$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4EF7/C46FD7741B8F11E7AC4C7229C4F9AE02/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.mft File: qrUk5ZWlMOEsE6ohHC7ya2ndnJs.mft (raw, json) Hash identifier: tpix1SrXGrq+GaWqPd4H3FVU9qqIE5BDOROQhJ1IztQ= Subject key identifier: 1C:40:5F:59:23:A2:67:81:0B:DD:42:90:67:62:09:2F:68:D1:4E:B7 Authority key identifier: AA:B5:24:E5:95:A5:30:E1:2C:13:AA:21:1C:2E:F2:6B:69:DD:9C:9B Certificate issuer: /CN=A91E4EF7/serialNumber=AAB524E595A530E12C13AA211C2EF26B69DD9C9B Certificate serial: 1B46 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4EF7/C46FD7741B8F11E7AC4C7229C4F9AE02/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.mft Manifest number: 1B3B Signing time: Wed 06 Aug 2025 16:22:22 +0000 Manifest this update: Wed 06 Aug 2025 16:22:21 +0000 Manifest next update: Wed 13 Aug 2025 16:22:21 +0000 Files and hashes: 1: qrUk5ZWlMOEsE6ohHC7ya2ndnJs.crl (hash: N/2sYY3Q0IQd7rYe0yKxqh4FdPDpiIYAZ9+Fh8D+z/c=) 2: E24736EC9D9011EC89314083C4F9AE02.roa (hash: MQLW+ckG9k/91Edmhff4+dci4t4G4rJfBHrG+oHBPHU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4EF7/C46FD7741B8F11E7AC4C7229C4F9AE02/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.crl rsync://rpki.apnic.net/member_repository/A91E4EF7/C46FD7741B8F11E7AC4C7229C4F9AE02/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 16:22:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6982 (0x1b46) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4EF7, serialNumber=AAB524E595A530E12C13AA211C2EF26B69DD9C9B Validity Not Before: Aug 6 16:22:21 2025 GMT Not After : Aug 13 16:22:21 2025 GMT Subject: CN=6893813e-9cac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:1c:7f:e3:77:db:6f:e4:c2:42:30:3f:ac:03: f4:9f:bd:42:39:6b:ba:c8:87:2a:72:7c:99:3c:3d: 45:8e:70:84:d6:e5:da:9d:f6:40:16:72:af:04:0c: c7:92:45:e4:a3:db:ea:09:e8:33:fc:2d:22:b5:3f: c6:09:4c:61:c1:bb:e7:d7:5c:82:75:30:c2:c5:29: 42:0e:f5:d3:bc:28:87:2d:55:13:98:f1:c6:69:96: b3:1a:ae:bf:05:52:41:55:fb:4e:bf:41:a8:8c:17: 67:20:60:68:78:3a:37:9b:77:10:54:98:59:14:68: 8a:18:97:7d:49:ce:97:8d:cd:4f:6f:56:f5:e8:f5: ec:26:46:aa:1e:fa:0c:12:f1:53:19:de:cc:27:b6: 9b:1d:ec:b1:bb:d6:57:9f:5f:fe:33:39:b5:2d:92: f9:89:6d:1d:7e:62:e3:8c:c8:54:60:c0:1a:fc:bd: ef:dc:84:a9:fe:32:42:21:59:dc:f1:61:f6:82:03: f8:60:15:da:aa:fc:13:47:c0:55:ef:62:af:bd:fe: ea:78:81:69:d9:6d:4b:92:d1:9b:66:97:ce:bd:a4: 5e:c8:f0:41:10:96:c7:1f:e9:8a:af:4e:e4:d5:50: b5:4f:4e:0f:c3:bb:e9:84:f9:5c:33:db:9c:0f:82: e9:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:40:5F:59:23:A2:67:81:0B:DD:42:90:67:62:09:2F:68:D1:4E:B7 X509v3 Authority Key Identifier: keyid:AA:B5:24:E5:95:A5:30:E1:2C:13:AA:21:1C:2E:F2:6B:69:DD:9C:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4EF7/C46FD7741B8F11E7AC4C7229C4F9AE02/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4EF7/C46FD7741B8F11E7AC4C7229C4F9AE02/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:18:23:dd:dd:22:3f:16:6e:82:e7:54:a5:d4:d2:39:57:02: 76:6d:c9:a8:0a:8b:15:da:0b:73:28:46:6f:35:ff:a6:1c:d6: d7:0f:f1:38:c7:fe:e9:25:10:2e:fd:57:18:30:db:68:35:ee: 9d:16:66:59:a2:85:df:c7:f3:2b:d4:70:b4:3b:5c:fa:33:7b: 25:11:fc:22:c1:c1:22:0f:c3:b9:cd:02:28:e5:ab:35:e1:b4: 8f:bc:96:30:d5:7e:0b:3b:3a:4c:58:02:95:bb:45:e6:3f:ee: 9e:48:b9:35:3e:27:bf:ed:05:24:14:00:c3:a2:b9:18:8c:11: 66:f3:b8:ec:f8:ae:53:b4:66:f8:5d:99:14:60:8a:5b:a1:20: 42:ae:e2:b7:4b:26:9d:ef:89:5d:85:45:2a:aa:18:42:44:a5: cc:0e:fe:d1:61:a9:7a:90:c0:f5:6c:d6:61:e2:f9:df:79:2c: 23:00:c8:01:46:f9:98:c9:23:f6:9a:bc:30:2b:14:22:10:3a: 52:d9:94:6f:88:28:e1:f5:70:cc:b7:aa:64:2a:2c:e7:2f:41: 3e:84:df:eb:d1:53:d7:5e:e5:a7:73:23:6a:0e:b6:8a:e6:76: 8e:5f:0b:12:b4:41:f5:6a:3b:eb:8a:4b:67:2b:21:2f:04:9f: 54:39:fd:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICG0YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTRFRjcxMTAvBgNVBAUTKEFBQjUyNEU1OTVBNTMwRTEyQzEzQUEyMTFDMkVGMjZC NjlERDlDOUIwHhcNMjUwODA2MTYyMjIxWhcNMjUwODEzMTYyMjIxWjAYMRYwFAYD VQQDEw02ODkzODEzZS05Y2FjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoxx/43fbb+TCQjA/rAP0n71COWu6yIcqcnyZPD1FjnCE1uXanfZAFnKvBAzH kkXko9vqCegz/C0itT/GCUxhwbvn11yCdTDCxSlCDvXTvCiHLVUTmPHGaZazGq6/ BVJBVftOv0GojBdnIGBoeDo3m3cQVJhZFGiKGJd9Sc6Xjc1Pb1b16PXsJkaqHvoM EvFTGd7MJ7abHeyxu9ZXn1/+Mzm1LZL5iW0dfmLjjMhUYMAa/L3v3ISp/jJCIVnc 8WH2ggP4YBXaqvwTR8BV72Kvvf7qeIFp2W1LktGbZpfOvaReyPBBEJbHH+mKr07k 1VC1T04Pw7vphPlcM9ucD4LpGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBxAX1kj omeBC91CkGdiCS9o0U63MB8GA1UdIwQYMBaAFKq1JOWVpTDhLBOqIRwu8mtp3Zyb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNEVGNy9DNDZGRDc3NDFC OEYxMUU3QUM0QzcyMjlDNEY5QUUwMi9xclVrNVpXbE1PRXNFNm9oSEM3eWEybmRu SnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FyVWs1WldsTU9Fc0U2b2hIQzd5YTJuZG5Kcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NEVGNy9DNDZGRDc3NDFCOEYxMUU3QUM0QzcyMjlDNEY5QUUwMi9xclVrNVpXbE1P RXNFNm9oSEM3eWEybmRuSnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBeGCPd3SI/Fm6C51Sl1NI5VwJ2bcmoCosV2gtzKEZvNf+mHNbXD/E4 x/7pJRAu/VcYMNtoNe6dFmZZooXfx/Mr1HC0O1z6M3slEfwiwcEiD8O5zQIo5as1 4bSPvJYw1X4LOzpMWAKVu0XmP+6eSLk1Pie/7QUkFADDorkYjBFm87js+K5TtGb4 XZkUYIpboSBCruK3Syad74ldhUUqqhhCRKXMDv7RYal6kMD1bNZh4vnfeSwjAMgB RvmYySP2mrwwKxQiEDpS2ZRviCjh9XDMt6pkKiznL0E+hN/r0VPXXuWncyNqDraK 5naOXwsStEH1ajvriktnKyEvBJ9UOf19 -----END CERTIFICATE-----Generated at Fri Aug 8 10:10:04 2025 by rpki-client