$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBA4F/4F40BE6C3B7711F097A8BB24C4F9AE02/5_QZJRp5Yd8nTTm1NKIvPs2zEC8.mft File: 5_QZJRp5Yd8nTTm1NKIvPs2zEC8.mft (raw, json) Hash identifier: Qhx19is+QUmjwKwgwzBzuqvBOFWeMAcCmgYKjb2EEuE= Subject key identifier: 4C:7C:DF:6E:92:CD:34:FD:42:49:D0:49:1B:DA:EE:84:18:0A:34:B2 Authority key identifier: E7:F4:19:25:1A:79:61:DF:27:4D:39:B5:34:A2:2F:3E:CD:B3:10:2F Certificate issuer: /CN=A91BBA4F/serialNumber=E7F419251A7961DF274D39B534A22F3ECDB3102F Certificate serial: 0D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5_QZJRp5Yd8nTTm1NKIvPs2zEC8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BBA4F/4F40BE6C3B7711F097A8BB24C4F9AE02/5_QZJRp5Yd8nTTm1NKIvPs2zEC8.mft Manifest number: 0C Signing time: Tue 17 Jun 2025 06:57:30 +0000 Manifest this update: Tue 17 Jun 2025 06:57:29 +0000 Manifest next update: Tue 24 Jun 2025 06:57:29 +0000 Files and hashes: 1: 5_QZJRp5Yd8nTTm1NKIvPs2zEC8.crl (hash: QgMasu+NTYOVXQWmcWW9CwL5T/ZmvAUSrr6rKWziZIQ=) 2: 584BBFB03B7811F099AF3F55C4F9AE02.roa (hash: jPnHx/VwrEHzMcIk6hG/2vteGtB6XZZVA832ptEHOy8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BBA4F/4F40BE6C3B7711F097A8BB24C4F9AE02/5_QZJRp5Yd8nTTm1NKIvPs2zEC8.crl rsync://rpki.apnic.net/member_repository/A91BBA4F/4F40BE6C3B7711F097A8BB24C4F9AE02/5_QZJRp5Yd8nTTm1NKIvPs2zEC8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5_QZJRp5Yd8nTTm1NKIvPs2zEC8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 06:57:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13 (0xd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BBA4F, serialNumber=E7F419251A7961DF274D39B534A22F3ECDB3102F Validity Not Before: Jun 17 06:57:29 2025 GMT Not After : Jun 24 06:57:29 2025 GMT Subject: CN=685111d9-97fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:cd:d3:c2:04:6f:c9:25:09:32:b4:1d:0e:3d: bf:d7:48:ed:fd:77:52:cf:c7:4b:15:08:86:74:e6: 24:4d:fb:bc:db:3f:57:8a:98:39:97:bd:94:f4:cd: d8:db:b9:53:58:07:a9:be:33:5f:1a:da:dd:cb:3b: e9:1e:75:55:e2:91:c0:42:bc:5b:5d:9a:5b:46:86: d3:fc:eb:0c:8f:23:45:f4:f7:8a:7f:94:ec:31:c2: 88:ad:c6:84:42:41:4c:17:db:c3:5c:75:c1:53:c4: 59:e5:63:1e:eb:72:0b:27:10:c8:99:29:9d:8d:bd: 04:94:b1:63:0b:55:d1:f7:ee:7f:67:ab:98:f4:0a: 79:76:33:29:6e:7a:ed:33:6f:03:a2:7b:69:0a:dd: f0:1e:04:79:1f:29:a7:fc:2e:6f:15:da:b2:cd:b1: b1:a9:1d:7e:30:70:d9:5d:2f:6b:8c:a2:61:b6:db: d7:75:06:3d:47:94:6f:36:73:43:98:ed:2d:60:66: 47:cd:66:6c:7d:0b:75:1f:94:b3:31:9d:47:3b:28: ab:b9:88:e4:a7:3d:d7:cf:d6:35:17:48:96:7b:c7: d8:98:06:45:91:d4:3e:df:85:b5:b6:4a:7c:d7:04: 6f:a3:f8:cd:79:ac:39:61:f2:71:46:7c:63:a7:9d: 05:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:7C:DF:6E:92:CD:34:FD:42:49:D0:49:1B:DA:EE:84:18:0A:34:B2 X509v3 Authority Key Identifier: keyid:E7:F4:19:25:1A:79:61:DF:27:4D:39:B5:34:A2:2F:3E:CD:B3:10:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BBA4F/4F40BE6C3B7711F097A8BB24C4F9AE02/5_QZJRp5Yd8nTTm1NKIvPs2zEC8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5_QZJRp5Yd8nTTm1NKIvPs2zEC8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBA4F/4F40BE6C3B7711F097A8BB24C4F9AE02/5_QZJRp5Yd8nTTm1NKIvPs2zEC8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:15:32:b6:8e:8b:c9:12:61:c5:e5:54:06:63:2a:f3:40:78: 38:ba:d1:35:2b:89:08:e5:65:71:ed:c9:cc:44:fd:53:e1:d7: b8:0d:23:6d:ce:7a:5c:f1:a8:9c:a5:32:7c:83:9f:b5:a4:a2: 1c:1a:f4:fc:b3:f4:17:d2:cf:8a:fc:87:4b:30:eb:49:9b:c1: a8:37:97:c6:d9:b0:c4:d7:46:30:b2:15:56:93:4c:74:a7:be: 97:5b:08:7f:86:46:82:c7:48:d1:46:a2:31:8c:e7:fa:82:21: 42:48:31:19:01:50:e5:21:d7:5e:d1:01:f4:b3:d7:10:5a:a7: 26:ed:66:b6:53:c2:5e:17:b5:fa:a3:38:60:72:c2:3b:ff:63: 96:2d:f4:c3:02:c8:eb:ed:f2:8d:38:cb:a1:82:8b:73:83:db: a3:32:5f:fc:ae:cd:c9:43:6c:c1:54:15:9d:b8:75:0a:9b:1a: 35:66:d4:af:e9:2a:6d:bd:28:fa:85:6f:0a:28:da:de:c8:80: 63:60:e1:c4:1f:fc:00:e0:4d:f5:98:61:fb:6e:a1:a2:e7:9b: ee:31:11:23:06:4e:c7:b1:82:d2:47:c1:5a:78:42:06:52:ec: 22:7e:9d:c8:00:09:cf:7f:ef:f9:99:e5:44:e9:bb:ae:80:48: 88:5a:93:27 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC QkE0RjExMC8GA1UEBRMoRTdGNDE5MjUxQTc5NjFERjI3NEQzOUI1MzRBMjJGM0VD REIzMTAyRjAeFw0yNTA2MTcwNjU3MjlaFw0yNTA2MjQwNjU3MjlaMBgxFjAUBgNV BAMTDTY4NTExMWQ5LTk3ZmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCyzdPCBG/JJQkytB0OPb/XSO39d1LPx0sVCIZ05iRN+7zbP1eKmDmXvZT0zdjb uVNYB6m+M18a2t3LO+kedVXikcBCvFtdmltGhtP86wyPI0X094p/lOwxwoitxoRC QUwX28NcdcFTxFnlYx7rcgsnEMiZKZ2NvQSUsWMLVdH37n9nq5j0Cnl2Mylueu0z bwOie2kK3fAeBHkfKaf8Lm8V2rLNsbGpHX4wcNldL2uMomG229d1Bj1HlG82c0OY 7S1gZkfNZmx9C3UflLMxnUc7KKu5iOSnPdfP1jUXSJZ7x9iYBkWR1D7fhbW2SnzX BG+j+M15rDlh8nFGfGOnnQUtAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUTHzfbpLN NP1CSdBJG9ruhBgKNLIwHwYDVR0jBBgwFoAU5/QZJRp5Yd8nTTm1NKIvPs2zEC8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJCQTRGLzRGNDBCRTZDM0I3 NzExRjA5N0E4QkIyNEM0RjlBRTAyLzVfUVpKUnA1WWQ4blRUbTFOS0l2UHMyekVD OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvNV9RWkpScDVZZDhuVFRtMU5LSXZQczJ6RUM4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJC QTRGLzRGNDBCRTZDM0I3NzExRjA5N0E4QkIyNEM0RjlBRTAyLzVfUVpKUnA1WWQ4 blRUbTFOS0l2UHMyekVDOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHQVMraOi8kSYcXlVAZjKvNAeDi60TUriQjlZXHtycxE/VPh17gNI23O elzxqJylMnyDn7Wkohwa9Pyz9BfSz4r8h0sw60mbwag3l8bZsMTXRjCyFVaTTHSn vpdbCH+GRoLHSNFGojGM5/qCIUJIMRkBUOUh117RAfSz1xBapybtZrZTwl4Xtfqj OGBywjv/Y5Yt9MMCyOvt8o04y6GCi3OD26MyX/yuzclDbMFUFZ24dQqbGjVm1K/p Km29KPqFbwoo2t7IgGNg4cQf/ADgTfWYYftuoaLnm+4xESMGTsexgtJHwVp4QgZS 7CJ+ncgACc9/7/mZ5UTpu66ASIhakyc= -----END CERTIFICATE-----Generated at Thu Jun 19 05:14:11 2025 by rpki-client