$ rpki-client -vvf rpki.apnic.net/member_repository/A9110477/4D27D1CCE9E911EFB502A55FC4F9AE02/qSMK6ZCgNnrlmg8hv-7-zZXXSoE.mft File: qSMK6ZCgNnrlmg8hv-7-zZXXSoE.mft (raw, json) Hash identifier: ujg0AFdituK2esIq+2lHIiuSguYjXNjk68gP4RE0jCU= Subject key identifier: 91:6B:03:9D:BC:9E:6F:3B:B2:13:68:68:75:41:EF:57:1B:24:55:0F Authority key identifier: A9:23:0A:E9:90:A0:36:7A:E5:9A:0F:21:BF:EE:FE:CD:95:D7:4A:81 Certificate issuer: /CN=A9110477/serialNumber=A9230AE990A0367AE59A0F21BFEEFECD95D74A81 Certificate serial: 45 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qSMK6ZCgNnrlmg8hv-7-zZXXSoE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110477/4D27D1CCE9E911EFB502A55FC4F9AE02/qSMK6ZCgNnrlmg8hv-7-zZXXSoE.mft Manifest number: 42 Signing time: Tue 17 Jun 2025 06:20:27 +0000 Manifest this update: Tue 17 Jun 2025 06:20:27 +0000 Manifest next update: Tue 24 Jun 2025 06:20:27 +0000 Files and hashes: 1: qSMK6ZCgNnrlmg8hv-7-zZXXSoE.crl (hash: lj6fi9/pMnBBJTmST5JHtxpJExvPppnCHZLHfHwY75w=) 2: B1C9E322E9EE11EF9D68D841C4F9AE02.roa (hash: ALIstNSOUyPJoG6tUF7wdbXN7LDhADIjhA1ktsIa/iA=) 3: 7F053D7E0A9611F0AA1BF786C4F9AE02.roa (hash: o0d52lCnr33Uh8iwtFl+nwRiBmZy5UFNqyfIv33Dtv4=) 4: 723F9406E9EC11EF9AC2151CC4F9AE02.roa (hash: IU1Sto6R/eoM72dkcviucBTl2Wo6d0jfNJDSJ53kN6A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110477/4D27D1CCE9E911EFB502A55FC4F9AE02/qSMK6ZCgNnrlmg8hv-7-zZXXSoE.crl rsync://rpki.apnic.net/member_repository/A9110477/4D27D1CCE9E911EFB502A55FC4F9AE02/qSMK6ZCgNnrlmg8hv-7-zZXXSoE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qSMK6ZCgNnrlmg8hv-7-zZXXSoE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 06:20:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69 (0x45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110477, serialNumber=A9230AE990A0367AE59A0F21BFEEFECD95D74A81 Validity Not Before: Jun 17 06:20:27 2025 GMT Not After : Jun 24 06:20:27 2025 GMT Subject: CN=6851092b-2ffd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:c5:c3:ac:3d:69:98:a9:39:21:13:bd:ca:48: 57:67:38:30:a4:b7:ab:d1:ec:1f:25:eb:9e:cf:93: 42:dc:98:8d:1b:a0:9d:cd:8a:ce:d8:93:bc:ca:b5: 38:d7:83:85:89:b7:34:65:32:b5:4f:e8:b1:04:77: 23:41:6c:74:f1:89:cd:12:c5:f7:ea:3c:f9:32:5a: e5:45:ff:1b:10:ab:2d:4f:2e:ca:0d:2e:eb:b2:71: 9f:ba:25:49:df:ed:b6:ab:b9:a1:3f:50:56:09:74: 34:b6:c7:b9:36:87:51:46:61:58:55:65:6a:bf:6b: d1:2a:43:01:c5:3f:80:36:b1:89:d9:7e:64:d0:73: ac:69:51:97:7d:6d:8b:1d:db:0e:ba:53:40:f2:89: a2:a3:6e:fb:d3:d0:cb:c3:ba:94:53:a7:8a:6d:49: eb:1b:25:69:3e:b9:83:13:8a:3c:c7:07:6f:1c:4e: 27:65:b5:fa:71:61:3a:e0:4c:c4:fb:91:87:48:96: 24:cf:81:b4:92:ea:15:32:bb:c5:d5:41:8f:af:65: 65:73:31:ec:bf:1a:86:1e:4a:23:d1:bc:f7:a1:7d: 95:94:5f:13:7c:28:75:6d:32:5d:08:90:dd:4b:ac: f3:bd:fa:c3:28:12:a4:87:5a:80:8a:bb:a2:bd:3e: 04:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:6B:03:9D:BC:9E:6F:3B:B2:13:68:68:75:41:EF:57:1B:24:55:0F X509v3 Authority Key Identifier: keyid:A9:23:0A:E9:90:A0:36:7A:E5:9A:0F:21:BF:EE:FE:CD:95:D7:4A:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110477/4D27D1CCE9E911EFB502A55FC4F9AE02/qSMK6ZCgNnrlmg8hv-7-zZXXSoE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qSMK6ZCgNnrlmg8hv-7-zZXXSoE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110477/4D27D1CCE9E911EFB502A55FC4F9AE02/qSMK6ZCgNnrlmg8hv-7-zZXXSoE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:2d:c4:97:f0:01:26:14:bc:6b:9c:49:9c:73:2d:fd:15:9c: 61:eb:1a:1c:cb:c3:a6:72:f2:9f:2b:81:0e:0a:91:a3:d3:d6: 02:07:23:93:c4:e5:bc:38:a3:1b:53:8e:36:3a:fb:eb:f3:61: 06:02:a4:e6:5a:9e:b5:41:be:d4:51:28:d3:75:0d:81:eb:a2: ad:02:45:b8:f8:52:d2:2e:68:f6:ca:b1:b5:82:0c:43:72:48: 5b:45:0b:70:08:e7:1d:ad:43:75:49:f9:54:a7:68:d5:09:4a: 29:3b:fe:2e:e4:7f:7c:b4:49:12:7f:a4:16:c6:60:43:ee:0d: c5:9b:92:e1:4c:db:65:b4:58:c6:37:7f:a7:58:70:f2:c8:fc: d7:5d:46:d7:b8:8d:fe:2c:7a:d5:a9:cf:d3:80:1a:e2:a1:ec: 57:59:ea:fd:85:da:b6:65:fd:4f:a0:d5:9c:dc:c2:8e:65:14: ba:ed:08:2d:34:63:82:43:7e:d7:4d:5d:7e:2e:19:a4:b1:cd: c6:b1:1a:c7:c1:20:09:5c:ac:dc:6e:fe:58:04:65:87:62:4e: 5d:cf:f4:47:44:4f:35:c8:1e:12:29:c5:3d:4c:8c:de:55:11: 30:86:a6:54:fd:bd:1e:83:b6:a3:28:a6:6f:33:14:97:7d:4b: ab:fe:5e:e6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx MDQ3NzExMC8GA1UEBRMoQTkyMzBBRTk5MEEwMzY3QUU1OUEwRjIxQkZFRUZFQ0Q5 NUQ3NEE4MTAeFw0yNTA2MTcwNjIwMjdaFw0yNTA2MjQwNjIwMjdaMBgxFjAUBgNV BAMTDTY4NTEwOTJiLTJmZmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDhxcOsPWmYqTkhE73KSFdnODCkt6vR7B8l657Pk0LcmI0boJ3Nis7Yk7zKtTjX g4WJtzRlMrVP6LEEdyNBbHTxic0SxffqPPkyWuVF/xsQqy1PLsoNLuuycZ+6JUnf 7baruaE/UFYJdDS2x7k2h1FGYVhVZWq/a9EqQwHFP4A2sYnZfmTQc6xpUZd9bYsd 2w66U0DyiaKjbvvT0MvDupRTp4ptSesbJWk+uYMTijzHB28cTidltfpxYTrgTMT7 kYdIliTPgbSS6hUyu8XVQY+vZWVzMey/GoYeSiPRvPehfZWUXxN8KHVtMl0IkN1L rPO9+sMoEqSHWoCKu6K9PgQTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUkWsDnbye bzuyE2hodUHvVxskVQ8wHwYDVR0jBBgwFoAUqSMK6ZCgNnrlmg8hv+7+zZXXSoEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEwNDc3LzREMjdEMUNDRTlF OTExRUZCNTAyQTU1RkM0RjlBRTAyL3FTTUs2WkNnTm5ybG1nOGh2LTctelpYWFNv RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvcVNNSzZaQ2dObnJsbWc4aHYtNy16WlhYU29FLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEw NDc3LzREMjdEMUNDRTlFOTExRUZCNTAyQTU1RkM0RjlBRTAyL3FTTUs2WkNnTm5y bG1nOGh2LTctelpYWFNvRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACctxJfwASYUvGucSZxzLf0VnGHrGhzLw6Zy8p8rgQ4KkaPT1gIHI5PE 5bw4oxtTjjY6++vzYQYCpOZanrVBvtRRKNN1DYHroq0CRbj4UtIuaPbKsbWCDENy SFtFC3AI5x2tQ3VJ+VSnaNUJSik7/i7kf3y0SRJ/pBbGYEPuDcWbkuFM22W0WMY3 f6dYcPLI/NddRte4jf4setWpz9OAGuKh7FdZ6v2F2rZl/U+g1Zzcwo5lFLrtCC00 Y4JDftdNXX4uGaSxzcaxGsfBIAlcrNxu/lgEZYdiTl3P9EdETzXIHhIpxT1MjN5V ETCGplT9vR6DtqMopm8zFJd9S6v+XuY= -----END CERTIFICATE-----Generated at Wed Jun 18 20:29:59 2025 by rpki-client