$ rpki-client -vvf rpki.apnic.net/member_repository/A91F77FC/FED90156AF3011E9AEE13E34C4F9AE02/q6TDlMi5vRUbOziWObjG_4BwSfI.mft File: q6TDlMi5vRUbOziWObjG_4BwSfI.mft (raw, json) Hash identifier: s636eLsbET5Y2VQl1GG7baLwoZEawd3HBPjPV8CSz9o= Subject key identifier: 3B:5D:7C:AE:C9:34:F7:A0:D6:9B:FF:38:FE:08:2A:E2:0B:EA:52:96 Authority key identifier: AB:A4:C3:94:C8:B9:BD:15:1B:3B:38:96:39:B8:C6:FF:80:70:49:F2 Certificate issuer: /CN=A91F77FC/serialNumber=ABA4C394C8B9BD151B3B389639B8C6FF807049F2 Certificate serial: 0E19 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q6TDlMi5vRUbOziWObjG_4BwSfI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F77FC/FED90156AF3011E9AEE13E34C4F9AE02/q6TDlMi5vRUbOziWObjG_4BwSfI.mft Manifest number: 0E10 Signing time: Fri 18 Jul 2025 18:00:15 +0000 Manifest this update: Fri 18 Jul 2025 18:00:14 +0000 Manifest next update: Fri 25 Jul 2025 18:00:14 +0000 Files and hashes: 1: q6TDlMi5vRUbOziWObjG_4BwSfI.crl (hash: bB2Q1qf6kXP9HoDiSlrkOzkPZMsPNf5wjStCXfORy7k=) 2: 70783ACCAF3411E99DF2F83EC4F9AE02.roa (hash: zDcQXuAykU10DhyikYZPwzsk10KGNkvQLJMhbZSIlBE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F77FC/FED90156AF3011E9AEE13E34C4F9AE02/q6TDlMi5vRUbOziWObjG_4BwSfI.crl rsync://rpki.apnic.net/member_repository/A91F77FC/FED90156AF3011E9AEE13E34C4F9AE02/q6TDlMi5vRUbOziWObjG_4BwSfI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q6TDlMi5vRUbOziWObjG_4BwSfI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 18:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3609 (0xe19) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F77FC, serialNumber=ABA4C394C8B9BD151B3B389639B8C6FF807049F2 Validity Not Before: Jul 18 18:00:14 2025 GMT Not After : Jul 25 18:00:14 2025 GMT Subject: CN=687a8bae-86bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:4a:e0:28:c8:77:e4:ab:07:04:7f:0f:9f:a0: 31:0d:f9:3d:7e:96:b1:e8:22:ee:95:83:4b:fc:c1: 14:36:6a:ca:15:aa:b9:14:ea:c4:9a:82:eb:99:1c: 04:fc:36:b4:9e:6b:45:bc:2e:a7:bc:99:d2:ae:40: f9:70:9c:ec:8d:f7:08:51:f0:f6:bc:ed:f8:a8:65: 3e:60:7a:d9:ab:77:bd:13:87:8c:0f:96:14:b4:c2: 89:0e:07:50:a1:2a:36:c3:a6:90:09:19:fd:d1:a4: 0b:7e:5a:1f:d2:85:c8:0f:85:5b:1a:de:a5:e4:6e: d2:12:07:9f:2d:b4:e4:6a:6d:2a:2f:86:69:3b:d4: c4:f3:53:f4:54:e8:c7:70:f3:24:4b:f3:c9:2a:fa: ea:2d:c4:a2:e1:39:a8:0c:2a:3a:30:3e:2d:be:fc: 25:3b:48:cc:f5:95:b5:1c:d0:3d:82:96:c9:3e:49: 82:7f:81:38:31:5c:93:5c:25:e9:cc:c9:03:a6:2b: 06:fe:c6:86:7a:82:3a:16:a9:21:86:b1:d1:a1:7c: e2:f8:62:b6:52:84:ce:ed:fb:59:aa:f1:25:80:57: cf:9e:22:6a:f3:03:9c:7c:1e:98:2a:d5:e8:77:d9: 75:5f:ee:ef:05:df:eb:72:20:31:55:65:81:22:a2: 40:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:5D:7C:AE:C9:34:F7:A0:D6:9B:FF:38:FE:08:2A:E2:0B:EA:52:96 X509v3 Authority Key Identifier: keyid:AB:A4:C3:94:C8:B9:BD:15:1B:3B:38:96:39:B8:C6:FF:80:70:49:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F77FC/FED90156AF3011E9AEE13E34C4F9AE02/q6TDlMi5vRUbOziWObjG_4BwSfI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q6TDlMi5vRUbOziWObjG_4BwSfI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F77FC/FED90156AF3011E9AEE13E34C4F9AE02/q6TDlMi5vRUbOziWObjG_4BwSfI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:53:3a:40:a2:3f:51:f8:61:72:42:a5:df:7a:21:11:35:b0: d6:68:dd:01:c0:cf:04:03:7f:7e:4c:e6:e6:37:f1:5a:2f:68: 37:46:7c:14:bf:c9:eb:04:5c:ea:6d:11:25:73:b3:19:82:fc: 1e:0a:2a:b9:0a:0e:13:1f:a4:4f:17:f9:0c:ad:81:25:7d:b4: d5:d9:5b:80:b9:04:f2:11:89:dd:08:7b:2e:5e:d9:7b:b3:b4: 99:c6:ef:da:9f:be:10:11:27:4b:2e:6e:f6:01:33:7b:d9:03: 9e:ab:2a:26:c4:46:82:6f:91:e2:e2:ab:1b:04:89:9f:89:af: 2e:a4:54:89:bb:c4:c0:be:91:bb:fb:59:21:03:49:ab:ba:7a: f0:1d:df:4e:59:0c:d4:6b:28:80:eb:c7:64:d5:1b:64:bf:9a: 7f:a1:b5:5d:d3:9f:2f:77:9a:4d:4a:f1:e0:74:12:a3:88:87: aa:66:16:68:8f:d2:c4:7d:53:2f:82:9c:11:37:f5:a0:ff:a6: ed:a7:da:34:ab:de:1a:1a:f6:8e:ce:84:87:ae:eb:8d:5e:bf: 62:01:2e:5d:f2:ab:53:92:3f:ef:ea:56:cf:e3:cf:23:2f:66: 40:05:fe:16:2b:f1:a1:5c:60:60:ad:6b:1c:32:1f:9b:76:b9: 3c:46:d3:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDhkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjc3RkMxMTAvBgNVBAUTKEFCQTRDMzk0QzhCOUJEMTUxQjNCMzg5NjM5QjhDNkZG ODA3MDQ5RjIwHhcNMjUwNzE4MTgwMDE0WhcNMjUwNzI1MTgwMDE0WjAYMRYwFAYD VQQDEw02ODdhOGJhZS04NmJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAukrgKMh35KsHBH8Pn6AxDfk9fpax6CLulYNL/MEUNmrKFaq5FOrEmoLrmRwE /Da0nmtFvC6nvJnSrkD5cJzsjfcIUfD2vO34qGU+YHrZq3e9E4eMD5YUtMKJDgdQ oSo2w6aQCRn90aQLflof0oXID4VbGt6l5G7SEgefLbTkam0qL4ZpO9TE81P0VOjH cPMkS/PJKvrqLcSi4TmoDCo6MD4tvvwlO0jM9ZW1HNA9gpbJPkmCf4E4MVyTXCXp zMkDpisG/saGeoI6FqkhhrHRoXzi+GK2UoTO7ftZqvElgFfPniJq8wOcfB6YKtXo d9l1X+7vBd/rciAxVWWBIqJAdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDtdfK7J NPeg1pv/OP4IKuIL6lKWMB8GA1UdIwQYMBaAFKukw5TIub0VGzs4ljm4xv+AcEny MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzdGQy9GRUQ5MDE1NkFG MzAxMUU5QUVFMTNFMzRDNEY5QUUwMi9xNlREbE1pNXZSVWJPemlXT2JqR180QndT ZkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3E2VERsTWk1dlJVYk96aVdPYmpHXzRCd1NmSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzdGQy9GRUQ5MDE1NkFGMzAxMUU5QUVFMTNFMzRDNEY5QUUwMi9xNlREbE1pNXZS VWJPemlXT2JqR180QndTZkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxUzpAoj9R+GFyQqXfeiERNbDWaN0BwM8EA39+TObmN/FaL2g3RnwU v8nrBFzqbRElc7MZgvweCiq5Cg4TH6RPF/kMrYElfbTV2VuAuQTyEYndCHsuXtl7 s7SZxu/an74QESdLLm72ATN72QOeqyomxEaCb5Hi4qsbBImfia8upFSJu8TAvpG7 +1khA0mrunrwHd9OWQzUayiA68dk1Rtkv5p/obVd058vd5pNSvHgdBKjiIeqZhZo j9LEfVMvgpwRN/Wg/6btp9o0q94aGvaOzoSHruuNXr9iAS5d8qtTkj/v6lbP488j L2ZABf4WK/GhXGBgrWscMh+bdrk8RtNw -----END CERTIFICATE-----Generated at Sun Jul 20 06:38:11 2025 by rpki-client