$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC415/BD1C935CD73211EEA183F50AC4F9AE02/qC5jMev0T1j8ZZmG2wVExmFfJvE.mft File: qC5jMev0T1j8ZZmG2wVExmFfJvE.mft (raw, json) Hash identifier: UToxpABBbYa1878/f/VsT1jYXjyBVasji4ZNiVfgYUg= Subject key identifier: 44:F2:4D:67:07:AF:D9:14:2C:B1:BE:43:12:FB:0E:90:5B:BE:64:3D Authority key identifier: A8:2E:63:31:EB:F4:4F:58:FC:65:99:86:DB:05:44:C6:61:5F:26:F1 Certificate issuer: /CN=A91AC415/serialNumber=A82E6331EBF44F58FC659986DB0544C6615F26F1 Certificate serial: 010D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qC5jMev0T1j8ZZmG2wVExmFfJvE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AC415/BD1C935CD73211EEA183F50AC4F9AE02/qC5jMev0T1j8ZZmG2wVExmFfJvE.mft Manifest number: 0107 Signing time: Sat 19 Jul 2025 05:18:07 +0000 Manifest this update: Sat 19 Jul 2025 05:18:06 +0000 Manifest next update: Sat 26 Jul 2025 05:18:06 +0000 Files and hashes: 1: qC5jMev0T1j8ZZmG2wVExmFfJvE.crl (hash: CaKQ9aIAiJ7kPn/0W27mxH/+0gEBR1f7iVMOhafuZLM=) 2: B57678E8D73711EEAECFA720C4F9AE02.roa (hash: 1mdRwvV5n8x0UgBPlIBjHnwgQhIGSx8VQkbewDudiQM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AC415/BD1C935CD73211EEA183F50AC4F9AE02/qC5jMev0T1j8ZZmG2wVExmFfJvE.crl rsync://rpki.apnic.net/member_repository/A91AC415/BD1C935CD73211EEA183F50AC4F9AE02/qC5jMev0T1j8ZZmG2wVExmFfJvE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qC5jMev0T1j8ZZmG2wVExmFfJvE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 05:18:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 269 (0x10d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AC415, serialNumber=A82E6331EBF44F58FC659986DB0544C6615F26F1 Validity Not Before: Jul 19 05:18:06 2025 GMT Not After : Jul 26 05:18:06 2025 GMT Subject: CN=687b2a8f-c928 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ec:23:e7:d4:f7:7d:2c:67:dd:84:fd:2e:70: b5:59:20:32:90:1d:57:d7:8c:a4:31:46:ba:8b:ed: b4:b2:21:7a:0d:6f:6e:60:d6:5f:05:c7:ec:80:74: 9f:e9:b9:6c:f0:91:31:70:66:9b:1b:cb:3e:9b:27: 1c:f1:28:3d:82:f8:26:4e:7e:9e:2f:84:cb:d1:dc: 34:01:be:a7:6c:bc:72:b4:2c:5a:d2:3f:82:9b:04: 63:25:73:32:ac:2d:1f:8e:49:07:06:85:7b:37:c2: c3:b8:46:2b:19:84:fd:9f:a7:2d:22:eb:93:5e:1c: fd:45:0f:af:ab:d0:59:79:d7:51:70:53:fa:88:84: 38:47:e5:9b:63:fd:7f:89:0b:05:26:98:dc:10:99: 7b:5e:cc:ad:27:43:03:f3:a7:6f:72:c9:9d:7b:b3: 54:53:61:b0:08:bf:5c:1a:7d:e8:80:ca:38:df:75: 84:cd:62:e8:04:1e:6e:bf:3f:98:67:14:43:91:8c: 1f:85:6b:b0:7b:3c:0c:af:52:1f:44:44:0f:96:89: 77:ed:82:5e:f8:70:6a:1b:40:72:20:c7:7e:0c:66: 32:6e:cc:9b:93:70:2a:fb:ab:a5:05:6b:e4:94:e5: 2e:15:3b:cc:55:99:b0:c2:a2:5d:53:8a:b8:70:7c: 0c:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:F2:4D:67:07:AF:D9:14:2C:B1:BE:43:12:FB:0E:90:5B:BE:64:3D X509v3 Authority Key Identifier: keyid:A8:2E:63:31:EB:F4:4F:58:FC:65:99:86:DB:05:44:C6:61:5F:26:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AC415/BD1C935CD73211EEA183F50AC4F9AE02/qC5jMev0T1j8ZZmG2wVExmFfJvE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qC5jMev0T1j8ZZmG2wVExmFfJvE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC415/BD1C935CD73211EEA183F50AC4F9AE02/qC5jMev0T1j8ZZmG2wVExmFfJvE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cd:3b:fb:14:4b:06:4a:57:5c:5b:31:46:3a:22:7a:d8:a0:cb: 1d:13:52:3d:b7:21:40:57:ea:5e:10:e7:03:c7:bc:d3:e9:33: 50:63:5d:e8:10:9f:c1:3c:f1:0a:42:2a:a7:2e:7c:5c:6b:57: 8d:d2:1f:61:57:82:eb:c4:64:22:d3:36:55:b5:32:c1:23:25: 0e:3d:16:61:32:48:82:76:cf:2b:d3:71:7a:ba:61:94:de:78: dd:d8:29:16:01:c3:6c:d6:aa:35:6e:9d:29:4f:9f:4b:3f:14: 13:03:90:17:85:be:d5:eb:34:63:10:78:68:46:16:81:5c:12: d5:e3:2e:7c:8b:1f:ac:c9:af:f5:0b:ac:8c:dd:3e:48:32:ca: 28:1f:01:8a:09:70:af:94:c5:b1:bf:26:a4:d6:1a:30:b4:4e: a1:a5:5d:83:7c:79:de:87:e7:44:53:bc:0e:cc:87:d2:7c:4e: e1:6f:be:99:f1:1d:dd:c4:24:85:5f:17:c8:18:42:46:a5:64: 9d:9a:d1:a1:a9:34:f1:c2:9e:a7:57:4b:7e:84:a7:8e:b1:bd: 72:c9:c0:c5:b8:19:8f:6c:c3:ef:5e:2b:07:9d:a0:c9:ff:cc: 42:25:00:78:1b:01:a0:78:f1:e1:cb:e2:7b:f9:70:4a:e6:51: 38:cb:2a:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUM0MTUxMTAvBgNVBAUTKEE4MkU2MzMxRUJGNDRGNThGQzY1OTk4NkRCMDU0NEM2 NjE1RjI2RjEwHhcNMjUwNzE5MDUxODA2WhcNMjUwNzI2MDUxODA2WjAYMRYwFAYD VQQDEw02ODdiMmE4Zi1jOTI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuOwj59T3fSxn3YT9LnC1WSAykB1X14ykMUa6i+20siF6DW9uYNZfBcfsgHSf 6bls8JExcGabG8s+mycc8Sg9gvgmTn6eL4TL0dw0Ab6nbLxytCxa0j+CmwRjJXMy rC0fjkkHBoV7N8LDuEYrGYT9n6ctIuuTXhz9RQ+vq9BZeddRcFP6iIQ4R+WbY/1/ iQsFJpjcEJl7XsytJ0MD86dvcsmde7NUU2GwCL9cGn3ogMo433WEzWLoBB5uvz+Y ZxRDkYwfhWuwezwMr1IfREQPlol37YJe+HBqG0ByIMd+DGYybsybk3Aq+6ulBWvk lOUuFTvMVZmwwqJdU4q4cHwMSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFETyTWcH r9kULLG+QxL7DpBbvmQ9MB8GA1UdIwQYMBaAFKguYzHr9E9Y/GWZhtsFRMZhXybx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQzQxNS9CRDFDOTM1Q0Q3 MzIxMUVFQTE4M0Y1MEFDNEY5QUUwMi9xQzVqTWV2MFQxajhaWm1HMndWRXhtRmZK dkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FDNWpNZXYwVDFqOFpabUcyd1ZFeG1GZkp2RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QzQxNS9CRDFDOTM1Q0Q3MzIxMUVFQTE4M0Y1MEFDNEY5QUUwMi9xQzVqTWV2MFQx ajhaWm1HMndWRXhtRmZKdkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDNO/sUSwZKV1xbMUY6InrYoMsdE1I9tyFAV+peEOcDx7zT6TNQY13o EJ/BPPEKQiqnLnxca1eN0h9hV4LrxGQi0zZVtTLBIyUOPRZhMkiCds8r03F6umGU 3njd2CkWAcNs1qo1bp0pT59LPxQTA5AXhb7V6zRjEHhoRhaBXBLV4y58ix+sya/1 C6yM3T5IMsooHwGKCXCvlMWxvyak1howtE6hpV2DfHneh+dEU7wOzIfSfE7hb76Z 8R3dxCSFXxfIGEJGpWSdmtGhqTTxwp6nV0t+hKeOsb1yycDFuBmPbMPvXisHnaDJ /8xCJQB4GwGgePHhy+J7+XBK5lE4yyqG -----END CERTIFICATE-----Generated at Sun Jul 20 10:55:28 2025 by rpki-client