$ rpki-client -vvf rpki.apnic.net/member_repository/A9120832/C259F6B2362611F0B35AFA86C4F9AE02/qTjv-5Y64q628LJmWWuKQSN3ydk.mft File: qTjv-5Y64q628LJmWWuKQSN3ydk.mft (raw, json) Hash identifier: +L8MVs6gsEQ3hmf2otLMXH9O3+4tJ0gtcjYNM8+ITdk= Subject key identifier: A0:27:E5:EF:8B:AB:2D:0F:82:8C:63:F7:F7:21:23:F2:22:4C:51:18 Authority key identifier: A9:38:EF:FB:96:3A:E2:AE:B6:F0:B2:66:59:6B:8A:41:23:77:C9:D9 Certificate issuer: /CN=A9120832/serialNumber=A938EFFB963AE2AEB6F0B266596B8A412377C9D9 Certificate serial: 0E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qTjv-5Y64q628LJmWWuKQSN3ydk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120832/C259F6B2362611F0B35AFA86C4F9AE02/qTjv-5Y64q628LJmWWuKQSN3ydk.mft Manifest number: 0D Signing time: Sun 15 Jun 2025 07:09:15 +0000 Manifest this update: Sun 15 Jun 2025 07:09:13 +0000 Manifest next update: Sun 22 Jun 2025 07:09:13 +0000 Files and hashes: 1: qTjv-5Y64q628LJmWWuKQSN3ydk.crl (hash: 6+bi4YbszQ1P4IaRxn4WBW2N4tOrIq8VshSp0EGA2I4=) 2: 605C88EC362811F08A82E10DC4F9AE02.roa (hash: ICDTjfptMFLAWgu+lY50xT8rCv9IQat8S3hCjv+v8vU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120832/C259F6B2362611F0B35AFA86C4F9AE02/qTjv-5Y64q628LJmWWuKQSN3ydk.crl rsync://rpki.apnic.net/member_repository/A9120832/C259F6B2362611F0B35AFA86C4F9AE02/qTjv-5Y64q628LJmWWuKQSN3ydk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qTjv-5Y64q628LJmWWuKQSN3ydk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14 (0xe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120832, serialNumber=A938EFFB963AE2AEB6F0B266596B8A412377C9D9 Validity Not Before: Jun 15 07:09:13 2025 GMT Not After : Jun 22 07:09:13 2025 GMT Subject: CN=684e719a-ca0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:a2:9d:68:6b:a0:53:64:97:25:29:fc:c5:d8: 5a:ca:0d:5a:bc:45:e0:33:80:48:04:25:81:34:1d: 04:94:63:5a:0f:af:5e:f1:ac:c0:d5:75:71:7f:45: b7:f7:24:ca:50:4f:dd:36:fb:75:63:72:b1:14:7b: 33:20:9b:9d:51:99:aa:61:c7:38:58:63:46:f7:14: 3a:17:ad:35:85:ef:d8:23:cd:4d:a6:89:e5:db:05: 5c:de:4a:66:b8:88:3a:ee:01:82:22:1b:9f:44:da: e0:ab:1e:e7:38:3a:c0:73:bb:83:e6:5f:dd:01:ea: fe:ee:61:df:b7:35:00:e9:6b:e6:89:42:4f:9d:3a: 34:25:dc:b4:ad:d1:7c:03:d2:26:df:2f:e3:5b:14: a5:8d:e9:66:e1:d0:52:26:08:41:9f:06:f9:09:67: 5a:48:5b:88:25:97:ce:29:0d:3b:7b:65:c9:3b:1a: eb:e6:ae:0c:2f:00:51:55:47:79:c3:2e:a4:7f:99: c6:34:59:59:5f:9d:10:8a:15:86:53:f7:8a:10:f8: e1:1c:6d:f4:8a:56:e0:27:a9:60:9c:31:21:f0:7f: 72:a1:0e:4b:2b:e8:f5:c8:49:f2:16:1b:cc:01:51: 70:3d:0c:48:60:d8:e8:ee:54:59:36:2a:7c:cc:90: 2a:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:27:E5:EF:8B:AB:2D:0F:82:8C:63:F7:F7:21:23:F2:22:4C:51:18 X509v3 Authority Key Identifier: keyid:A9:38:EF:FB:96:3A:E2:AE:B6:F0:B2:66:59:6B:8A:41:23:77:C9:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120832/C259F6B2362611F0B35AFA86C4F9AE02/qTjv-5Y64q628LJmWWuKQSN3ydk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qTjv-5Y64q628LJmWWuKQSN3ydk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120832/C259F6B2362611F0B35AFA86C4F9AE02/qTjv-5Y64q628LJmWWuKQSN3ydk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:e7:58:de:51:5b:4f:66:97:80:f7:ba:f1:b9:25:37:8e:13: 8f:46:6b:2b:6f:da:71:c0:e1:bb:ff:7b:1d:a9:ba:b3:d4:98: e1:a4:97:c2:27:2c:3c:4f:e0:0c:2b:97:b5:c8:d9:af:a5:69: 25:8e:05:59:62:6c:2a:b5:24:c3:0a:5d:6e:0f:b1:08:3c:24: 6d:eb:86:65:8c:fc:26:3d:59:89:86:bc:57:cc:6a:ea:4c:12: 28:e9:7c:15:dd:12:df:ca:9d:30:f8:31:4e:f1:24:ad:b5:19: 38:a0:6c:9e:cd:fa:ed:19:d9:b8:46:36:da:da:18:eb:5d:d8: a5:38:e3:3c:6e:fb:9d:e9:38:64:9c:19:b7:99:77:7e:bc:29: e0:53:4b:b5:d0:9d:8e:50:d0:6a:4f:42:28:bf:c7:85:0a:d0: 8e:98:57:85:7b:6c:7e:16:26:a3:b8:b9:1a:23:b1:b0:c5:1f: 79:1f:42:c4:75:19:0d:13:98:6d:b5:fe:55:cd:58:7c:1c:a2: d7:cc:07:71:af:9e:36:ee:c3:ad:41:8e:78:95:d2:90:8e:29: b4:7e:90:13:d2:24:e8:0e:f9:6a:c3:41:47:17:fe:46:e5:63: c9:e7:9b:dc:ef:16:33:14:ab:8b:41:14:57:04:01:6e:78:3e: ed:2e:34:48 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy MDgzMjExMC8GA1UEBRMoQTkzOEVGRkI5NjNBRTJBRUI2RjBCMjY2NTk2QjhBNDEy Mzc3QzlEOTAeFw0yNTA2MTUwNzA5MTNaFw0yNTA2MjIwNzA5MTNaMBgxFjAUBgNV BAMTDTY4NGU3MTlhLWNhMGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDYop1oa6BTZJclKfzF2FrKDVq8ReAzgEgEJYE0HQSUY1oPr17xrMDVdXF/Rbf3 JMpQT902+3VjcrEUezMgm51RmaphxzhYY0b3FDoXrTWF79gjzU2mieXbBVzeSma4 iDruAYIiG59E2uCrHuc4OsBzu4PmX90B6v7uYd+3NQDpa+aJQk+dOjQl3LSt0XwD 0ibfL+NbFKWN6Wbh0FImCEGfBvkJZ1pIW4gll84pDTt7Zck7GuvmrgwvAFFVR3nD LqR/mcY0WVlfnRCKFYZT94oQ+OEcbfSKVuAnqWCcMSHwf3KhDksr6PXISfIWG8wB UXA9DEhg2OjuVFk2KnzMkCqPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUoCfl74ur LQ+CjGP39yEj8iJMURgwHwYDVR0jBBgwFoAUqTjv+5Y64q628LJmWWuKQSN3ydkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIwODMyL0MyNTlGNkIyMzYy NjExRjBCMzVBRkE4NkM0RjlBRTAyL3FUanYtNVk2NHE2MjhMSm1XV3VLUVNOM3lk ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcVRqdi01WTY0cTYyOExKbVdXdUtRU04zeWRrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIw ODMyL0MyNTlGNkIyMzYyNjExRjBCMzVBRkE4NkM0RjlBRTAyL3FUanYtNVk2NHE2 MjhMSm1XV3VLUVNOM3lkay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKfnWN5RW09ml4D3uvG5JTeOE49Gaytv2nHA4bv/ex2purPUmOGkl8In LDxP4Awrl7XI2a+laSWOBVlibCq1JMMKXW4PsQg8JG3rhmWM/CY9WYmGvFfMaupM EijpfBXdEt/KnTD4MU7xJK21GTigbJ7N+u0Z2bhGNtraGOtd2KU44zxu+53pOGSc GbeZd368KeBTS7XQnY5Q0GpPQii/x4UK0I6YV4V7bH4WJqO4uRojsbDFH3kfQsR1 GQ0TmG21/lXNWHwcotfMB3Gvnjbuw61BjniV0pCOKbR+kBPSJOgO+WrDQUcX/kbl Y8nnm9zvFjMUq4tBFFcEAW54Pu0uNEg= -----END CERTIFICATE-----Generated at Sun Jun 15 09:30:34 2025 by rpki-client