$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/0Qb7lypx_rdAkuBjeNVM1Z5Z46M.mft File: 0Qb7lypx_rdAkuBjeNVM1Z5Z46M.mft (raw, json) Hash identifier: o2+DuoIiERofAjSvsJ9nWwsC6jWY5ZUhxvWbmYa3em8= Subject key identifier: AF:2E:4B:E7:C4:5A:03:81:76:08:13:4A:C9:DB:19:49:AE:3D:17:FD Authority key identifier: D1:06:FB:97:2A:71:FE:B7:40:92:E0:63:78:D5:4C:D5:9E:59:E3:A3 Certificate issuer: /CN=A91EEA4D/serialNumber=D106FB972A71FEB74092E06378D54CD59E59E3A3 Certificate serial: 0E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Qb7lypx_rdAkuBjeNVM1Z5Z46M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/0Qb7lypx_rdAkuBjeNVM1Z5Z46M.mft Manifest number: 1341 Signing time: Mon 30 Jun 2025 19:30:29 +0000 Manifest this update: Mon 30 Jun 2025 19:30:29 +0000 Manifest next update: Mon 07 Jul 2025 19:30:29 +0000 Files and hashes: 1: 0Qb7lypx_rdAkuBjeNVM1Z5Z46M.crl (hash: T8uWtt4PQRmDplxB9p1Lf23hSgoiCqwjSxtV1HOu8xw=) 2: 6B6060E445A311F093AEF324C4F9AE02.roa (hash: KkaxMY/paqE0NvJV6adlijQxx/J7VWmCwLLLInlyw1A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/0Qb7lypx_rdAkuBjeNVM1Z5Z46M.crl rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/0Qb7lypx_rdAkuBjeNVM1Z5Z46M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Qb7lypx_rdAkuBjeNVM1Z5Z46M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 19:30:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14 (0xe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EEA4D, serialNumber=D106FB972A71FEB74092E06378D54CD59E59E3A3 Validity Not Before: Jun 30 19:30:29 2025 GMT Not After : Jul 7 19:30:29 2025 GMT Subject: CN=6862e5d5-91c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:0c:b8:ae:0a:70:89:c3:a9:1f:6e:a6:d9:bc: 09:4d:1e:8b:b4:c7:69:b6:29:d7:58:98:8b:28:22: 1e:03:40:12:8a:5c:05:ce:73:a0:1b:14:b5:2b:90: af:9f:39:63:d8:57:6d:fa:6b:19:ac:37:06:1a:38: bc:83:7f:09:c5:c3:61:e8:de:ec:61:29:1d:07:99: 9f:28:4c:ba:1a:4e:5e:d3:12:0b:41:d5:c9:a8:dc: cd:e2:68:79:76:5b:68:10:41:f9:a4:b4:b2:83:95: 8e:8d:08:15:49:25:81:e8:a1:49:26:96:28:8b:8b: d1:a4:66:04:6c:65:3b:27:9e:d9:83:83:89:ed:68: 7b:fd:e0:bf:2f:98:26:f0:2b:a6:b8:4c:5b:4e:08: 72:df:f6:2d:2f:de:b8:6f:6f:f5:ee:3e:93:27:64: f6:64:0f:78:c0:13:4c:a4:6d:a1:59:f9:74:8a:b8: 41:3b:56:56:4b:f5:14:36:0f:cb:ca:98:ff:a9:f0: a8:f7:24:bd:6d:e8:55:78:36:5c:72:19:41:bc:db: 93:8e:bb:f5:ec:f7:5a:e9:c2:c2:bf:50:6f:f3:3a: 62:a5:2c:52:f3:c3:f7:6d:da:b5:bc:81:1d:48:b4: 17:39:1b:6c:25:81:30:90:f5:44:9c:7f:84:38:cd: 14:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:2E:4B:E7:C4:5A:03:81:76:08:13:4A:C9:DB:19:49:AE:3D:17:FD X509v3 Authority Key Identifier: keyid:D1:06:FB:97:2A:71:FE:B7:40:92:E0:63:78:D5:4C:D5:9E:59:E3:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/0Qb7lypx_rdAkuBjeNVM1Z5Z46M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Qb7lypx_rdAkuBjeNVM1Z5Z46M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/0Qb7lypx_rdAkuBjeNVM1Z5Z46M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:f1:2b:62:7e:6f:d7:bd:42:46:6c:c9:05:e4:16:d8:ef:8f: 63:2a:47:81:f0:02:68:77:d9:87:74:86:79:ce:65:86:28:2d: 8b:d0:01:43:c6:53:69:6e:30:af:b5:60:d2:f3:70:7d:45:e2: 14:3d:df:c1:1d:f9:e2:79:a9:1e:3c:f0:29:d3:0c:40:ca:3c: 49:03:b7:0c:81:ea:42:64:4b:2d:63:3d:68:4a:ea:ef:89:0d: 1b:3b:e2:aa:1f:6b:8f:b1:3f:99:c3:61:89:b8:b3:9e:03:92: 9b:de:57:57:bf:dd:9c:93:00:65:14:8d:24:04:fb:df:41:7d: 10:c8:3e:2e:97:e5:ed:4d:67:c9:20:92:0c:ef:70:fd:d6:9a: 68:0c:e9:30:0b:cc:30:c8:6d:71:e1:cd:b2:2d:44:8b:fe:65: 86:4e:62:65:d0:3f:94:2e:51:d5:ce:c6:17:f5:08:c2:d4:59: cb:e8:00:a1:02:56:82:46:6c:82:15:ec:d1:ca:84:bd:e4:b5: a0:07:7f:c4:3a:8a:9e:0c:4c:a5:0d:23:2d:d1:ee:af:34:e3: 95:a1:e9:c0:27:c5:e9:8c:79:8c:ce:a0:fb:2a:84:54:af:33: e2:1a:34:e1:bc:32:06:00:c4:21:c8:97:be:87:90:a9:1d:0f: e8:01:0d:c2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF RUE0RDExMC8GA1UEBRMoRDEwNkZCOTcyQTcxRkVCNzQwOTJFMDYzNzhENTRDRDU5 RTU5RTNBMzAeFw0yNTA2MzAxOTMwMjlaFw0yNTA3MDcxOTMwMjlaMBgxFjAUBgNV BAMTDTY4NjJlNWQ1LTkxYzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/DLiuCnCJw6kfbqbZvAlNHou0x2m2KddYmIsoIh4DQBKKXAXOc6AbFLUrkK+f OWPYV236axmsNwYaOLyDfwnFw2Ho3uxhKR0HmZ8oTLoaTl7TEgtB1cmo3M3iaHl2 W2gQQfmktLKDlY6NCBVJJYHooUkmliiLi9GkZgRsZTsnntmDg4ntaHv94L8vmCbw K6a4TFtOCHLf9i0v3rhvb/XuPpMnZPZkD3jAE0ykbaFZ+XSKuEE7VlZL9RQ2D8vK mP+p8Kj3JL1t6FV4NlxyGUG825OOu/Xs91rpwsK/UG/zOmKlLFLzw/dt2rW8gR1I tBc5G2wlgTCQ9UScf4Q4zRT9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUry5L58Ra A4F2CBNKydsZSa49F/0wHwYDVR0jBBgwFoAU0Qb7lypx/rdAkuBjeNVM1Z5Z46Mw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVFQTRELzY2MUY3M0VDNDcz NzExRUFBQjE2QkI1MEM0RjlBRTAyLzBRYjdseXB4X3JkQWt1QmplTlZNMVo1WjQ2 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMFFiN2x5cHhfcmRBa3VCamVOVk0xWjVaNDZNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVF QTRELzY2MUY3M0VDNDczNzExRUFBQjE2QkI1MEM0RjlBRTAyLzBRYjdseXB4X3Jk QWt1QmplTlZNMVo1WjQ2TS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABDxK2J+b9e9QkZsyQXkFtjvj2MqR4HwAmh32Yd0hnnOZYYoLYvQAUPG U2luMK+1YNLzcH1F4hQ938Ed+eJ5qR488CnTDEDKPEkDtwyB6kJkSy1jPWhK6u+J DRs74qofa4+xP5nDYYm4s54DkpveV1e/3ZyTAGUUjSQE+99BfRDIPi6X5e1NZ8kg kgzvcP3WmmgM6TALzDDIbXHhzbItRIv+ZYZOYmXQP5QuUdXOxhf1CMLUWcvoAKEC VoJGbIIV7NHKhL3ktaAHf8Q6ip4MTKUNIy3R7q8045Wh6cAnxemMeYzOoPsqhFSv M+IaNOG8MgYAxCHIl76HkKkdD+gBDcI= -----END CERTIFICATE-----Generated at Tue Jul 1 19:39:41 2025 by rpki-client