$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0435/D2885BC4445D11EBA517457EC4F9AE02/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.mft File: QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.mft (raw, json) Hash identifier: pDUjTDpel1JILFzZALrxKdAbnV6e1MZsQpTf31/zt1c= Subject key identifier: A4:83:8B:95:29:ED:09:42:DB:64:80:A2:E3:99:44:F3:C1:B8:BA:8B Authority key identifier: 42:91:1B:10:9D:46:E8:86:61:FA:85:61:6C:81:28:03:C5:AB:3C:64 Certificate issuer: /CN=A91E0435/serialNumber=42911B109D46E88661FA85616C812803C5AB3C64 Certificate serial: 072C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0435/D2885BC4445D11EBA517457EC4F9AE02/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.mft Manifest number: 0726 Signing time: Sun 10 Aug 2025 21:52:49 +0000 Manifest this update: Sun 10 Aug 2025 21:52:48 +0000 Manifest next update: Sun 17 Aug 2025 21:52:48 +0000 Files and hashes: 1: QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.crl (hash: OhSGTOA8exXSt5zbyCxAIvMzHgWuAtFYJbkCUiGe4Qo=) 2: FCC3542E445E11EBB692887EC4F9AE02.roa (hash: mIOY2vhOsc+nNqge7lnkHLB5M4DsgX2WsmX/mvk1lyU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0435/D2885BC4445D11EBA517457EC4F9AE02/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.crl rsync://rpki.apnic.net/member_repository/A91E0435/D2885BC4445D11EBA517457EC4F9AE02/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1836 (0x72c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0435, serialNumber=42911B109D46E88661FA85616C812803C5AB3C64 Validity Not Before: Aug 10 21:52:48 2025 GMT Not After : Aug 17 21:52:48 2025 GMT Subject: CN=689914b0-c69b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:4d:12:b0:26:06:79:0c:7e:42:0c:cb:08:c6: 92:0e:fc:c2:e4:ea:d1:a1:85:1a:81:67:5e:6a:3b: ef:21:d4:00:79:3f:2b:88:7b:d5:c4:f2:15:4e:84: 6e:97:2a:af:ac:65:1a:8b:f2:4f:e0:30:ab:bf:23: b1:54:31:de:7a:5f:00:01:a6:8a:9c:80:50:f3:c3: 0f:4e:e3:d7:47:e2:08:3f:46:f6:a0:96:95:17:98: 5b:23:55:2a:da:ef:c8:40:98:f7:7a:5c:c7:53:c9: da:cd:e4:26:75:c2:3b:a0:3f:93:7d:dc:38:41:c8: 08:da:1b:3d:9c:92:34:7c:1d:ce:14:de:b7:b8:e5: b7:69:ca:40:50:f1:e8:75:c7:76:f6:a1:d8:7a:90: f8:69:b5:c9:02:41:db:7f:c5:9a:e5:44:7f:2c:fe: ed:1e:c8:d4:74:45:e4:18:12:df:c9:75:a6:a9:c8: f9:39:c8:38:8f:67:13:a7:96:97:4f:af:c7:ad:b0: 82:74:71:99:c5:7a:5d:bd:40:71:ab:35:ed:34:83: bc:12:0a:d2:e6:36:bd:90:78:29:1a:c4:9d:d2:bc: f3:c7:4e:43:aa:0b:bf:e1:b9:f3:59:18:a2:ea:64: b1:96:67:d3:cf:7e:35:01:db:71:1c:d8:db:b8:76: 0d:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:83:8B:95:29:ED:09:42:DB:64:80:A2:E3:99:44:F3:C1:B8:BA:8B X509v3 Authority Key Identifier: keyid:42:91:1B:10:9D:46:E8:86:61:FA:85:61:6C:81:28:03:C5:AB:3C:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0435/D2885BC4445D11EBA517457EC4F9AE02/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0435/D2885BC4445D11EBA517457EC4F9AE02/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:32:76:19:49:b1:cf:e9:79:a4:9a:18:97:9a:5e:9c:ef:2f: f0:2b:4c:a8:4b:a3:a8:ad:41:e6:08:4d:e3:23:52:65:6a:79: 4f:2e:2d:72:e2:fb:f2:f2:ab:1f:c9:b3:23:3e:22:cd:a9:99: 95:68:ce:37:e3:42:81:f0:64:81:aa:34:7f:23:c4:c2:e7:fc: db:7c:d3:bc:71:4a:e9:e7:f9:05:b7:cb:cf:c2:ca:33:3d:19: 28:53:c0:6e:3a:7f:4a:3c:8d:eb:2d:80:07:46:80:c3:54:7d: 58:65:83:3c:59:26:16:15:7b:70:69:b4:bb:48:19:4a:ac:f4: 94:70:4f:8d:5c:7d:a3:0d:6a:93:d7:f4:40:4b:ab:14:d5:bf: 30:d1:be:74:fc:7d:1f:9c:05:5b:e5:09:f2:f8:59:07:d1:98: 4a:73:6a:a2:9e:78:30:65:40:c6:ba:62:85:43:b3:b3:d5:ba: 6f:16:a9:7d:a4:79:91:32:b9:68:65:09:d2:ae:cb:dc:e4:35: 7a:1b:ff:d1:6a:97:87:5b:8e:c9:4a:f4:d9:da:2b:41:c8:1c: 91:f2:60:4a:45:bf:0a:3b:30:07:d5:fb:71:ce:f7:ad:d2:5b: d1:cb:76:40:77:c3:9c:73:0d:05:59:97:b4:4d:b4:c4:ad:74: 44:ad:f4:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBywwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTA0MzUxMTAvBgNVBAUTKDQyOTExQjEwOUQ0NkU4ODY2MUZBODU2MTZDODEyODAz QzVBQjNDNjQwHhcNMjUwODEwMjE1MjQ4WhcNMjUwODE3MjE1MjQ4WjAYMRYwFAYD VQQDEw02ODk5MTRiMC1jNjliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt00SsCYGeQx+QgzLCMaSDvzC5OrRoYUagWdeajvvIdQAeT8riHvVxPIVToRu lyqvrGUai/JP4DCrvyOxVDHeel8AAaaKnIBQ88MPTuPXR+IIP0b2oJaVF5hbI1Uq 2u/IQJj3elzHU8nazeQmdcI7oD+Tfdw4QcgI2hs9nJI0fB3OFN63uOW3acpAUPHo dcd29qHYepD4abXJAkHbf8Wa5UR/LP7tHsjUdEXkGBLfyXWmqcj5Ocg4j2cTp5aX T6/HrbCCdHGZxXpdvUBxqzXtNIO8EgrS5ja9kHgpGsSd0rzzx05Dqgu/4bnzWRii 6mSxlmfTz341AdtxHNjbuHYNrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKSDi5Up 7QlC22SAouOZRPPBuLqLMB8GA1UdIwQYMBaAFEKRGxCdRuiGYfqFYWyBKAPFqzxk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDQzNS9EMjg4NUJDNDQ0 NUQxMUVCQTUxNzQ1N0VDNEY5QUUwMi9RcEViRUoxRzZJWmgtb1ZoYklFb0E4V3JQ R1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FwRWJFSjFHNklaaC1vVmhiSUVvQThXclBHUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MDQzNS9EMjg4NUJDNDQ0NUQxMUVCQTUxNzQ1N0VDNEY5QUUwMi9RcEViRUoxRzZJ Wmgtb1ZoYklFb0E4V3JQR1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlMnYZSbHP6XmkmhiXml6c7y/wK0yoS6OorUHmCE3jI1JlanlPLi1y 4vvy8qsfybMjPiLNqZmVaM4340KB8GSBqjR/I8TC5/zbfNO8cUrp5/kFt8vPwsoz PRkoU8BuOn9KPI3rLYAHRoDDVH1YZYM8WSYWFXtwabS7SBlKrPSUcE+NXH2jDWqT 1/RAS6sU1b8w0b50/H0fnAVb5Qny+FkH0ZhKc2qinngwZUDGumKFQ7Oz1bpvFql9 pHmRMrloZQnSrsvc5DV6G//RapeHW47JSvTZ2itByByR8mBKRb8KOzAH1ftxzvet 0lvRy3ZAd8Occw0FWZe0TbTErXRErfR7 -----END CERTIFICATE-----Generated at Mon Aug 11 08:55:22 2025 by rpki-client