$ rpki-client -vvf rpki.apnic.net/member_repository/A91E80FB/628D520C8FB611EC92BD2510C4F9AE02/QIWuE0tjOKEnZXKD67wWwS8guGI.mft File: QIWuE0tjOKEnZXKD67wWwS8guGI.mft (raw, json) Hash identifier: ejaTVENc47EzgKIkvo9SXNWwQ77ulQMBkCaBAuh475A= Subject key identifier: 8C:60:1A:84:64:3D:C4:17:A0:1E:8A:E3:85:54:D3:87:07:FD:9B:7E Authority key identifier: 40:85:AE:13:4B:63:38:A1:27:65:72:83:EB:BC:16:C1:2F:20:B8:62 Certificate issuer: /CN=A91E80FB/serialNumber=4085AE134B6338A127657283EBBC16C12F20B862 Certificate serial: 03E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QIWuE0tjOKEnZXKD67wWwS8guGI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E80FB/628D520C8FB611EC92BD2510C4F9AE02/QIWuE0tjOKEnZXKD67wWwS8guGI.mft Manifest number: 03DB Signing time: Sat 19 Jul 2025 01:00:57 +0000 Manifest this update: Sat 19 Jul 2025 01:00:56 +0000 Manifest next update: Sat 26 Jul 2025 01:00:56 +0000 Files and hashes: 1: QIWuE0tjOKEnZXKD67wWwS8guGI.crl (hash: mlRjekrZ7wUg+JyZ9/rBmYZBK3IcqyQPTCra3WAcWFY=) 2: 9FBFD358C0F911EFA63F3E64C4F9AE02.roa (hash: yc1nPimI0kUiUPjKIX7+rUbHKCs59csyBzZSSe87J8M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E80FB/628D520C8FB611EC92BD2510C4F9AE02/QIWuE0tjOKEnZXKD67wWwS8guGI.crl rsync://rpki.apnic.net/member_repository/A91E80FB/628D520C8FB611EC92BD2510C4F9AE02/QIWuE0tjOKEnZXKD67wWwS8guGI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QIWuE0tjOKEnZXKD67wWwS8guGI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 01:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 998 (0x3e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E80FB, serialNumber=4085AE134B6338A127657283EBBC16C12F20B862 Validity Not Before: Jul 19 01:00:56 2025 GMT Not After : Jul 26 01:00:56 2025 GMT Subject: CN=687aee48-a186 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:08:82:dd:98:95:a7:51:63:4f:d9:06:8a:73: fc:d1:31:09:14:2a:f2:06:3d:e9:38:93:f8:fa:29: 0a:cd:aa:56:08:b8:fc:bd:21:95:e8:26:70:de:51: 4f:69:61:e1:ba:79:94:e6:f6:c2:03:90:df:63:8f: 4f:1f:cc:ba:30:95:ce:8c:bb:b3:0c:23:43:36:16: 33:e6:89:b8:34:b1:5e:c8:51:a5:9c:f6:92:d9:69: e7:8c:84:28:5c:22:b1:2b:21:d4:4e:94:66:63:7d: 33:18:50:a9:cc:33:8f:5c:13:e7:3f:19:5b:6a:33: 8b:70:d3:6d:a3:7f:a4:ec:85:df:3e:cb:f5:3b:1d: 58:3e:95:c0:be:07:57:95:52:a7:a6:dd:e2:ae:bb: 89:a8:38:7f:35:27:ee:67:29:27:94:7e:0f:eb:13: 6d:64:fa:ab:71:02:37:58:c7:12:22:d5:1a:bf:68: 40:4b:2f:83:c6:be:d9:a1:2d:e7:a3:1f:c7:92:ee: 11:d8:af:35:67:95:00:30:fb:2e:22:2a:ed:a8:e1: 47:69:58:c9:0e:e0:c4:b2:73:c4:b3:ea:ff:bf:ab: 3c:ff:e4:5d:1d:64:01:d6:86:6f:01:f7:63:e5:d1: 1a:13:61:77:81:14:ef:aa:9d:d1:b0:7f:49:29:91: f3:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:60:1A:84:64:3D:C4:17:A0:1E:8A:E3:85:54:D3:87:07:FD:9B:7E X509v3 Authority Key Identifier: keyid:40:85:AE:13:4B:63:38:A1:27:65:72:83:EB:BC:16:C1:2F:20:B8:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E80FB/628D520C8FB611EC92BD2510C4F9AE02/QIWuE0tjOKEnZXKD67wWwS8guGI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QIWuE0tjOKEnZXKD67wWwS8guGI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E80FB/628D520C8FB611EC92BD2510C4F9AE02/QIWuE0tjOKEnZXKD67wWwS8guGI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:e2:30:6b:83:5b:38:a6:18:a8:52:28:36:f4:06:77:3c:6e: 9a:03:3b:b5:ef:35:1f:dd:bd:eb:a9:3e:25:ca:f4:dc:c3:32: e9:c9:42:aa:f7:89:93:40:8c:3c:e1:da:97:a7:3b:5a:cd:11: 85:00:a2:e7:be:b5:72:d0:fb:6e:ad:29:5a:bb:98:84:2c:82: 3d:e8:9b:02:cd:de:02:5b:09:22:8d:7a:19:49:62:f2:85:fc: d0:90:e2:cb:c5:c4:3e:60:42:9b:f6:dd:b8:54:dc:0c:a4:23: aa:76:5d:82:5c:7f:86:c7:56:de:1b:d0:bb:2d:c5:f3:b2:7d: c1:41:76:8e:03:76:1c:2d:d7:52:8e:d2:ce:8b:78:fb:d1:ac: ed:8b:f1:f7:f2:9d:12:3f:97:7b:b1:89:dc:3f:3f:d1:04:06: 0a:f8:77:f2:22:3a:b1:64:0a:55:61:8c:92:9f:35:6f:6a:e2: 6d:a9:3f:f3:2b:e0:1f:c7:d1:98:ca:95:ed:64:1d:97:6b:90: b8:6e:44:e0:58:56:76:2c:ca:12:07:d6:79:1b:45:f6:fb:19: ff:81:9f:64:d8:30:2b:bc:38:a2:3f:fb:e0:40:84:dd:0b:91: f4:5b:4f:61:00:49:3b:ba:f5:d8:d6:66:0b:e1:ff:7a:db:76: 41:c2:ca:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA+YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTgwRkIxMTAvBgNVBAUTKDQwODVBRTEzNEI2MzM4QTEyNzY1NzI4M0VCQkMxNkMx MkYyMEI4NjIwHhcNMjUwNzE5MDEwMDU2WhcNMjUwNzI2MDEwMDU2WjAYMRYwFAYD VQQDEw02ODdhZWU0OC1hMTg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2wiC3ZiVp1FjT9kGinP80TEJFCryBj3pOJP4+ikKzapWCLj8vSGV6CZw3lFP aWHhunmU5vbCA5DfY49PH8y6MJXOjLuzDCNDNhYz5om4NLFeyFGlnPaS2WnnjIQo XCKxKyHUTpRmY30zGFCpzDOPXBPnPxlbajOLcNNto3+k7IXfPsv1Ox1YPpXAvgdX lVKnpt3irruJqDh/NSfuZyknlH4P6xNtZPqrcQI3WMcSItUav2hASy+Dxr7ZoS3n ox/Hku4R2K81Z5UAMPsuIirtqOFHaVjJDuDEsnPEs+r/v6s8/+RdHWQB1oZvAfdj 5dEaE2F3gRTvqp3RsH9JKZHzqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIxgGoRk PcQXoB6K44VU04cH/Zt+MB8GA1UdIwQYMBaAFECFrhNLYzihJ2Vyg+u8FsEvILhi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODBGQi82MjhENTIwQzhG QjYxMUVDOTJCRDI1MTBDNEY5QUUwMi9RSVd1RTB0ak9LRW5aWEtENjd3V3dTOGd1 R0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FJV3VFMHRqT0tFblpYS0Q2N3dXd1M4Z3VHSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODBGQi82MjhENTIwQzhGQjYxMUVDOTJCRDI1MTBDNEY5QUUwMi9RSVd1RTB0ak9L RW5aWEtENjd3V3dTOGd1R0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAB4jBrg1s4phioUig29AZ3PG6aAzu17zUf3b3rqT4lyvTcwzLpyUKq 94mTQIw84dqXpztazRGFAKLnvrVy0PturSlau5iELII96JsCzd4CWwkijXoZSWLy hfzQkOLLxcQ+YEKb9t24VNwMpCOqdl2CXH+Gx1beG9C7LcXzsn3BQXaOA3YcLddS jtLOi3j70azti/H38p0SP5d7sYncPz/RBAYK+HfyIjqxZApVYYySnzVvauJtqT/z K+Afx9GYypXtZB2Xa5C4bkTgWFZ2LMoSB9Z5G0X2+xn/gZ9k2DArvDiiP/vgQITd C5H0W09hAEk7uvXY1mYL4f9623ZBwsoL -----END CERTIFICATE-----Generated at Sun Jul 20 03:36:13 2025 by rpki-client