$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB475/208FB730417211EA98A3686DC4F9AE02/1QwK07StgdVVlFzH8_HuHB-t5hc.mft File: 1QwK07StgdVVlFzH8_HuHB-t5hc.mft (raw, json) Hash identifier: cCPbz8xZAZMfEqOWcp7ARIhHgAFQjSvL1WGBXrdxU7c= Subject key identifier: 68:DC:78:27:8F:E5:D0:C5:67:D6:11:83:D4:68:AC:38:AA:A2:86:87 Authority key identifier: D5:0C:0A:D3:B4:AD:81:D5:55:94:5C:C7:F3:F1:EE:1C:1F:AD:E6:17 Certificate issuer: /CN=A91DB475/serialNumber=D50C0AD3B4AD81D555945CC7F3F1EE1C1FADE617 Certificate serial: 0B39 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1QwK07StgdVVlFzH8_HuHB-t5hc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB475/208FB730417211EA98A3686DC4F9AE02/1QwK07StgdVVlFzH8_HuHB-t5hc.mft Manifest number: 0B2D Signing time: Fri 18 Jul 2025 19:26:41 +0000 Manifest this update: Fri 18 Jul 2025 19:26:40 +0000 Manifest next update: Fri 25 Jul 2025 19:26:40 +0000 Files and hashes: 1: 1QwK07StgdVVlFzH8_HuHB-t5hc.crl (hash: gM2N6d0PVhbvnUW3p1CEw/8q2Di3svXlFXlwyEVTi7A=) 2: 1E6B12EC049F11F0AD5C7C33C4F9AE02.roa (hash: gD5Iq8akoAlTIS4ryMBL5JIYOH1ViK0S3xNtIRVVfYc=) 3: 74CA44AA049F11F087661234C4F9AE02.roa (hash: 2OIryrqTJwARaXm6rXTbRJKfK80d24FVCzeiupTYqAE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB475/208FB730417211EA98A3686DC4F9AE02/1QwK07StgdVVlFzH8_HuHB-t5hc.crl rsync://rpki.apnic.net/member_repository/A91DB475/208FB730417211EA98A3686DC4F9AE02/1QwK07StgdVVlFzH8_HuHB-t5hc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1QwK07StgdVVlFzH8_HuHB-t5hc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 19:26:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2873 (0xb39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB475, serialNumber=D50C0AD3B4AD81D555945CC7F3F1EE1C1FADE617 Validity Not Before: Jul 18 19:26:40 2025 GMT Not After : Jul 25 19:26:40 2025 GMT Subject: CN=687a9ff1-206f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:5e:d2:f1:da:0c:38:b7:bc:f0:25:8e:66:27: ee:af:58:dc:6f:d0:bb:22:e1:4d:37:42:a6:54:bf: d2:8d:bf:72:68:a5:93:e7:72:c6:ce:b3:1e:45:d3: 8c:13:d3:52:0e:5f:de:e1:1b:a9:ec:07:34:06:94: db:a4:0d:82:a0:49:51:a9:15:fe:4e:c5:5c:22:da: 1c:4f:48:ac:90:45:1a:e6:da:c5:45:45:e9:53:69: 8b:77:00:ce:84:12:bc:3c:f1:18:78:dc:88:67:66: 0c:2a:3a:9f:38:6b:ad:c9:6f:8f:38:51:76:ff:b5: 38:46:a2:96:64:c9:7c:e1:fa:22:c8:38:4e:82:62: ec:1f:49:b9:17:7a:cd:90:15:26:66:56:9d:0d:78: aa:00:95:8d:f3:b8:6f:04:ec:70:34:bc:38:b8:99: e0:09:fa:85:ba:09:da:15:c9:00:5b:be:17:e2:5a: 84:42:44:f8:70:8a:19:6f:c0:31:09:3a:95:55:ed: 3f:ec:35:77:45:5d:15:12:6b:28:8e:e2:f7:e8:d7: 1d:78:47:da:b7:a2:6c:73:b3:97:2b:a5:ed:ed:06: ee:5d:11:8f:30:ed:d4:ae:e7:26:48:70:53:f5:62: 7a:18:40:07:e9:cf:51:8a:8a:2e:81:b1:27:29:5f: 72:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:DC:78:27:8F:E5:D0:C5:67:D6:11:83:D4:68:AC:38:AA:A2:86:87 X509v3 Authority Key Identifier: keyid:D5:0C:0A:D3:B4:AD:81:D5:55:94:5C:C7:F3:F1:EE:1C:1F:AD:E6:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB475/208FB730417211EA98A3686DC4F9AE02/1QwK07StgdVVlFzH8_HuHB-t5hc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1QwK07StgdVVlFzH8_HuHB-t5hc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB475/208FB730417211EA98A3686DC4F9AE02/1QwK07StgdVVlFzH8_HuHB-t5hc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:8d:f3:33:ed:2e:58:d7:45:15:e6:62:db:c1:ef:9e:ab:17: d5:98:3a:f2:05:da:5a:23:5c:54:80:23:0b:07:a4:04:12:d0: ad:15:cc:09:d9:ef:33:b1:1a:2b:34:dc:74:c4:39:9d:99:fb: 54:5c:d9:a0:ee:f1:ee:3b:4b:c3:45:1c:52:66:19:07:a5:3a: 33:a1:f5:e0:24:46:a5:2f:29:1c:f2:b5:75:5c:1b:5a:0a:57: 29:60:89:50:ee:e0:6d:1e:02:db:f8:4e:a1:5a:6b:12:d6:f1: b9:fb:61:56:98:c1:e1:66:b9:c3:cd:f9:2e:2c:57:bb:6c:6b: bc:a7:91:60:44:df:dc:93:26:cc:12:90:3d:1f:92:24:c0:97: ea:0b:22:73:d9:42:fc:c9:0c:aa:d9:dc:6f:d2:17:1f:82:cd: 5f:62:37:b1:9e:4b:98:ab:83:cb:30:87:5c:1a:76:8c:5d:70: 33:05:a0:c9:bc:16:61:ae:50:16:a2:b6:29:27:9f:27:ac:e1: c0:8b:dc:a4:c8:d0:d1:6e:4c:2f:f0:c3:98:aa:46:90:69:52: ee:45:ea:9f:00:5d:7b:d7:08:68:0f:4f:e3:08:67:13:ee:01: 02:b1:da:ec:2f:bd:b6:05:c2:a5:75:61:98:fc:5b:2a:bd:d5: 40:7a:66:6f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCzkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REI0NzUxMTAvBgNVBAUTKEQ1MEMwQUQzQjRBRDgxRDU1NTk0NUNDN0YzRjFFRTFD MUZBREU2MTcwHhcNMjUwNzE4MTkyNjQwWhcNMjUwNzI1MTkyNjQwWjAYMRYwFAYD VQQDEw02ODdhOWZmMS0yMDZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArV7S8doMOLe88CWOZifur1jcb9C7IuFNN0KmVL/Sjb9yaKWT53LGzrMeRdOM E9NSDl/e4Rup7Ac0BpTbpA2CoElRqRX+TsVcItocT0iskEUa5trFRUXpU2mLdwDO hBK8PPEYeNyIZ2YMKjqfOGutyW+POFF2/7U4RqKWZMl84foiyDhOgmLsH0m5F3rN kBUmZladDXiqAJWN87hvBOxwNLw4uJngCfqFugnaFckAW74X4lqEQkT4cIoZb8Ax CTqVVe0/7DV3RV0VEmsojuL36NcdeEfat6Jsc7OXK6Xt7QbuXRGPMO3UrucmSHBT 9WJ6GEAH6c9RioougbEnKV9ytQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGjceCeP 5dDFZ9YRg9RorDiqooaHMB8GA1UdIwQYMBaAFNUMCtO0rYHVVZRcx/Px7hwfreYX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjQ3NS8yMDhGQjczMDQx NzIxMUVBOThBMzY4NkRDNEY5QUUwMi8xUXdLMDdTdGdkVlZsRnpIOF9IdUhCLXQ1 aGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFRd0swN1N0Z2RWVmxGekg4X0h1SEItdDVoYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjQ3NS8yMDhGQjczMDQxNzIxMUVBOThBMzY4NkRDNEY5QUUwMi8xUXdLMDdTdGdk VlZsRnpIOF9IdUhCLXQ1aGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCejfMz7S5Y10UV5mLbwe+eqxfVmDryBdpaI1xUgCMLB6QEEtCtFcwJ 2e8zsRorNNx0xDmdmftUXNmg7vHuO0vDRRxSZhkHpTozofXgJEalLykc8rV1XBta ClcpYIlQ7uBtHgLb+E6hWmsS1vG5+2FWmMHhZrnDzfkuLFe7bGu8p5FgRN/ckybM EpA9H5IkwJfqCyJz2UL8yQyq2dxv0hcfgs1fYjexnkuYq4PLMIdcGnaMXXAzBaDJ vBZhrlAWorYpJ58nrOHAi9ykyNDRbkwv8MOYqkaQaVLuReqfAF171whoD0/jCGcT 7gECsdrsL722BcKldWGY/FsqvdVAemZv -----END CERTIFICATE-----Generated at Sun Jul 20 18:25:55 2025 by rpki-client