$ rpki-client -vvf rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/quxIh3HXuUGFyKkP420pfedshLw.mft File: quxIh3HXuUGFyKkP420pfedshLw.mft (raw, json) Hash identifier: 3EsWIYGhv7kA5cloQJn+aC0jAWk4i1BDW0qAO+7oAnY= Subject key identifier: 11:DF:80:72:4A:8C:50:0C:CB:AE:B7:D2:B1:B9:04:97:61:31:59:E0 Authority key identifier: AA:EC:48:87:71:D7:B9:41:85:C8:A9:0F:E3:6D:29:7D:E7:6C:84:BC Certificate issuer: /CN=A91C60A5/serialNumber=AAEC488771D7B94185C8A90FE36D297DE76C84BC Certificate serial: 98 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/quxIh3HXuUGFyKkP420pfedshLw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/quxIh3HXuUGFyKkP420pfedshLw.mft Manifest number: 92 Signing time: Sat 19 Jul 2025 06:46:32 +0000 Manifest this update: Sat 19 Jul 2025 06:46:32 +0000 Manifest next update: Sat 26 Jul 2025 06:46:32 +0000 Files and hashes: 1: quxIh3HXuUGFyKkP420pfedshLw.crl (hash: p8WeJJ3EZbJhTBWgkVSLZirh0D1CbuWvwkZ7faEK5xc=) 2: 7CEBE3D254CC11F0A18D9383C4F9AE02.roa (hash: MhC1AUnnrCM4ujHXiGVbZ9ds9R03Dh/i7EuqXSdVjoQ=) 3: 0A6CBB6E54CD11F0A3E48084C4F9AE02.roa (hash: zutu0HkO4ucOHeH/2JeJGru547OHviuXA/RDD+leiEs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/quxIh3HXuUGFyKkP420pfedshLw.crl rsync://rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/quxIh3HXuUGFyKkP420pfedshLw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/quxIh3HXuUGFyKkP420pfedshLw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 06:46:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 152 (0x98) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C60A5, serialNumber=AAEC488771D7B94185C8A90FE36D297DE76C84BC Validity Not Before: Jul 19 06:46:32 2025 GMT Not After : Jul 26 06:46:32 2025 GMT Subject: CN=687b3f48-49ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:98:a1:9d:5d:fd:8d:92:3b:e9:50:05:ee:ad: bd:e5:ab:ba:57:5e:6a:91:ba:a0:25:53:8f:4c:1b: 06:dc:d9:a6:34:f2:84:e8:d7:0a:51:60:c9:31:da: 72:93:2d:be:34:0d:f5:ad:99:66:40:7d:b7:ec:4d: b1:43:13:2b:f1:79:a4:35:22:d7:1b:c8:c3:aa:f6: 88:05:b8:6f:b0:30:b3:c5:fa:8f:5f:ed:db:a4:bc: c8:87:0f:d6:7a:ba:d3:74:d6:5c:d3:86:5c:9c:e3: 96:13:02:22:86:da:98:01:81:e5:f4:77:e6:8f:cb: 30:a4:01:a3:d4:d0:60:04:29:aa:40:dd:7c:4a:0a: 1a:e2:a4:a6:3f:72:f3:e3:d4:38:8c:ab:42:3e:6d: b8:04:e1:0d:09:e7:86:cd:e7:90:43:9e:8e:07:2b: 70:af:a0:7b:96:77:87:2c:87:7a:0e:4f:8a:59:d2: 25:41:f8:64:d5:bd:ab:5a:8a:ee:66:4e:46:88:9f: ab:b8:58:c7:3f:f3:8e:b6:9a:1d:71:62:ba:25:7a: a5:b9:d5:14:59:15:f4:c6:fd:1e:10:11:fa:06:b1: ef:55:be:56:91:46:e8:8c:c3:6c:d5:07:31:ba:52: 41:98:fb:e0:0e:77:25:04:aa:aa:b3:20:a8:83:f2: 01:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:DF:80:72:4A:8C:50:0C:CB:AE:B7:D2:B1:B9:04:97:61:31:59:E0 X509v3 Authority Key Identifier: keyid:AA:EC:48:87:71:D7:B9:41:85:C8:A9:0F:E3:6D:29:7D:E7:6C:84:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/quxIh3HXuUGFyKkP420pfedshLw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/quxIh3HXuUGFyKkP420pfedshLw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/quxIh3HXuUGFyKkP420pfedshLw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:ad:c4:24:cd:5f:63:16:ce:5c:46:35:fb:f3:e5:39:53:13: ff:40:ad:48:3a:2f:ac:ac:30:65:13:39:7e:38:93:07:34:99: e2:56:e9:3d:4f:7e:5e:0e:5b:2a:b7:d5:ba:5d:f9:47:bf:b5: 42:38:73:df:38:f8:74:01:0c:de:a7:54:2f:43:31:b8:c1:05: bb:b5:aa:57:9e:df:a0:2e:ba:57:5d:af:89:12:9d:41:34:bf: 68:c8:ae:04:35:73:e9:df:31:35:26:b0:93:f2:fe:17:09:cc: 4b:4e:c1:37:b4:47:b1:5a:64:49:f9:d2:13:e0:0a:5b:5d:87: 4a:fe:cf:49:a0:33:bb:fc:54:2d:4d:ac:3a:5c:75:0f:da:ed: a1:b3:e8:e5:0f:fd:b8:95:63:bc:08:bf:1e:14:5b:28:31:7a: c3:fa:b3:ae:ee:a4:d4:16:e6:44:31:06:10:62:76:10:74:b0: f1:d0:0e:c6:01:91:1b:38:0a:21:ec:da:9f:88:bb:de:2d:3b: 39:3a:e5:2d:e7:8c:83:e6:45:54:0f:8d:79:ca:52:a5:77:20: 68:ee:c1:cc:6f:17:dc:b7:c4:d4:5e:43:18:07:ae:89:30:03: 93:79:9c:0b:98:dc:ab:83:9a:06:a6:01:85:1c:83:af:24:37: 02:d8:e2:56 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzYwQTUxMTAvBgNVBAUTKEFBRUM0ODg3NzFEN0I5NDE4NUM4QTkwRkUzNkQyOTdE RTc2Qzg0QkMwHhcNMjUwNzE5MDY0NjMyWhcNMjUwNzI2MDY0NjMyWjAYMRYwFAYD VQQDEw02ODdiM2Y0OC00OWNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuZihnV39jZI76VAF7q295au6V15qkbqgJVOPTBsG3NmmNPKE6NcKUWDJMdpy ky2+NA31rZlmQH237E2xQxMr8XmkNSLXG8jDqvaIBbhvsDCzxfqPX+3bpLzIhw/W errTdNZc04ZcnOOWEwIihtqYAYHl9Hfmj8swpAGj1NBgBCmqQN18Sgoa4qSmP3Lz 49Q4jKtCPm24BOENCeeGzeeQQ56OBytwr6B7lneHLId6Dk+KWdIlQfhk1b2rWoru Zk5GiJ+ruFjHP/OOtpodcWK6JXqludUUWRX0xv0eEBH6BrHvVb5WkUbojMNs1Qcx ulJBmPvgDnclBKqqsyCog/IBTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBHfgHJK jFAMy6630rG5BJdhMVngMB8GA1UdIwQYMBaAFKrsSIdx17lBhcipD+NtKX3nbIS8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjBBNS85OTdCMzY2RTkx RjAxMUVGQjY5NjVDMjRDNEY5QUUwMi9xdXhJaDNIWHVVR0Z5S2tQNDIwcGZlZHNo THcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3F1eEloM0hYdVVHRnlLa1A0MjBwZmVkc2hMdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NjBBNS85OTdCMzY2RTkxRjAxMUVGQjY5NjVDMjRDNEY5QUUwMi9xdXhJaDNIWHVV R0Z5S2tQNDIwcGZlZHNoTHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+rcQkzV9jFs5cRjX78+U5UxP/QK1IOi+srDBlEzl+OJMHNJniVuk9 T35eDlsqt9W6XflHv7VCOHPfOPh0AQzep1QvQzG4wQW7tapXnt+gLrpXXa+JEp1B NL9oyK4ENXPp3zE1JrCT8v4XCcxLTsE3tEexWmRJ+dIT4ApbXYdK/s9JoDO7/FQt Taw6XHUP2u2hs+jlD/24lWO8CL8eFFsoMXrD+rOu7qTUFuZEMQYQYnYQdLDx0A7G AZEbOAoh7NqfiLveLTs5OuUt54yD5kVUD415ylKldyBo7sHMbxfct8TUXkMYB66J MAOTeZwLmNyrg5oGpgGFHIOvJDcC2OJW -----END CERTIFICATE-----Generated at Sun Jul 20 10:14:49 2025 by rpki-client