$ rpki-client -vvf rpki.apnic.net/member_repository/A91E91BC/A4E673CADBE911EC95110515C4F9AE02/QU-2F4hpEw-Cbp4wwLeUCE2XYN0.mft File: QU-2F4hpEw-Cbp4wwLeUCE2XYN0.mft (raw, json) Hash identifier: sfKZom9a7acVtfL85ZEIlZHUiFA+cmaZu147sL9AGjI= Subject key identifier: 85:8D:71:1E:8B:88:9F:78:83:E5:77:1A:58:F2:29:AA:13:50:B5:8F Authority key identifier: 41:4F:B6:17:88:69:13:0F:82:6E:9E:30:C0:B7:94:08:4D:97:60:DD Certificate issuer: /CN=A91E91BC/serialNumber=414FB6178869130F826E9E30C0B794084D9760DD Certificate serial: 030B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QU-2F4hpEw-Cbp4wwLeUCE2XYN0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E91BC/A4E673CADBE911EC95110515C4F9AE02/QU-2F4hpEw-Cbp4wwLeUCE2XYN0.mft Manifest number: 0305 Signing time: Thu 19 Jun 2025 01:05:47 +0000 Manifest this update: Thu 19 Jun 2025 01:05:46 +0000 Manifest next update: Thu 26 Jun 2025 01:05:46 +0000 Files and hashes: 1: QU-2F4hpEw-Cbp4wwLeUCE2XYN0.crl (hash: V5ttiH9T6nDbY1814z5x+bCXR51xqF15QXkmu69yRVs=) 2: 7BCC4B32E85C11EE9593933FC4F9AE02.roa (hash: C9cBIgp62dlijuyH/TsefWQ1spYTduwHvoUlA7V/520=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E91BC/A4E673CADBE911EC95110515C4F9AE02/QU-2F4hpEw-Cbp4wwLeUCE2XYN0.crl rsync://rpki.apnic.net/member_repository/A91E91BC/A4E673CADBE911EC95110515C4F9AE02/QU-2F4hpEw-Cbp4wwLeUCE2XYN0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QU-2F4hpEw-Cbp4wwLeUCE2XYN0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 01:05:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 779 (0x30b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E91BC, serialNumber=414FB6178869130F826E9E30C0B794084D9760DD Validity Not Before: Jun 19 01:05:46 2025 GMT Not After : Jun 26 01:05:46 2025 GMT Subject: CN=6853626a-0f65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:7b:fa:a7:a8:a8:38:3f:6a:8f:8e:c4:38:69: 33:2e:c1:08:3a:5a:81:f1:94:99:19:a5:e6:12:fd: 51:a1:2b:ce:77:5f:93:82:10:46:f3:9b:29:45:2e: c8:fd:51:85:89:58:a9:26:5c:08:e5:45:27:c1:be: c8:f9:29:57:20:80:d3:88:b0:a2:3d:a0:a2:8b:04: 72:10:5a:ef:d1:e6:c2:ca:d3:d0:84:3b:d8:92:ad: f9:29:eb:57:7f:12:71:4d:6d:61:46:68:80:25:e9: f4:14:03:cd:59:c7:41:2f:9b:3f:83:50:b3:8a:d7: c6:ac:c2:7e:c0:54:b5:77:9b:1f:96:21:61:0a:2d: 3b:30:dd:91:1e:bb:ea:b1:0c:48:14:70:d9:02:4f: 7e:7e:05:88:1b:3f:d2:63:92:3e:77:68:19:d8:87: 44:49:07:1e:0f:1c:7f:3d:fb:06:b6:5b:15:d0:df: b4:3d:6a:1a:30:3a:02:72:67:5a:42:81:ff:5a:52: 45:af:55:ec:3f:b7:d1:3d:14:d3:f5:f5:ea:da:50: 11:74:d2:57:5d:73:c5:95:dc:15:56:91:23:b1:d7: 07:12:90:43:43:61:e5:89:7c:40:3e:1d:fa:e1:8f: 65:3f:9f:e9:e0:14:99:8e:b3:4c:44:6d:40:27:21: 21:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:8D:71:1E:8B:88:9F:78:83:E5:77:1A:58:F2:29:AA:13:50:B5:8F X509v3 Authority Key Identifier: keyid:41:4F:B6:17:88:69:13:0F:82:6E:9E:30:C0:B7:94:08:4D:97:60:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E91BC/A4E673CADBE911EC95110515C4F9AE02/QU-2F4hpEw-Cbp4wwLeUCE2XYN0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QU-2F4hpEw-Cbp4wwLeUCE2XYN0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E91BC/A4E673CADBE911EC95110515C4F9AE02/QU-2F4hpEw-Cbp4wwLeUCE2XYN0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:cd:6b:29:f2:01:9b:e8:d9:2e:ea:05:f0:1a:6e:6a:3b:6c: 65:70:ec:19:ba:48:83:db:00:d3:79:27:95:02:6a:a1:08:98: 42:93:6b:ae:82:94:21:71:83:c3:52:1b:aa:53:e8:d1:e0:5b: 6c:cf:4b:4e:54:ab:ab:47:84:1c:7d:6a:f0:73:eb:fb:4d:2c: 02:d9:17:a9:9d:0b:74:08:a8:26:05:e4:25:6f:f1:b5:e9:a9: 27:00:f2:ce:59:19:ba:93:f2:57:4e:64:1e:05:30:01:d9:d3: 78:ae:ad:e2:48:b5:ac:44:1e:20:e6:99:35:e1:2d:18:ba:ea: 4d:69:6a:ef:15:65:42:ef:49:c4:0c:f9:75:7b:1b:f4:a0:9d: bf:c0:f8:3f:79:38:38:f7:2c:87:26:5b:37:9c:d5:1f:39:bd: 18:09:0a:3b:1c:9f:4a:e7:6d:80:ed:e6:0b:2a:1c:75:bf:50: bb:c7:75:f0:a7:f1:d9:8e:79:60:79:23:91:93:a1:54:0d:24: a0:18:33:1e:7a:b8:b0:dd:ac:49:66:b7:4f:67:b4:1a:09:d9: 24:60:5d:9b:10:cc:3b:dd:85:e1:ae:a7:92:1a:6f:66:48:57: d0:ba:39:59:28:85:b8:13:8b:37:4c:dd:cc:36:bc:c6:b4:a5: ae:89:ac:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAwswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTkxQkMxMTAvBgNVBAUTKDQxNEZCNjE3ODg2OTEzMEY4MjZFOUUzMEMwQjc5NDA4 NEQ5NzYwREQwHhcNMjUwNjE5MDEwNTQ2WhcNMjUwNjI2MDEwNTQ2WjAYMRYwFAYD VQQDEw02ODUzNjI2YS0wZjY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvXv6p6ioOD9qj47EOGkzLsEIOlqB8ZSZGaXmEv1RoSvOd1+TghBG85spRS7I /VGFiVipJlwI5UUnwb7I+SlXIIDTiLCiPaCiiwRyEFrv0ebCytPQhDvYkq35KetX fxJxTW1hRmiAJen0FAPNWcdBL5s/g1CzitfGrMJ+wFS1d5sfliFhCi07MN2RHrvq sQxIFHDZAk9+fgWIGz/SY5I+d2gZ2IdESQceDxx/PfsGtlsV0N+0PWoaMDoCcmda QoH/WlJFr1XsP7fRPRTT9fXq2lARdNJXXXPFldwVVpEjsdcHEpBDQ2HliXxAPh36 4Y9lP5/p4BSZjrNMRG1AJyEhSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIWNcR6L iJ94g+V3GljyKaoTULWPMB8GA1UdIwQYMBaAFEFPtheIaRMPgm6eMMC3lAhNl2Dd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTFCQy9BNEU2NzNDQURC RTkxMUVDOTUxMTA1MTVDNEY5QUUwMi9RVS0yRjRocEV3LUNicDR3d0xlVUNFMlhZ TjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1FVLTJGNGhwRXctQ2JwNHd3TGVVQ0UyWFlOMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTFCQy9BNEU2NzNDQURCRTkxMUVDOTUxMTA1MTVDNEY5QUUwMi9RVS0yRjRocEV3 LUNicDR3d0xlVUNFMlhZTjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC5zWsp8gGb6Nku6gXwGm5qO2xlcOwZukiD2wDTeSeVAmqhCJhCk2uu gpQhcYPDUhuqU+jR4Ftsz0tOVKurR4QcfWrwc+v7TSwC2RepnQt0CKgmBeQlb/G1 6aknAPLOWRm6k/JXTmQeBTAB2dN4rq3iSLWsRB4g5pk14S0YuupNaWrvFWVC70nE DPl1exv0oJ2/wPg/eTg49yyHJls3nNUfOb0YCQo7HJ9K522A7eYLKhx1v1C7x3Xw p/HZjnlgeSORk6FUDSSgGDMeeriw3axJZrdPZ7QaCdkkYF2bEMw73YXhrqeSGm9m SFfQujlZKIW4E4s3TN3MNrzGtKWuiayU -----END CERTIFICATE-----Generated at Fri Jun 20 14:22:48 2025 by rpki-client