$ rpki-client -vvf rpki.apnic.net/member_repository/A91430D6/17F06A245FE011F0B2FD8F57C4F9AE02/qsOf2WPeFzHQ2j1BQeSh5GnphSM.mft File: qsOf2WPeFzHQ2j1BQeSh5GnphSM.mft (raw, json) Hash identifier: fu8Hlj/CL5xj2UeP36/aJ1kDBA4BYrKf+aFwa/qozlY= Subject key identifier: 54:7F:32:77:44:A6:09:88:0E:86:15:48:9B:A1:D0:50:E8:E8:EA:70 Authority key identifier: AA:C3:9F:D9:63:DE:17:31:D0:DA:3D:41:41:E4:A1:E4:69:E9:85:23 Certificate issuer: /CN=A91430D6/serialNumber=AAC39FD963DE1731D0DA3D4141E4A1E469E98523 Certificate serial: 06 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qsOf2WPeFzHQ2j1BQeSh5GnphSM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91430D6/17F06A245FE011F0B2FD8F57C4F9AE02/qsOf2WPeFzHQ2j1BQeSh5GnphSM.mft Manifest number: 05 Signing time: Sat 19 Jul 2025 08:28:32 +0000 Manifest this update: Sat 19 Jul 2025 08:28:32 +0000 Manifest next update: Sat 26 Jul 2025 08:28:32 +0000 Files and hashes: 1: qsOf2WPeFzHQ2j1BQeSh5GnphSM.crl (hash: Xq9xln+KIu5fsX/iE6HOoAyuD41+JI1PR4jQhBZ1k2o=) 2: C869343A5FE011F0ABA4A158C4F9AE02.roa (hash: 1m3AATxdBvNaAbP3EbhkZoZi/9NKKO+rrYQbsiCKglc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91430D6/17F06A245FE011F0B2FD8F57C4F9AE02/qsOf2WPeFzHQ2j1BQeSh5GnphSM.crl rsync://rpki.apnic.net/member_repository/A91430D6/17F06A245FE011F0B2FD8F57C4F9AE02/qsOf2WPeFzHQ2j1BQeSh5GnphSM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qsOf2WPeFzHQ2j1BQeSh5GnphSM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 08:28:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6 (0x6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91430D6, serialNumber=AAC39FD963DE1731D0DA3D4141E4A1E469E98523 Validity Not Before: Jul 19 08:28:32 2025 GMT Not After : Jul 26 08:28:32 2025 GMT Subject: CN=687b5730-bdd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:f7:43:1f:fa:68:70:10:7b:66:6c:b7:b3:b6: 6c:3c:c6:1c:81:77:01:03:b3:91:62:7c:60:9f:9b: 64:e7:7f:1f:ad:48:0a:b0:be:3f:c1:2d:56:fb:08: 19:b7:45:a0:7e:cb:80:cb:d4:f2:a9:87:b3:e3:78: 94:1a:0b:cc:30:58:be:bd:04:1b:c1:8e:78:6b:c7: 5d:f1:8a:88:11:2a:c8:56:c9:ba:bb:38:35:3c:6b: be:f3:52:8b:38:32:63:8d:1d:2b:50:8a:7a:e9:bd: 82:e1:7a:2c:cf:fa:08:5b:d4:f2:bf:f6:29:5f:a7: 77:01:7c:cf:0c:60:9b:11:b3:5b:4c:39:00:e7:fd: fc:16:cf:9e:15:51:1f:5a:b9:65:e0:f0:ee:38:89: d6:d9:15:73:69:99:d4:a9:24:d7:ef:61:f2:8f:0a: 66:61:2c:8d:73:2f:b8:da:48:e0:05:4b:14:d5:cd: 7b:38:58:0b:93:63:13:2b:33:bf:7b:53:6d:6d:aa: 97:d4:bd:80:b2:d1:ff:92:ee:61:10:28:15:a9:5b: f0:da:5f:20:36:8d:86:77:d5:fa:ed:e4:99:fe:5e: 3e:bb:63:00:d5:5c:32:ff:b0:b9:53:34:f1:39:52: ef:03:c5:7b:29:90:a3:85:34:e3:cf:ad:e1:15:ca: 12:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:7F:32:77:44:A6:09:88:0E:86:15:48:9B:A1:D0:50:E8:E8:EA:70 X509v3 Authority Key Identifier: keyid:AA:C3:9F:D9:63:DE:17:31:D0:DA:3D:41:41:E4:A1:E4:69:E9:85:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91430D6/17F06A245FE011F0B2FD8F57C4F9AE02/qsOf2WPeFzHQ2j1BQeSh5GnphSM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qsOf2WPeFzHQ2j1BQeSh5GnphSM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91430D6/17F06A245FE011F0B2FD8F57C4F9AE02/qsOf2WPeFzHQ2j1BQeSh5GnphSM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:9e:46:ed:a7:90:06:7d:23:c7:9a:8f:39:b5:49:68:52:24: 77:55:db:5c:1c:91:80:0e:a9:4e:3b:0e:30:eb:73:b1:b2:6d: a0:74:92:eb:d4:66:3e:97:66:af:32:5d:dd:42:72:10:cd:c2: 39:ad:38:30:11:02:c0:49:32:f3:4d:ba:e2:a4:72:a2:7c:70: 76:1e:da:27:74:5b:ab:90:9b:8e:10:5b:c3:58:cf:a3:ca:6b: 76:6f:3f:99:41:bc:16:6c:e4:93:15:31:d1:51:bd:d9:58:da: 4a:fc:45:2e:65:64:8f:d9:47:37:22:c0:26:68:af:87:98:c8: fe:04:d7:a1:11:b7:b4:e7:01:2e:2a:4e:9f:17:02:ac:b7:20: 45:bb:01:f4:d4:fe:49:4c:df:f9:a2:5a:9f:6c:60:b1:a6:94: 27:a1:a3:2d:c1:10:9b:c1:d2:b4:b9:60:73:35:7d:e7:b6:a4: 3a:ed:64:dd:e7:32:5a:c5:d2:6a:2d:8d:7b:18:d6:8e:68:85: 30:6e:93:36:de:2f:de:96:20:7a:f9:37:45:05:c8:b6:04:ae: d3:ba:29:0e:79:f1:8f:88:d6:13:e8:80:53:86:12:86:c3:fc: 9f:f4:08:3a:ee:28:b4:52:37:cb:40:0b:d6:c7:c5:4d:6a:48: 4b:32:95:62 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MzBENjExMC8GA1UEBRMoQUFDMzlGRDk2M0RFMTczMUQwREEzRDQxNDFFNEExRTQ2 OUU5ODUyMzAeFw0yNTA3MTkwODI4MzJaFw0yNTA3MjYwODI4MzJaMBgxFjAUBgNV BAMTDTY4N2I1NzMwLWJkZDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDb90Mf+mhwEHtmbLeztmw8xhyBdwEDs5FifGCfm2Tnfx+tSAqwvj/BLVb7CBm3 RaB+y4DL1PKph7PjeJQaC8wwWL69BBvBjnhrx13xiogRKshWybq7ODU8a77zUos4 MmONHStQinrpvYLheizP+ghb1PK/9ilfp3cBfM8MYJsRs1tMOQDn/fwWz54VUR9a uWXg8O44idbZFXNpmdSpJNfvYfKPCmZhLI1zL7jaSOAFSxTVzXs4WAuTYxMrM797 U21tqpfUvYCy0f+S7mEQKBWpW/DaXyA2jYZ31frt5Jn+Xj67YwDVXDL/sLlTNPE5 Uu8DxXspkKOFNOPPreEVyhKVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUVH8yd0Sm CYgOhhVIm6HQUOjo6nAwHwYDVR0jBBgwFoAUqsOf2WPeFzHQ2j1BQeSh5GnphSMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQzMEQ2LzE3RjA2QTI0NUZF MDExRjBCMkZEOEY1N0M0RjlBRTAyL3FzT2YyV1BlRnpIUTJqMUJRZVNoNUducGhT TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvcXNPZjJXUGVGekhRMmoxQlFlU2g1R25waFNNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQz MEQ2LzE3RjA2QTI0NUZFMDExRjBCMkZEOEY1N0M0RjlBRTAyL3FzT2YyV1BlRnpI UTJqMUJRZVNoNUducGhTTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGueRu2nkAZ9I8eajzm1SWhSJHdV21wckYAOqU47DjDrc7GybaB0kuvU Zj6XZq8yXd1CchDNwjmtODARAsBJMvNNuuKkcqJ8cHYe2id0W6uQm44QW8NYz6PK a3ZvP5lBvBZs5JMVMdFRvdlY2kr8RS5lZI/ZRzciwCZor4eYyP4E16ERt7TnAS4q Tp8XAqy3IEW7AfTU/klM3/miWp9sYLGmlCehoy3BEJvB0rS5YHM1fee2pDrtZN3n MlrF0motjXsY1o5ohTBukzbeL96WIHr5N0UFyLYErtO6KQ558Y+I1hPogFOGEobD /J/0CDruKLRSN8tAC9bHxU1qSEsylWI= -----END CERTIFICATE-----Generated at Sun Jul 20 18:42:37 2025 by rpki-client