$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5756/6B727F32621211F08CA6C154C4F9AE02/QB2L3IKjJEjJO6Og_pOvEGQjYqI.mft File: QB2L3IKjJEjJO6Og_pOvEGQjYqI.mft (raw, json) Hash identifier: F42vuwFj/5Tc1NHsgkyWCZi6EdQ9HJ+KuP6jGthN7xg= Subject key identifier: 93:90:06:EB:53:90:72:85:A1:94:56:9A:3C:6B:37:4B:CA:6D:30:99 Authority key identifier: 40:1D:8B:DC:82:A3:24:48:C9:3B:A3:A0:FE:93:AF:10:64:23:62:A2 Certificate issuer: /CN=A91F5756/serialNumber=401D8BDC82A32448C93BA3A0FE93AF10642362A2 Certificate serial: 06 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QB2L3IKjJEjJO6Og_pOvEGQjYqI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F5756/6B727F32621211F08CA6C154C4F9AE02/QB2L3IKjJEjJO6Og_pOvEGQjYqI.mft Manifest number: 05 Signing time: Mon 21 Jul 2025 08:24:25 +0000 Manifest this update: Mon 21 Jul 2025 08:24:25 +0000 Manifest next update: Mon 28 Jul 2025 08:24:25 +0000 Files and hashes: 1: QB2L3IKjJEjJO6Og_pOvEGQjYqI.crl (hash: 3txt0Hih+3ZZAqwPxo0LtwxjKVkiSH1VbmXGZr8Kzn8=) 2: 2FD77F7E621511F09070587CC4F9AE02.roa (hash: 3+o7qebkkN1OKvUkerL7wnawvdJf5yEWl5f4sMyfaMA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F5756/6B727F32621211F08CA6C154C4F9AE02/QB2L3IKjJEjJO6Og_pOvEGQjYqI.crl rsync://rpki.apnic.net/member_repository/A91F5756/6B727F32621211F08CA6C154C4F9AE02/QB2L3IKjJEjJO6Og_pOvEGQjYqI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QB2L3IKjJEjJO6Og_pOvEGQjYqI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 08:24:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6 (0x6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F5756, serialNumber=401D8BDC82A32448C93BA3A0FE93AF10642362A2 Validity Not Before: Jul 21 08:24:25 2025 GMT Not After : Jul 28 08:24:25 2025 GMT Subject: CN=687df939-db4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:cf:ef:4d:eb:e4:20:6e:da:b2:53:5c:b6:c4: 1e:25:dc:c2:7e:fa:f8:1b:99:a2:5b:bb:dc:b8:f9: 22:2a:94:fd:91:88:0e:69:72:39:83:66:a3:11:6e: c8:c0:ce:57:b4:36:c7:a9:6c:40:f4:78:7a:c0:85: cc:09:a1:54:fd:e5:6d:02:78:be:2f:51:45:dc:4c: e4:34:53:c1:45:fe:8c:d5:53:1a:24:3d:37:ba:2e: 5c:9f:3d:af:79:13:2c:95:be:e1:53:bb:3f:08:d7: 63:48:3c:d0:44:91:17:7b:b0:18:71:82:9e:96:fd: 6b:7f:01:1a:b6:ff:35:65:e6:bd:84:ea:d4:a8:d9: 18:6e:4d:c2:b0:30:3b:be:34:91:1a:ad:37:d2:95: 22:9a:77:9a:10:ad:61:d0:97:9b:ab:d2:ce:c1:9a: 36:01:38:d7:4c:2d:a8:72:dd:aa:cf:0e:54:0a:05: 9e:cc:95:93:99:9a:f1:e8:0e:bb:07:82:1d:97:b5: 78:bb:27:29:a7:12:ac:3b:45:60:51:2e:1a:00:fb: e4:f9:86:40:eb:fe:4e:55:aa:aa:aa:e5:3e:3f:49: 12:34:d1:8d:cf:ec:7a:88:c8:54:ab:0a:6c:67:44: c2:11:ce:5e:81:fe:44:3c:6e:a8:ee:b9:25:ff:7a: 9a:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:90:06:EB:53:90:72:85:A1:94:56:9A:3C:6B:37:4B:CA:6D:30:99 X509v3 Authority Key Identifier: keyid:40:1D:8B:DC:82:A3:24:48:C9:3B:A3:A0:FE:93:AF:10:64:23:62:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F5756/6B727F32621211F08CA6C154C4F9AE02/QB2L3IKjJEjJO6Og_pOvEGQjYqI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QB2L3IKjJEjJO6Og_pOvEGQjYqI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5756/6B727F32621211F08CA6C154C4F9AE02/QB2L3IKjJEjJO6Og_pOvEGQjYqI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:06:43:c1:be:35:0d:e8:06:51:01:d1:08:1a:a5:95:9c:27: 62:f9:48:33:1c:cb:fd:86:58:15:6e:b6:d9:0d:3b:63:ee:fa: e2:12:88:42:5f:4e:8e:7d:73:e8:5a:14:c0:e3:4f:cc:d4:91: 75:3d:65:c0:8b:76:32:e0:69:c3:62:f3:fe:24:19:0a:f3:8c: 8e:b4:62:ff:c4:b0:e5:2b:f3:8a:5e:27:0f:36:09:32:11:1b: de:73:4f:ff:e1:0a:15:dc:08:09:f4:f2:5c:5f:88:88:2c:d0: 07:89:03:de:f0:e4:b8:03:f4:f7:b5:ff:35:0e:0c:01:05:15: ea:53:03:9a:6b:43:96:b5:1d:d7:05:dc:ba:84:0f:e5:72:11: 45:71:4c:c3:52:ce:8d:26:cb:b6:73:51:f1:d4:2f:d0:d6:25: 61:36:ac:f0:5e:43:09:99:1a:45:ef:ca:85:c5:9b:dc:47:fd: 75:c5:66:52:c7:b5:81:8a:02:c5:b1:16:01:f1:ef:54:48:69: 18:83:3d:8f:ef:22:5e:c3:4e:8d:bc:82:93:1c:31:b0:45:65: d8:94:6f:3f:e8:74:aa:2c:36:da:1d:0e:33:7d:74:64:a5:7b: e1:40:d8:13:63:45:67:4e:92:a9:ef:8e:74:0f:cf:d0:b7:e0: 8f:fa:11:b0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG NTc1NjExMC8GA1UEBRMoNDAxRDhCREM4MkEzMjQ0OEM5M0JBM0EwRkU5M0FGMTA2 NDIzNjJBMjAeFw0yNTA3MjEwODI0MjVaFw0yNTA3MjgwODI0MjVaMBgxFjAUBgNV BAMTDTY4N2RmOTM5LWRiNGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCxz+9N6+QgbtqyU1y2xB4l3MJ++vgbmaJbu9y4+SIqlP2RiA5pcjmDZqMRbsjA zle0NsepbED0eHrAhcwJoVT95W0CeL4vUUXcTOQ0U8FF/ozVUxokPTe6LlyfPa95 EyyVvuFTuz8I12NIPNBEkRd7sBhxgp6W/Wt/ARq2/zVl5r2E6tSo2RhuTcKwMDu+ NJEarTfSlSKad5oQrWHQl5ur0s7BmjYBONdMLahy3arPDlQKBZ7MlZOZmvHoDrsH gh2XtXi7JymnEqw7RWBRLhoA++T5hkDr/k5Vqqqq5T4/SRI00Y3P7HqIyFSrCmxn RMIRzl6B/kQ8bqjuuSX/epp9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUk5AG61OQ coWhlFaaPGs3S8ptMJkwHwYDVR0jBBgwFoAUQB2L3IKjJEjJO6Og/pOvEGQjYqIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY1NzU2LzZCNzI3RjMyNjIx MjExRjA4Q0E2QzE1NEM0RjlBRTAyL1FCMkwzSUtqSkVqSk82T2dfcE92RUdRallx SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvUUIyTDNJS2pKRWpKTzZPZ19wT3ZFR1FqWXFJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY1 NzU2LzZCNzI3RjMyNjIxMjExRjA4Q0E2QzE1NEM0RjlBRTAyL1FCMkwzSUtqSkVq Sk82T2dfcE92RUdRallxSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJ0GQ8G+NQ3oBlEB0QgapZWcJ2L5SDMcy/2GWBVuttkNO2Pu+uISiEJf To59c+haFMDjT8zUkXU9ZcCLdjLgacNi8/4kGQrzjI60Yv/EsOUr84peJw82CTIR G95zT//hChXcCAn08lxfiIgs0AeJA97w5LgD9Pe1/zUODAEFFepTA5prQ5a1HdcF 3LqED+VyEUVxTMNSzo0my7ZzUfHUL9DWJWE2rPBeQwmZGkXvyoXFm9xH/XXFZlLH tYGKAsWxFgHx71RIaRiDPY/vIl7DTo28gpMcMbBFZdiUbz/odKosNtodDjN9dGSl e+FA2BNjRWdOkqnvjnQPz9C34I/6EbA= -----END CERTIFICATE-----Generated at Mon Jul 21 12:32:17 2025 by rpki-client