$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7C1D/A8070AF28AF011EAA9528309C4F9AE02/qK6pspMKYU1coxq59-hDeTYaL0M.mft File: qK6pspMKYU1coxq59-hDeTYaL0M.mft (raw, json) Hash identifier: NDrzpFxlh3WLf0BVhePAFyEqL8503s0bFAPkslaELaU= Subject key identifier: AC:F4:F4:E2:A2:20:9C:1C:6B:12:E5:AC:E8:3E:E8:B2:48:48:E9:CC Authority key identifier: A8:AE:A9:B2:93:0A:61:4D:5C:A3:1A:B9:F7:E8:43:79:36:1A:2F:43 Certificate issuer: /CN=A91D7C1D/serialNumber=A8AEA9B2930A614D5CA31AB9F7E84379361A2F43 Certificate serial: 09C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qK6pspMKYU1coxq59-hDeTYaL0M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D7C1D/A8070AF28AF011EAA9528309C4F9AE02/qK6pspMKYU1coxq59-hDeTYaL0M.mft Manifest number: 09B8 Signing time: Fri 18 Jul 2025 20:16:12 +0000 Manifest this update: Fri 18 Jul 2025 20:16:11 +0000 Manifest next update: Fri 25 Jul 2025 20:16:11 +0000 Files and hashes: 1: qK6pspMKYU1coxq59-hDeTYaL0M.crl (hash: obvIO6xsqL4mjWBwjL/nAH/cGAp253/I1ng1PsVvja8=) 2: A292E3529E9711EEB6899B1CC4F9AE02.roa (hash: Ogu9kxXrFRJanE7jcwo9P/mePv/PXm/3vRabACePad8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D7C1D/A8070AF28AF011EAA9528309C4F9AE02/qK6pspMKYU1coxq59-hDeTYaL0M.crl rsync://rpki.apnic.net/member_repository/A91D7C1D/A8070AF28AF011EAA9528309C4F9AE02/qK6pspMKYU1coxq59-hDeTYaL0M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qK6pspMKYU1coxq59-hDeTYaL0M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 20:16:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2503 (0x9c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D7C1D, serialNumber=A8AEA9B2930A614D5CA31AB9F7E84379361A2F43 Validity Not Before: Jul 18 20:16:11 2025 GMT Not After : Jul 25 20:16:11 2025 GMT Subject: CN=687aab8b-2b9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:61:fd:88:0b:4c:3b:68:c9:30:b4:af:b9:24: 52:02:18:12:df:4a:65:59:8c:4d:7b:65:08:d9:3f: 7d:61:8c:de:01:21:e3:02:7d:bb:d3:18:ee:02:59: 3e:b4:99:cb:64:29:0f:47:5d:11:97:c3:84:6d:0f: 90:79:2a:ca:c2:2c:eb:af:aa:b9:31:10:67:a4:4b: 1c:bd:42:49:d8:50:89:d4:83:82:f8:66:a3:33:cb: 21:50:2a:bf:4e:a5:0b:15:29:48:32:b7:91:39:0c: dc:31:c1:ed:0d:e1:35:58:6d:9f:1d:53:df:4c:a0: fe:f9:95:23:2f:03:9e:49:b2:96:de:c7:1a:e1:6e: 43:47:b4:63:d2:08:ad:dc:62:7f:e6:10:e8:7c:ea: f0:43:07:5b:a0:cb:59:f3:bf:31:f4:32:cd:56:4b: 40:27:1b:0c:6c:e2:76:58:73:e9:73:83:06:6e:29: c3:0c:27:ac:8f:03:2f:90:31:94:bc:34:eb:21:54: 22:71:ae:b6:b6:96:f4:f5:c2:f9:0c:80:8f:55:8d: 77:d4:42:2d:4f:44:9c:16:63:58:bf:a9:74:99:b5: af:68:fc:d9:20:1c:67:ea:8e:c8:56:d4:78:01:a1: 92:7b:5c:ca:e5:5f:b5:4d:80:da:74:c7:38:18:0e: 1c:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:F4:F4:E2:A2:20:9C:1C:6B:12:E5:AC:E8:3E:E8:B2:48:48:E9:CC X509v3 Authority Key Identifier: keyid:A8:AE:A9:B2:93:0A:61:4D:5C:A3:1A:B9:F7:E8:43:79:36:1A:2F:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D7C1D/A8070AF28AF011EAA9528309C4F9AE02/qK6pspMKYU1coxq59-hDeTYaL0M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qK6pspMKYU1coxq59-hDeTYaL0M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7C1D/A8070AF28AF011EAA9528309C4F9AE02/qK6pspMKYU1coxq59-hDeTYaL0M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:4e:97:4d:e5:d3:c1:2e:d0:96:b4:75:a0:00:ba:66:5c:aa: 4e:fb:90:3b:2a:0d:51:31:54:0a:e6:88:26:a7:14:b3:09:d0: 3c:68:7f:48:03:0b:72:b7:95:bd:d2:3d:a8:86:ed:17:ca:a2: d4:bf:23:0c:c7:8c:75:f2:56:c4:ac:6a:47:ba:75:9d:0e:b7: 4a:b0:9a:8a:82:50:d0:a2:ad:ee:a2:79:18:83:cf:90:b9:74: 0b:b1:c9:c7:fd:24:17:59:79:70:70:5a:69:fc:aa:d2:c5:b9: 54:9d:26:48:5c:94:45:5c:4d:80:a6:17:bc:d8:06:b6:ae:fe: 1f:86:e2:88:48:9d:fb:95:88:a1:84:f2:c3:41:32:81:24:26: 13:40:b1:3a:49:3c:d5:88:75:38:5a:9e:33:6d:73:12:86:5d: 1e:3c:44:92:95:68:7d:86:eb:76:ea:f5:02:ae:bb:10:57:f8: e5:73:6b:a5:e7:ab:77:d9:08:d7:6f:ab:42:62:6f:d6:7d:1d: 6c:84:27:93:05:66:6a:c0:08:71:21:ad:72:d0:e2:bc:38:99: 36:8f:6e:96:12:df:87:00:4a:d3:7f:10:26:04:7c:35:24:62: a3:6d:8f:d6:ef:c6:84:98:5b:49:8c:73:f5:dc:29:33:02:7c: ff:f4:55:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCccwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDdDMUQxMTAvBgNVBAUTKEE4QUVBOUIyOTMwQTYxNEQ1Q0EzMUFCOUY3RTg0Mzc5 MzYxQTJGNDMwHhcNMjUwNzE4MjAxNjExWhcNMjUwNzI1MjAxNjExWjAYMRYwFAYD VQQDEw02ODdhYWI4Yi0yYjllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqWH9iAtMO2jJMLSvuSRSAhgS30plWYxNe2UI2T99YYzeASHjAn270xjuAlk+ tJnLZCkPR10Rl8OEbQ+QeSrKwizrr6q5MRBnpEscvUJJ2FCJ1IOC+GajM8shUCq/ TqULFSlIMreROQzcMcHtDeE1WG2fHVPfTKD++ZUjLwOeSbKW3sca4W5DR7Rj0git 3GJ/5hDofOrwQwdboMtZ878x9DLNVktAJxsMbOJ2WHPpc4MGbinDDCesjwMvkDGU vDTrIVQica62tpb09cL5DICPVY131EItT0ScFmNYv6l0mbWvaPzZIBxn6o7IVtR4 AaGSe1zK5V+1TYDadMc4GA4cKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKz09OKi IJwcaxLlrOg+6LJISOnMMB8GA1UdIwQYMBaAFKiuqbKTCmFNXKMauffoQ3k2Gi9D MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEN0MxRC9BODA3MEFGMjhB RjAxMUVBQTk1MjgzMDlDNEY5QUUwMi9xSzZwc3BNS1lVMWNveHE1OS1oRGVUWWFM ME0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FLNnBzcE1LWVUxY294cTU5LWhEZVRZYUwwTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE N0MxRC9BODA3MEFGMjhBRjAxMUVBQTk1MjgzMDlDNEY5QUUwMi9xSzZwc3BNS1lV MWNveHE1OS1oRGVUWWFMME0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmTpdN5dPBLtCWtHWgALpmXKpO+5A7Kg1RMVQK5ogmpxSzCdA8aH9I Awtyt5W90j2ohu0XyqLUvyMMx4x18lbErGpHunWdDrdKsJqKglDQoq3uonkYg8+Q uXQLscnH/SQXWXlwcFpp/KrSxblUnSZIXJRFXE2Aphe82Aa2rv4fhuKISJ37lYih hPLDQTKBJCYTQLE6STzViHU4Wp4zbXMShl0ePESSlWh9hut26vUCrrsQV/jlc2ul 56t32QjXb6tCYm/WfR1shCeTBWZqwAhxIa1y0OK8OJk2j26WEt+HAErTfxAmBHw1 JGKjbY/W78aEmFtJjHP13CkzAnz/9FVF -----END CERTIFICATE-----Generated at Sun Jul 20 14:35:54 2025 by rpki-client