$ rpki-client -vvf rpki.apnic.net/member_repository/A91A35A4/DBC1FD10699611EEB4E77B3CC4F9AE02/QaDCRDWfAjXJpgsfcZpf1WeWYFM.mft File: QaDCRDWfAjXJpgsfcZpf1WeWYFM.mft (raw, json) Hash identifier: DYNsnhOFphvTk91kyXX6CsHIqV+Sa75ifhlX0KuuBwk= Subject key identifier: 0D:E2:AC:C8:96:F1:93:51:21:E2:D1:F3:5B:5B:95:BC:28:05:26:1D Authority key identifier: 41:A0:C2:44:35:9F:02:35:C9:A6:0B:1F:71:9A:5F:D5:67:96:60:53 Certificate issuer: /CN=A91A35A4/serialNumber=41A0C244359F0235C9A60B1F719A5FD567966053 Certificate serial: 0155 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QaDCRDWfAjXJpgsfcZpf1WeWYFM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A35A4/DBC1FD10699611EEB4E77B3CC4F9AE02/QaDCRDWfAjXJpgsfcZpf1WeWYFM.mft Manifest number: 0153 Signing time: Tue 05 Aug 2025 04:35:17 +0000 Manifest this update: Tue 05 Aug 2025 04:35:16 +0000 Manifest next update: Tue 12 Aug 2025 04:35:16 +0000 Files and hashes: 1: QaDCRDWfAjXJpgsfcZpf1WeWYFM.crl (hash: MYRY1hBIncB4typWiOf3serYa3DSM9k3LNBLO4SnnFE=) 2: 294325DC699711EEB317603DC4F9AE02.roa (hash: Hsp12OEUAxLgfWPa2BFXRQnGaC8ZbmcTs8T1lK+V734=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A35A4/DBC1FD10699611EEB4E77B3CC4F9AE02/QaDCRDWfAjXJpgsfcZpf1WeWYFM.crl rsync://rpki.apnic.net/member_repository/A91A35A4/DBC1FD10699611EEB4E77B3CC4F9AE02/QaDCRDWfAjXJpgsfcZpf1WeWYFM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QaDCRDWfAjXJpgsfcZpf1WeWYFM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 04:35:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 341 (0x155) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A35A4, serialNumber=41A0C244359F0235C9A60B1F719A5FD567966053 Validity Not Before: Aug 5 04:35:16 2025 GMT Not After : Aug 12 04:35:16 2025 GMT Subject: CN=68918a04-06fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:5e:b6:25:59:a3:30:7b:4d:61:9d:db:1a:9f: e9:ef:7c:ba:f3:8e:df:89:66:40:20:89:ee:c4:33: bd:74:5f:20:7d:5d:59:21:11:b5:03:14:d4:a2:df: 87:87:fb:d7:f4:c9:68:ba:a0:79:c9:bf:1d:a7:8c: c4:24:72:b7:1a:be:87:5c:8e:11:4d:f2:7e:5d:63: 1f:80:20:4e:b7:df:f9:8c:27:2d:dc:98:8a:58:b8: 1b:5b:d1:83:8b:5a:84:f6:6e:bf:4f:e1:be:b4:25: d3:5e:e4:4f:ac:79:31:cd:c1:36:39:d1:c8:b1:b8: 37:e7:69:95:bb:ce:5c:99:88:93:33:48:93:a9:8e: 98:e0:ee:f5:a0:ef:02:1d:52:84:6b:c1:e3:eb:95: 5a:47:9a:cc:cc:92:75:2b:14:d1:5e:6b:8e:a5:a8: 81:d4:0b:39:81:75:f4:ae:1f:76:c2:63:c4:83:99: bb:0e:4f:bf:6c:87:d1:5f:6b:c2:82:00:54:25:29: 06:f6:88:77:1c:c0:7d:99:76:d6:08:7e:a1:fe:08: e8:fe:aa:a2:99:f0:7e:8d:b1:f8:c2:30:c2:74:72: 1f:b0:48:1b:0a:df:b3:d3:42:58:13:78:3a:9a:f0: 6a:dc:2c:5b:d8:ed:ce:6e:83:11:46:8f:b6:ee:20: 59:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:E2:AC:C8:96:F1:93:51:21:E2:D1:F3:5B:5B:95:BC:28:05:26:1D X509v3 Authority Key Identifier: keyid:41:A0:C2:44:35:9F:02:35:C9:A6:0B:1F:71:9A:5F:D5:67:96:60:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A35A4/DBC1FD10699611EEB4E77B3CC4F9AE02/QaDCRDWfAjXJpgsfcZpf1WeWYFM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QaDCRDWfAjXJpgsfcZpf1WeWYFM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A35A4/DBC1FD10699611EEB4E77B3CC4F9AE02/QaDCRDWfAjXJpgsfcZpf1WeWYFM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:be:75:33:b6:d9:33:90:3c:e1:80:a1:2a:b3:9a:28:2d:a3: 70:3a:e0:04:1b:ba:2d:cb:f2:90:83:f5:ac:25:27:09:c9:33: 50:df:b9:77:2f:e1:ae:65:42:4e:71:fe:cc:f8:94:f0:ff:4a: 82:02:7f:86:db:fc:50:78:ef:0e:ab:e4:dd:44:20:e4:a2:45: e7:60:ef:de:2f:1e:19:df:56:b7:18:c0:cb:fe:81:c5:0a:28: 65:59:45:fe:cd:9f:42:ec:e3:50:df:b3:6f:bd:ae:88:40:0b: 1d:e2:8a:f2:6b:83:45:6c:e9:d7:3e:28:1e:0c:b4:72:58:2d: ac:dc:55:da:aa:6f:6f:e7:46:98:17:80:14:79:31:cf:ca:ab: 3c:4d:7b:3b:05:b9:4d:f2:4b:40:e2:20:11:2f:d8:7d:cb:e0: fa:53:47:7f:99:04:64:58:9f:6e:46:6e:43:59:50:ad:fd:02: 1f:c2:3f:83:f4:05:ce:eb:39:41:a3:76:a5:18:42:05:e6:35: 1d:8a:39:8d:cb:9d:5a:a3:b7:f0:28:1e:19:4a:ef:ac:cc:8e: 6b:6d:26:55:9c:97:36:6c:4f:25:b2:b8:b9:23:27:de:6e:c0: a9:47:47:c1:25:df:19:aa:d4:97:c8:ef:5f:f6:19:94:d1:30: 03:43:9c:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTM1QTQxMTAvBgNVBAUTKDQxQTBDMjQ0MzU5RjAyMzVDOUE2MEIxRjcxOUE1RkQ1 Njc5NjYwNTMwHhcNMjUwODA1MDQzNTE2WhcNMjUwODEyMDQzNTE2WjAYMRYwFAYD VQQDEw02ODkxOGEwNC0wNmZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6162JVmjMHtNYZ3bGp/p73y6847fiWZAIInuxDO9dF8gfV1ZIRG1AxTUot+H h/vX9MlouqB5yb8dp4zEJHK3Gr6HXI4RTfJ+XWMfgCBOt9/5jCct3JiKWLgbW9GD i1qE9m6/T+G+tCXTXuRPrHkxzcE2OdHIsbg352mVu85cmYiTM0iTqY6Y4O71oO8C HVKEa8Hj65VaR5rMzJJ1KxTRXmuOpaiB1As5gXX0rh92wmPEg5m7Dk+/bIfRX2vC ggBUJSkG9oh3HMB9mXbWCH6h/gjo/qqimfB+jbH4wjDCdHIfsEgbCt+z00JYE3g6 mvBq3Cxb2O3OboMRRo+27iBZFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA3irMiW 8ZNRIeLR81tblbwoBSYdMB8GA1UdIwQYMBaAFEGgwkQ1nwI1yaYLH3GaX9VnlmBT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzVBNC9EQkMxRkQxMDY5 OTYxMUVFQjRFNzdCM0NDNEY5QUUwMi9RYURDUkRXZkFqWEpwZ3NmY1pwZjFXZVdZ Rk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FhRENSRFdmQWpYSnBnc2ZjWnBmMVdlV1lGTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MzVBNC9EQkMxRkQxMDY5OTYxMUVFQjRFNzdCM0NDNEY5QUUwMi9RYURDUkRXZkFq WEpwZ3NmY1pwZjFXZVdZRk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZvnUzttkzkDzhgKEqs5ooLaNwOuAEG7oty/KQg/WsJScJyTNQ37l3 L+GuZUJOcf7M+JTw/0qCAn+G2/xQeO8Oq+TdRCDkokXnYO/eLx4Z31a3GMDL/oHF CihlWUX+zZ9C7ONQ37Nvva6IQAsd4orya4NFbOnXPigeDLRyWC2s3FXaqm9v50aY F4AUeTHPyqs8TXs7BblN8ktA4iARL9h9y+D6U0d/mQRkWJ9uRm5DWVCt/QIfwj+D 9AXO6zlBo3alGEIF5jUdijmNy51ao7fwKB4ZSu+szI5rbSZVnJc2bE8lsri5Iyfe bsCpR0fBJd8ZqtSXyO9f9hmU0TADQ5xw -----END CERTIFICATE-----Generated at Wed Aug 6 10:57:19 2025 by rpki-client