$ rpki-client -vvf rpki.apnic.net/member_repository/A91C31B7/FCC334CC1E6B11EFAC0E914EC4F9AE02/qB0VXKQErkFFeBrwXrU6Ehni4GU.mft File: qB0VXKQErkFFeBrwXrU6Ehni4GU.mft (raw, json) Hash identifier: Nt8Bz7TNBCXhveEOr69fjnOjAygXLZJVkOugxb3aQHI= Subject key identifier: D8:87:1C:F9:53:BA:26:DF:C9:9A:68:D9:FD:8D:63:55:E7:CB:E7:00 Authority key identifier: A8:1D:15:5C:A4:04:AE:41:45:78:1A:F0:5E:B5:3A:12:19:E2:E0:65 Certificate issuer: /CN=A91C31B7/serialNumber=A81D155CA404AE4145781AF05EB53A1219E2E065 Certificate serial: D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qB0VXKQErkFFeBrwXrU6Ehni4GU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C31B7/FCC334CC1E6B11EFAC0E914EC4F9AE02/qB0VXKQErkFFeBrwXrU6Ehni4GU.mft Manifest number: D7 Signing time: Wed 23 Jul 2025 05:51:45 +0000 Manifest this update: Wed 23 Jul 2025 05:51:44 +0000 Manifest next update: Wed 30 Jul 2025 05:51:44 +0000 Files and hashes: 1: qB0VXKQErkFFeBrwXrU6Ehni4GU.crl (hash: WEnJKOfQtGL79GsqnOHgNH7okDyJErxLTAZngsGslSA=) 2: 42C6F6041E6F11EF898C1E38C4F9AE02.roa (hash: Nwxndbe8HVB4N9vkz2u0yYwDfuyP9L4g9kHPKAHCIos=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C31B7/FCC334CC1E6B11EFAC0E914EC4F9AE02/qB0VXKQErkFFeBrwXrU6Ehni4GU.crl rsync://rpki.apnic.net/member_repository/A91C31B7/FCC334CC1E6B11EFAC0E914EC4F9AE02/qB0VXKQErkFFeBrwXrU6Ehni4GU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qB0VXKQErkFFeBrwXrU6Ehni4GU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Jul 2025 05:51:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 216 (0xd8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C31B7, serialNumber=A81D155CA404AE4145781AF05EB53A1219E2E065 Validity Not Before: Jul 23 05:51:44 2025 GMT Not After : Jul 30 05:51:44 2025 GMT Subject: CN=68807871-8b7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:44:0d:a8:2d:c7:c7:30:a1:d1:a8:79:5c:7c: 72:94:24:07:a5:83:5d:6f:fc:fb:d1:3f:b5:f9:5b: 44:62:20:c5:d2:fa:c6:3f:92:ff:2d:f6:64:b6:97: 0b:fb:f8:09:2c:ab:c3:df:9e:07:3c:4e:8c:c5:79: 7b:57:bf:05:13:bc:c3:b5:21:cd:62:36:28:7f:c3: cf:17:9c:08:b4:bd:55:05:23:c5:66:d7:56:84:95: 49:b0:89:47:17:3c:a0:2a:26:b7:f9:e9:46:3f:b9: d4:63:51:07:15:b7:d1:52:96:d1:69:76:a1:bd:73: 37:1c:4f:cc:f7:20:27:76:e8:64:83:d8:3a:02:b6: 4f:c1:24:fe:6c:6b:79:d3:37:83:a3:dd:ed:e3:2e: 8e:1f:4a:81:21:94:1d:74:84:b1:75:84:72:f5:24: bd:bd:4a:a0:23:7a:69:1b:75:4b:81:cb:74:ed:72: 1a:0d:db:a6:76:ab:2c:3a:a6:83:97:e0:b7:b1:95: c2:cf:6b:8e:e7:ef:d5:e3:35:55:c1:a3:a4:50:72: 00:47:4f:81:d7:38:11:76:49:fd:5d:e4:8e:0f:5c: f9:6d:27:59:90:ff:87:ee:cd:ed:c5:94:c4:1f:be: c5:f2:3e:ce:6c:78:6f:1c:e4:c5:de:29:17:4b:1e: b8:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:87:1C:F9:53:BA:26:DF:C9:9A:68:D9:FD:8D:63:55:E7:CB:E7:00 X509v3 Authority Key Identifier: keyid:A8:1D:15:5C:A4:04:AE:41:45:78:1A:F0:5E:B5:3A:12:19:E2:E0:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C31B7/FCC334CC1E6B11EFAC0E914EC4F9AE02/qB0VXKQErkFFeBrwXrU6Ehni4GU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qB0VXKQErkFFeBrwXrU6Ehni4GU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C31B7/FCC334CC1E6B11EFAC0E914EC4F9AE02/qB0VXKQErkFFeBrwXrU6Ehni4GU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:d3:02:54:bf:41:2b:c6:12:6f:47:60:06:b8:15:f9:39:f6: 92:95:21:e3:c4:c6:11:2a:72:4f:e0:c6:1d:b5:5b:8c:92:f4: d8:b3:9f:75:7d:b6:c7:25:f0:49:33:77:0f:91:ff:bc:fa:0e: 7a:fa:13:c8:d1:05:0e:9a:f0:90:26:0b:ab:cf:5e:83:47:cf: bf:e4:e7:0b:e3:aa:97:77:d5:63:6e:26:b5:c5:0d:dc:9e:2f: ba:37:a7:62:34:8f:6c:b4:53:f3:86:23:f8:79:3e:89:c4:ae: 16:6a:45:f4:e2:be:74:49:49:f6:e7:eb:a1:06:dc:10:92:93: 15:4a:cc:57:f4:0b:71:04:6a:d4:6e:ca:b1:20:9c:02:c1:90: 93:80:43:fc:cd:8a:cb:45:39:e0:2f:c7:9b:29:07:91:24:0c: 0a:5a:e8:d8:22:54:57:e3:b8:9a:6b:78:4e:67:ae:0c:e7:1b: a9:46:91:2a:e9:8e:a4:26:1a:44:b0:51:e7:9a:ac:5f:b0:80: 40:3c:de:a6:d1:6f:a3:43:61:a0:f8:1b:b2:c1:58:88:59:9d: 82:74:86:91:1e:35:d0:b6:aa:00:69:5b:5c:fd:fc:90:7a:2d: 9e:be:a0:c8:e3:52:1d:95:dc:40:47:ef:d1:ad:79:9c:5e:57: 5d:60:71:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzMxQjcxMTAvBgNVBAUTKEE4MUQxNTVDQTQwNEFFNDE0NTc4MUFGMDVFQjUzQTEy MTlFMkUwNjUwHhcNMjUwNzIzMDU1MTQ0WhcNMjUwNzMwMDU1MTQ0WjAYMRYwFAYD VQQDEw02ODgwNzg3MS04YjdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxEQNqC3HxzCh0ah5XHxylCQHpYNdb/z70T+1+VtEYiDF0vrGP5L/LfZktpcL +/gJLKvD354HPE6MxXl7V78FE7zDtSHNYjYof8PPF5wItL1VBSPFZtdWhJVJsIlH FzygKia3+elGP7nUY1EHFbfRUpbRaXahvXM3HE/M9yAnduhkg9g6ArZPwST+bGt5 0zeDo93t4y6OH0qBIZQddISxdYRy9SS9vUqgI3ppG3VLgct07XIaDdumdqssOqaD l+C3sZXCz2uO5+/V4zVVwaOkUHIAR0+B1zgRdkn9XeSOD1z5bSdZkP+H7s3txZTE H77F8j7ObHhvHOTF3ikXSx649wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNiHHPlT uibfyZpo2f2NY1Xny+cAMB8GA1UdIwQYMBaAFKgdFVykBK5BRXga8F61OhIZ4uBl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzFCNy9GQ0MzMzRDQzFF NkIxMUVGQUMwRTkxNEVDNEY5QUUwMi9xQjBWWEtRRXJrRkZlQnJ3WHJVNkVobmk0 R1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FCMFZYS1FFcmtGRmVCcndYclU2RWhuaTRHVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MzFCNy9GQ0MzMzRDQzFFNkIxMUVGQUMwRTkxNEVDNEY5QUUwMi9xQjBWWEtRRXJr RkZlQnJ3WHJVNkVobmk0R1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQ0wJUv0ErxhJvR2AGuBX5OfaSlSHjxMYRKnJP4MYdtVuMkvTYs591 fbbHJfBJM3cPkf+8+g56+hPI0QUOmvCQJgurz16DR8+/5OcL46qXd9Vjbia1xQ3c ni+6N6diNI9stFPzhiP4eT6JxK4WakX04r50SUn25+uhBtwQkpMVSsxX9AtxBGrU bsqxIJwCwZCTgEP8zYrLRTngL8ebKQeRJAwKWujYIlRX47iaa3hOZ64M5xupRpEq 6Y6kJhpEsFHnmqxfsIBAPN6m0W+jQ2Gg+BuywViIWZ2CdIaRHjXQtqoAaVtc/fyQ ei2evqDI41IdldxAR+/RrXmcXlddYHG5 -----END CERTIFICATE-----Generated at Wed Jul 23 17:31:47 2025 by rpki-client