$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4F4C/940765FCF97611EA9534C043C4F9AE02/QeOAoMn6vMEPjqMpY1Lmp4eNNTs.mft File: QeOAoMn6vMEPjqMpY1Lmp4eNNTs.mft (raw, json) Hash identifier: DoNt0nbV0KO9V0fIsocyljNm8ApzMgbj97hDg7GfrMs= Subject key identifier: 61:53:22:A2:EE:B8:05:30:88:1D:2E:45:99:6B:3A:54:0C:E2:94:48 Authority key identifier: 41:E3:80:A0:C9:FA:BC:C1:0F:8E:A3:29:63:52:E6:A7:87:8D:35:3B Certificate issuer: /CN=A91F4F4C/serialNumber=41E380A0C9FABCC10F8EA3296352E6A7878D353B Certificate serial: 07CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QeOAoMn6vMEPjqMpY1Lmp4eNNTs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4F4C/940765FCF97611EA9534C043C4F9AE02/QeOAoMn6vMEPjqMpY1Lmp4eNNTs.mft Manifest number: 07C8 Signing time: Wed 18 Jun 2025 20:57:52 +0000 Manifest this update: Wed 18 Jun 2025 20:57:51 +0000 Manifest next update: Wed 25 Jun 2025 20:57:51 +0000 Files and hashes: 1: QeOAoMn6vMEPjqMpY1Lmp4eNNTs.crl (hash: gLvALe69cAvHqRPYfrQUg6v6SSrycaWAIHEb8ub6Les=) 2: 770BCA98F97A11EAB938DA5DC4F9AE02.roa (hash: fZBIeDUKsdRpTczFyA/tRXZpgobXbgClU9BqXFuQJMY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4F4C/940765FCF97611EA9534C043C4F9AE02/QeOAoMn6vMEPjqMpY1Lmp4eNNTs.crl rsync://rpki.apnic.net/member_repository/A91F4F4C/940765FCF97611EA9534C043C4F9AE02/QeOAoMn6vMEPjqMpY1Lmp4eNNTs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QeOAoMn6vMEPjqMpY1Lmp4eNNTs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 20:57:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1999 (0x7cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4F4C, serialNumber=41E380A0C9FABCC10F8EA3296352E6A7878D353B Validity Not Before: Jun 18 20:57:51 2025 GMT Not After : Jun 25 20:57:51 2025 GMT Subject: CN=68532850-4061 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:7c:d0:c4:02:19:da:41:a1:8c:2d:67:66:4d: bb:ee:fc:35:3d:d8:53:d8:57:11:a1:3c:3d:3f:e5: ba:fd:b9:1c:fa:df:a7:89:af:b3:8a:af:ba:e5:f5: db:7b:1a:b6:61:57:5b:59:ee:87:6a:39:d4:70:b1: 3b:5f:f0:5c:19:37:dc:59:b0:77:f1:5c:55:99:34: 58:ca:b7:dd:a2:59:48:30:00:89:5e:24:b3:bc:9e: 58:68:65:21:67:7b:b3:1a:64:5d:0e:8a:88:6d:6b: 6d:d1:5e:79:0a:69:9c:9c:06:09:8d:ad:a6:15:34: ff:fa:13:23:84:75:e2:8d:7a:68:a8:08:b1:d1:a8: a9:73:fc:7a:1c:29:aa:ce:60:47:68:c9:d5:62:b2: 75:a2:f7:49:7e:a8:8b:45:df:e1:13:f6:d0:ce:4c: d7:4d:c2:f6:69:b1:48:3d:9f:85:a7:36:52:72:8a: 82:7a:2a:19:d1:6a:52:6f:a4:3d:dc:3a:41:0d:74: 78:b2:58:fd:7a:fd:d7:27:6f:a8:3f:d8:b5:64:e3: b3:49:31:11:61:c2:1b:41:0d:26:55:90:8b:bb:dc: 22:01:e3:7b:1c:43:c7:c7:bc:49:2d:35:5c:0f:5b: 93:ca:49:f6:dc:35:57:63:5f:70:01:aa:29:67:3e: ae:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:53:22:A2:EE:B8:05:30:88:1D:2E:45:99:6B:3A:54:0C:E2:94:48 X509v3 Authority Key Identifier: keyid:41:E3:80:A0:C9:FA:BC:C1:0F:8E:A3:29:63:52:E6:A7:87:8D:35:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4F4C/940765FCF97611EA9534C043C4F9AE02/QeOAoMn6vMEPjqMpY1Lmp4eNNTs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QeOAoMn6vMEPjqMpY1Lmp4eNNTs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4F4C/940765FCF97611EA9534C043C4F9AE02/QeOAoMn6vMEPjqMpY1Lmp4eNNTs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:2b:e9:01:93:a0:5f:c0:d6:60:f2:f2:cd:02:ba:f7:25:88: a5:cf:64:6b:e7:be:d0:a3:12:6a:01:35:0d:b7:53:af:b0:a0: 29:e0:0c:d5:9c:f2:9c:34:44:33:5e:6e:cb:2f:24:38:e4:9d: 4b:fe:b5:4b:85:f4:c8:a7:ab:93:7c:20:2c:db:da:de:34:1c: 1c:ea:ab:4d:26:37:3b:2b:ca:d0:97:21:af:6a:01:bd:45:a0: de:7d:c8:c1:2d:3c:ec:e9:54:66:ae:c2:53:9b:87:29:b9:a9: 97:3e:14:9b:72:1d:87:0b:1b:9d:8e:6f:4b:72:39:e5:93:af: 6d:3a:39:69:13:fb:73:3d:bf:4a:30:ce:6c:cf:c2:47:43:88: 3b:0b:aa:3e:29:c8:21:a3:ed:32:dc:34:f9:3c:77:02:54:ed: a3:67:ac:84:f8:7b:12:bf:28:af:c6:5c:23:2c:80:f3:d7:e3: 2f:c4:b2:9c:a0:2b:ba:ba:19:a5:86:ec:38:90:b3:f0:9b:36: 4b:10:0f:84:b8:5a:33:13:9c:a2:33:86:39:69:df:10:d0:94: 31:66:24:06:10:3f:67:a4:2d:66:a7:93:c0:de:0f:0e:52:7b: 9b:ef:12:13:cf:d7:15:16:f8:45:aa:e9:aa:18:d6:0f:77:2e: 7d:90:53:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB88wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjRGNEMxMTAvBgNVBAUTKDQxRTM4MEEwQzlGQUJDQzEwRjhFQTMyOTYzNTJFNkE3 ODc4RDM1M0IwHhcNMjUwNjE4MjA1NzUxWhcNMjUwNjI1MjA1NzUxWjAYMRYwFAYD VQQDEw02ODUzMjg1MC00MDYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlnzQxAIZ2kGhjC1nZk277vw1PdhT2FcRoTw9P+W6/bkc+t+nia+ziq+65fXb exq2YVdbWe6HajnUcLE7X/BcGTfcWbB38VxVmTRYyrfdollIMACJXiSzvJ5YaGUh Z3uzGmRdDoqIbWtt0V55CmmcnAYJja2mFTT/+hMjhHXijXpoqAix0aipc/x6HCmq zmBHaMnVYrJ1ovdJfqiLRd/hE/bQzkzXTcL2abFIPZ+FpzZScoqCeioZ0WpSb6Q9 3DpBDXR4slj9ev3XJ2+oP9i1ZOOzSTERYcIbQQ0mVZCLu9wiAeN7HEPHx7xJLTVc D1uTykn23DVXY19wAaopZz6uqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGFTIqLu uAUwiB0uRZlrOlQM4pRIMB8GA1UdIwQYMBaAFEHjgKDJ+rzBD46jKWNS5qeHjTU7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNEY0Qy85NDA3NjVGQ0Y5 NzYxMUVBOTUzNEMwNDNDNEY5QUUwMi9RZU9Bb01uNnZNRVBqcU1wWTFMbXA0ZU5O VHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FlT0FvTW42dk1FUGpxTXBZMUxtcDRlTk5Ucy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NEY0Qy85NDA3NjVGQ0Y5NzYxMUVBOTUzNEMwNDNDNEY5QUUwMi9RZU9Bb01uNnZN RVBqcU1wWTFMbXA0ZU5OVHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCtK+kBk6BfwNZg8vLNArr3JYilz2Rr577QoxJqATUNt1OvsKAp4AzV nPKcNEQzXm7LLyQ45J1L/rVLhfTIp6uTfCAs29reNBwc6qtNJjc7K8rQlyGvagG9 RaDefcjBLTzs6VRmrsJTm4cpuamXPhSbch2HCxudjm9Lcjnlk69tOjlpE/tzPb9K MM5sz8JHQ4g7C6o+Kcgho+0y3DT5PHcCVO2jZ6yE+HsSvyivxlwjLIDz1+MvxLKc oCu6uhmlhuw4kLPwmzZLEA+EuFozE5yiM4Y5ad8Q0JQxZiQGED9npC1mp5PA3g8O Unub7xITz9cVFvhFqumqGNYPdy59kFP1 -----END CERTIFICATE-----Generated at Fri Jun 20 17:44:32 2025 by rpki-client