$ rpki-client -vvf rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/QOWCY5crniQUK6qbWvoFNIGjcZ4.mft File: QOWCY5crniQUK6qbWvoFNIGjcZ4.mft (raw, json) Hash identifier: OInW8X/YSPZI0R0+8Pba0/r2buLrXIRPBS2UCp1j+vM= Subject key identifier: 73:F8:5E:3E:C7:CF:FF:B9:CC:CC:08:0B:8A:DC:24:3E:6A:DA:4E:D5 Authority key identifier: 40:E5:82:63:97:2B:9E:24:14:2B:AA:9B:5A:FA:05:34:81:A3:71:9E Certificate issuer: /CN=A91C31A2/serialNumber=40E58263972B9E24142BAA9B5AFA053481A3719E Certificate serial: 025B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QOWCY5crniQUK6qbWvoFNIGjcZ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/QOWCY5crniQUK6qbWvoFNIGjcZ4.mft Manifest number: 0249 Signing time: Sun 03 Aug 2025 02:29:28 +0000 Manifest this update: Sun 03 Aug 2025 02:29:27 +0000 Manifest next update: Sun 10 Aug 2025 02:29:27 +0000 Files and hashes: 1: QOWCY5crniQUK6qbWvoFNIGjcZ4.crl (hash: McpGkpUW5cjCamE4tEXmUD5Rok6PZAvLDiWyI8geGpA=) 2: EE83B18A7F7E11ED86E00936C4F9AE02.roa (hash: foc/Rgh+D7sXQX3ATXjse5P2fbG3rVc6pPyYs/SuwvQ=) 3: 4F9ACB7461F511F0A6467D40C4F9AE02.roa (hash: nLXw8xHgVCwgAvRtHZxNQ9V3CXfxyMaz7CQisoDfvuU=) 4: 94855EA0357711EDB81B8A34C4F9AE02.roa (hash: IN+H6LUETq8W/dLs0PZX77bed7F0mQsx+AWJPeSHLek=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/QOWCY5crniQUK6qbWvoFNIGjcZ4.crl rsync://rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/QOWCY5crniQUK6qbWvoFNIGjcZ4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QOWCY5crniQUK6qbWvoFNIGjcZ4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 02:29:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 603 (0x25b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C31A2, serialNumber=40E58263972B9E24142BAA9B5AFA053481A3719E Validity Not Before: Aug 3 02:29:27 2025 GMT Not After : Aug 10 02:29:27 2025 GMT Subject: CN=688ec988-88e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:79:10:1e:02:36:f7:06:68:cc:72:ea:08:97: a4:a0:6b:ca:94:ee:c1:8f:4e:d9:15:65:d6:b4:f2: 6a:86:59:fd:14:59:0d:d0:a1:5b:19:1b:e8:75:c0: 90:4d:12:25:18:f2:11:61:84:24:f0:97:9a:92:71: ba:e2:3b:ea:9f:c9:6d:a8:c4:fc:23:23:b7:00:93: e3:b7:6c:9d:e3:77:01:6e:b7:7d:48:27:64:a3:75: bb:bb:b3:d9:6d:f2:fb:bb:30:c4:e3:63:49:f7:8f: 77:f7:2a:d0:ea:63:2e:60:62:ca:e7:a8:2b:a5:77: 78:62:89:74:8c:9a:dd:ba:79:20:36:c2:6e:dd:43: d5:20:18:0c:53:fa:55:29:d1:ca:a3:ec:ec:94:1f: c1:27:8e:6f:9c:32:bc:11:f1:05:10:29:96:7e:e4: f8:fd:c6:c8:7f:f3:e7:ba:25:d3:19:a4:51:c4:8f: 29:62:77:5b:7e:3b:bb:1b:9d:3e:e9:37:cb:39:16: 4f:eb:07:c8:f4:f4:54:b0:e7:d3:ee:7d:f4:5a:66: eb:e4:86:42:d5:cc:f8:e2:2d:22:18:f6:3a:04:09: 90:09:0c:1a:e9:87:4a:e0:34:81:09:9f:23:3b:c6: 8d:f9:76:5f:65:b2:d8:e8:1d:11:43:4a:c6:fb:22: 0b:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:F8:5E:3E:C7:CF:FF:B9:CC:CC:08:0B:8A:DC:24:3E:6A:DA:4E:D5 X509v3 Authority Key Identifier: keyid:40:E5:82:63:97:2B:9E:24:14:2B:AA:9B:5A:FA:05:34:81:A3:71:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/QOWCY5crniQUK6qbWvoFNIGjcZ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QOWCY5crniQUK6qbWvoFNIGjcZ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/QOWCY5crniQUK6qbWvoFNIGjcZ4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:c5:5a:dc:85:44:6a:16:dc:31:bf:cb:43:2e:a9:47:51:48: e4:0c:5e:b3:f0:1f:2c:46:7b:9f:79:14:53:de:05:f2:61:6b: a8:f2:bb:b1:1f:66:44:81:d1:0e:94:d2:3e:a7:ae:96:d7:70: 5c:a6:d4:c4:02:94:7b:89:48:07:24:25:83:dc:9e:7f:66:b3: 9a:88:3d:23:55:5c:84:c2:da:11:dc:3d:f1:07:d5:31:aa:16: 42:8c:62:c6:5f:f0:6a:0f:02:cc:8c:5e:e8:89:e6:58:6a:10: 8f:4c:08:b4:b0:aa:ab:20:ed:be:61:50:69:e6:27:d0:d9:c9: 47:c3:8c:0e:64:5c:88:49:e7:99:9e:10:01:d8:52:95:f9:24: 12:1c:ee:17:a3:be:f3:20:ec:59:80:6d:b6:71:c6:6d:fd:25: c2:2d:1b:f9:e4:f8:c6:3e:43:50:8d:4a:f6:42:c3:12:c0:67: 4f:15:40:22:95:f6:1e:8b:4e:77:7b:61:d3:59:3b:4d:31:7f: 14:8f:7c:0a:3b:c1:29:3c:be:92:d4:88:f5:ec:f3:16:ea:d4: d9:25:ba:1c:67:ca:5e:68:4b:84:29:8a:ce:65:07:90:ef:25: ea:21:3c:be:38:ee:e4:13:2d:1d:69:0c:72:3c:09:73:75:22: 81:15:03:ff -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAlswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzMxQTIxMTAvBgNVBAUTKDQwRTU4MjYzOTcyQjlFMjQxNDJCQUE5QjVBRkEwNTM0 ODFBMzcxOUUwHhcNMjUwODAzMDIyOTI3WhcNMjUwODEwMDIyOTI3WjAYMRYwFAYD VQQDEw02ODhlYzk4OC04OGUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA83kQHgI29wZozHLqCJekoGvKlO7Bj07ZFWXWtPJqhln9FFkN0KFbGRvodcCQ TRIlGPIRYYQk8JeaknG64jvqn8ltqMT8IyO3AJPjt2yd43cBbrd9SCdko3W7u7PZ bfL7uzDE42NJ94939yrQ6mMuYGLK56grpXd4Yol0jJrdunkgNsJu3UPVIBgMU/pV KdHKo+zslB/BJ45vnDK8EfEFECmWfuT4/cbIf/PnuiXTGaRRxI8pYndbfju7G50+ 6TfLORZP6wfI9PRUsOfT7n30Wmbr5IZC1cz44i0iGPY6BAmQCQwa6YdK4DSBCZ8j O8aN+XZfZbLY6B0RQ0rG+yILfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHP4Xj7H z/+5zMwIC4rcJD5q2k7VMB8GA1UdIwQYMBaAFEDlgmOXK54kFCuqm1r6BTSBo3Ge MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzFBMi9ENDc2RUQ3NjM1 NzIxMUVEQUU5Nzc4MzlDNEY5QUUwMi9RT1dDWTVjcm5pUVVLNnFiV3ZvRk5JR2pj WjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1FPV0NZNWNybmlRVUs2cWJXdm9GTklHamNaNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MzFBMi9ENDc2RUQ3NjM1NzIxMUVEQUU5Nzc4MzlDNEY5QUUwMi9RT1dDWTVjcm5p UVVLNnFiV3ZvRk5JR2pjWjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHxVrchURqFtwxv8tDLqlHUUjkDF6z8B8sRnufeRRT3gXyYWuo8rux H2ZEgdEOlNI+p66W13BcptTEApR7iUgHJCWD3J5/ZrOaiD0jVVyEwtoR3D3xB9Ux qhZCjGLGX/BqDwLMjF7oieZYahCPTAi0sKqrIO2+YVBp5ifQ2clHw4wOZFyISeeZ nhAB2FKV+SQSHO4Xo77zIOxZgG22ccZt/SXCLRv55PjGPkNQjUr2QsMSwGdPFUAi lfYei053e2HTWTtNMX8Uj3wKO8EpPL6S1Ij17PMW6tTZJbocZ8peaEuEKYrOZQeQ 7yXqITy+OO7kEy0daQxyPAlzdSKBFQP/ -----END CERTIFICATE-----Generated at Mon Aug 4 04:05:50 2025 by rpki-client