$ rpki-client -vvf rpki.apnic.net/member_repository/A91127A2/D1CD5458B1CE11EB8FF1C067C4F9AE02/qSHPiNjIngus1O4YU4wzsnipWSw.mft File: qSHPiNjIngus1O4YU4wzsnipWSw.mft (raw, json) Hash identifier: M4HcPzxcfe7zUnxxrjaO0VlkEUN/6fv+7Fu6iMc513A= Subject key identifier: E1:B6:34:C7:68:30:EB:B2:A5:6B:C5:D7:64:8E:BD:B7:6D:C5:30:36 Authority key identifier: A9:21:CF:88:D8:C8:9E:0B:AC:D4:EE:18:53:8C:33:B2:78:A9:59:2C Certificate issuer: /CN=A91127A2/serialNumber=A921CF88D8C89E0BACD4EE18538C33B278A9592C Certificate serial: 05F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSHPiNjIngus1O4YU4wzsnipWSw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91127A2/D1CD5458B1CE11EB8FF1C067C4F9AE02/qSHPiNjIngus1O4YU4wzsnipWSw.mft Manifest number: 05F0 Signing time: Thu 12 Jun 2025 22:32:55 +0000 Manifest this update: Thu 12 Jun 2025 22:32:55 +0000 Manifest next update: Thu 19 Jun 2025 22:32:55 +0000 Files and hashes: 1: qSHPiNjIngus1O4YU4wzsnipWSw.crl (hash: Bb3UgZq0pyfk4UrCw7WukE31bKpn/5wvq2JCHrZHJVc=) 2: 07332486B1D111EBA956F96AC4F9AE02.roa (hash: QK+G6fNVeQvRNDArbOTnNoOHNeXa2RP5xEy26aJHwS0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91127A2/D1CD5458B1CE11EB8FF1C067C4F9AE02/qSHPiNjIngus1O4YU4wzsnipWSw.crl rsync://rpki.apnic.net/member_repository/A91127A2/D1CD5458B1CE11EB8FF1C067C4F9AE02/qSHPiNjIngus1O4YU4wzsnipWSw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSHPiNjIngus1O4YU4wzsnipWSw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 22:32:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1525 (0x5f5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91127A2, serialNumber=A921CF88D8C89E0BACD4EE18538C33B278A9592C Validity Not Before: Jun 12 22:32:55 2025 GMT Not After : Jun 19 22:32:55 2025 GMT Subject: CN=684b5597-84ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:33:52:80:27:3e:88:a9:3e:8d:c1:f0:bd:09: 49:90:a4:13:de:3e:b0:0d:fb:38:a6:0f:5f:81:cc: 41:2b:17:b7:f2:9f:64:2a:e7:d1:ee:10:a9:77:c2: 50:8f:09:68:75:1a:aa:bc:81:83:2c:15:c8:9b:64: 18:0c:cb:b1:5f:f4:8d:9c:ab:2a:fc:ab:81:66:96: 01:01:82:a5:75:76:87:ec:06:98:a1:e0:ee:7c:14: b2:ce:c4:d1:51:d3:93:d3:f9:f1:ba:30:6c:4b:6c: 74:26:5b:3a:ab:03:27:fd:95:8d:55:9b:85:91:2b: 78:6a:60:6d:95:0f:8d:e0:88:e9:d8:ed:bb:7b:78: 93:76:34:c7:6c:3e:47:2c:8e:5d:70:f5:a5:81:30: c4:40:9c:4f:b7:77:25:5b:9b:9c:0c:c8:ab:48:91: 80:69:5d:92:e6:66:2f:36:b7:c2:db:27:a5:30:85: 17:55:6d:65:a7:d8:71:91:4d:d0:cc:9f:05:fd:2b: 39:3d:fa:a9:8f:27:e5:ed:dc:92:49:71:e0:33:fe: b4:42:c0:44:7c:62:c6:cb:cf:0b:3f:d2:81:a0:79: ad:20:8d:f0:b6:6c:19:fe:e4:f5:dc:8d:fd:44:e7: d8:38:78:c6:f6:71:f2:3d:05:ea:cf:cd:e2:a1:57: 9b:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:B6:34:C7:68:30:EB:B2:A5:6B:C5:D7:64:8E:BD:B7:6D:C5:30:36 X509v3 Authority Key Identifier: keyid:A9:21:CF:88:D8:C8:9E:0B:AC:D4:EE:18:53:8C:33:B2:78:A9:59:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91127A2/D1CD5458B1CE11EB8FF1C067C4F9AE02/qSHPiNjIngus1O4YU4wzsnipWSw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSHPiNjIngus1O4YU4wzsnipWSw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91127A2/D1CD5458B1CE11EB8FF1C067C4F9AE02/qSHPiNjIngus1O4YU4wzsnipWSw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:30:1f:d0:8b:31:cc:a8:b4:f3:5b:8e:bc:d2:93:a0:f4:ed: 01:8d:8c:db:35:27:02:f8:4d:56:0e:c7:c8:16:23:00:fa:6e: d2:b1:a9:04:cd:c2:9c:69:dd:4b:8b:58:47:69:36:2b:5b:15: 14:1b:b2:fc:03:f2:9d:57:f4:18:2d:71:6e:44:b0:02:75:ad: b7:db:4e:24:7a:8f:ca:91:15:cf:c6:64:1c:82:fe:50:fe:65: 47:bf:b9:b8:00:f4:1e:5e:ab:bf:33:ec:9a:e5:22:53:d5:a1: 46:ae:34:b9:75:1d:3a:3e:94:02:33:f3:61:01:1a:c2:f1:82: 22:a7:af:fb:fe:d5:96:b0:4e:dc:32:3d:02:ac:23:f0:7f:33: 5c:19:c8:df:65:c6:84:f8:cd:b7:74:0f:50:b9:3a:38:26:d8: 51:1b:d3:b6:d4:cc:5b:0a:71:e9:8f:4a:b7:f9:7e:3b:bd:64: 72:76:cd:02:07:ff:4d:f4:46:8b:b2:d4:24:da:36:4a:03:44: 41:ed:58:96:78:d6:dc:9f:65:5f:a0:85:a1:69:f9:20:70:50: 45:6e:ff:45:51:73:ce:63:39:7f:94:60:b3:0a:f0:f9:a7:33: f2:b6:ee:da:95:06:fa:2b:bd:0b:25:e6:a7:8f:ed:f9:1c:18: df:6e:33:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBfUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI3QTIxMTAvBgNVBAUTKEE5MjFDRjg4RDhDODlFMEJBQ0Q0RUUxODUzOEMzM0Iy NzhBOTU5MkMwHhcNMjUwNjEyMjIzMjU1WhcNMjUwNjE5MjIzMjU1WjAYMRYwFAYD VQQDEw02ODRiNTU5Ny04NGNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApjNSgCc+iKk+jcHwvQlJkKQT3j6wDfs4pg9fgcxBKxe38p9kKufR7hCpd8JQ jwlodRqqvIGDLBXIm2QYDMuxX/SNnKsq/KuBZpYBAYKldXaH7AaYoeDufBSyzsTR UdOT0/nxujBsS2x0Jls6qwMn/ZWNVZuFkSt4amBtlQ+N4Ijp2O27e3iTdjTHbD5H LI5dcPWlgTDEQJxPt3clW5ucDMirSJGAaV2S5mYvNrfC2yelMIUXVW1lp9hxkU3Q zJ8F/Ss5Pfqpjyfl7dySSXHgM/60QsBEfGLGy88LP9KBoHmtII3wtmwZ/uT13I39 ROfYOHjG9nHyPQXqz83ioVebbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOG2NMdo MOuypWvF12SOvbdtxTA2MB8GA1UdIwQYMBaAFKkhz4jYyJ4LrNTuGFOMM7J4qVks MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjdBMi9EMUNENTQ1OEIx Q0UxMUVCOEZGMUMwNjdDNEY5QUUwMi9xU0hQaU5qSW5ndXMxTzRZVTR3enNuaXBX U3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FTSFBpTmpJbmd1czFPNFlVNHd6c25pcFdTdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjdBMi9EMUNENTQ1OEIxQ0UxMUVCOEZGMUMwNjdDNEY5QUUwMi9xU0hQaU5qSW5n dXMxTzRZVTR3enNuaXBXU3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxMB/QizHMqLTzW4680pOg9O0BjYzbNScC+E1WDsfIFiMA+m7SsakE zcKcad1Li1hHaTYrWxUUG7L8A/KdV/QYLXFuRLACda23204keo/KkRXPxmQcgv5Q /mVHv7m4APQeXqu/M+ya5SJT1aFGrjS5dR06PpQCM/NhARrC8YIip6/7/tWWsE7c Mj0CrCPwfzNcGcjfZcaE+M23dA9QuTo4JthRG9O21MxbCnHpj0q3+X47vWRyds0C B/9N9EaLstQk2jZKA0RB7ViWeNbcn2VfoIWhafkgcFBFbv9FUXPOYzl/lGCzCvD5 pzPytu7alQb6K70LJeanj+35HBjfbjMP -----END CERTIFICATE-----Generated at Sat Jun 14 17:11:43 2025 by rpki-client