$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDD3F/C1A47FD895AF11E6B7854371C4F9AE02/p-QTTZsR3qt1sReR1V450XROC_E.mft File: p-QTTZsR3qt1sReR1V450XROC_E.mft (raw, json) Hash identifier: sJY9c/AGbWICpi7UboNfPxOkANmONGDC5BwyhL623Io= Subject key identifier: 75:8D:27:9C:2A:29:C1:E0:8B:72:AD:75:E6:45:C4:2E:E4:3A:95:C6 Authority key identifier: A7:E4:13:4D:9B:11:DE:AB:75:B1:17:91:D5:5E:39:D1:74:4E:0B:F1 Certificate issuer: /CN=A91DDD3F/serialNumber=A7E4134D9B11DEAB75B11791D55E39D1744E0BF1 Certificate serial: 1DEC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-QTTZsR3qt1sReR1V450XROC_E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DDD3F/C1A47FD895AF11E6B7854371C4F9AE02/p-QTTZsR3qt1sReR1V450XROC_E.mft Manifest number: 1DE3 Signing time: Mon 04 Aug 2025 16:15:07 +0000 Manifest this update: Mon 04 Aug 2025 16:15:06 +0000 Manifest next update: Mon 11 Aug 2025 16:15:06 +0000 Files and hashes: 1: p-QTTZsR3qt1sReR1V450XROC_E.crl (hash: p0NlKQdfkfiYRe09vCJwyRfKOd86m71sqdIzmzwIei0=) 2: AE58A24695B011E696EFE472C4F9AE02.roa (hash: iaqQr5dNZ60TDLIhN3MftiKcnJuy69N4C5+umHfRLFA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DDD3F/C1A47FD895AF11E6B7854371C4F9AE02/p-QTTZsR3qt1sReR1V450XROC_E.crl rsync://rpki.apnic.net/member_repository/A91DDD3F/C1A47FD895AF11E6B7854371C4F9AE02/p-QTTZsR3qt1sReR1V450XROC_E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-QTTZsR3qt1sReR1V450XROC_E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 16:15:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7660 (0x1dec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DDD3F, serialNumber=A7E4134D9B11DEAB75B11791D55E39D1744E0BF1 Validity Not Before: Aug 4 16:15:06 2025 GMT Not After : Aug 11 16:15:06 2025 GMT Subject: CN=6890dc8a-737b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:0b:04:b9:8d:ea:e2:e4:0c:8e:00:32:10:95: b0:d8:14:91:29:7b:6a:1a:45:8b:81:ae:0c:56:1e: 1c:a5:d4:83:74:10:72:3b:46:68:2e:e9:5e:b8:f8: 24:81:92:8b:8a:bd:33:3c:5e:98:7d:32:a1:12:62: b1:d3:c9:84:9d:8e:3b:f0:62:bd:42:8c:79:c0:b9: 00:e3:15:f3:48:09:fc:c5:4b:97:7f:a7:35:dd:97: 8a:35:b2:0a:c6:a9:5c:f0:c3:01:ae:e8:c7:59:37: e7:15:6b:bf:25:bb:7c:28:b2:b0:34:0e:17:81:94: 11:30:3f:e6:ab:54:63:d6:4b:5d:7e:2b:0a:f7:2b: 86:99:40:53:00:1f:27:aa:9b:7f:1b:ea:26:df:ab: 76:5c:c9:32:c8:64:98:1e:f1:ac:7c:3f:a5:ad:aa: 5f:6a:58:b3:4e:4a:6f:e3:ce:99:c8:b5:0e:ba:25: cc:24:d6:f1:1b:e8:61:a0:5e:9b:99:f2:96:46:af: af:9a:1d:97:c6:78:69:7f:c1:6f:66:ef:6d:7b:ef: 51:b7:ea:a8:30:da:35:4e:ea:1c:c4:12:62:da:0a: 25:60:da:a5:3b:04:85:25:ff:de:64:b8:35:9c:69: de:f3:44:db:4d:68:48:81:c5:39:9d:1b:f8:40:44: 82:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:8D:27:9C:2A:29:C1:E0:8B:72:AD:75:E6:45:C4:2E:E4:3A:95:C6 X509v3 Authority Key Identifier: keyid:A7:E4:13:4D:9B:11:DE:AB:75:B1:17:91:D5:5E:39:D1:74:4E:0B:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DDD3F/C1A47FD895AF11E6B7854371C4F9AE02/p-QTTZsR3qt1sReR1V450XROC_E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-QTTZsR3qt1sReR1V450XROC_E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDD3F/C1A47FD895AF11E6B7854371C4F9AE02/p-QTTZsR3qt1sReR1V450XROC_E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:12:8f:13:d3:9a:28:81:fa:20:a3:f3:01:30:5e:a3:f2:1c: 6e:11:fe:77:92:12:f2:71:c9:8a:1d:5a:73:32:05:2d:8d:28: d8:58:f6:03:85:8a:f0:ae:3a:a9:1f:97:a8:8c:d6:5b:91:d6: ae:74:d6:8e:a0:15:92:f5:72:5f:a8:d5:5c:77:05:32:b8:97: ac:9b:6f:33:ea:30:f3:4b:d8:f9:ec:e1:6c:55:22:45:d4:5f: bd:9c:d1:1c:f0:e2:7a:4b:f3:e8:ab:7a:53:cc:09:1d:c0:39: 56:a3:4e:22:21:55:78:52:7d:3c:ac:2d:52:8d:11:73:f9:ed: 57:dd:42:34:b9:23:c7:1d:23:18:ad:78:97:0d:5a:a2:e1:92: c9:3a:28:77:cf:64:e8:13:4c:a4:0f:a5:6b:2f:fd:40:74:11: 98:3c:ec:a8:8a:ac:ef:71:fd:fa:75:b4:62:30:d6:4f:79:27: 13:13:6a:c5:1c:dc:1e:8c:80:6c:50:94:6f:36:5d:1e:ee:ab: e9:4f:a8:2e:a8:00:da:11:52:54:91:74:76:1b:73:1a:ec:63: c5:e5:f2:2a:40:dc:ef:59:12:f9:13:16:c7:7a:d8:eb:a9:ef: ea:9a:fd:80:35:83:95:79:08:01:40:76:a0:8b:9a:f5:89:ce: d3:7d:b9:b7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHewwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REREM0YxMTAvBgNVBAUTKEE3RTQxMzREOUIxMURFQUI3NUIxMTc5MUQ1NUUzOUQx NzQ0RTBCRjEwHhcNMjUwODA0MTYxNTA2WhcNMjUwODExMTYxNTA2WjAYMRYwFAYD VQQDEw02ODkwZGM4YS03MzdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvgsEuY3q4uQMjgAyEJWw2BSRKXtqGkWLga4MVh4cpdSDdBByO0ZoLuleuPgk gZKLir0zPF6YfTKhEmKx08mEnY478GK9Qox5wLkA4xXzSAn8xUuXf6c13ZeKNbIK xqlc8MMBrujHWTfnFWu/Jbt8KLKwNA4XgZQRMD/mq1Rj1ktdfisK9yuGmUBTAB8n qpt/G+om36t2XMkyyGSYHvGsfD+lrapfalizTkpv486ZyLUOuiXMJNbxG+hhoF6b mfKWRq+vmh2Xxnhpf8FvZu9te+9Rt+qoMNo1TuocxBJi2golYNqlOwSFJf/eZLg1 nGne80TbTWhIgcU5nRv4QESCYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHWNJ5wq KcHgi3KtdeZFxC7kOpXGMB8GA1UdIwQYMBaAFKfkE02bEd6rdbEXkdVeOdF0Tgvx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEREQzRi9DMUE0N0ZEODk1 QUYxMUU2Qjc4NTQzNzFDNEY5QUUwMi9wLVFUVFpzUjNxdDFzUmVSMVY0NTBYUk9D X0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3AtUVRUWnNSM3F0MXNSZVIxVjQ1MFhST0NfRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE REQzRi9DMUE0N0ZEODk1QUYxMUU2Qjc4NTQzNzFDNEY5QUUwMi9wLVFUVFpzUjNx dDFzUmVSMVY0NTBYUk9DX0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAREo8T05oogfogo/MBMF6j8hxuEf53khLyccmKHVpzMgUtjSjYWPYD hYrwrjqpH5eojNZbkdaudNaOoBWS9XJfqNVcdwUyuJesm28z6jDzS9j57OFsVSJF 1F+9nNEc8OJ6S/Poq3pTzAkdwDlWo04iIVV4Un08rC1SjRFz+e1X3UI0uSPHHSMY rXiXDVqi4ZLJOih3z2ToE0ykD6VrL/1AdBGYPOyoiqzvcf36dbRiMNZPeScTE2rF HNwejIBsUJRvNl0e7qvpT6guqADaEVJUkXR2G3Ma7GPF5fIqQNzvWRL5ExbHetjr qe/qmv2ANYOVeQgBQHagi5r1ic7Tfbm3 -----END CERTIFICATE-----Generated at Wed Aug 6 05:16:38 2025 by rpki-client