$ rpki-client -vvf rpki.apnic.net/member_repository/A915D6C2/F9C46FAC53A211EC9D5E615DC4F9AE02/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.mft File: QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.mft (raw, json) Hash identifier: gYehOCjoHtrY2hKv2morAS0aKkqBC5GZB2sxGjiLErM= Subject key identifier: 32:19:96:92:00:3B:84:85:6E:70:A3:74:17:93:EB:4F:3A:EA:2A:49 Authority key identifier: 42:B7:49:E1:EC:DB:E0:30:74:7F:8C:B5:74:7F:2D:73:A5:E4:24:54 Certificate issuer: /CN=A915D6C2/serialNumber=42B749E1ECDBE030747F8CB5747F2D73A5E42454 Certificate serial: 0486 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D6C2/F9C46FAC53A211EC9D5E615DC4F9AE02/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.mft Manifest number: 047B Signing time: Thu 07 Aug 2025 00:38:07 +0000 Manifest this update: Thu 07 Aug 2025 00:38:07 +0000 Manifest next update: Thu 14 Aug 2025 00:38:07 +0000 Files and hashes: 1: QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.crl (hash: gYyDqOPTha73z5K0JhJzjPwVvrCnUDk+ynWXI09q4a8=) 2: 58A4A3E2B73A11ED8A2A8964C4F9AE02.roa (hash: xz+NY0PKDA1h31JonPA24zzAghWJ7xvhqwh0rxa8hB0=) 3: 5808B946B73A11ED8A2A8964C4F9AE02.roa (hash: XeoWUyV8cBersz5ERZwPilXowKBP6ZkIQoJiUYARqzE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D6C2/F9C46FAC53A211EC9D5E615DC4F9AE02/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.crl rsync://rpki.apnic.net/member_repository/A915D6C2/F9C46FAC53A211EC9D5E615DC4F9AE02/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 00:38:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1158 (0x486) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D6C2, serialNumber=42B749E1ECDBE030747F8CB5747F2D73A5E42454 Validity Not Before: Aug 7 00:38:07 2025 GMT Not After : Aug 14 00:38:07 2025 GMT Subject: CN=6893f56f-018b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:b5:02:85:c7:a6:02:a6:5f:34:2e:34:e9:a0: 56:31:b9:ba:28:70:f6:c2:7a:f6:93:75:23:c2:cb: 36:1e:94:e8:6c:26:03:d3:07:05:57:6a:19:9d:29: 7e:c5:f4:54:55:4c:ce:fa:49:51:d8:bd:2c:46:db: 96:e6:de:81:5e:72:e8:5b:d7:50:bc:7b:81:49:c0: 11:1b:a2:f7:2e:84:3a:6c:16:06:be:7e:7c:b3:7f: 48:e4:5f:3a:21:df:7b:19:e1:3d:dd:30:6f:ef:46: b2:e7:74:af:95:30:61:30:b2:03:47:dc:ee:53:9b: 5f:59:94:0a:6e:8c:d8:f2:32:38:60:7b:c7:ee:10: bc:84:7f:23:d8:89:04:69:03:23:c5:a8:3f:b8:f3: 53:7c:6d:e9:35:ca:74:0f:ca:f8:5e:01:9d:12:d5: 06:24:f4:26:8d:e5:bd:f2:ab:95:59:c0:48:dd:ea: f4:f8:7f:d8:89:3c:db:c6:4a:4e:51:46:4a:c4:43: 72:d0:fb:60:62:62:75:e0:28:e3:e1:55:ee:23:48: c6:8b:2d:b8:c3:ba:bb:8d:65:12:fc:18:ac:eb:7b: 9d:85:81:dd:e0:4e:6f:21:04:d0:2c:14:d1:e4:26: a7:06:46:45:6a:49:a8:49:8b:37:5f:2b:73:c8:a7: 88:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:19:96:92:00:3B:84:85:6E:70:A3:74:17:93:EB:4F:3A:EA:2A:49 X509v3 Authority Key Identifier: keyid:42:B7:49:E1:EC:DB:E0:30:74:7F:8C:B5:74:7F:2D:73:A5:E4:24:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D6C2/F9C46FAC53A211EC9D5E615DC4F9AE02/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D6C2/F9C46FAC53A211EC9D5E615DC4F9AE02/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:27:0f:de:68:10:f8:f4:c8:a7:cc:78:e7:ba:c5:41:2e:cd: f1:c3:e8:ff:ae:30:db:c1:50:c4:26:e6:c1:1b:aa:7f:7d:b2: ec:9f:0b:e9:6c:8e:8f:c2:be:98:73:ef:c7:8b:87:99:de:7f: 42:f9:a8:57:ec:60:6f:1e:6a:f9:92:4d:9d:7f:9d:71:21:67: 4b:73:30:bb:f4:9f:a0:07:bd:da:9f:74:11:fb:af:b4:b1:8d: b9:07:67:89:8f:7f:e6:0c:0b:ed:41:8f:b9:27:86:0f:4f:d6: c2:cf:58:b9:a5:5d:f3:26:e7:21:ae:ab:f5:9e:9a:15:20:10: 8c:a8:ed:87:f1:a0:ab:fb:10:f6:b6:4a:46:60:e1:77:27:01: ad:b4:2a:94:8c:f8:3e:6d:54:77:5f:ae:7a:ff:24:f8:81:9f: a7:1f:6c:b1:2a:e1:bb:b7:88:7c:e1:c1:2c:8d:0a:d5:a0:c1: 75:43:38:23:26:c0:ff:b6:a2:fe:2a:eb:8f:c2:95:71:92:a8: 4f:e1:dd:33:b6:10:d5:b1:80:dc:fd:11:6c:50:96:96:71:33: b3:44:9e:c1:f2:ff:2d:3c:fe:00:b2:ed:25:e9:5c:70:13:e1: ce:9c:1f:75:1c:06:2a:fa:e4:43:3e:d1:93:1f:2e:f3:1f:59: 16:52:6b:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBIYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQ2QzIxMTAvBgNVBAUTKDQyQjc0OUUxRUNEQkUwMzA3NDdGOENCNTc0N0YyRDcz QTVFNDI0NTQwHhcNMjUwODA3MDAzODA3WhcNMjUwODE0MDAzODA3WjAYMRYwFAYD VQQDEw02ODkzZjU2Zi0wMThiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9rUChcemAqZfNC406aBWMbm6KHD2wnr2k3Ujwss2HpTobCYD0wcFV2oZnSl+ xfRUVUzO+klR2L0sRtuW5t6BXnLoW9dQvHuBScARG6L3LoQ6bBYGvn58s39I5F86 Id97GeE93TBv70ay53SvlTBhMLIDR9zuU5tfWZQKbozY8jI4YHvH7hC8hH8j2IkE aQMjxag/uPNTfG3pNcp0D8r4XgGdEtUGJPQmjeW98quVWcBI3er0+H/YiTzbxkpO UUZKxENy0PtgYmJ14Cjj4VXuI0jGiy24w7q7jWUS/Bis63udhYHd4E5vIQTQLBTR 5CanBkZFakmoSYs3XytzyKeIEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDIZlpIA O4SFbnCjdBeT60866ipJMB8GA1UdIwQYMBaAFEK3SeHs2+AwdH+MtXR/LXOl5CRU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDZDMi9GOUM0NkZBQzUz QTIxMUVDOUQ1RTYxNURDNEY5QUUwMi9RcmRKNGV6YjREQjBmNHkxZEg4dGM2WGtK RlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FyZEo0ZXpiNERCMGY0eTFkSDh0YzZYa0pGUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDZDMi9GOUM0NkZBQzUzQTIxMUVDOUQ1RTYxNURDNEY5QUUwMi9RcmRKNGV6YjRE QjBmNHkxZEg4dGM2WGtKRlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBqJw/eaBD49MinzHjnusVBLs3xw+j/rjDbwVDEJubBG6p/fbLsnwvp bI6Pwr6Yc+/Hi4eZ3n9C+ahX7GBvHmr5kk2df51xIWdLczC79J+gB73an3QR+6+0 sY25B2eJj3/mDAvtQY+5J4YPT9bCz1i5pV3zJuchrqv1npoVIBCMqO2H8aCr+xD2 tkpGYOF3JwGttCqUjPg+bVR3X656/yT4gZ+nH2yxKuG7t4h84cEsjQrVoMF1Qzgj JsD/tqL+KuuPwpVxkqhP4d0zthDVsYDc/RFsUJaWcTOzRJ7B8v8tPP4Asu0l6Vxw E+HOnB91HAYq+uRDPtGTHy7zH1kWUmt9 -----END CERTIFICATE-----Generated at Thu Aug 7 03:29:31 2025 by rpki-client