$ rpki-client -vvf rpki.apnic.net/member_repository/A91E711B/505C9738F5DB11EC9D06777BC4F9AE02/Qi87B4JkeC6YeHPYanROKGHypQM.mft File: Qi87B4JkeC6YeHPYanROKGHypQM.mft (raw, json) Hash identifier: UKMMBLNtx8mIpyYHpTQVUnku048mq6Z6fO4rnsc63Qk= Subject key identifier: 26:40:9D:D8:73:7A:E4:05:67:A4:CC:36:58:19:7F:EB:09:71:11:1F Authority key identifier: 42:2F:3B:07:82:64:78:2E:98:78:73:D8:6A:74:4E:28:61:F2:A5:03 Certificate issuer: /CN=A91E711B/serialNumber=422F3B078264782E987873D86A744E2861F2A503 Certificate serial: 02D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qi87B4JkeC6YeHPYanROKGHypQM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E711B/505C9738F5DB11EC9D06777BC4F9AE02/Qi87B4JkeC6YeHPYanROKGHypQM.mft Manifest number: 02D0 Signing time: Mon 21 Jul 2025 01:40:04 +0000 Manifest this update: Mon 21 Jul 2025 01:40:04 +0000 Manifest next update: Mon 28 Jul 2025 01:40:04 +0000 Files and hashes: 1: Qi87B4JkeC6YeHPYanROKGHypQM.crl (hash: TtNJIlgcBMe5R4sCfiZB7jfy/I/ZWUUZ3BJIKC5YAS8=) 2: 819F3DD6F5E111EC9754EB85C4F9AE02.roa (hash: hbDMnvq+3uPhy+l00wQh92gtO222M2b23uJyUw6S38s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E711B/505C9738F5DB11EC9D06777BC4F9AE02/Qi87B4JkeC6YeHPYanROKGHypQM.crl rsync://rpki.apnic.net/member_repository/A91E711B/505C9738F5DB11EC9D06777BC4F9AE02/Qi87B4JkeC6YeHPYanROKGHypQM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qi87B4JkeC6YeHPYanROKGHypQM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 01:40:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 725 (0x2d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E711B, serialNumber=422F3B078264782E987873D86A744E2861F2A503 Validity Not Before: Jul 21 01:40:04 2025 GMT Not After : Jul 28 01:40:04 2025 GMT Subject: CN=687d9a74-1c8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:5c:fa:ec:54:a5:e5:3c:cf:a2:ca:a2:4b:75: 99:5d:d6:06:9c:fd:f4:d5:6b:2d:46:16:2a:d9:76: 8a:2e:4f:5b:82:98:4d:98:ed:0a:56:d4:b2:6c:50: 34:1c:8c:25:c0:18:66:74:47:5b:f9:a7:c4:0c:d0: 46:28:d7:33:00:11:ff:a4:d2:05:bc:99:2f:f7:38: a2:51:04:f0:89:9b:e2:a7:e4:b3:37:00:c4:83:c7: d2:f9:e7:8f:45:f7:27:b2:ce:0c:d9:8c:51:13:9c: c8:a1:5a:09:ec:9a:63:88:2d:f9:d9:76:c4:bc:73: e7:b0:34:fa:0b:30:50:a8:69:c1:24:ac:53:75:5a: 35:6e:9f:72:f7:97:4f:c3:ac:c7:29:0e:e1:84:2c: a7:67:d8:f2:85:1b:96:e3:91:4e:e4:7e:a2:9f:fb: 9c:b9:66:e1:a7:e1:0d:e0:3f:b1:67:2b:f9:1f:0a: ce:5c:48:46:ee:b6:9e:b7:91:92:18:1d:f8:a8:2c: 76:cf:a1:a9:74:e4:88:3f:ec:c7:77:7b:2d:39:68: 2a:f6:dd:93:e7:c6:f8:00:ea:d0:d9:cc:f4:eb:0c: 1f:f3:45:10:00:e4:03:4f:c7:e1:6a:9a:8e:ed:41: be:cf:75:fe:7f:ff:34:53:73:83:84:8a:61:60:0f: 10:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:40:9D:D8:73:7A:E4:05:67:A4:CC:36:58:19:7F:EB:09:71:11:1F X509v3 Authority Key Identifier: keyid:42:2F:3B:07:82:64:78:2E:98:78:73:D8:6A:74:4E:28:61:F2:A5:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E711B/505C9738F5DB11EC9D06777BC4F9AE02/Qi87B4JkeC6YeHPYanROKGHypQM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qi87B4JkeC6YeHPYanROKGHypQM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E711B/505C9738F5DB11EC9D06777BC4F9AE02/Qi87B4JkeC6YeHPYanROKGHypQM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:07:85:80:e0:4c:fc:ba:f1:a6:2a:e7:78:95:28:66:d3:b8: 35:03:04:70:8c:ae:d8:b6:a8:6b:46:ab:6a:95:68:55:82:e9: 0d:5a:73:5f:3c:83:93:cd:ef:ae:f1:b4:8b:ef:a8:a5:12:b4: f8:83:ac:57:9d:81:f7:dc:07:5a:2e:1e:99:f8:97:cf:2d:2b: fb:d2:36:bc:d9:88:28:be:6b:82:fc:c9:24:66:86:2d:83:5a: 54:10:71:bc:08:21:71:14:49:b6:35:1f:82:37:4e:ec:80:9c: a9:f3:a0:04:48:95:b2:16:ac:b3:72:15:02:33:f9:23:da:5c: 60:ac:cd:90:55:eb:71:81:73:05:2d:dd:36:5f:66:4a:e6:58: 53:34:02:6a:63:e0:4a:44:fe:42:0f:0f:d0:5b:04:63:38:62: fe:cb:df:2b:25:66:17:2c:5c:94:03:35:d5:63:21:7a:e0:2f: 1f:f4:35:21:aa:12:b3:3b:48:69:80:ba:3a:c6:cc:ed:dd:b1: fb:fc:0c:d8:58:f1:26:66:32:e2:f1:b8:f5:57:ec:a0:18:2d: 59:17:2d:3c:fa:2c:a1:34:1f:01:f9:e3:3b:86:59:92:58:4a: f6:34:cc:53:fc:65:ae:4c:c3:32:cd:f8:3b:d3:5b:e8:61:5a: 72:a2:92:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAtUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTcxMUIxMTAvBgNVBAUTKDQyMkYzQjA3ODI2NDc4MkU5ODc4NzNEODZBNzQ0RTI4 NjFGMkE1MDMwHhcNMjUwNzIxMDE0MDA0WhcNMjUwNzI4MDE0MDA0WjAYMRYwFAYD VQQDEw02ODdkOWE3NC0xYzhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA21z67FSl5TzPosqiS3WZXdYGnP301WstRhYq2XaKLk9bgphNmO0KVtSybFA0 HIwlwBhmdEdb+afEDNBGKNczABH/pNIFvJkv9ziiUQTwiZvip+SzNwDEg8fS+eeP Rfcnss4M2YxRE5zIoVoJ7JpjiC352XbEvHPnsDT6CzBQqGnBJKxTdVo1bp9y95dP w6zHKQ7hhCynZ9jyhRuW45FO5H6in/ucuWbhp+EN4D+xZyv5HwrOXEhG7raet5GS GB34qCx2z6GpdOSIP+zHd3stOWgq9t2T58b4AOrQ2cz06wwf80UQAOQDT8fhapqO 7UG+z3X+f/80U3ODhIphYA8Q9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCZAndhz euQFZ6TMNlgZf+sJcREfMB8GA1UdIwQYMBaAFEIvOweCZHgumHhz2Gp0Tihh8qUD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzExQi81MDVDOTczOEY1 REIxMUVDOUQwNjc3N0JDNEY5QUUwMi9RaTg3QjRKa2VDNlllSFBZYW5ST0tHSHlw UU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FpODdCNEprZUM2WWVIUFlhblJPS0dIeXBRTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzExQi81MDVDOTczOEY1REIxMUVDOUQwNjc3N0JDNEY5QUUwMi9RaTg3QjRKa2VD NlllSFBZYW5ST0tHSHlwUU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1B4WA4Ez8uvGmKud4lShm07g1AwRwjK7YtqhrRqtqlWhVgukNWnNf PIOTze+u8bSL76ilErT4g6xXnYH33AdaLh6Z+JfPLSv70ja82YgovmuC/MkkZoYt g1pUEHG8CCFxFEm2NR+CN07sgJyp86AESJWyFqyzchUCM/kj2lxgrM2QVetxgXMF Ld02X2ZK5lhTNAJqY+BKRP5CDw/QWwRjOGL+y98rJWYXLFyUAzXVYyF64C8f9DUh qhKzO0hpgLo6xszt3bH7/AzYWPEmZjLi8bj1V+ygGC1ZFy08+iyhNB8B+eM7hlmS WEr2NMxT/GWuTMMyzfg701voYVpyopLY -----END CERTIFICATE-----Generated at Wed Jul 23 02:11:07 2025 by rpki-client