$ rpki-client -vvf rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/quxIh3HXuUGFyKkP420pfedshLw.mft File: quxIh3HXuUGFyKkP420pfedshLw.mft (raw, json) Hash identifier: /UHwAOknBfZDlzCvc7v3Yhabvr6rPdEQPNVx7RQtiXU= Subject key identifier: 0F:DA:CC:C5:D6:2E:AB:CE:04:69:50:7F:DB:3D:B0:A4:81:3F:39:81 Authority key identifier: AA:EC:48:87:71:D7:B9:41:85:C8:A9:0F:E3:6D:29:7D:E7:6C:84:BC Certificate issuer: /CN=A91C60A5/serialNumber=AAEC488771D7B94185C8A90FE36D297DE76C84BC Certificate serial: A3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/quxIh3HXuUGFyKkP420pfedshLw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/quxIh3HXuUGFyKkP420pfedshLw.mft Manifest number: 9D Signing time: Sat 09 Aug 2025 06:52:18 +0000 Manifest this update: Sat 09 Aug 2025 06:52:18 +0000 Manifest next update: Sat 16 Aug 2025 06:52:18 +0000 Files and hashes: 1: quxIh3HXuUGFyKkP420pfedshLw.crl (hash: VABVxgEGtGTBGO8IEFNxdBKhe0c3tnpA+x4O1T1EaR0=) 2: 7CEBE3D254CC11F0A18D9383C4F9AE02.roa (hash: MhC1AUnnrCM4ujHXiGVbZ9ds9R03Dh/i7EuqXSdVjoQ=) 3: 0A6CBB6E54CD11F0A3E48084C4F9AE02.roa (hash: zutu0HkO4ucOHeH/2JeJGru547OHviuXA/RDD+leiEs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/quxIh3HXuUGFyKkP420pfedshLw.crl rsync://rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/quxIh3HXuUGFyKkP420pfedshLw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/quxIh3HXuUGFyKkP420pfedshLw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 163 (0xa3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C60A5, serialNumber=AAEC488771D7B94185C8A90FE36D297DE76C84BC Validity Not Before: Aug 9 06:52:18 2025 GMT Not After : Aug 16 06:52:18 2025 GMT Subject: CN=6896f022-9663 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:1a:ac:a6:af:16:b5:c3:4d:9e:d5:4d:12:5c: b7:ec:84:e5:0f:05:6b:ba:db:ba:57:cb:8a:36:7d: 34:b7:3e:0c:7d:4e:d2:cc:6d:80:75:99:11:58:45: d8:d0:3e:3f:3b:00:e7:18:64:66:29:6a:27:a3:bd: 67:f3:14:f0:e9:fa:4e:ef:3c:48:fb:bb:0d:01:b7: a8:d5:f6:33:95:65:b9:41:34:34:be:21:dd:2a:87: 11:0e:d3:40:15:67:39:ba:5c:e0:cb:35:f8:65:37: d3:8e:77:1c:00:40:bf:a7:76:10:84:ec:16:90:f7: dc:31:fe:28:b5:4d:98:2c:ad:ea:ad:d4:28:79:ec: 1b:c8:f3:63:37:6e:c1:30:4e:66:c6:8d:b5:b0:f4: bd:a5:c9:7c:4b:5e:a2:4a:86:95:fe:b7:28:e7:87: 22:73:0d:5e:8a:db:01:f2:1d:74:6a:e7:07:b1:63: 24:55:d3:e0:36:15:d7:40:0a:a4:a7:ad:d3:92:6d: 0a:e7:46:7c:36:3f:15:a1:8d:57:c1:c0:8f:5f:ae: 55:32:32:0d:58:6e:a1:0e:e9:7e:78:db:04:a4:1c: 29:16:a5:a9:25:d2:12:52:61:37:fa:18:d1:d2:34: 6a:1a:ac:8d:1a:3d:05:67:d0:2a:ee:86:6c:97:3a: a9:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:DA:CC:C5:D6:2E:AB:CE:04:69:50:7F:DB:3D:B0:A4:81:3F:39:81 X509v3 Authority Key Identifier: keyid:AA:EC:48:87:71:D7:B9:41:85:C8:A9:0F:E3:6D:29:7D:E7:6C:84:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/quxIh3HXuUGFyKkP420pfedshLw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/quxIh3HXuUGFyKkP420pfedshLw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/quxIh3HXuUGFyKkP420pfedshLw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:ca:69:59:be:5f:a3:32:d2:b3:f4:39:ee:77:8a:f8:72:6e: 58:42:ab:cf:d9:36:5b:2c:d8:d8:1a:bd:43:66:e9:2a:84:09: 47:ed:29:da:dd:5e:f7:6d:46:a6:19:26:49:70:59:fa:e5:8d: 9e:b3:77:62:a1:50:6c:aa:7e:66:7c:f2:6a:54:15:fc:d7:7c: 2a:1e:c4:81:26:7a:d4:d4:37:cc:2b:39:c4:40:3e:3d:63:8c: 49:e9:61:4f:ea:1c:86:ae:48:b6:8b:ca:50:89:77:f0:41:f2: 72:9e:34:84:0a:44:e9:f2:19:25:8a:d1:44:73:ed:8a:74:9b: bc:94:1c:54:95:76:42:90:83:a7:2a:ee:5d:b4:9a:26:53:ed: 3e:4e:88:01:33:36:42:1b:e4:0d:53:a1:b8:c9:d5:62:52:21: 63:a6:34:30:dc:69:57:6c:04:6a:3f:44:71:de:76:06:c7:6b: 68:00:d3:c4:df:c5:c9:b2:d0:ab:2e:3f:bc:6b:20:5c:4c:f7: 37:f4:db:87:df:3f:94:4b:3c:66:fb:37:54:69:e1:07:e7:5f: 4f:67:4a:26:1d:d1:92:75:93:d6:84:2b:a5:ba:12:48:7b:43: b5:6e:55:85:1a:9b:94:43:80:07:f9:9c:e0:19:a3:5f:51:bc: 74:50:5f:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzYwQTUxMTAvBgNVBAUTKEFBRUM0ODg3NzFEN0I5NDE4NUM4QTkwRkUzNkQyOTdE RTc2Qzg0QkMwHhcNMjUwODA5MDY1MjE4WhcNMjUwODE2MDY1MjE4WjAYMRYwFAYD VQQDEw02ODk2ZjAyMi05NjYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1Bqspq8WtcNNntVNEly37ITlDwVrutu6V8uKNn00tz4MfU7SzG2AdZkRWEXY 0D4/OwDnGGRmKWono71n8xTw6fpO7zxI+7sNAbeo1fYzlWW5QTQ0viHdKocRDtNA FWc5ulzgyzX4ZTfTjnccAEC/p3YQhOwWkPfcMf4otU2YLK3qrdQoeewbyPNjN27B ME5mxo21sPS9pcl8S16iSoaV/rco54cicw1eitsB8h10aucHsWMkVdPgNhXXQAqk p63Tkm0K50Z8Nj8VoY1XwcCPX65VMjINWG6hDul+eNsEpBwpFqWpJdISUmE3+hjR 0jRqGqyNGj0FZ9Aq7oZslzqpNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA/azMXW LqvOBGlQf9s9sKSBPzmBMB8GA1UdIwQYMBaAFKrsSIdx17lBhcipD+NtKX3nbIS8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjBBNS85OTdCMzY2RTkx RjAxMUVGQjY5NjVDMjRDNEY5QUUwMi9xdXhJaDNIWHVVR0Z5S2tQNDIwcGZlZHNo THcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3F1eEloM0hYdVVHRnlLa1A0MjBwZmVkc2hMdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NjBBNS85OTdCMzY2RTkxRjAxMUVGQjY5NjVDMjRDNEY5QUUwMi9xdXhJaDNIWHVV R0Z5S2tQNDIwcGZlZHNoTHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCaymlZvl+jMtKz9Dnud4r4cm5YQqvP2TZbLNjYGr1DZukqhAlH7Sna 3V73bUamGSZJcFn65Y2es3dioVBsqn5mfPJqVBX813wqHsSBJnrU1DfMKznEQD49 Y4xJ6WFP6hyGrki2i8pQiXfwQfJynjSECkTp8hklitFEc+2KdJu8lBxUlXZCkIOn Ku5dtJomU+0+TogBMzZCG+QNU6G4ydViUiFjpjQw3GlXbARqP0Rx3nYGx2toANPE 38XJstCrLj+8ayBcTPc39NuH3z+USzxm+zdUaeEH519PZ0omHdGSdZPWhCuluhJI e0O1blWFGpuUQ4AH+ZzgGaNfUbx0UF+Y -----END CERTIFICATE-----Generated at Sun Aug 10 04:27:36 2025 by rpki-client