$ rpki-client -vvf rpki.apnic.net/member_repository/A91B72D9/AA23FA96697111ECB625930CC4F9AE02/QeXcIVUGn_MX5e44x1t4icIhl-M.mft File: QeXcIVUGn_MX5e44x1t4icIhl-M.mft (raw, json) Hash identifier: VzsdoOxB07cKtpBgHa47HR+xted2ZbRdmiIzCAmLxu4= Subject key identifier: 3B:81:FE:D2:15:79:ED:0B:A6:E4:95:C2:33:D1:2A:4D:29:37:5D:39 Authority key identifier: 41:E5:DC:21:55:06:9F:F3:17:E5:EE:38:C7:5B:78:89:C2:21:97:E3 Certificate issuer: /CN=A91B72D9/serialNumber=41E5DC2155069FF317E5EE38C75B7889C22197E3 Certificate serial: 0464 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QeXcIVUGn_MX5e44x1t4icIhl-M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B72D9/AA23FA96697111ECB625930CC4F9AE02/QeXcIVUGn_MX5e44x1t4icIhl-M.mft Manifest number: 0450 Signing time: Mon 11 Aug 2025 00:27:17 +0000 Manifest this update: Mon 11 Aug 2025 00:27:16 +0000 Manifest next update: Mon 18 Aug 2025 00:27:16 +0000 Files and hashes: 1: QeXcIVUGn_MX5e44x1t4icIhl-M.crl (hash: mqGzJ2uOKD9TYWNrOn4D/iP5EyMYuouH7zGmUCqiakc=) 2: 43E6BE1AF53411EF9DE3BD34C4F9AE02.roa (hash: d0073l1e/pxbjtRy8RJAwD/f1Qu4geicKXKAmauL91Y=) 3: 4FD9C050F53411EFBF7FCA34C4F9AE02.roa (hash: UdXjbAhF6oniMP9h+eQndIWcxlYyRMTp0LAX//sl/pw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B72D9/AA23FA96697111ECB625930CC4F9AE02/QeXcIVUGn_MX5e44x1t4icIhl-M.crl rsync://rpki.apnic.net/member_repository/A91B72D9/AA23FA96697111ECB625930CC4F9AE02/QeXcIVUGn_MX5e44x1t4icIhl-M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QeXcIVUGn_MX5e44x1t4icIhl-M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1124 (0x464) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B72D9, serialNumber=41E5DC2155069FF317E5EE38C75B7889C22197E3 Validity Not Before: Aug 11 00:27:16 2025 GMT Not After : Aug 18 00:27:16 2025 GMT Subject: CN=689938e4-0df9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:25:f6:46:c1:fb:7d:f6:20:43:bf:89:fa:45: e4:01:ed:21:db:7d:f3:35:47:f3:8c:c6:ac:bc:99: c8:78:8c:5d:4a:fe:ba:01:12:c6:69:e0:29:d5:48: 9b:56:8a:df:49:c7:09:c0:ff:8f:f5:c2:14:ac:e7: be:ac:a2:26:d1:09:11:fd:80:73:7d:c9:f9:42:fe: 20:47:ee:2e:32:64:55:70:76:92:62:6f:58:ac:ae: 27:07:c4:bd:2c:ac:11:91:96:47:ec:cc:95:50:7b: df:9b:46:f2:98:73:b8:c3:20:5a:a9:98:d0:b1:67: 9e:4b:74:0e:07:32:ae:63:3b:bf:22:3d:3f:f3:13: 97:fb:65:79:fe:47:69:95:3e:b9:a5:16:49:f9:24: 18:e3:28:07:6b:7c:78:d2:00:9f:fc:f8:a2:f2:78: 68:fa:eb:19:bd:50:27:5e:55:ea:0f:c3:db:40:bb: 4b:f1:ba:52:94:3c:58:91:0e:6c:1b:cb:34:82:24: b9:77:50:cc:0e:55:e5:0d:0b:b0:91:55:36:24:15: 18:03:03:e1:97:e8:d8:e6:72:ef:f1:ad:68:a9:c9: 2c:fc:e8:bb:98:5a:d7:11:78:03:4e:1c:e7:1e:21: fc:9c:2d:b4:9a:2a:f4:dd:c0:07:13:e3:82:21:06: 9e:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:81:FE:D2:15:79:ED:0B:A6:E4:95:C2:33:D1:2A:4D:29:37:5D:39 X509v3 Authority Key Identifier: keyid:41:E5:DC:21:55:06:9F:F3:17:E5:EE:38:C7:5B:78:89:C2:21:97:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B72D9/AA23FA96697111ECB625930CC4F9AE02/QeXcIVUGn_MX5e44x1t4icIhl-M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QeXcIVUGn_MX5e44x1t4icIhl-M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B72D9/AA23FA96697111ECB625930CC4F9AE02/QeXcIVUGn_MX5e44x1t4icIhl-M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:a6:18:bb:0f:99:15:9f:f0:a0:27:53:a4:e4:3f:71:4c:e8: 35:c5:44:59:63:cc:b3:bd:19:ae:27:fd:24:56:06:e5:59:bc: e3:0c:e6:8d:bc:94:a2:07:c4:92:5a:62:8d:68:bc:35:18:65: 9d:79:6c:1e:0c:f1:81:bf:4d:ba:86:b9:24:c6:de:cd:23:5f: ad:57:7b:5e:29:65:6b:cc:95:a6:2e:2d:94:53:88:2e:01:68: 94:18:0e:cb:c7:7c:cb:2e:80:8b:99:08:68:6d:6a:7e:05:15: 81:4e:17:ae:20:26:b3:26:bf:80:e2:27:04:a1:05:83:b1:1b: e3:63:3f:60:64:52:0f:1a:e6:be:45:18:e8:48:af:db:6e:3e: d3:20:d8:f9:f3:89:86:e5:93:a7:2a:81:81:49:86:c2:19:d1: 0c:25:42:32:65:09:0c:17:50:ef:0f:12:62:be:f0:0f:23:d5: 69:c3:a4:33:3f:cb:70:48:ff:9f:b6:ab:6a:8a:3c:bd:6c:c2: bf:97:83:91:83:6c:ac:f8:10:12:d5:a7:a7:a7:ed:33:59:44: c4:eb:31:ae:e9:16:8c:98:64:19:0a:e9:ae:c0:38:d9:60:f0: 79:ae:e3:f2:6d:28:49:e7:13:86:86:f7:fa:ed:a0:6c:f7:62: 64:e3:be:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBGQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjcyRDkxMTAvBgNVBAUTKDQxRTVEQzIxNTUwNjlGRjMxN0U1RUUzOEM3NUI3ODg5 QzIyMTk3RTMwHhcNMjUwODExMDAyNzE2WhcNMjUwODE4MDAyNzE2WjAYMRYwFAYD VQQDEw02ODk5MzhlNC0wZGY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1iX2RsH7ffYgQ7+J+kXkAe0h233zNUfzjMasvJnIeIxdSv66ARLGaeAp1Uib VorfSccJwP+P9cIUrOe+rKIm0QkR/YBzfcn5Qv4gR+4uMmRVcHaSYm9YrK4nB8S9 LKwRkZZH7MyVUHvfm0bymHO4wyBaqZjQsWeeS3QOBzKuYzu/Ij0/8xOX+2V5/kdp lT65pRZJ+SQY4ygHa3x40gCf/Pii8nho+usZvVAnXlXqD8PbQLtL8bpSlDxYkQ5s G8s0giS5d1DMDlXlDQuwkVU2JBUYAwPhl+jY5nLv8a1oqcks/Oi7mFrXEXgDThzn HiH8nC20mir03cAHE+OCIQaeiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDuB/tIV ee0LpuSVwjPRKk0pN105MB8GA1UdIwQYMBaAFEHl3CFVBp/zF+XuOMdbeInCIZfj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzJEOS9BQTIzRkE5NjY5 NzExMUVDQjYyNTkzMENDNEY5QUUwMi9RZVhjSVZVR25fTVg1ZTQ0eDF0NGljSWhs LU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FlWGNJVlVHbl9NWDVlNDR4MXQ0aWNJaGwtTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NzJEOS9BQTIzRkE5NjY5NzExMUVDQjYyNTkzMENDNEY5QUUwMi9RZVhjSVZVR25f TVg1ZTQ0eDF0NGljSWhsLU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+phi7D5kVn/CgJ1Ok5D9xTOg1xURZY8yzvRmuJ/0kVgblWbzjDOaN vJSiB8SSWmKNaLw1GGWdeWweDPGBv026hrkkxt7NI1+tV3teKWVrzJWmLi2UU4gu AWiUGA7Lx3zLLoCLmQhobWp+BRWBTheuICazJr+A4icEoQWDsRvjYz9gZFIPGua+ RRjoSK/bbj7TINj584mG5ZOnKoGBSYbCGdEMJUIyZQkMF1DvDxJivvAPI9Vpw6Qz P8twSP+ftqtqijy9bMK/l4ORg2ys+BAS1aenp+0zWUTE6zGu6RaMmGQZCumuwDjZ YPB5ruPybShJ5xOGhvf67aBs92Jk477R -----END CERTIFICATE-----Generated at Mon Aug 11 14:53:28 2025 by rpki-client