$ rpki-client -vvf rpki.apnic.net/member_repository/A91A35A4/DBC1FD10699611EEB4E77B3CC4F9AE02/QaDCRDWfAjXJpgsfcZpf1WeWYFM.mft File: QaDCRDWfAjXJpgsfcZpf1WeWYFM.mft (raw, json) Hash identifier: jDSYaQ3Hx/Wxp+m5jlAFKROOM56x3OSFWq5S+cjDF9g= Subject key identifier: 5E:09:35:15:68:6D:8D:AD:1F:C5:E9:7B:24:31:B5:E7:0C:E2:C5:EA Authority key identifier: 41:A0:C2:44:35:9F:02:35:C9:A6:0B:1F:71:9A:5F:D5:67:96:60:53 Certificate issuer: /CN=A91A35A4/serialNumber=41A0C244359F0235C9A60B1F719A5FD567966053 Certificate serial: 014C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QaDCRDWfAjXJpgsfcZpf1WeWYFM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A35A4/DBC1FD10699611EEB4E77B3CC4F9AE02/QaDCRDWfAjXJpgsfcZpf1WeWYFM.mft Manifest number: 014A Signing time: Sat 19 Jul 2025 04:26:08 +0000 Manifest this update: Sat 19 Jul 2025 04:26:07 +0000 Manifest next update: Sat 26 Jul 2025 04:26:07 +0000 Files and hashes: 1: QaDCRDWfAjXJpgsfcZpf1WeWYFM.crl (hash: /dvnf64cBXvVBOeuscE45LvnUwGdY3OM5J9e5x3bAiw=) 2: 294325DC699711EEB317603DC4F9AE02.roa (hash: Hsp12OEUAxLgfWPa2BFXRQnGaC8ZbmcTs8T1lK+V734=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A35A4/DBC1FD10699611EEB4E77B3CC4F9AE02/QaDCRDWfAjXJpgsfcZpf1WeWYFM.crl rsync://rpki.apnic.net/member_repository/A91A35A4/DBC1FD10699611EEB4E77B3CC4F9AE02/QaDCRDWfAjXJpgsfcZpf1WeWYFM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QaDCRDWfAjXJpgsfcZpf1WeWYFM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 04:26:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 332 (0x14c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A35A4, serialNumber=41A0C244359F0235C9A60B1F719A5FD567966053 Validity Not Before: Jul 19 04:26:07 2025 GMT Not After : Jul 26 04:26:07 2025 GMT Subject: CN=687b1e60-d236 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:95:c0:7b:6e:02:3b:a9:c4:bc:82:a3:d2:06: 6e:3d:d3:08:f3:e0:98:d2:fe:8d:62:4f:94:bb:cd: a6:07:2c:e3:b7:e1:3f:a3:74:34:7d:6d:1c:d0:c6: 0b:16:a2:63:b5:5e:8e:2c:ee:25:2c:8e:5f:9c:71: 44:f4:30:05:29:86:45:cf:18:88:a2:2c:9b:96:8c: 9f:3f:f6:0b:bb:8b:39:f9:8d:dd:28:ef:b5:17:ec: 20:fe:14:0c:83:0f:b5:81:a5:bf:25:8d:36:2d:67: b3:90:83:bd:97:89:2b:32:0b:43:e2:18:d0:20:de: 90:fb:59:cc:39:29:f5:3c:16:48:18:00:aa:93:d0: 02:9f:22:bc:8e:69:db:fa:89:6c:11:58:1a:57:cd: 70:b3:ac:6f:18:63:34:e4:98:65:3e:2e:3a:22:56: f5:69:5b:f7:5b:86:44:ff:6a:89:ef:d2:0d:2c:61: 8c:6c:c9:44:a6:0c:50:8c:fe:f9:a1:b4:8e:3e:14: 45:a4:5c:e1:cb:01:2b:48:56:03:c7:47:76:d6:ab: de:5d:1a:ab:9a:5b:ad:1d:aa:c6:8f:15:f4:40:98: 8a:c0:84:69:3a:e4:54:18:d1:8e:6b:09:76:1e:62: 8f:97:6e:b8:97:2b:31:a0:6b:3e:33:29:8a:01:fd: 50:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:09:35:15:68:6D:8D:AD:1F:C5:E9:7B:24:31:B5:E7:0C:E2:C5:EA X509v3 Authority Key Identifier: keyid:41:A0:C2:44:35:9F:02:35:C9:A6:0B:1F:71:9A:5F:D5:67:96:60:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A35A4/DBC1FD10699611EEB4E77B3CC4F9AE02/QaDCRDWfAjXJpgsfcZpf1WeWYFM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QaDCRDWfAjXJpgsfcZpf1WeWYFM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A35A4/DBC1FD10699611EEB4E77B3CC4F9AE02/QaDCRDWfAjXJpgsfcZpf1WeWYFM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:78:e4:96:b5:16:83:e7:b2:75:7b:81:3d:c0:15:55:20:ad: fa:b4:d2:f4:d3:47:64:d4:d9:77:a4:0a:f6:7c:69:ec:68:29: ef:04:9d:93:b1:0b:be:5d:51:ab:d6:b0:2a:70:e4:14:a7:22: 6d:dd:38:78:5d:67:4e:08:1a:6c:2b:61:8f:29:a5:44:32:af: 11:f5:3c:7f:46:2e:f4:d1:dd:64:40:e6:83:a1:eb:39:34:36: 74:72:2d:e5:f4:3b:aa:70:f5:98:fc:96:05:0a:59:90:36:92: 0a:b8:c3:61:a4:e1:8f:fa:59:eb:ec:bb:63:27:80:ea:71:54: 46:0a:8e:54:1a:90:8d:f5:01:55:c9:64:4d:6f:2a:2b:ee:d7: 10:56:bd:49:b0:c8:1d:07:ed:cf:b3:4c:ae:9b:c0:81:76:c6: 33:08:b3:b3:65:b4:b7:f2:87:14:a4:2b:c0:af:14:b4:c8:05: bd:8b:01:f6:dd:09:b6:1e:b7:be:77:9f:ca:c3:b8:4d:b1:22: 52:07:7c:09:fe:7d:2b:5c:d5:79:23:53:7b:85:25:f2:32:04: 20:9e:ec:bc:75:b7:0e:18:d6:3e:76:f8:54:7e:33:c5:d5:46: 18:1e:93:41:54:be:f2:8f:a3:6e:d3:c5:4c:3e:ca:ba:50:38: ec:af:6f:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTM1QTQxMTAvBgNVBAUTKDQxQTBDMjQ0MzU5RjAyMzVDOUE2MEIxRjcxOUE1RkQ1 Njc5NjYwNTMwHhcNMjUwNzE5MDQyNjA3WhcNMjUwNzI2MDQyNjA3WjAYMRYwFAYD VQQDEw02ODdiMWU2MC1kMjM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4pXAe24CO6nEvIKj0gZuPdMI8+CY0v6NYk+Uu82mByzjt+E/o3Q0fW0c0MYL FqJjtV6OLO4lLI5fnHFE9DAFKYZFzxiIoiybloyfP/YLu4s5+Y3dKO+1F+wg/hQM gw+1gaW/JY02LWezkIO9l4krMgtD4hjQIN6Q+1nMOSn1PBZIGACqk9ACnyK8jmnb +olsEVgaV81ws6xvGGM05JhlPi46Ilb1aVv3W4ZE/2qJ79INLGGMbMlEpgxQjP75 obSOPhRFpFzhywErSFYDx0d21qveXRqrmlutHarGjxX0QJiKwIRpOuRUGNGOawl2 HmKPl264lysxoGs+MymKAf1QbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF4JNRVo bY2tH8XpeyQxtecM4sXqMB8GA1UdIwQYMBaAFEGgwkQ1nwI1yaYLH3GaX9VnlmBT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzVBNC9EQkMxRkQxMDY5 OTYxMUVFQjRFNzdCM0NDNEY5QUUwMi9RYURDUkRXZkFqWEpwZ3NmY1pwZjFXZVdZ Rk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FhRENSRFdmQWpYSnBnc2ZjWnBmMVdlV1lGTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MzVBNC9EQkMxRkQxMDY5OTYxMUVFQjRFNzdCM0NDNEY5QUUwMi9RYURDUkRXZkFq WEpwZ3NmY1pwZjFXZVdZRk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSeOSWtRaD57J1e4E9wBVVIK36tNL000dk1Nl3pAr2fGnsaCnvBJ2T sQu+XVGr1rAqcOQUpyJt3Th4XWdOCBpsK2GPKaVEMq8R9Tx/Ri700d1kQOaDoes5 NDZ0ci3l9DuqcPWY/JYFClmQNpIKuMNhpOGP+lnr7LtjJ4DqcVRGCo5UGpCN9QFV yWRNbyor7tcQVr1JsMgdB+3Ps0yum8CBdsYzCLOzZbS38ocUpCvArxS0yAW9iwH2 3Qm2Hre+d5/Kw7hNsSJSB3wJ/n0rXNV5I1N7hSXyMgQgnuy8dbcOGNY+dvhUfjPF 1UYYHpNBVL7yj6Nu08VMPsq6UDjsr2+q -----END CERTIFICATE-----Generated at Sun Jul 20 07:31:21 2025 by rpki-client