$ rpki-client -vvf rpki.apnic.net/member_repository/A911B5D7/25872BBE03B411E7B811AA14C4F9AE02/Qf4dQTWrLWdiPnYIM5hGitT6odw.mft File: Qf4dQTWrLWdiPnYIM5hGitT6odw.mft (raw, json) Hash identifier: 2pai0VCssOh4WvaGtMHBgFaokDB5qCo+BRZYbnjKRjw= Subject key identifier: A6:A4:18:D5:01:8D:CE:39:AD:D1:01:8C:82:93:AE:65:C9:AF:9D:6D Authority key identifier: 41:FE:1D:41:35:AB:2D:67:62:3E:76:08:33:98:46:8A:D4:FA:A1:DC Certificate issuer: /CN=A911B5D7/serialNumber=41FE1D4135AB2D67623E76083398468AD4FAA1DC Certificate serial: 1BFF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qf4dQTWrLWdiPnYIM5hGitT6odw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B5D7/25872BBE03B411E7B811AA14C4F9AE02/Qf4dQTWrLWdiPnYIM5hGitT6odw.mft Manifest number: 1BCD Signing time: Sat 14 Jun 2025 16:13:22 +0000 Manifest this update: Sat 14 Jun 2025 16:13:21 +0000 Manifest next update: Sat 21 Jun 2025 16:13:21 +0000 Files and hashes: 1: Qf4dQTWrLWdiPnYIM5hGitT6odw.crl (hash: 8iRCGOSMAo52+gvdFMwu6K00gFiVWc9OKDs29v4qTGk=) 2: C177A6728D2011EF97C11D3CC4F9AE02.roa (hash: DzfAqd947/aw0GqhghbdVi3PbAms0DDMSaZSwYpp3rk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B5D7/25872BBE03B411E7B811AA14C4F9AE02/Qf4dQTWrLWdiPnYIM5hGitT6odw.crl rsync://rpki.apnic.net/member_repository/A911B5D7/25872BBE03B411E7B811AA14C4F9AE02/Qf4dQTWrLWdiPnYIM5hGitT6odw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qf4dQTWrLWdiPnYIM5hGitT6odw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 16:13:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7167 (0x1bff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B5D7, serialNumber=41FE1D4135AB2D67623E76083398468AD4FAA1DC Validity Not Before: Jun 14 16:13:21 2025 GMT Not After : Jun 21 16:13:21 2025 GMT Subject: CN=684d9fa2-e690 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:80:37:e1:7f:96:84:e9:0a:98:49:b0:48:e7: 39:ba:7f:00:48:da:7e:8b:c5:e5:ea:18:10:a7:d0: 8d:a4:2d:a9:0f:4b:6c:89:18:75:d6:d5:2e:ba:a8: 6d:2d:25:f1:96:71:4a:0a:17:f8:f8:3b:a7:01:cc: 1c:16:ed:d3:71:bb:88:6d:f8:dc:7f:d8:1c:57:fc: 8d:79:f5:fb:d6:e1:13:54:ef:42:e1:6c:97:24:be: 2b:36:d9:0c:8a:a6:8e:5d:3c:3d:91:d8:c6:5a:11: 19:e1:82:72:2b:62:44:71:d1:c5:68:94:fe:94:6b: c0:2a:95:5e:61:cf:e4:ee:c1:d6:66:24:1d:78:66: df:3e:81:1c:18:53:db:7a:8a:a9:0e:83:76:49:05: 43:af:9e:24:67:45:09:5b:9e:e6:b2:55:79:2a:4e: f3:06:b8:5f:33:0c:19:cb:16:9d:6e:97:25:a4:e9: 7c:ef:64:dc:35:28:66:ca:ba:e2:de:a9:55:1b:9b: 1b:e1:c4:a4:87:24:a9:c5:84:84:3a:ee:88:17:47: 54:94:00:2f:79:c6:8c:eb:0c:56:5a:37:29:6e:ba: 10:92:71:fd:bb:ba:38:c1:33:f7:f0:fa:4e:02:5b: b5:2b:be:f5:71:46:13:91:ac:af:e9:8c:93:cd:84: 27:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:A4:18:D5:01:8D:CE:39:AD:D1:01:8C:82:93:AE:65:C9:AF:9D:6D X509v3 Authority Key Identifier: keyid:41:FE:1D:41:35:AB:2D:67:62:3E:76:08:33:98:46:8A:D4:FA:A1:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B5D7/25872BBE03B411E7B811AA14C4F9AE02/Qf4dQTWrLWdiPnYIM5hGitT6odw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qf4dQTWrLWdiPnYIM5hGitT6odw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B5D7/25872BBE03B411E7B811AA14C4F9AE02/Qf4dQTWrLWdiPnYIM5hGitT6odw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:90:22:37:0f:f6:3c:81:ee:e6:07:91:62:c9:76:f7:5c:c7: ef:65:ea:da:eb:f0:8a:ba:65:70:0f:9c:3e:84:0a:43:72:6a: 20:d3:29:a0:48:6d:78:e8:56:47:49:e0:a2:23:d1:82:93:3c: 18:e5:f5:d2:d6:63:93:1b:f5:a6:4e:68:10:75:0e:6d:08:74: e9:be:d1:3b:cc:4e:d1:ce:27:03:cf:f4:19:47:b1:90:cd:20: ed:f5:c6:ef:5f:15:1e:57:08:f2:5f:37:29:8e:62:47:89:f4: b9:7f:65:3f:66:11:95:78:13:12:92:71:53:d7:00:03:cd:83: 5b:47:64:7a:16:fa:31:3f:21:d1:be:7c:d9:61:2f:c1:d0:1c: 50:c6:4a:c1:c6:b5:55:7f:ea:61:48:46:c9:8a:00:f7:c5:57: a2:c9:87:4b:82:4e:0a:d0:fc:71:d1:bc:af:03:cd:0f:41:99: f1:67:21:7a:14:68:fb:18:03:15:3e:f1:90:99:5c:a7:7c:04: 81:c5:68:48:dc:e5:09:f6:b2:41:be:93:b7:9d:bf:11:9e:70: 95:63:8d:a7:65:a2:fc:8e:9e:41:c2:8f:59:6b:9a:c6:74:60: a2:1e:3a:db:8f:08:88:4e:3e:43:f6:a9:a3:c3:66:12:05:5b: 00:a9:55:cf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICG/8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUI1RDcxMTAvBgNVBAUTKDQxRkUxRDQxMzVBQjJENjc2MjNFNzYwODMzOTg0NjhB RDRGQUExREMwHhcNMjUwNjE0MTYxMzIxWhcNMjUwNjIxMTYxMzIxWjAYMRYwFAYD VQQDEw02ODRkOWZhMi1lNjkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtoA34X+WhOkKmEmwSOc5un8ASNp+i8Xl6hgQp9CNpC2pD0tsiRh11tUuuqht LSXxlnFKChf4+DunAcwcFu3TcbuIbfjcf9gcV/yNefX71uETVO9C4WyXJL4rNtkM iqaOXTw9kdjGWhEZ4YJyK2JEcdHFaJT+lGvAKpVeYc/k7sHWZiQdeGbfPoEcGFPb eoqpDoN2SQVDr54kZ0UJW57mslV5Kk7zBrhfMwwZyxadbpclpOl872TcNShmyrri 3qlVG5sb4cSkhySpxYSEOu6IF0dUlAAvecaM6wxWWjcpbroQknH9u7o4wTP38PpO Alu1K771cUYTkayv6YyTzYQndQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKakGNUB jc45rdEBjIKTrmXJr51tMB8GA1UdIwQYMBaAFEH+HUE1qy1nYj52CDOYRorU+qHc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjVENy8yNTg3MkJCRTAz QjQxMUU3QjgxMUFBMTRDNEY5QUUwMi9RZjRkUVRXckxXZGlQbllJTTVoR2l0VDZv ZHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FmNGRRVFdyTFdkaVBuWUlNNWhHaXRUNm9kdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QjVENy8yNTg3MkJCRTAzQjQxMUU3QjgxMUFBMTRDNEY5QUUwMi9RZjRkUVRXckxX ZGlQbllJTTVoR2l0VDZvZHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+kCI3D/Y8ge7mB5FiyXb3XMfvZera6/CKumVwD5w+hApDcmog0ymg SG146FZHSeCiI9GCkzwY5fXS1mOTG/WmTmgQdQ5tCHTpvtE7zE7RzicDz/QZR7GQ zSDt9cbvXxUeVwjyXzcpjmJHifS5f2U/ZhGVeBMSknFT1wADzYNbR2R6FvoxPyHR vnzZYS/B0BxQxkrBxrVVf+phSEbJigD3xVeiyYdLgk4K0Pxx0byvA80PQZnxZyF6 FGj7GAMVPvGQmVynfASBxWhI3OUJ9rJBvpO3nb8RnnCVY42nZaL8jp5Bwo9Za5rG dGCiHjrbjwiITj5D9qmjw2YSBVsAqVXP -----END CERTIFICATE-----Generated at Mon Jun 16 16:00:11 2025 by rpki-client