$ rpki-client -vvf rpki.apnic.net/member_repository/A91B15DC/4FEC1C04CEED11EFBD655511C4F9AE02/024QQmH4GdaND3C7Ka3-jvRjsu0.mft File: 024QQmH4GdaND3C7Ka3-jvRjsu0.mft (raw, json) Hash identifier: nuERh5YRkyDgL2MKDpxKI9I9KhtD4DVatE2gEv0rtI8= Subject key identifier: 30:85:70:0A:61:E7:93:9F:30:EC:47:A4:FC:1A:09:C8:B4:AF:2E:CE Authority key identifier: D3:6E:10:42:61:F8:19:D6:8D:0F:70:BB:29:AD:FE:8E:F4:63:B2:ED Certificate issuer: /CN=A91B15DC/serialNumber=D36E104261F819D68D0F70BB29ADFE8EF463B2ED Certificate serial: 6C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/024QQmH4GdaND3C7Ka3-jvRjsu0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B15DC/4FEC1C04CEED11EFBD655511C4F9AE02/024QQmH4GdaND3C7Ka3-jvRjsu0.mft Manifest number: 6B Signing time: Tue 05 Aug 2025 07:31:20 +0000 Manifest this update: Tue 05 Aug 2025 07:31:20 +0000 Manifest next update: Tue 12 Aug 2025 07:31:20 +0000 Files and hashes: 1: 024QQmH4GdaND3C7Ka3-jvRjsu0.crl (hash: I18poYGsXGBJRuFGbrhSRM4Qe1mmDCWLbmDxqQNAv14=) 2: 0A65ADB6CEEE11EFAA2CA812C4F9AE02.roa (hash: BnzgVRQY1lWGd2cFrP1xnxB6cOmKQA86fc66ckx28mQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B15DC/4FEC1C04CEED11EFBD655511C4F9AE02/024QQmH4GdaND3C7Ka3-jvRjsu0.crl rsync://rpki.apnic.net/member_repository/A91B15DC/4FEC1C04CEED11EFBD655511C4F9AE02/024QQmH4GdaND3C7Ka3-jvRjsu0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/024QQmH4GdaND3C7Ka3-jvRjsu0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 07:31:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 108 (0x6c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B15DC, serialNumber=D36E104261F819D68D0F70BB29ADFE8EF463B2ED Validity Not Before: Aug 5 07:31:20 2025 GMT Not After : Aug 12 07:31:20 2025 GMT Subject: CN=6891b348-754a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:a4:c6:c6:f1:07:4e:65:74:34:46:35:4b:5f: 06:c5:59:19:31:d5:cf:67:ae:70:b7:29:f5:d3:b5: 8c:73:6f:5a:33:73:d9:47:fc:9d:82:5d:80:f4:ff: ef:48:1d:d5:53:45:1f:dd:53:57:09:e6:d5:02:ee: 95:10:cf:8f:68:6d:f8:d7:f8:ad:6f:03:07:4e:7e: b2:ee:b3:fc:ea:0f:c6:4a:9a:dd:c5:dc:4a:16:ce: 42:0d:fe:f0:9e:dc:b8:d8:2d:48:75:76:b0:7f:9a: 1a:82:bc:ec:08:58:d5:63:fd:a4:16:d4:05:83:75: ea:78:36:57:e7:24:f5:6d:88:41:f6:68:97:e6:aa: 38:bb:31:71:14:51:57:e8:f3:ba:51:00:c3:8c:42: 4f:2d:f7:48:12:d6:4d:c9:47:32:64:e2:4b:14:17: 43:88:fc:89:e9:12:22:8b:2a:e7:fd:e7:1c:42:16: 5b:8b:fc:0b:04:51:47:ad:d6:f4:5d:87:30:5d:20: 7a:39:0b:58:dc:ee:db:68:f6:34:ae:ce:47:8f:b4: a8:8f:f0:42:d4:07:52:ef:23:03:6d:a9:47:a9:83: 9f:89:06:3a:2c:09:7f:cd:30:cf:99:a8:ad:7d:12: 68:28:fa:9a:0f:8b:34:9f:a9:5e:31:22:df:12:ce: 77:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:85:70:0A:61:E7:93:9F:30:EC:47:A4:FC:1A:09:C8:B4:AF:2E:CE X509v3 Authority Key Identifier: keyid:D3:6E:10:42:61:F8:19:D6:8D:0F:70:BB:29:AD:FE:8E:F4:63:B2:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B15DC/4FEC1C04CEED11EFBD655511C4F9AE02/024QQmH4GdaND3C7Ka3-jvRjsu0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/024QQmH4GdaND3C7Ka3-jvRjsu0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B15DC/4FEC1C04CEED11EFBD655511C4F9AE02/024QQmH4GdaND3C7Ka3-jvRjsu0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:d8:7a:c1:2c:31:6a:3f:70:7f:11:c6:17:bc:8f:51:ce:38: 77:ab:96:c0:8b:1c:c6:8d:4a:02:be:ea:b4:6f:c8:4a:0e:80: fc:2a:b0:1a:a4:e8:dc:c9:9b:26:2c:58:a8:46:77:76:8a:0d: af:1e:96:4d:b5:7b:68:37:54:30:23:a4:86:7e:a5:ed:8f:b1: 93:89:59:b9:3d:87:4c:6b:cf:80:d0:8e:50:82:0b:a9:a3:7c: 5a:aa:c0:fa:0e:25:a6:b9:4a:70:13:d1:8c:93:71:ed:4d:cc: a0:51:e6:03:2d:e7:46:a5:65:d3:b8:c9:f2:54:be:c3:d1:30: d7:eb:17:cc:3b:06:83:a2:b5:1b:3d:33:6c:19:2a:17:fe:86: 12:82:3c:e4:e5:0e:0a:06:db:88:87:8b:72:74:74:9a:d3:2e: 7f:02:1a:4b:f9:b2:f7:8e:93:4c:09:ff:80:d6:4c:ae:43:be: 4a:c2:c1:2d:32:be:32:a0:e1:37:d0:69:68:d7:ba:b1:9b:4a: 31:44:f5:08:72:4d:b6:7d:cb:5d:8f:c5:72:92:c7:68:3c:93: 3a:9d:b1:e3:f1:d1:d1:36:95:ff:e3:89:5b:7e:1f:95:64:29: 86:77:d9:fa:5c:e5:b4:45:e1:7f:49:e8:9f:0e:7f:fb:97:a0: 88:d1:75:9c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC MTVEQzExMC8GA1UEBRMoRDM2RTEwNDI2MUY4MTlENjhEMEY3MEJCMjlBREZFOEVG NDYzQjJFRDAeFw0yNTA4MDUwNzMxMjBaFw0yNTA4MTIwNzMxMjBaMBgxFjAUBgNV BAMTDTY4OTFiMzQ4LTc1NGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDMpMbG8QdOZXQ0RjVLXwbFWRkx1c9nrnC3KfXTtYxzb1ozc9lH/J2CXYD0/+9I HdVTRR/dU1cJ5tUC7pUQz49obfjX+K1vAwdOfrLus/zqD8ZKmt3F3EoWzkIN/vCe 3LjYLUh1drB/mhqCvOwIWNVj/aQW1AWDdep4NlfnJPVtiEH2aJfmqji7MXEUUVfo 87pRAMOMQk8t90gS1k3JRzJk4ksUF0OI/InpEiKLKuf95xxCFluL/AsEUUet1vRd hzBdIHo5C1jc7tto9jSuzkePtKiP8ELUB1LvIwNtqUepg5+JBjosCX/NMM+ZqK19 Emgo+poPizSfqV4xIt8Sznd9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUMIVwCmHn k58w7Eek/BoJyLSvLs4wHwYDVR0jBBgwFoAU024QQmH4GdaND3C7Ka3+jvRjsu0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIxNURDLzRGRUMxQzA0Q0VF RDExRUZCRDY1NTUxMUM0RjlBRTAyLzAyNFFRbUg0R2RhTkQzQzdLYTMtanZSanN1 MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvMDI0UVFtSDRHZGFORDNDN0thMy1qdlJqc3UwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIx NURDLzRGRUMxQzA0Q0VFRDExRUZCRDY1NTUxMUM0RjlBRTAyLzAyNFFRbUg0R2Rh TkQzQzdLYTMtanZSanN1MC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACXYesEsMWo/cH8Rxhe8j1HOOHerlsCLHMaNSgK+6rRvyEoOgPwqsBqk 6NzJmyYsWKhGd3aKDa8elk21e2g3VDAjpIZ+pe2PsZOJWbk9h0xrz4DQjlCCC6mj fFqqwPoOJaa5SnAT0YyTce1NzKBR5gMt50alZdO4yfJUvsPRMNfrF8w7BoOitRs9 M2wZKhf+hhKCPOTlDgoG24iHi3J0dJrTLn8CGkv5sveOk0wJ/4DWTK5DvkrCwS0y vjKg4TfQaWjXurGbSjFE9QhyTbZ9y12PxXKSx2g8kzqdsePx0dE2lf/jiVt+H5Vk KYZ32fpc5bRF4X9J6J8Of/uXoIjRdZw= -----END CERTIFICATE-----Generated at Wed Aug 6 05:57:48 2025 by rpki-client