$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0435/D2885BC4445D11EBA517457EC4F9AE02/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.mft File: QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.mft (raw, json) Hash identifier: B+J3jWyAfZwaU+k+kaKIdtrwi6Odq2wXspaCk3hkpfw= Subject key identifier: 95:6E:63:55:7F:12:16:46:D3:39:F0:C4:1A:1F:61:42:D9:57:69:08 Authority key identifier: 42:91:1B:10:9D:46:E8:86:61:FA:85:61:6C:81:28:03:C5:AB:3C:64 Certificate issuer: /CN=A91E0435/serialNumber=42911B109D46E88661FA85616C812803C5AB3C64 Certificate serial: 0712 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0435/D2885BC4445D11EBA517457EC4F9AE02/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.mft Manifest number: 070C Signing time: Fri 20 Jun 2025 21:43:50 +0000 Manifest this update: Fri 20 Jun 2025 21:43:49 +0000 Manifest next update: Fri 27 Jun 2025 21:43:49 +0000 Files and hashes: 1: QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.crl (hash: lhBjun0HLFx0PjW3Y97zmjyaLZTwdkF01Y/atODQhjo=) 2: FCC3542E445E11EBB692887EC4F9AE02.roa (hash: mIOY2vhOsc+nNqge7lnkHLB5M4DsgX2WsmX/mvk1lyU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0435/D2885BC4445D11EBA517457EC4F9AE02/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.crl rsync://rpki.apnic.net/member_repository/A91E0435/D2885BC4445D11EBA517457EC4F9AE02/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Jun 2025 21:26:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1810 (0x712) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0435, serialNumber=42911B109D46E88661FA85616C812803C5AB3C64 Validity Not Before: Jun 20 21:43:49 2025 GMT Not After : Jun 27 21:43:49 2025 GMT Subject: CN=6855d616-65ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:04:d0:25:62:3f:8f:16:0b:a3:ce:79:3a:ed: be:2c:41:9d:aa:5f:bb:29:a4:15:11:68:4e:24:45: 70:e2:6d:73:a7:d8:01:e4:48:e0:f6:47:d4:9a:4e: 05:15:be:57:d4:b5:e9:e2:ff:0d:90:6c:a1:d9:b3: 76:c8:0e:01:1c:05:bd:02:d6:bf:af:3c:b2:b8:13: 82:58:19:d4:c9:16:dc:33:62:28:dc:f8:1e:09:6d: 4a:40:6c:c1:0f:8b:f6:83:ec:9b:c1:1d:4c:32:e5: d9:ed:06:96:65:9c:98:30:03:1d:c4:2d:5d:12:89: d0:03:85:ef:16:65:71:58:66:02:c2:e6:7e:7e:8c: e8:b1:05:64:65:3e:9f:cd:2d:87:e1:61:75:ed:f3: 73:a4:8e:80:f9:8b:72:2d:3f:41:da:0e:6d:29:38: da:6f:5a:2b:76:fa:89:15:1f:3f:1b:07:3d:b7:6c: b4:29:b9:54:46:07:a1:9c:ad:87:16:99:cc:6d:2e: 6b:6f:bc:ef:d5:20:11:71:5a:81:9f:2f:2d:12:36: 9f:42:30:07:5a:ba:49:cb:19:b2:cf:62:52:24:53: 68:7f:d3:d1:27:e3:94:b2:6e:b1:38:2d:b3:4c:eb: f3:2f:c0:87:0a:d5:0f:4a:9d:5c:16:9c:b6:74:da: 7a:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:6E:63:55:7F:12:16:46:D3:39:F0:C4:1A:1F:61:42:D9:57:69:08 X509v3 Authority Key Identifier: keyid:42:91:1B:10:9D:46:E8:86:61:FA:85:61:6C:81:28:03:C5:AB:3C:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0435/D2885BC4445D11EBA517457EC4F9AE02/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0435/D2885BC4445D11EBA517457EC4F9AE02/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:83:4e:d4:92:d9:99:35:11:1a:17:26:41:f1:88:62:b8:4e: bd:32:df:ab:c5:6d:77:39:ee:ff:e7:3a:71:f6:0c:08:26:a9: a0:37:94:39:fb:b9:7a:36:fa:f2:65:af:51:a4:00:fe:d0:47: 8a:47:a7:56:c7:84:e0:3e:99:e1:74:6f:74:3f:dc:c6:ce:af: f4:00:2d:e5:1f:4c:42:2d:d6:bd:11:5b:a3:e9:9a:4a:a1:fc: f7:ab:22:4f:73:e8:8a:40:12:fa:be:87:2b:9f:63:6b:97:c6: 27:3f:b9:6e:c4:42:b8:d5:a8:75:62:4c:fd:76:b1:82:47:1f: f0:4e:42:3a:42:e1:f9:1b:4e:31:4e:94:29:8a:3d:e3:25:ee: ae:f0:77:8b:9c:89:9b:3b:8a:b8:15:0a:1e:c8:d9:32:db:2e: a6:b8:11:06:a6:07:91:0c:e5:4d:a2:b0:67:69:bb:94:da:c9: 15:e0:64:09:d8:4b:91:8d:df:52:d5:da:f1:be:27:d6:e9:71: 50:61:d1:82:d9:20:b2:f5:62:3e:b0:dc:7e:9d:ea:3e:9a:75: e2:7a:35:62:2b:b1:3e:44:b9:fd:20:d8:bc:15:78:a6:63:6f: 58:02:81:e8:99:28:c8:9a:8c:04:c1:5d:85:06:81:da:f5:e0: 55:d3:24:af -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBxIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTA0MzUxMTAvBgNVBAUTKDQyOTExQjEwOUQ0NkU4ODY2MUZBODU2MTZDODEyODAz QzVBQjNDNjQwHhcNMjUwNjIwMjE0MzQ5WhcNMjUwNjI3MjE0MzQ5WjAYMRYwFAYD VQQDEw02ODU1ZDYxNi02NWFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3QTQJWI/jxYLo855Ou2+LEGdql+7KaQVEWhOJEVw4m1zp9gB5Ejg9kfUmk4F Fb5X1LXp4v8NkGyh2bN2yA4BHAW9Ata/rzyyuBOCWBnUyRbcM2Io3PgeCW1KQGzB D4v2g+ybwR1MMuXZ7QaWZZyYMAMdxC1dEonQA4XvFmVxWGYCwuZ+fozosQVkZT6f zS2H4WF17fNzpI6A+YtyLT9B2g5tKTjab1ordvqJFR8/Gwc9t2y0KblURgehnK2H FpnMbS5rb7zv1SARcVqBny8tEjafQjAHWrpJyxmyz2JSJFNof9PRJ+OUsm6xOC2z TOvzL8CHCtUPSp1cFpy2dNp6UwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJVuY1V/ EhZG0znwxBofYULZV2kIMB8GA1UdIwQYMBaAFEKRGxCdRuiGYfqFYWyBKAPFqzxk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDQzNS9EMjg4NUJDNDQ0 NUQxMUVCQTUxNzQ1N0VDNEY5QUUwMi9RcEViRUoxRzZJWmgtb1ZoYklFb0E4V3JQ R1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FwRWJFSjFHNklaaC1vVmhiSUVvQThXclBHUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MDQzNS9EMjg4NUJDNDQ0NUQxMUVCQTUxNzQ1N0VDNEY5QUUwMi9RcEViRUoxRzZJ Wmgtb1ZoYklFb0E4V3JQR1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAyg07UktmZNREaFyZB8YhiuE69Mt+rxW13Oe7/5zpx9gwIJqmgN5Q5 +7l6NvryZa9RpAD+0EeKR6dWx4TgPpnhdG90P9zGzq/0AC3lH0xCLda9EVuj6ZpK ofz3qyJPc+iKQBL6vocrn2Nrl8YnP7luxEK41ah1Ykz9drGCRx/wTkI6QuH5G04x TpQpij3jJe6u8HeLnImbO4q4FQoeyNky2y6muBEGpgeRDOVNorBnabuU2skV4GQJ 2EuRjd9S1drxvifW6XFQYdGC2SCy9WI+sNx+neo+mnXiejViK7E+RLn9INi8FXim Y29YAoHomSjImowEwV2FBoHa9eBV0ySv -----END CERTIFICATE-----Generated at Fri Jun 20 23:43:36 2025 by rpki-client