$ rpki-client -vvf rpki.apnic.net/member_repository/A91705D7/96A36AA816D811EFBF901E5FC4F9AE02/qkQFsb-pbJxpsCkDPvSB2PWKd-U.mft File: qkQFsb-pbJxpsCkDPvSB2PWKd-U.mft (raw, json) Hash identifier: ViY79ZEdf3gNr2Z/hpDs6UhsipDOsUD11+Jo55ZZkhg= Subject key identifier: 4C:50:3D:AC:DA:D8:EF:0F:E5:3B:BF:C4:41:FF:8C:19:21:55:B0:F4 Authority key identifier: AA:44:05:B1:BF:A9:6C:9C:69:B0:29:03:3E:F4:81:D8:F5:8A:77:E5 Certificate issuer: /CN=A91705D7/serialNumber=AA4405B1BFA96C9C69B029033EF481D8F58A77E5 Certificate serial: E1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qkQFsb-pbJxpsCkDPvSB2PWKd-U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91705D7/96A36AA816D811EFBF901E5FC4F9AE02/qkQFsb-pbJxpsCkDPvSB2PWKd-U.mft Manifest number: D7 Signing time: Thu 19 Jun 2025 05:03:27 +0000 Manifest this update: Thu 19 Jun 2025 05:03:25 +0000 Manifest next update: Thu 26 Jun 2025 05:03:25 +0000 Files and hashes: 1: qkQFsb-pbJxpsCkDPvSB2PWKd-U.crl (hash: O3eva35hnu9OGMQw7oxkkHV193dqlXXhB99zmBA0cQ4=) 2: 4FEDDA6831C511F0996C265EC4F9AE02.roa (hash: olMs+rDjG9xf551jbGQPxWRwvhz93Jq7nLiMc5zAfD0=) 3: 362B52EA31C511F0B796F75DC4F9AE02.roa (hash: CY2B70Cuo/7PA/pa+19+ZYZYV7eGsJlAt7KNzfOvYYw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91705D7/96A36AA816D811EFBF901E5FC4F9AE02/qkQFsb-pbJxpsCkDPvSB2PWKd-U.crl rsync://rpki.apnic.net/member_repository/A91705D7/96A36AA816D811EFBF901E5FC4F9AE02/qkQFsb-pbJxpsCkDPvSB2PWKd-U.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qkQFsb-pbJxpsCkDPvSB2PWKd-U.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 05:03:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 225 (0xe1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91705D7, serialNumber=AA4405B1BFA96C9C69B029033EF481D8F58A77E5 Validity Not Before: Jun 19 05:03:25 2025 GMT Not After : Jun 26 05:03:25 2025 GMT Subject: CN=68539a1e-4853 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:66:56:ec:75:19:e2:b6:d8:41:a8:34:71:ae: ef:a0:b3:f2:e9:57:68:ed:b4:3f:f5:b7:6b:3d:ee: b3:9e:bc:19:1e:69:5f:a3:2e:7e:59:f3:62:4d:29: 09:84:68:0c:49:f5:b5:ad:dc:12:40:64:97:c3:14: 20:9c:f7:15:5b:c9:42:1f:bd:45:62:1d:b7:e7:72: 21:ff:c0:2d:bc:ef:55:07:b6:e5:41:dc:64:60:c1: 1d:0c:ab:21:ca:88:26:ec:e5:a5:f9:30:06:52:18: 6f:94:83:eb:19:49:99:6f:5e:09:9a:0c:e4:79:56: 07:4f:15:ee:c9:b5:83:c1:7f:29:7e:57:8b:fd:b6: 02:34:f0:4c:4f:6b:ca:98:01:05:f0:99:ec:c5:cc: 4d:f0:a6:f1:f9:cd:37:12:be:91:db:a5:7d:3c:4a: cb:bf:29:06:c2:c4:93:b2:6f:73:3d:87:7d:d3:a2: ce:53:c2:8f:e3:49:e4:32:c5:12:25:43:e3:9f:8a: 30:05:94:4d:0a:7a:b5:5a:13:b9:02:ff:5d:d4:04: da:47:c0:7f:ab:af:6a:0c:3c:99:34:c4:0a:5d:a2: 96:68:ae:38:12:fb:b5:b5:ad:7f:83:64:98:14:eb: c7:39:f8:11:9f:04:b3:5e:76:08:42:ee:8b:2d:f3: cb:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:50:3D:AC:DA:D8:EF:0F:E5:3B:BF:C4:41:FF:8C:19:21:55:B0:F4 X509v3 Authority Key Identifier: keyid:AA:44:05:B1:BF:A9:6C:9C:69:B0:29:03:3E:F4:81:D8:F5:8A:77:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91705D7/96A36AA816D811EFBF901E5FC4F9AE02/qkQFsb-pbJxpsCkDPvSB2PWKd-U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qkQFsb-pbJxpsCkDPvSB2PWKd-U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91705D7/96A36AA816D811EFBF901E5FC4F9AE02/qkQFsb-pbJxpsCkDPvSB2PWKd-U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:df:ee:26:19:b6:c4:e9:5f:f7:29:8a:f4:9c:b4:d7:99:83: 59:09:97:23:9b:4c:7a:5f:5a:8e:0b:6f:07:e5:aa:b2:56:fa: a7:cd:6f:8a:3b:e9:7e:64:e2:05:a1:7f:1e:3b:9c:d2:5a:90: ae:18:cb:70:71:75:42:fc:36:a9:ff:03:f5:cd:8b:8a:db:cf: 60:80:e9:e7:67:e6:9d:77:61:33:ab:4f:54:fa:32:1e:80:f5: 94:e8:1c:50:5e:3e:f4:86:06:b7:8e:dd:73:4e:0b:d6:08:bd: 59:3b:78:53:01:2a:5f:d4:a7:ed:d9:05:22:5a:17:cb:ef:a3: 65:59:0a:08:d3:b9:b3:64:57:93:e3:d3:86:8d:d3:06:02:ac: 35:2c:7e:b1:ed:ee:54:a6:a4:de:9b:a4:b3:d6:bc:6b:84:e0: 43:e8:12:aa:a8:83:9b:31:74:48:bf:eb:18:fb:36:94:08:42: 7e:3a:58:e1:8f:00:71:a7:90:51:c4:17:f2:f8:7d:1e:c5:ed: c0:e0:e5:ce:df:6a:72:98:28:7e:03:62:77:70:97:0f:13:0a: a6:96:e9:46:03:63:ea:fb:63:c4:27:4a:89:b2:b1:ca:96:e3: 6d:cd:01:01:a9:c3:dc:6e:32:db:d3:e2:39:97:cc:4a:2b:2a: 64:41:91:be -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzA1RDcxMTAvBgNVBAUTKEFBNDQwNUIxQkZBOTZDOUM2OUIwMjkwMzNFRjQ4MUQ4 RjU4QTc3RTUwHhcNMjUwNjE5MDUwMzI1WhcNMjUwNjI2MDUwMzI1WjAYMRYwFAYD VQQDEw02ODUzOWExZS00ODUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqWZW7HUZ4rbYQag0ca7voLPy6Vdo7bQ/9bdrPe6znrwZHmlfoy5+WfNiTSkJ hGgMSfW1rdwSQGSXwxQgnPcVW8lCH71FYh2353Ih/8AtvO9VB7blQdxkYMEdDKsh yogm7OWl+TAGUhhvlIPrGUmZb14JmgzkeVYHTxXuybWDwX8pfleL/bYCNPBMT2vK mAEF8JnsxcxN8Kbx+c03Er6R26V9PErLvykGwsSTsm9zPYd906LOU8KP40nkMsUS JUPjn4owBZRNCnq1WhO5Av9d1ATaR8B/q69qDDyZNMQKXaKWaK44Evu1ta1/g2SY FOvHOfgRnwSzXnYIQu6LLfPL8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFExQPaza 2O8P5Tu/xEH/jBkhVbD0MB8GA1UdIwQYMBaAFKpEBbG/qWycabApAz70gdj1infl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDVENy85NkEzNkFBODE2 RDgxMUVGQkY5MDFFNUZDNEY5QUUwMi9xa1FGc2ItcGJKeHBzQ2tEUHZTQjJQV0tk LVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3FrUUZzYi1wYkp4cHNDa0RQdlNCMlBXS2QtVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDVENy85NkEzNkFBODE2RDgxMUVGQkY5MDFFNUZDNEY5QUUwMi9xa1FGc2ItcGJK eHBzQ2tEUHZTQjJQV0tkLVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBO3+4mGbbE6V/3KYr0nLTXmYNZCZcjm0x6X1qOC28H5aqyVvqnzW+K O+l+ZOIFoX8eO5zSWpCuGMtwcXVC/Dap/wP1zYuK289ggOnnZ+add2Ezq09U+jIe gPWU6BxQXj70hga3jt1zTgvWCL1ZO3hTASpf1Kft2QUiWhfL76NlWQoI07mzZFeT 49OGjdMGAqw1LH6x7e5UpqTem6Sz1rxrhOBD6BKqqIObMXRIv+sY+zaUCEJ+Oljh jwBxp5BRxBfy+H0exe3A4OXO32pymCh+A2J3cJcPEwqmlulGA2Pq+2PEJ0qJsrHK luNtzQEBqcPcbjLb0+I5l8xKKypkQZG+ -----END CERTIFICATE-----Generated at Fri Jun 20 09:53:53 2025 by rpki-client