$ rpki-client -vvf rpki.apnic.net/member_repository/A91BEE0F/5E11148E9BA911EDA33EEC6BC4F9AE02/QRzJhRGOMuB6FVTV6boLTNKKSu8.mft File: QRzJhRGOMuB6FVTV6boLTNKKSu8.mft (raw, json) Hash identifier: fdWQQkkGcQpM8vaj8XFaruB/Q+tAUfncVDEga4/P7/8= Subject key identifier: D3:DF:38:1B:B3:44:17:90:81:0D:FE:0C:35:C3:82:0D:63:2D:66:E4 Authority key identifier: 41:1C:C9:85:11:8E:32:E0:7A:15:54:D5:E9:BA:0B:4C:D2:8A:4A:EF Certificate issuer: /CN=A91BEE0F/serialNumber=411CC985118E32E07A1554D5E9BA0B4CD28A4AEF Certificate serial: 01CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRzJhRGOMuB6FVTV6boLTNKKSu8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BEE0F/5E11148E9BA911EDA33EEC6BC4F9AE02/QRzJhRGOMuB6FVTV6boLTNKKSu8.mft Manifest number: 01CD Signing time: Sat 19 Jul 2025 03:01:59 +0000 Manifest this update: Sat 19 Jul 2025 03:01:58 +0000 Manifest next update: Sat 26 Jul 2025 03:01:58 +0000 Files and hashes: 1: QRzJhRGOMuB6FVTV6boLTNKKSu8.crl (hash: 15i8SE1MsF4OqiavwL02dvPaDi0qsBh8szuUzf6zpjY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BEE0F/5E11148E9BA911EDA33EEC6BC4F9AE02/QRzJhRGOMuB6FVTV6boLTNKKSu8.crl rsync://rpki.apnic.net/member_repository/A91BEE0F/5E11148E9BA911EDA33EEC6BC4F9AE02/QRzJhRGOMuB6FVTV6boLTNKKSu8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRzJhRGOMuB6FVTV6boLTNKKSu8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 03:01:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 461 (0x1cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BEE0F, serialNumber=411CC985118E32E07A1554D5E9BA0B4CD28A4AEF Validity Not Before: Jul 19 03:01:58 2025 GMT Not After : Jul 26 03:01:58 2025 GMT Subject: CN=687b0aa7-67f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:d4:7c:98:2e:d1:e9:52:e1:f2:97:de:a0:c8: b0:d7:64:b2:1c:9b:14:f8:ac:29:42:a9:e2:a1:c1: 07:22:04:1b:58:c9:8b:a4:bc:cb:22:8a:66:c8:21: 65:1d:d7:6c:9d:54:6b:94:d7:1e:9d:19:e7:c6:b2: ec:70:0c:40:fd:b1:83:db:67:c4:b3:3a:e9:38:b9: 8c:9c:b4:87:5d:e4:d3:21:4b:89:c5:b2:eb:03:58: bc:3c:04:42:3d:99:8c:bd:ec:e6:fb:f1:a3:2d:43: 4b:3d:83:4d:1f:3e:5a:9c:ff:09:29:49:07:02:90: df:a5:9a:0c:0f:32:fb:e6:0b:6b:eb:7a:da:b3:1e: ad:5e:4b:c3:36:7a:ea:44:71:c6:8c:d5:e2:cd:e2: 6c:bb:96:28:d4:22:85:09:c7:d3:31:d2:55:9a:22: bd:35:f7:cb:0a:b6:70:f4:81:e6:c0:8c:52:98:e9: 93:e1:32:fe:db:41:23:38:96:23:22:f9:35:db:02: fc:bb:db:1f:07:53:89:9f:f6:4f:fa:8c:ae:e9:dc: 3a:f8:d5:5e:e6:4e:dd:0d:a2:95:0f:4f:c6:bc:f4: b6:e4:0e:52:9d:fb:01:6e:19:ad:3a:e8:1d:65:d9: 2c:a4:ca:ef:01:63:bd:be:ae:de:24:60:c5:93:dc: 98:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:DF:38:1B:B3:44:17:90:81:0D:FE:0C:35:C3:82:0D:63:2D:66:E4 X509v3 Authority Key Identifier: keyid:41:1C:C9:85:11:8E:32:E0:7A:15:54:D5:E9:BA:0B:4C:D2:8A:4A:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BEE0F/5E11148E9BA911EDA33EEC6BC4F9AE02/QRzJhRGOMuB6FVTV6boLTNKKSu8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRzJhRGOMuB6FVTV6boLTNKKSu8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEE0F/5E11148E9BA911EDA33EEC6BC4F9AE02/QRzJhRGOMuB6FVTV6boLTNKKSu8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:28:60:6b:a6:05:0a:44:a9:3c:cf:b8:1e:19:fe:1b:d8:e1: f4:f8:67:b6:3e:fb:88:37:8b:94:ef:c2:98:e1:ba:c1:a6:e6: 6c:e8:c1:b2:1f:d4:b5:a2:4d:57:aa:12:8e:1d:72:b7:40:9a: b2:d0:af:03:24:b3:a2:13:59:51:7e:9e:fc:36:93:41:11:99: 5d:35:4a:19:70:6a:63:cf:a9:e3:f4:8c:af:cf:c3:0f:c6:af: 6d:22:73:f9:56:6e:1f:78:9f:a0:f0:de:c7:7b:d0:5e:75:e5: 66:e1:65:13:ea:ce:f4:79:66:f5:d5:85:58:63:77:72:aa:93: e3:b9:14:92:e0:c9:31:d5:b0:05:58:84:b4:53:cb:f1:70:b6: d8:fe:c3:c0:d2:e5:6e:92:7e:7d:82:7e:a0:72:a8:b0:57:3b: 11:17:4a:1c:e7:20:05:b8:b1:4d:39:d9:74:a6:b3:80:5d:fb: 28:42:c5:5d:fe:56:2d:1f:7c:b6:e2:d6:83:7b:70:83:35:0b: de:c9:57:ca:46:5c:b3:d0:90:75:b5:02:0b:55:f1:65:30:95: 0a:52:4e:b3:cf:da:b5:8d:5a:ce:4a:ac:c3:09:8c:b0:57:7b: 7a:01:ff:78:79:18:df:8a:cb:82:4b:15:79:73:db:ca:3f:32: bf:df:4a:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAc0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkVFMEYxMTAvBgNVBAUTKDQxMUNDOTg1MTE4RTMyRTA3QTE1NTRENUU5QkEwQjRD RDI4QTRBRUYwHhcNMjUwNzE5MDMwMTU4WhcNMjUwNzI2MDMwMTU4WjAYMRYwFAYD VQQDEw02ODdiMGFhNy02N2YxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAytR8mC7R6VLh8pfeoMiw12SyHJsU+KwpQqniocEHIgQbWMmLpLzLIopmyCFl HddsnVRrlNcenRnnxrLscAxA/bGD22fEszrpOLmMnLSHXeTTIUuJxbLrA1i8PARC PZmMvezm+/GjLUNLPYNNHz5anP8JKUkHApDfpZoMDzL75gtr63rasx6tXkvDNnrq RHHGjNXizeJsu5Yo1CKFCcfTMdJVmiK9NffLCrZw9IHmwIxSmOmT4TL+20EjOJYj Ivk12wL8u9sfB1OJn/ZP+oyu6dw6+NVe5k7dDaKVD0/GvPS25A5SnfsBbhmtOugd ZdkspMrvAWO9vq7eJGDFk9yYuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNPfOBuz RBeQgQ3+DDXDgg1jLWbkMB8GA1UdIwQYMBaAFEEcyYURjjLgehVU1em6C0zSikrv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRUUwRi81RTExMTQ4RTlC QTkxMUVEQTMzRUVDNkJDNEY5QUUwMi9RUnpKaFJHT011QjZGVlRWNmJvTFROS0tT dTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FSekpoUkdPTXVCNkZWVFY2Ym9MVE5LS1N1OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RUUwRi81RTExMTQ4RTlCQTkxMUVEQTMzRUVDNkJDNEY5QUUwMi9RUnpKaFJHT011 QjZGVlRWNmJvTFROS0tTdTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCoKGBrpgUKRKk8z7geGf4b2OH0+Ge2PvuIN4uU78KY4brBpuZs6MGy H9S1ok1XqhKOHXK3QJqy0K8DJLOiE1lRfp78NpNBEZldNUoZcGpjz6nj9Iyvz8MP xq9tInP5Vm4feJ+g8N7He9BedeVm4WUT6s70eWb11YVYY3dyqpPjuRSS4Mkx1bAF WIS0U8vxcLbY/sPA0uVukn59gn6gcqiwVzsRF0oc5yAFuLFNOdl0prOAXfsoQsVd /lYtH3y24taDe3CDNQveyVfKRlyz0JB1tQILVfFlMJUKUk6zz9q1jVrOSqzDCYyw V3t6Af94eRjfisuCSxV5c9vKPzK/30rx -----END CERTIFICATE-----Generated at Sun Jul 20 07:32:19 2025 by rpki-client