$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB492/2C0B32D8093611F0A2842D57C4F9AE02/QOS9Nq4VB3_lmYXRNw1dZGcKiNk.mft File: QOS9Nq4VB3_lmYXRNw1dZGcKiNk.mft (raw, json) Hash identifier: MiFq5c+qiUcR1wucb7bQo2aAbhr6rTFj2zTv1D1U0LU= Subject key identifier: 53:95:A8:9E:54:25:99:0B:8C:A1:07:80:4D:57:37:6F:29:5C:85:B6 Authority key identifier: 40:E4:BD:36:AE:15:07:7F:E5:99:85:D1:37:0D:5D:64:67:0A:88:D9 Certificate issuer: /CN=A91BB492/serialNumber=40E4BD36AE15077FE59985D1370D5D64670A88D9 Certificate serial: 3C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOS9Nq4VB3_lmYXRNw1dZGcKiNk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB492/2C0B32D8093611F0A2842D57C4F9AE02/QOS9Nq4VB3_lmYXRNw1dZGcKiNk.mft Manifest number: 3C Signing time: Sat 19 Jul 2025 07:48:14 +0000 Manifest this update: Sat 19 Jul 2025 07:48:13 +0000 Manifest next update: Sat 26 Jul 2025 07:48:13 +0000 Files and hashes: 1: QOS9Nq4VB3_lmYXRNw1dZGcKiNk.crl (hash: Efngj7BQ9MMDUDKDbcDjGyN78TAJwZVu3apclwbXRq4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB492/2C0B32D8093611F0A2842D57C4F9AE02/QOS9Nq4VB3_lmYXRNw1dZGcKiNk.crl rsync://rpki.apnic.net/member_repository/A91BB492/2C0B32D8093611F0A2842D57C4F9AE02/QOS9Nq4VB3_lmYXRNw1dZGcKiNk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOS9Nq4VB3_lmYXRNw1dZGcKiNk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 07:48:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60 (0x3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB492, serialNumber=40E4BD36AE15077FE59985D1370D5D64670A88D9 Validity Not Before: Jul 19 07:48:13 2025 GMT Not After : Jul 26 07:48:13 2025 GMT Subject: CN=687b4dbe-f263 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:c5:a2:04:24:b8:a1:fb:05:08:f5:f5:42:b2: 8f:d4:f8:d8:3e:fd:18:f8:ec:a8:a2:37:9f:08:e1: dc:3b:a6:26:e6:e8:f4:3c:44:80:10:55:2a:18:61: 66:a1:a2:a5:41:cb:96:1d:3e:fa:48:7b:79:b1:8f: 13:c7:49:cd:7c:e1:1f:41:45:6b:cc:5d:89:7d:eb: fd:fa:0a:ff:4b:d0:25:44:0b:dd:cb:04:ec:b4:fa: d1:05:0a:2f:10:9f:02:cb:74:43:74:d2:86:7b:04: 48:9c:49:e7:25:97:74:53:05:c4:77:a2:ff:8d:ea: 1f:57:91:15:52:cb:6d:1e:6d:3d:08:6b:5a:cc:85: 3e:15:20:77:f3:b5:e6:8c:ad:af:86:c8:e7:2b:00: c8:d4:75:f2:ea:f3:81:8b:2d:9f:21:e2:e9:43:c3: 5e:01:28:b1:f2:f8:2e:8a:a7:f2:b8:d0:6e:95:f0: 0b:81:c5:ac:40:38:11:04:ac:0d:b9:a1:ce:dd:e8: df:3b:e5:70:8e:56:19:12:cc:55:c8:e4:5d:1f:d9: bc:d0:b3:ee:f7:89:72:14:20:d8:6f:53:6e:a5:be: bb:2b:e2:d2:7b:ac:62:e5:b1:7e:33:07:b2:ad:a1: 4e:fd:4b:33:39:bc:47:7e:89:da:0c:72:4b:50:df: ae:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:95:A8:9E:54:25:99:0B:8C:A1:07:80:4D:57:37:6F:29:5C:85:B6 X509v3 Authority Key Identifier: keyid:40:E4:BD:36:AE:15:07:7F:E5:99:85:D1:37:0D:5D:64:67:0A:88:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB492/2C0B32D8093611F0A2842D57C4F9AE02/QOS9Nq4VB3_lmYXRNw1dZGcKiNk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOS9Nq4VB3_lmYXRNw1dZGcKiNk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB492/2C0B32D8093611F0A2842D57C4F9AE02/QOS9Nq4VB3_lmYXRNw1dZGcKiNk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:a1:ec:81:db:60:a9:f2:64:f8:dc:6d:71:c8:48:35:7b:ce: f5:58:63:68:74:fb:87:3f:c1:35:29:14:e5:1f:ec:01:6a:05: cc:d5:ff:c5:78:50:5c:8c:b4:54:fe:74:9c:49:fe:6a:fb:a4: a2:1c:0c:6f:6c:ac:0b:2b:d2:68:1a:d5:6b:49:a5:b6:98:64: b2:df:1e:45:0d:69:f6:f3:60:a9:dd:4a:99:ac:ab:26:4f:31: 19:14:1a:f7:f2:d8:0b:f9:8e:94:0d:f0:84:b2:32:a2:32:04: eb:b0:2d:9e:0a:ec:c2:fd:39:07:00:e1:40:62:c6:c9:19:a3: da:6a:31:05:d0:cb:87:2c:cd:ce:34:5a:58:b9:70:b3:75:cb: 59:04:2d:82:43:33:1d:4b:f5:40:6e:15:63:32:8e:8a:f3:1b: 67:aa:4d:66:79:b6:66:96:0e:c1:85:95:27:50:74:e8:10:5c: ca:9e:35:2f:d0:9b:df:40:70:bf:20:de:ad:15:7e:e3:62:4f: 48:32:ee:80:1d:9c:67:86:48:81:c5:39:e8:ff:ea:84:19:30: 8d:1d:fb:d0:31:8d:2f:14:9c:11:70:55:09:f7:5f:93:8f:dc: f3:fe:c1:6e:a8:cb:a2:1f:3f:58:56:f9:c8:5e:b6:a0:22:29: 6b:ab:60:89 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC QjQ5MjExMC8GA1UEBRMoNDBFNEJEMzZBRTE1MDc3RkU1OTk4NUQxMzcwRDVENjQ2 NzBBODhEOTAeFw0yNTA3MTkwNzQ4MTNaFw0yNTA3MjYwNzQ4MTNaMBgxFjAUBgNV BAMTDTY4N2I0ZGJlLWYyNjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDvxaIEJLih+wUI9fVCso/U+Ng+/Rj47KiiN58I4dw7pibm6PQ8RIAQVSoYYWah oqVBy5YdPvpIe3mxjxPHSc184R9BRWvMXYl96/36Cv9L0CVEC93LBOy0+tEFCi8Q nwLLdEN00oZ7BEicSecll3RTBcR3ov+N6h9XkRVSy20ebT0Ia1rMhT4VIHfzteaM ra+GyOcrAMjUdfLq84GLLZ8h4ulDw14BKLHy+C6Kp/K40G6V8AuBxaxAOBEErA25 oc7d6N875XCOVhkSzFXI5F0f2bzQs+73iXIUINhvU26lvrsr4tJ7rGLlsX4zB7Kt oU79SzM5vEd+idoMcktQ367fAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUU5WonlQl mQuMoQeATVc3bylchbYwHwYDVR0jBBgwFoAUQOS9Nq4VB3/lmYXRNw1dZGcKiNkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJCNDkyLzJDMEIzMkQ4MDkz NjExRjBBMjg0MkQ1N0M0RjlBRTAyL1FPUzlOcTRWQjNfbG1ZWFJOdzFkWkdjS2lO ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUU9TOU5xNFZCM19sbVlYUk53MWRaR2NLaU5rLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJC NDkyLzJDMEIzMkQ4MDkzNjExRjBBMjg0MkQ1N0M0RjlBRTAyL1FPUzlOcTRWQjNf bG1ZWFJOdzFkWkdjS2lOay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGah7IHbYKnyZPjcbXHISDV7zvVYY2h0+4c/wTUpFOUf7AFqBczV/8V4 UFyMtFT+dJxJ/mr7pKIcDG9srAsr0mga1WtJpbaYZLLfHkUNafbzYKndSpmsqyZP MRkUGvfy2Av5jpQN8ISyMqIyBOuwLZ4K7ML9OQcA4UBixskZo9pqMQXQy4cszc40 Wli5cLN1y1kELYJDMx1L9UBuFWMyjorzG2eqTWZ5tmaWDsGFlSdQdOgQXMqeNS/Q m99AcL8g3q0VfuNiT0gy7oAdnGeGSIHFOej/6oQZMI0d+9AxjS8UnBFwVQn3X5OP 3PP+wW6oy6IfP1hW+chetqAiKWurYIk= -----END CERTIFICATE-----Generated at Sun Jul 20 04:23:51 2025 by rpki-client