$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2C38/04BAA614A98C11EF9350FB63C4F9AE02/qjXi-Xe1XnL5FjW_fVO861NHmDs.mft File: qjXi-Xe1XnL5FjW_fVO861NHmDs.mft (raw, json) Hash identifier: RG2SEpyGIqYEawamh4FTVC5JK2JomnOCi2dRAfdFaKo= Subject key identifier: 5B:98:5F:A8:5E:98:ED:F8:BA:43:96:F0:22:C5:26:4D:49:37:57:EE Authority key identifier: AA:35:E2:F9:77:B5:5E:72:F9:16:35:BF:7D:53:BC:EB:53:47:98:3B Certificate issuer: /CN=A91D2C38/serialNumber=AA35E2F977B55E72F91635BF7D53BCEB5347983B Certificate serial: 7B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qjXi-Xe1XnL5FjW_fVO861NHmDs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D2C38/04BAA614A98C11EF9350FB63C4F9AE02/qjXi-Xe1XnL5FjW_fVO861NHmDs.mft Manifest number: 7A Signing time: Sat 19 Jul 2025 06:59:05 +0000 Manifest this update: Sat 19 Jul 2025 06:59:04 +0000 Manifest next update: Sat 26 Jul 2025 06:59:04 +0000 Files and hashes: 1: qjXi-Xe1XnL5FjW_fVO861NHmDs.crl (hash: 5Kaa7IAcVHoF5nN9KGrwoZWN07D+27+nE2PoRVEmg+g=) 2: 8D6B6D86A98C11EFAAC0F364C4F9AE02.roa (hash: P1YxJ4+gjHWBzmSpF7hBMmYmiKS5/7YJlO0/1zxJNmc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D2C38/04BAA614A98C11EF9350FB63C4F9AE02/qjXi-Xe1XnL5FjW_fVO861NHmDs.crl rsync://rpki.apnic.net/member_repository/A91D2C38/04BAA614A98C11EF9350FB63C4F9AE02/qjXi-Xe1XnL5FjW_fVO861NHmDs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qjXi-Xe1XnL5FjW_fVO861NHmDs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 06:59:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 123 (0x7b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D2C38, serialNumber=AA35E2F977B55E72F91635BF7D53BCEB5347983B Validity Not Before: Jul 19 06:59:04 2025 GMT Not After : Jul 26 06:59:04 2025 GMT Subject: CN=687b4239-c1a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:92:b2:78:16:61:dd:62:e6:43:74:54:cf:d4: 3b:61:1b:eb:22:4f:2c:f5:06:e8:d6:f1:1a:96:71: 20:26:8d:a6:ce:38:69:25:af:8e:dc:87:36:c8:89: 0a:18:12:ca:58:00:43:ce:a1:79:ea:c6:81:08:b8: a9:90:96:1b:2f:d9:24:b5:d1:bc:22:f8:c9:62:ed: d1:df:f2:8a:50:7f:3e:ee:f1:8e:30:d1:94:6f:de: ca:3a:a4:b7:5c:36:c3:28:06:5f:26:92:cb:9e:5c: 9e:dd:29:3e:69:30:e5:57:82:9c:3a:68:38:95:ec: 5c:6d:2e:c6:99:8a:fe:47:93:7c:37:44:2d:91:c7: 48:ee:15:8b:7b:d3:4f:aa:7c:f0:85:ba:82:c0:a5: 5e:38:3a:19:a9:26:df:c7:d7:b4:2b:1c:6c:f7:78: 49:5a:f1:55:bd:d7:3f:df:40:da:36:62:c2:7d:7d: 97:ee:ca:ef:a6:5d:e6:37:84:a2:25:42:63:95:ba: de:17:10:e0:8d:e8:5d:bb:24:74:62:76:93:0b:c2: 09:fc:63:7a:48:44:76:8e:11:f9:3d:d1:a8:f9:73: d7:70:76:e8:db:77:5f:82:39:2b:3d:c8:6b:8c:45: 28:10:16:ab:13:3d:69:f8:ca:a6:5c:0b:28:5c:8a: 65:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:98:5F:A8:5E:98:ED:F8:BA:43:96:F0:22:C5:26:4D:49:37:57:EE X509v3 Authority Key Identifier: keyid:AA:35:E2:F9:77:B5:5E:72:F9:16:35:BF:7D:53:BC:EB:53:47:98:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D2C38/04BAA614A98C11EF9350FB63C4F9AE02/qjXi-Xe1XnL5FjW_fVO861NHmDs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qjXi-Xe1XnL5FjW_fVO861NHmDs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2C38/04BAA614A98C11EF9350FB63C4F9AE02/qjXi-Xe1XnL5FjW_fVO861NHmDs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:3f:dd:41:5b:65:c6:c0:ec:e8:51:a7:d6:d9:bc:c2:05:21: a5:4b:fa:5e:3d:75:f6:7f:d8:c4:23:5f:38:65:98:fe:8d:3d: 95:14:be:32:05:be:22:f3:6c:76:57:46:75:2c:e7:a2:93:80: e7:a6:e9:92:c0:77:04:67:65:60:b1:a8:6b:0d:2b:05:7f:6d: d2:6c:67:6e:be:a1:07:5a:b9:5f:ad:aa:a8:f0:f5:d1:ae:53: 4b:70:ac:ae:be:eb:4c:fd:e2:02:7c:47:7e:ca:be:75:66:e0: 11:c9:b3:69:70:6d:2a:16:8e:53:cb:39:8b:a3:d6:4e:22:38: ef:b1:1d:81:01:29:0c:5e:60:22:0b:1d:6e:e8:58:87:34:59: f9:f8:83:fd:eb:31:7d:7e:a8:dc:2f:65:15:2f:f8:18:80:a2: 94:2e:a1:16:93:b0:48:ac:4c:da:79:71:97:7e:d1:fb:34:61: 65:60:57:6e:be:26:e5:3e:07:7d:44:9a:f4:a5:de:5d:64:ce: 6e:93:ae:aa:0a:ef:69:71:1c:b3:3d:5c:13:a0:58:45:91:10: 41:16:3b:d2:a6:f1:eb:4d:fa:bd:6a:64:7d:c4:ce:5f:bf:29: 9a:88:f4:bb:5b:d3:70:53:e7:e0:5f:3b:4a:db:bc:d5:d8:55: 5a:03:a2:52 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBezANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE MkMzODExMC8GA1UEBRMoQUEzNUUyRjk3N0I1NUU3MkY5MTYzNUJGN0Q1M0JDRUI1 MzQ3OTgzQjAeFw0yNTA3MTkwNjU5MDRaFw0yNTA3MjYwNjU5MDRaMBgxFjAUBgNV BAMTDTY4N2I0MjM5LWMxYTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC8krJ4FmHdYuZDdFTP1DthG+siTyz1BujW8RqWcSAmjabOOGklr47chzbIiQoY EspYAEPOoXnqxoEIuKmQlhsv2SS10bwi+Mli7dHf8opQfz7u8Y4w0ZRv3so6pLdc NsMoBl8mksueXJ7dKT5pMOVXgpw6aDiV7FxtLsaZiv5Hk3w3RC2Rx0juFYt700+q fPCFuoLApV44OhmpJt/H17QrHGz3eEla8VW91z/fQNo2YsJ9fZfuyu+mXeY3hKIl QmOVut4XEOCN6F27JHRidpMLwgn8Y3pIRHaOEfk90aj5c9dwdujbd1+COSs9yGuM RSgQFqsTPWn4yqZcCyhcimXdAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUW5hfqF6Y 7fi6Q5bwIsUmTUk3V+4wHwYDVR0jBBgwFoAUqjXi+Xe1XnL5FjW/fVO861NHmDsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQyQzM4LzA0QkFBNjE0QTk4 QzExRUY5MzUwRkI2M0M0RjlBRTAyL3FqWGktWGUxWG5MNUZqV19mVk84NjFOSG1E cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvcWpYaS1YZTFYbkw1RmpXX2ZWTzg2MU5IbURzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQy QzM4LzA0QkFBNjE0QTk4QzExRUY5MzUwRkI2M0M0RjlBRTAyL3FqWGktWGUxWG5M NUZqV19mVk84NjFOSG1Ecy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIA/3UFbZcbA7OhRp9bZvMIFIaVL+l49dfZ/2MQjXzhlmP6NPZUUvjIF viLzbHZXRnUs56KTgOem6ZLAdwRnZWCxqGsNKwV/bdJsZ26+oQdauV+tqqjw9dGu U0twrK6+60z94gJ8R37KvnVm4BHJs2lwbSoWjlPLOYuj1k4iOO+xHYEBKQxeYCIL HW7oWIc0Wfn4g/3rMX1+qNwvZRUv+BiAopQuoRaTsEisTNp5cZd+0fs0YWVgV26+ JuU+B31EmvSl3l1kzm6TrqoK72lxHLM9XBOgWEWREEEWO9Km8etN+r1qZH3Ezl+/ KZqI9Ltb03BT5+BfO0rbvNXYVVoDolI= -----END CERTIFICATE-----Generated at Sun Jul 20 19:20:43 2025 by rpki-client