$ rpki-client -vvf rpki.apnic.net/member_repository/A91B72D9/AA23FA96697111ECB625930CC4F9AE02/QeXcIVUGn_MX5e44x1t4icIhl-M.mft File: QeXcIVUGn_MX5e44x1t4icIhl-M.mft (raw, json) Hash identifier: PzDYGXoOjyeJqVZEmtb5Oj2OObowTpjX7ihzZ15pHaI= Subject key identifier: CE:86:53:50:67:A6:24:C7:12:97:3F:6A:B7:7A:F5:53:41:17:0C:9C Authority key identifier: 41:E5:DC:21:55:06:9F:F3:17:E5:EE:38:C7:5B:78:89:C2:21:97:E3 Certificate issuer: /CN=A91B72D9/serialNumber=41E5DC2155069FF317E5EE38C75B7889C22197E3 Certificate serial: 045A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QeXcIVUGn_MX5e44x1t4icIhl-M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B72D9/AA23FA96697111ECB625930CC4F9AE02/QeXcIVUGn_MX5e44x1t4icIhl-M.mft Manifest number: 0446 Signing time: Wed 23 Jul 2025 00:44:46 +0000 Manifest this update: Wed 23 Jul 2025 00:44:45 +0000 Manifest next update: Wed 30 Jul 2025 00:44:45 +0000 Files and hashes: 1: QeXcIVUGn_MX5e44x1t4icIhl-M.crl (hash: wdgelUQVlHJXIc84ut+kShNnjGhgwpJNzPtG7I19rlw=) 2: 43E6BE1AF53411EF9DE3BD34C4F9AE02.roa (hash: d0073l1e/pxbjtRy8RJAwD/f1Qu4geicKXKAmauL91Y=) 3: 4FD9C050F53411EFBF7FCA34C4F9AE02.roa (hash: UdXjbAhF6oniMP9h+eQndIWcxlYyRMTp0LAX//sl/pw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B72D9/AA23FA96697111ECB625930CC4F9AE02/QeXcIVUGn_MX5e44x1t4icIhl-M.crl rsync://rpki.apnic.net/member_repository/A91B72D9/AA23FA96697111ECB625930CC4F9AE02/QeXcIVUGn_MX5e44x1t4icIhl-M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QeXcIVUGn_MX5e44x1t4icIhl-M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Jul 2025 00:40:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1114 (0x45a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B72D9, serialNumber=41E5DC2155069FF317E5EE38C75B7889C22197E3 Validity Not Before: Jul 23 00:44:45 2025 GMT Not After : Jul 30 00:44:45 2025 GMT Subject: CN=6880307e-4350 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:f6:56:79:42:e8:53:99:49:d4:a2:27:fd:aa: 3b:5a:9a:1d:89:c1:fe:8b:d3:93:98:7d:81:e7:4c: 60:65:58:e3:87:0c:80:0d:51:33:ad:6e:87:ad:82: c0:82:4f:a0:da:b9:cf:a7:d8:45:bf:20:6c:09:e1: 19:87:42:99:e3:43:4e:13:3d:99:ba:42:64:46:dd: 62:f9:f8:1d:eb:32:be:9f:22:12:d5:b2:45:ed:50: 14:4f:27:30:c1:9e:2a:2d:90:88:b3:c8:b8:76:ba: b6:c0:49:39:5c:16:6a:ae:88:ef:1f:08:8b:44:8c: 30:46:ce:87:cb:20:cf:d9:77:f3:1f:b0:56:4e:c2: 09:2d:fe:03:54:59:00:75:00:8c:35:05:98:89:0a: 06:eb:15:3e:91:ff:73:20:59:08:2a:e4:00:ea:c7: ea:ed:86:27:de:7f:aa:22:cf:db:b6:8d:f1:4d:79: 1a:8e:8d:c7:1b:95:4c:cd:69:f9:fd:ab:07:b2:49: 91:d8:b5:b6:f9:4c:05:be:0d:94:2c:1a:77:b8:48: 34:b2:ac:e9:fd:b6:f1:81:f0:81:59:a9:25:67:6a: f6:30:3c:64:86:a9:d8:6b:36:7c:2d:c8:cd:32:5f: 7b:25:67:72:1b:1c:25:c1:2a:13:30:22:3f:4b:cd: cf:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:86:53:50:67:A6:24:C7:12:97:3F:6A:B7:7A:F5:53:41:17:0C:9C X509v3 Authority Key Identifier: keyid:41:E5:DC:21:55:06:9F:F3:17:E5:EE:38:C7:5B:78:89:C2:21:97:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B72D9/AA23FA96697111ECB625930CC4F9AE02/QeXcIVUGn_MX5e44x1t4icIhl-M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QeXcIVUGn_MX5e44x1t4icIhl-M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B72D9/AA23FA96697111ECB625930CC4F9AE02/QeXcIVUGn_MX5e44x1t4icIhl-M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:5b:f4:a6:78:9f:82:8d:b9:ff:3a:c9:83:1b:bb:d0:0f:13: 1d:67:65:b2:bf:75:97:26:01:6f:90:36:0c:65:92:e2:28:1c: 88:54:a6:ff:2d:9e:3b:9d:2d:1e:41:13:d0:4b:35:51:21:7d: dd:5b:24:88:78:ff:d2:07:f3:50:a1:d2:5f:01:95:81:bf:19: 90:d8:3c:36:a3:5f:38:0f:ab:e1:39:71:16:09:78:17:3c:4e: 58:0b:79:56:3d:6e:0e:cc:85:b8:fd:6c:d4:35:fa:71:2b:47: 8e:91:18:b8:14:ba:0d:a9:a9:1d:a4:ca:4b:12:0e:03:0c:9d: 85:9d:b2:cf:5a:0c:e3:46:0b:1b:e0:03:c0:d5:15:4d:01:f4: d6:f6:07:68:96:c9:e3:fb:90:58:8f:08:80:35:62:9f:b9:f3: 89:6a:47:83:10:1e:ff:7b:6e:7b:fb:2a:7b:93:d0:55:db:93: eb:ca:19:19:77:87:06:f4:fd:23:5b:6a:f9:de:4e:27:73:00: 1d:00:1d:b3:33:99:0a:7c:32:d1:2a:2d:4d:47:f7:66:91:71: f7:be:1f:83:8f:b3:d9:93:6d:be:16:c8:6d:46:d0:96:91:20: e5:d9:03:14:ec:9f:dc:00:12:23:76:8d:b7:60:58:84:dc:f2: ef:c1:85:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBFowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjcyRDkxMTAvBgNVBAUTKDQxRTVEQzIxNTUwNjlGRjMxN0U1RUUzOEM3NUI3ODg5 QzIyMTk3RTMwHhcNMjUwNzIzMDA0NDQ1WhcNMjUwNzMwMDA0NDQ1WjAYMRYwFAYD VQQDEw02ODgwMzA3ZS00MzUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyfZWeULoU5lJ1KIn/ao7WpodicH+i9OTmH2B50xgZVjjhwyADVEzrW6HrYLA gk+g2rnPp9hFvyBsCeEZh0KZ40NOEz2ZukJkRt1i+fgd6zK+nyIS1bJF7VAUTycw wZ4qLZCIs8i4drq2wEk5XBZqrojvHwiLRIwwRs6HyyDP2XfzH7BWTsIJLf4DVFkA dQCMNQWYiQoG6xU+kf9zIFkIKuQA6sfq7YYn3n+qIs/bto3xTXkajo3HG5VMzWn5 /asHskmR2LW2+UwFvg2ULBp3uEg0sqzp/bbxgfCBWaklZ2r2MDxkhqnYazZ8LcjN Ml97JWdyGxwlwSoTMCI/S83PSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM6GU1Bn piTHEpc/ard69VNBFwycMB8GA1UdIwQYMBaAFEHl3CFVBp/zF+XuOMdbeInCIZfj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzJEOS9BQTIzRkE5NjY5 NzExMUVDQjYyNTkzMENDNEY5QUUwMi9RZVhjSVZVR25fTVg1ZTQ0eDF0NGljSWhs LU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FlWGNJVlVHbl9NWDVlNDR4MXQ0aWNJaGwtTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NzJEOS9BQTIzRkE5NjY5NzExMUVDQjYyNTkzMENDNEY5QUUwMi9RZVhjSVZVR25f TVg1ZTQ0eDF0NGljSWhsLU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSW/SmeJ+Cjbn/OsmDG7vQDxMdZ2Wyv3WXJgFvkDYMZZLiKByIVKb/ LZ47nS0eQRPQSzVRIX3dWySIeP/SB/NQodJfAZWBvxmQ2Dw2o184D6vhOXEWCXgX PE5YC3lWPW4OzIW4/WzUNfpxK0eOkRi4FLoNqakdpMpLEg4DDJ2FnbLPWgzjRgsb 4APA1RVNAfTW9gdolsnj+5BYjwiANWKfufOJakeDEB7/e257+yp7k9BV25PryhkZ d4cG9P0jW2r53k4ncwAdAB2zM5kKfDLRKi1NR/dmkXH3vh+Dj7PZk22+FshtRtCW kSDl2QMU7J/cABIjdo23YFiE3PLvwYVg -----END CERTIFICATE-----Generated at Wed Jul 23 02:41:35 2025 by rpki-client