$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7363/FF8B4B6C1D8411E28CD33DDB08B02CD2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.mft File: qJfATeEvCm9Zwa0VCfCyCfpUOLM.mft (raw, json) Hash identifier: qecTle3gV/cCGkqfQWi8tPXknh7u9dRep5jNhc9KrIw= Subject key identifier: CB:30:B9:58:DD:BE:65:80:CA:6E:BE:DA:C1:87:59:8B:EB:5A:58:96 Authority key identifier: A8:97:C0:4D:E1:2F:0A:6F:59:C1:AD:15:09:F0:B2:09:FA:54:38:B3 Certificate issuer: /CN=A91E7363/serialNumber=A897C04DE12F0A6F59C1AD1509F0B209FA5438B3 Certificate serial: 350F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7363/FF8B4B6C1D8411E28CD33DDB08B02CD2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.mft Manifest number: 34D0 Signing time: Thu 24 Jul 2025 14:25:24 +0000 Manifest this update: Thu 24 Jul 2025 14:25:23 +0000 Manifest next update: Thu 31 Jul 2025 14:25:23 +0000 Files and hashes: 1: qJfATeEvCm9Zwa0VCfCyCfpUOLM.crl (hash: 7/BfXTXY9pr3WYOorbboPTXWkbSuPJCJVv3dCRG+Mo8=) 2: 3F0948F82D1011ECB745DB85C4F9AE02.roa (hash: 9JsagnY9rpoPlsVMt4iVRdULuA/96P9hw1zuWPkbXY4=) 3: D93EA75AEE5C11E995881B1BC4F9AE02.roa (hash: yyuVGHEHdjgOJV3OL5d2WHtm2S0Tu6t1QPxDqH/At3U=) 4: 0D0AE5040AE711E89D0C5071C4F9AE02.roa (hash: 1QH0WR9EAexZONoxgrkCIP2BPHtzOEA7LLO//ildFDE=) 5: 2CDDCAB868AC11EDAA6C8F2AC4F9AE02.roa (hash: snUS5Nz9OXbIohiNncX/rLVlHKKNwvL/WKysUwbCRFM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7363/FF8B4B6C1D8411E28CD33DDB08B02CD2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.crl rsync://rpki.apnic.net/member_repository/A91E7363/FF8B4B6C1D8411E28CD33DDB08B02CD2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 31 Jul 2025 14:25:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13583 (0x350f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7363, serialNumber=A897C04DE12F0A6F59C1AD1509F0B209FA5438B3 Validity Not Before: Jul 24 14:25:23 2025 GMT Not After : Jul 31 14:25:23 2025 GMT Subject: CN=68824254-9dec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:9f:d6:d9:e4:2c:b9:96:6a:cd:74:65:19:40: a2:53:6a:b4:14:14:2c:5f:e0:cd:65:87:e5:53:1e: f9:45:85:91:da:84:e9:d7:1c:2d:9d:e0:e2:54:15: 2a:02:b9:fb:55:b6:ce:32:49:06:50:c5:9b:f5:3c: 80:ef:c8:59:b2:2d:05:3b:d2:14:e2:8a:dc:dd:8d: ec:fe:48:7f:3e:f9:25:b0:4f:0e:4a:58:88:00:3c: 40:85:7e:e4:11:61:9c:a5:6f:10:e2:cc:da:1d:9d: 22:32:b3:de:d5:fc:01:8c:75:74:60:bf:e9:8a:5b: 3a:01:1f:dc:cc:42:4e:ca:ca:42:43:04:75:f4:19: eb:01:18:97:18:31:95:f1:8e:cc:e1:0e:49:26:de: 43:53:b1:d3:14:47:e4:5b:63:b4:fd:bc:22:ed:0b: 44:35:d7:41:de:86:bc:41:95:bb:42:39:11:1b:5b: 06:52:d9:2e:23:92:c6:63:c1:85:f0:bf:e8:01:94: a1:8f:82:89:31:1e:6d:6c:ea:0a:5b:a8:d2:ee:78: 1a:ef:cc:88:bb:61:f8:af:e1:b5:1b:65:63:e0:6b: 27:13:b4:8c:80:41:73:7f:7c:a1:42:63:a8:87:7b: d6:ab:d1:00:14:d5:1d:70:2f:e6:4b:78:e6:79:88: c1:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:30:B9:58:DD:BE:65:80:CA:6E:BE:DA:C1:87:59:8B:EB:5A:58:96 X509v3 Authority Key Identifier: keyid:A8:97:C0:4D:E1:2F:0A:6F:59:C1:AD:15:09:F0:B2:09:FA:54:38:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7363/FF8B4B6C1D8411E28CD33DDB08B02CD2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7363/FF8B4B6C1D8411E28CD33DDB08B02CD2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:66:9c:a0:74:30:8f:9a:6a:b3:37:86:1f:31:55:f2:45:6e: 03:ba:bb:48:dc:ce:27:ab:9c:27:ce:fa:7e:ad:0a:39:db:3c: 54:dc:b7:7b:a9:a4:1c:08:e3:b3:96:e8:89:6b:b2:a0:07:dd: f0:f5:fd:ac:95:b5:9e:9e:ea:48:c8:d8:ab:ba:a7:b1:88:5e: 9e:2b:c7:14:3b:8d:4a:bc:2d:a3:08:a4:12:19:bf:14:14:67: 8a:1d:cc:f0:cb:74:d5:f3:81:14:0f:ee:c2:0a:6b:49:a0:7c: e6:b8:29:e5:c3:97:03:28:71:c5:8b:66:f8:6f:fa:fd:1c:94: 17:90:96:e8:09:76:ba:31:24:29:dc:47:c8:1d:d7:f4:77:aa: 16:b6:26:28:43:25:1e:3a:63:1e:b7:10:40:75:5f:e4:c2:d9: 9a:87:84:6d:f8:ed:4a:91:dc:26:00:6d:b0:3a:1a:4a:a6:1a: c5:82:7a:4f:bc:6a:66:fc:83:29:4a:6f:57:2b:de:fc:e9:2d: ee:60:5a:c7:01:17:66:77:f3:e1:cd:23:4e:b6:d0:e4:2b:60: 0c:d6:73:c9:0f:ce:3c:26:7e:f0:c9:d2:4d:c9:7d:92:e9:3e: cf:3d:1a:a7:80:02:3a:94:44:d1:3f:12:e3:1d:37:fd:7b:15: c6:fc:81:38 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNQ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTczNjMxMTAvBgNVBAUTKEE4OTdDMDRERTEyRjBBNkY1OUMxQUQxNTA5RjBCMjA5 RkE1NDM4QjMwHhcNMjUwNzI0MTQyNTIzWhcNMjUwNzMxMTQyNTIzWjAYMRYwFAYD VQQDEw02ODgyNDI1NC05ZGVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAup/W2eQsuZZqzXRlGUCiU2q0FBQsX+DNZYflUx75RYWR2oTp1xwtneDiVBUq Arn7VbbOMkkGUMWb9TyA78hZsi0FO9IU4orc3Y3s/kh/PvklsE8OSliIADxAhX7k EWGcpW8Q4szaHZ0iMrPe1fwBjHV0YL/pils6AR/czEJOyspCQwR19BnrARiXGDGV 8Y7M4Q5JJt5DU7HTFEfkW2O0/bwi7QtENddB3oa8QZW7QjkRG1sGUtkuI5LGY8GF 8L/oAZShj4KJMR5tbOoKW6jS7nga78yIu2H4r+G1G2Vj4GsnE7SMgEFzf3yhQmOo h3vWq9EAFNUdcC/mS3jmeYjBowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMswuVjd vmWAym6+2sGHWYvrWliWMB8GA1UdIwQYMBaAFKiXwE3hLwpvWcGtFQnwsgn6VDiz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzM2My9GRjhCNEI2QzFE ODQxMUUyOENEMzNEREIwOEIwMkNEMi9xSmZBVGVFdkNtOVp3YTBWQ2ZDeUNmcFVP TE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FKZkFUZUV2Q205WndhMFZDZkN5Q2ZwVU9MTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzM2My9GRjhCNEI2QzFEODQxMUUyOENEMzNEREIwOEIwMkNEMi9xSmZBVGVFdkNt OVp3YTBWQ2ZDeUNmcFVPTE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMZpygdDCPmmqzN4YfMVXyRW4DurtI3M4nq5wnzvp+rQo52zxU3Ld7 qaQcCOOzluiJa7KgB93w9f2slbWenupIyNiruqexiF6eK8cUO41KvC2jCKQSGb8U FGeKHczwy3TV84EUD+7CCmtJoHzmuCnlw5cDKHHFi2b4b/r9HJQXkJboCXa6MSQp 3EfIHdf0d6oWtiYoQyUeOmMetxBAdV/kwtmah4Rt+O1KkdwmAG2wOhpKphrFgnpP vGpm/IMpSm9XK9786S3uYFrHARdmd/PhzSNOttDkK2AM1nPJD848Jn7wydJNyX2S 6T7PPRqngAI6lETRPxLjHTf9exXG/IE4 -----END CERTIFICATE-----Generated at Fri Jul 25 13:48:17 2025 by rpki-client