: 28:a7:fc:15:90:43:40:33:35:a6:3a:c4:57:10:3c: 41:d3:98:a5:7f:f1:f6:ae:f2:4c:30:80:32:fc:2b: 8d:9e:57:ed:4f:54:74:ff:9c:41:d4:8d:dd:b7:ba: bd:b5:d4:03:a4:b8:83:96:e9:99:c0:2f:41:f1:a6: ec:2e:c2:4f:5e:53:31:3e:a9:c4:6f:f2:3f:36:72: 3a:9b:71:38:9d:aa:05:de:d6:f1:1d:33:cc:f1:e3: a9:0e:d9:e3:66:59:cc:47:00:10:a6:08:3e:53:2f: 62:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:8A:C9:EA:03:80:1E:C3:03:1E:EF:41:72:5C:23:EA:EA:EB:52:F5 X509v3 Authority Key Identifier: keyid:AA:57:90:B0:F7:D7:62:BE:93:2B:9D:C6:11:B7:D6:9B:90:68:5A:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91977F9/2AECE66A27BD11EDB5884D5FC4F9AE02/qleQsPfXYr6TK53GEbfWm5BoWk4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qleQsPfXYr6TK53GEbfWm5BoWk4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91977F9/2AECE66A27BD11EDB5884D5FC4F9AE02/qleQsPfXYr6TK53GEbfWm5BoWk4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:81:ed:08:ae:a9:aa:0a:a1:a3:ab:f6:8b:61:b6:d8:13:28: 71:a3:7e:9a:b8:ad:8b:fc:6e:8e:65:2b:2f:22:b3:46:47:d9: 52:38:9c:d2:7c:4d:f5:92:78:ba:46:da:e6:8d:c3:a0:12:69: 1b:6e:cc:01:d7:4d:45:52:76:a3:50:71:7f:5f:14:34:1a:54: b9:92:04:18:cd:56:54:ed:ee:40:6d:df:d3:e6:36:9e:e6:6e: 00:1b:41:81:0d:9f:5e:14:57:fc:71:cc:55:b5:53:a8:7c:0b: fb:e5:c7:ee:9d:42:2c:8b:4a:56:36:89:95:ad:09:31:80:0e: 16:49:10:12:6c:4d:61:35:16:93:98:55:96:7f:45:a6:a5:45: aa:c1:87:f9:92:72:78:d0:1e:dc:09:07:89:cc:99:97:15:a1: 39:fa:3c:e8:db:eb:4a:1d:38:c1:de:dd:74:d3:ff:2d:d2:32: cd:ec:75:cf:2e:4f:a8:4f:9c:f2:61:70:87:46:d7:f2:4f:7f: a9:06:b9:23:f4:a8:6a:a0:36:cc:03:bd:51:2c:5d:3c:68:22: 32:a9:4a:e4:f1:79:73:51:9d:fd:b8:0e:32:a5:27:eb:19:91: 4e:43:3c:d0:c9:a1:a9:49:9d:d8:88:c8:ec:2b:53:ad:d8:cc: 3b:30:8e:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAlIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTc3RjkxMTAvBgNVBAUTKEFBNTc5MEIwRjdENzYyQkU5MzJCOURDNjExQjdENjlC OTA2ODVBNEUwHhcNMjUwNzE5MDIxNjA4WhcNMjUwNzI2MDIxNjA4WjAYMRYwFAYD VQQDEw02ODdhZmZlOC0zMTYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArx6O1lXGxKUY+NaU1ieZGhOv73tls19q+9H6a53jP010xMyKNLzVwJHm3Ccg ehjyQAUvYgV1z+cKVKlktXtawsVNLwlGy7HfzuEC/NReXAdiu6oJmgqBFXVBqtQ9 waEDEtpViUnWnKfITG3zjfvv9QORKTy6GP0+bkRCDO/XJg5sJyzJ3hSVTbOPTlKz brC8z+PgsOEop/wVkENAMzWmOsRXEDxB05ilf/H2rvJMMIAy/CuNnlftT1R0/5xB 1I3dt7q9tdQDpLiDlumZwC9B8absLsJPXlMxPqnEb/I/NnI6m3E4naoF3tbxHTPM 8eOpDtnjZlnMRwAQpgg+Uy9iSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEuKyeoD gB7DAx7vQXJcI+rq61L1MB8GA1UdIwQYMBaAFKpXkLD312K+kyudxhG31puQaFpO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzdGOS8yQUVDRTY2QTI3 QkQxMUVEQjU4ODRENUZDNEY5QUUwMi9xbGVRc1BmWFlyNlRLNTNHRWJmV201Qm9X azQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FsZVFzUGZYWXI2VEs1M0dFYmZXbTVCb1drNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzdGOS8yQUVDRTY2QTI3QkQxMUVEQjU4ODRENUZDNEY5QUUwMi9xbGVRc1BmWFly NlRLNTNHRWJmV201Qm9XazQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBage0IrqmqCqGjq/aLYbbYEyhxo36auK2L/G6OZSsvIrNGR9lSOJzS fE31kni6RtrmjcOgEmkbbswB101FUnajUHF/XxQ0GlS5kgQYzVZU7e5Abd/T5jae 5m4AG0GBDZ9eFFf8ccxVtVOofAv75cfunUIsi0pWNomVrQkxgA4WSRASbE1hNRaT mFWWf0WmpUWqwYf5knJ40B7cCQeJzJmXFaE5+jzo2+tKHTjB3t100/8t0jLN7HXP Lk+oT5zyYXCHRtfyT3+pBrkj9KhqoDbMA71RLF08aCIyqUrk8XlzUZ39uA4ypSfr GZFOQzzQyaGpSZ3YiMjsK1Ot2Mw7MI4o -----END CERTIFICATE-----Generated at Sun Jul 20 03:18:22 2025 by rpki-client