$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6BFA/40D4B7EC660311EA99AD4F46C4F9AE02/qmLHn-GEOUEsWwLPS-tUqy674Yg.mft File: qmLHn-GEOUEsWwLPS-tUqy674Yg.mft (raw, json) Hash identifier: ziiPMCZOCAHyQd2/OIymT0x68yToSNymkN+/+70LqU0= Subject key identifier: 44:6A:6F:3C:F9:CB:15:C9:BE:24:D2:3D:15:2E:1D:24:A0:F6:9A:96 Authority key identifier: AA:62:C7:9F:E1:84:39:41:2C:5B:02:CF:4B:EB:54:AB:2E:BB:E1:88 Certificate issuer: /CN=A91F6BFA/serialNumber=AA62C79FE18439412C5B02CF4BEB54AB2EBBE188 Certificate serial: 0A9D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qmLHn-GEOUEsWwLPS-tUqy674Yg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F6BFA/40D4B7EC660311EA99AD4F46C4F9AE02/qmLHn-GEOUEsWwLPS-tUqy674Yg.mft Manifest number: 0A82 Signing time: Tue 22 Jul 2025 19:52:59 +0000 Manifest this update: Tue 22 Jul 2025 19:52:59 +0000 Manifest next update: Tue 29 Jul 2025 19:52:59 +0000 Files and hashes: 1: qmLHn-GEOUEsWwLPS-tUqy674Yg.crl (hash: UQ9/31vhOV/tVuQcMohSZjXuiAlBLGJ9wzH22txSTCY=) 2: 128651089A4C11EEBA49A012C4F9AE02.roa (hash: VmP7SNr/gbc8YQH8mhyiXgUhCSGimNKw35snjgd94pI=) 3: 3AFE6DA8F72911EDB956BA86C4F9AE02.roa (hash: NCtWjC1uM4+Sx0ntIvyY3s6R1AF8S0ZUO+CcBcvcH7w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F6BFA/40D4B7EC660311EA99AD4F46C4F9AE02/qmLHn-GEOUEsWwLPS-tUqy674Yg.crl rsync://rpki.apnic.net/member_repository/A91F6BFA/40D4B7EC660311EA99AD4F46C4F9AE02/qmLHn-GEOUEsWwLPS-tUqy674Yg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qmLHn-GEOUEsWwLPS-tUqy674Yg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Jul 2025 19:52:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2717 (0xa9d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F6BFA, serialNumber=AA62C79FE18439412C5B02CF4BEB54AB2EBBE188 Validity Not Before: Jul 22 19:52:59 2025 GMT Not After : Jul 29 19:52:59 2025 GMT Subject: CN=687fec1b-43d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:eb:6c:2a:8c:35:a8:e0:d9:c5:c7:a2:7c:fa: 7e:bd:fe:d5:b4:0c:d9:64:64:67:5a:d6:34:64:ec: 64:57:7a:85:df:dd:5b:65:f4:d4:7c:b2:da:c4:06: 94:57:5f:8f:40:e3:82:89:4b:27:5a:28:8c:9c:5f: 32:9d:4d:e7:9f:46:c4:4b:66:ab:01:72:58:12:28: 89:ee:11:d8:1e:24:96:6d:43:d0:8b:30:02:cb:7e: bf:b6:2f:92:85:9e:e8:11:fb:49:53:96:40:2d:a6: cf:fa:83:e7:1f:bf:1e:13:2b:a0:21:f3:3e:90:3d: 0e:81:43:e3:22:21:ed:77:32:18:46:84:3d:5c:02: c5:5d:11:0c:21:86:12:20:a6:fa:ba:0d:61:61:b7: e3:7b:10:f1:fa:31:03:b9:0b:45:12:36:86:d5:2e: 46:1c:13:fc:32:fa:99:08:49:12:51:c7:8b:e2:fc: 37:78:0e:ee:ee:c3:f4:bf:d4:6d:ef:b8:61:4b:8b: 7b:dc:e4:a0:97:99:0f:0f:e9:b0:a5:7a:dc:8a:a2: 38:81:b6:d7:29:49:19:d3:f1:b4:cd:46:ac:48:76: 10:65:3e:d2:c1:3f:61:e7:31:59:29:86:dd:da:98: 1f:dc:bd:2c:60:7a:f7:fb:1f:da:e0:2d:71:4c:7b: db:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:6A:6F:3C:F9:CB:15:C9:BE:24:D2:3D:15:2E:1D:24:A0:F6:9A:96 X509v3 Authority Key Identifier: keyid:AA:62:C7:9F:E1:84:39:41:2C:5B:02:CF:4B:EB:54:AB:2E:BB:E1:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F6BFA/40D4B7EC660311EA99AD4F46C4F9AE02/qmLHn-GEOUEsWwLPS-tUqy674Yg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qmLHn-GEOUEsWwLPS-tUqy674Yg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6BFA/40D4B7EC660311EA99AD4F46C4F9AE02/qmLHn-GEOUEsWwLPS-tUqy674Yg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d0:dd:ed:56:70:c7:8f:db:43:2c:53:f8:d9:94:8f:b0:86:a3: 35:5b:51:61:92:e3:0a:d1:40:5c:98:96:a1:36:49:57:8d:2a: 5e:68:b1:fa:de:df:4d:4e:52:18:ac:3e:5a:a7:ff:3d:71:d3: 23:d6:b9:57:13:5e:ba:4b:a3:53:3f:ad:f4:b1:0f:ca:f7:49: 1c:14:a1:0a:b5:9a:22:66:c3:21:9e:ea:af:ef:5a:cb:54:a1: 77:52:c5:57:f2:79:a9:8a:d6:46:51:3f:27:da:c2:4d:c7:7f: 91:a9:ab:7c:f3:86:65:3b:45:36:ac:d5:e6:3f:12:35:af:23: 50:9b:22:a6:18:79:8b:aa:af:14:8b:8d:f5:a8:25:c6:04:36: 5e:25:20:b6:b9:20:d2:3c:f7:da:e6:f4:31:e0:3a:ca:ec:99: d0:05:1d:87:d6:a2:6c:6b:73:bc:eb:43:d3:9d:73:81:95:3c: 55:49:49:ac:b3:01:e5:ee:26:6e:96:51:02:64:30:43:1c:6a: d8:fe:bc:5e:68:a2:9e:8c:3b:ae:2e:52:86:76:51:c4:6f:f0: c4:2e:25:48:80:8a:4d:e9:ee:42:a3:c7:ec:1b:bf:8a:58:9b: a8:d7:55:86:fd:0b:00:57:c4:e3:5b:6e:0d:10:12:f0:da:3f: 73:7f:c1:5f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCp0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjZCRkExMTAvBgNVBAUTKEFBNjJDNzlGRTE4NDM5NDEyQzVCMDJDRjRCRUI1NEFC MkVCQkUxODgwHhcNMjUwNzIyMTk1MjU5WhcNMjUwNzI5MTk1MjU5WjAYMRYwFAYD VQQDEw02ODdmZWMxYi00M2Q5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7etsKow1qODZxceifPp+vf7VtAzZZGRnWtY0ZOxkV3qF391bZfTUfLLaxAaU V1+PQOOCiUsnWiiMnF8ynU3nn0bES2arAXJYEiiJ7hHYHiSWbUPQizACy36/ti+S hZ7oEftJU5ZALabP+oPnH78eEyugIfM+kD0OgUPjIiHtdzIYRoQ9XALFXREMIYYS IKb6ug1hYbfjexDx+jEDuQtFEjaG1S5GHBP8MvqZCEkSUceL4vw3eA7u7sP0v9Rt 77hhS4t73OSgl5kPD+mwpXrciqI4gbbXKUkZ0/G0zUasSHYQZT7SwT9h5zFZKYbd 2pgf3L0sYHr3+x/a4C1xTHvbmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFERqbzz5 yxXJviTSPRUuHSSg9pqWMB8GA1UdIwQYMBaAFKpix5/hhDlBLFsCz0vrVKsuu+GI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNkJGQS80MEQ0QjdFQzY2 MDMxMUVBOTlBRDRGNDZDNEY5QUUwMi9xbUxIbi1HRU9VRXNXd0xQUy10VXF5Njc0 WWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FtTEhuLUdFT1VFc1d3TFBTLXRVcXk2NzRZZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NkJGQS80MEQ0QjdFQzY2MDMxMUVBOTlBRDRGNDZDNEY5QUUwMi9xbUxIbi1HRU9V RXNXd0xQUy10VXF5Njc0WWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDQ3e1WcMeP20MsU/jZlI+whqM1W1FhkuMK0UBcmJahNklXjSpeaLH6 3t9NTlIYrD5ap/89cdMj1rlXE166S6NTP630sQ/K90kcFKEKtZoiZsMhnuqv71rL VKF3UsVX8nmpitZGUT8n2sJNx3+Rqat884ZlO0U2rNXmPxI1ryNQmyKmGHmLqq8U i431qCXGBDZeJSC2uSDSPPfa5vQx4DrK7JnQBR2H1qJsa3O860PTnXOBlTxVSUms swHl7iZullECZDBDHGrY/rxeaKKejDuuLlKGdlHEb/DELiVIgIpN6e5Co8fsG7+K WJuo11WG/QsAV8TjW24NEBLw2j9zf8Ff -----END CERTIFICATE-----Generated at Wed Jul 23 12:46:20 2025 by rpki-client