$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/q2foL8hqrKgqz_jcNkXNcWEBP3Y.mft File: q2foL8hqrKgqz_jcNkXNcWEBP3Y.mft (raw, json) Hash identifier: pC5qCO2yqkWvjjE3a1wCwK81XhUruYFR5oNTQc3xlfE= Subject key identifier: 99:D8:F8:62:B7:D4:ED:0B:5F:FE:AB:C6:7C:E7:28:A5:C6:59:D9:25 Authority key identifier: AB:67:E8:2F:C8:6A:AC:A8:2A:CF:F8:DC:36:45:CD:71:61:01:3F:76 Certificate issuer: /CN=A91D1E4C/serialNumber=AB67E82FC86AACA82ACFF8DC3645CD7161013F76 Certificate serial: 030B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2foL8hqrKgqz_jcNkXNcWEBP3Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/q2foL8hqrKgqz_jcNkXNcWEBP3Y.mft Manifest number: 0B27 Signing time: Fri 18 Jul 2025 21:00:56 +0000 Manifest this update: Fri 18 Jul 2025 21:00:56 +0000 Manifest next update: Fri 25 Jul 2025 21:00:56 +0000 Files and hashes: 1: q2foL8hqrKgqz_jcNkXNcWEBP3Y.crl (hash: CEpyjTtG8olnQ1sopVTjOa4yVt/6iPW53jLo0R0jCjA=) 2: 743B3188E57211ECBC81A87EC4F9AE02.roa (hash: ukecD2pxHGlgKyIFMtJzbdcdaqfvaNOkIkVTe1ei8KE=) 3: FC358296CFA011EDA4AC5B18C4F9AE02.roa (hash: Kfs6t0RkTXatIBLPnXrK64Ffg/DQYtGVawG99/fXQls=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/q2foL8hqrKgqz_jcNkXNcWEBP3Y.crl rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/q2foL8hqrKgqz_jcNkXNcWEBP3Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2foL8hqrKgqz_jcNkXNcWEBP3Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 21:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 779 (0x30b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1E4C, serialNumber=AB67E82FC86AACA82ACFF8DC3645CD7161013F76 Validity Not Before: Jul 18 21:00:56 2025 GMT Not After : Jul 25 21:00:56 2025 GMT Subject: CN=687ab608-f0e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:d8:43:dd:1f:4e:ee:3b:3c:3b:3a:20:eb:40: b7:45:8e:ad:94:23:50:f0:54:47:12:39:0d:76:92: 3d:18:b2:e1:75:a6:b0:1a:13:d0:58:8e:fe:42:50: 68:fb:b0:a2:81:02:25:2d:8e:52:fb:8d:61:d0:49: 49:3c:b3:eb:6f:37:d0:e7:0a:7b:8e:d1:56:b6:69: 6d:40:23:8e:e1:2b:c4:40:53:23:ec:da:c5:7c:76: 63:c1:f3:31:72:ba:37:1f:45:29:66:04:99:ab:bd: 08:44:da:86:e4:fa:f3:9b:7e:c2:a1:6c:88:5d:12: 5b:c3:d5:92:5c:20:43:5f:09:ec:cc:d8:ce:02:89: 50:36:1a:de:09:a7:97:c6:ce:42:ff:85:5d:f4:b5: 7f:b7:73:94:fb:e7:ba:b3:b6:19:2e:7c:5c:58:cb: e7:03:a8:0d:d7:2f:90:ad:86:04:1b:30:f0:a7:ad: f2:3f:c5:dc:3a:e2:c1:8f:e9:14:3f:53:3b:7e:a9: bb:f9:b5:68:1c:e3:c4:e6:01:ae:fa:67:5f:dc:53: 7c:79:43:94:7f:11:f9:e7:cf:20:3d:97:12:a1:b4: 24:4e:a4:15:af:ea:25:c0:97:e1:b7:c9:3d:4c:d6: 79:34:cd:f0:08:72:58:bc:17:45:85:4f:34:24:c0: a7:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:D8:F8:62:B7:D4:ED:0B:5F:FE:AB:C6:7C:E7:28:A5:C6:59:D9:25 X509v3 Authority Key Identifier: keyid:AB:67:E8:2F:C8:6A:AC:A8:2A:CF:F8:DC:36:45:CD:71:61:01:3F:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/q2foL8hqrKgqz_jcNkXNcWEBP3Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2foL8hqrKgqz_jcNkXNcWEBP3Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/q2foL8hqrKgqz_jcNkXNcWEBP3Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:34:c7:c9:24:d3:bc:b8:32:84:0b:b6:b3:c5:20:b7:04:cf: 43:82:fc:ae:17:b7:e4:c9:d5:78:95:7c:7a:58:a4:e9:25:5b: 39:ad:79:3d:78:81:63:f1:03:15:b9:8b:50:d2:ff:95:8a:13: f1:de:95:a6:ca:76:fe:c2:58:ae:dd:f1:6f:2c:12:f6:22:79: 4d:1b:a8:3a:c5:4d:8a:f7:15:85:2e:c4:ac:d2:ad:dc:e2:d7: 15:d8:35:69:9a:1a:a1:8b:fb:65:81:24:0d:5a:3b:f8:2d:1a: 8e:e0:2b:2c:4a:86:86:39:3b:a4:3b:64:05:9b:cc:5f:9a:c4: 03:1d:48:56:e9:34:7d:c8:fa:a4:58:27:f1:9d:d0:1f:60:97: 77:63:61:79:2b:14:00:4a:d7:1e:3a:ce:53:87:74:b4:d3:a2: a4:4d:65:94:78:f5:53:b2:88:b1:f4:58:12:76:74:bd:83:1a: 49:8f:51:f7:35:52:74:bd:2d:37:ea:42:84:ee:b8:ee:bc:9c: ab:b2:42:4e:bc:fc:fa:7f:81:0b:20:47:09:27:4a:6c:b3:46: 7c:1e:af:5e:98:78:77:ff:46:5b:20:26:5f:9c:64:ed:b3:cb: d1:b0:53:53:04:6e:36:c4:4c:c8:0c:30:6f:f4:c1:a9:46:d2: 4e:90:24:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAwswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDFFNEMxMTAvBgNVBAUTKEFCNjdFODJGQzg2QUFDQTgyQUNGRjhEQzM2NDVDRDcx NjEwMTNGNzYwHhcNMjUwNzE4MjEwMDU2WhcNMjUwNzI1MjEwMDU2WjAYMRYwFAYD VQQDEw02ODdhYjYwOC1mMGU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA49hD3R9O7js8Ozog60C3RY6tlCNQ8FRHEjkNdpI9GLLhdaawGhPQWI7+QlBo +7CigQIlLY5S+41h0ElJPLPrbzfQ5wp7jtFWtmltQCOO4SvEQFMj7NrFfHZjwfMx cro3H0UpZgSZq70IRNqG5Przm37CoWyIXRJbw9WSXCBDXwnszNjOAolQNhreCaeX xs5C/4Vd9LV/t3OU++e6s7YZLnxcWMvnA6gN1y+QrYYEGzDwp63yP8XcOuLBj+kU P1M7fqm7+bVoHOPE5gGu+mdf3FN8eUOUfxH5588gPZcSobQkTqQVr+olwJfht8k9 TNZ5NM3wCHJYvBdFhU80JMCnhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJnY+GK3 1O0LX/6rxnznKKXGWdklMB8GA1UdIwQYMBaAFKtn6C/IaqyoKs/43DZFzXFhAT92 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMUU0Qy83REFEQTU2Q0Q5 NEQxMUVBQTYwNEFDNTNDNEY5QUUwMi9xMmZvTDhocXJLZ3F6X2pjTmtYTmNXRUJQ M1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3EyZm9MOGhxcktncXpfamNOa1hOY1dFQlAzWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MUU0Qy83REFEQTU2Q0Q5NEQxMUVBQTYwNEFDNTNDNEY5QUUwMi9xMmZvTDhocXJL Z3F6X2pjTmtYTmNXRUJQM1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBFNMfJJNO8uDKEC7azxSC3BM9DgvyuF7fkydV4lXx6WKTpJVs5rXk9 eIFj8QMVuYtQ0v+VihPx3pWmynb+wliu3fFvLBL2InlNG6g6xU2K9xWFLsSs0q3c 4tcV2DVpmhqhi/tlgSQNWjv4LRqO4CssSoaGOTukO2QFm8xfmsQDHUhW6TR9yPqk WCfxndAfYJd3Y2F5KxQAStceOs5Th3S006KkTWWUePVTsoix9FgSdnS9gxpJj1H3 NVJ0vS036kKE7rjuvJyrskJOvPz6f4ELIEcJJ0pss0Z8Hq9emHh3/0ZbICZfnGTt s8vRsFNTBG42xEzIDDBv9MGpRtJOkCTS -----END CERTIFICATE-----Generated at Sun Jul 20 12:59:01 2025 by rpki-client