$ rpki-client -vvf rpki.apnic.net/member_repository/A912C3BD/1A8108F2D97F11EB9E13594FC4F9AE02/RqE3XwEj9TNI8MT5A02QQP7p08o.mft File: RqE3XwEj9TNI8MT5A02QQP7p08o.mft (raw, json) Hash identifier: Y1Bo9apPYzX2kfoTVV0ccIBKAw0KLOSCFzheV0ddmnU= Subject key identifier: 79:73:A3:2C:84:01:ED:9F:7E:6A:A3:53:33:6E:FE:F4:60:87:86:24 Authority key identifier: 46:A1:37:5F:01:23:F5:33:48:F0:C4:F9:03:4D:90:40:FE:E9:D3:CA Certificate issuer: /CN=A912C3BD/serialNumber=46A1375F0123F53348F0C4F9034D9040FEE9D3CA Certificate serial: 059D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RqE3XwEj9TNI8MT5A02QQP7p08o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C3BD/1A8108F2D97F11EB9E13594FC4F9AE02/RqE3XwEj9TNI8MT5A02QQP7p08o.mft Manifest number: 0594 Signing time: Sat 14 Jun 2025 22:58:27 +0000 Manifest this update: Sat 14 Jun 2025 22:58:26 +0000 Manifest next update: Sat 21 Jun 2025 22:58:26 +0000 Files and hashes: 1: RqE3XwEj9TNI8MT5A02QQP7p08o.crl (hash: V4sPtxK1onqRNtFBjwLc25cNj6F1w2d4DUdAmkFKfKE=) 2: 6079B40AD98211EBAA210852C4F9AE02.roa (hash: cPDgWfK2zOB3bgbWohc7RllaAj78iS9Dek771g2OWfM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C3BD/1A8108F2D97F11EB9E13594FC4F9AE02/RqE3XwEj9TNI8MT5A02QQP7p08o.crl rsync://rpki.apnic.net/member_repository/A912C3BD/1A8108F2D97F11EB9E13594FC4F9AE02/RqE3XwEj9TNI8MT5A02QQP7p08o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RqE3XwEj9TNI8MT5A02QQP7p08o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 22:58:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1437 (0x59d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C3BD, serialNumber=46A1375F0123F53348F0C4F9034D9040FEE9D3CA Validity Not Before: Jun 14 22:58:26 2025 GMT Not After : Jun 21 22:58:26 2025 GMT Subject: CN=684dfe92-48cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:1d:41:7e:0b:40:48:bb:43:39:f5:5c:5c:0d: 21:c8:87:69:c1:cf:84:0a:18:9e:39:4e:5a:23:74: 1c:c4:2e:a0:43:d0:e4:b4:9c:1c:75:d4:ec:be:61: 35:0f:0f:6f:51:22:b4:c2:07:d3:5a:dd:69:1c:df: 9f:2f:ff:f8:24:d2:2b:6c:18:4c:9a:46:cf:3a:30: 52:4b:1b:8e:2e:07:56:eb:2b:47:91:c0:19:3c:0b: 4e:67:d6:a7:5c:e7:cc:76:f5:6e:56:f9:e7:ef:57: 1c:e1:76:e2:6e:06:2f:c3:ad:69:4a:69:31:0f:f7: 33:1f:59:df:ba:77:fc:dd:cf:3b:85:8d:bf:f4:e9: c5:8a:04:04:f2:b0:82:d5:b1:38:33:c0:73:3a:ab: 5a:83:2a:18:62:17:af:ab:b2:e4:e1:0f:4c:f6:57: 98:9b:fe:1e:fa:fb:01:16:86:d2:75:18:4e:b5:86: 73:fe:f3:c7:f3:bf:f9:9b:bf:d3:ec:be:d3:bd:ed: 7c:02:1a:f6:80:d9:6d:55:1a:3f:6f:e9:36:75:7f: af:8c:c0:6d:e6:19:ed:b8:11:57:21:d4:bc:56:96: 89:f1:e4:6c:af:d8:5a:0f:7b:a2:03:b9:09:6f:5d: 9b:96:66:83:47:cc:68:79:f5:b6:65:c5:19:f7:40: a5:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:73:A3:2C:84:01:ED:9F:7E:6A:A3:53:33:6E:FE:F4:60:87:86:24 X509v3 Authority Key Identifier: keyid:46:A1:37:5F:01:23:F5:33:48:F0:C4:F9:03:4D:90:40:FE:E9:D3:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C3BD/1A8108F2D97F11EB9E13594FC4F9AE02/RqE3XwEj9TNI8MT5A02QQP7p08o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RqE3XwEj9TNI8MT5A02QQP7p08o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C3BD/1A8108F2D97F11EB9E13594FC4F9AE02/RqE3XwEj9TNI8MT5A02QQP7p08o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:08:bb:c0:32:fa:a5:9e:69:31:a2:d1:90:c0:e3:25:a8:15: d1:55:bf:bd:10:32:42:08:01:ba:4f:47:5b:34:08:30:0e:17: 95:0f:ba:bc:42:17:84:7e:ea:11:f1:a2:f6:76:2e:e5:bf:b4: c1:d3:4d:95:6a:5c:90:a1:b9:d8:ed:7f:d1:94:92:86:72:1a: a2:64:b2:c2:64:31:e1:e0:bd:97:3b:03:e4:04:a0:38:73:4f: 4f:a0:7d:0c:6a:c9:69:b1:c8:76:ba:c5:53:99:fe:21:c9:90: 81:87:bd:cf:da:d2:10:aa:86:0f:77:b7:b0:14:fc:3f:b7:c2: 24:87:92:85:85:62:08:93:2c:ef:35:f2:27:74:36:50:e0:22: dd:43:db:37:e6:62:dc:8e:3e:84:d8:53:c8:79:d4:4e:9c:93: 60:2d:ae:b9:4c:62:3a:67:e6:1a:39:49:01:0c:79:e9:a7:d5: fd:fd:e3:1c:35:f6:a5:0c:9f:bc:51:b4:9b:ad:9c:24:a4:ba: 97:21:26:6f:a9:5e:98:3f:8d:3b:46:9f:03:9f:50:a5:c3:a0: 1d:fb:15:20:30:34:90:0a:ec:22:77:58:16:4d:9b:b5:bc:3a: 2f:76:a5:92:e0:0f:62:38:72:b1:f7:a4:ca:cf:bd:6c:f6:84: 7b:56:95:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBZ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkMzQkQxMTAvBgNVBAUTKDQ2QTEzNzVGMDEyM0Y1MzM0OEYwQzRGOTAzNEQ5MDQw RkVFOUQzQ0EwHhcNMjUwNjE0MjI1ODI2WhcNMjUwNjIxMjI1ODI2WjAYMRYwFAYD VQQDEw02ODRkZmU5Mi00OGNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6R1BfgtASLtDOfVcXA0hyIdpwc+EChieOU5aI3QcxC6gQ9DktJwcddTsvmE1 Dw9vUSK0wgfTWt1pHN+fL//4JNIrbBhMmkbPOjBSSxuOLgdW6ytHkcAZPAtOZ9an XOfMdvVuVvnn71cc4XbibgYvw61pSmkxD/czH1nfunf83c87hY2/9OnFigQE8rCC 1bE4M8BzOqtagyoYYhevq7Lk4Q9M9leYm/4e+vsBFobSdRhOtYZz/vPH87/5m7/T 7L7Tve18Ahr2gNltVRo/b+k2dX+vjMBt5hntuBFXIdS8VpaJ8eRsr9haD3uiA7kJ b12blmaDR8xoefW2ZcUZ90ClSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHlzoyyE Ae2ffmqjUzNu/vRgh4YkMB8GA1UdIwQYMBaAFEahN18BI/UzSPDE+QNNkED+6dPK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzNCRC8xQTgxMDhGMkQ5 N0YxMUVCOUUxMzU5NEZDNEY5QUUwMi9ScUUzWHdFajlUTkk4TVQ1QTAyUVFQN3Aw OG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JxRTNYd0VqOVROSThNVDVBMDJRUVA3cDA4by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QzNCRC8xQTgxMDhGMkQ5N0YxMUVCOUUxMzU5NEZDNEY5QUUwMi9ScUUzWHdFajlU Tkk4TVQ1QTAyUVFQN3AwOG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChCLvAMvqlnmkxotGQwOMlqBXRVb+9EDJCCAG6T0dbNAgwDheVD7q8 QheEfuoR8aL2di7lv7TB002ValyQobnY7X/RlJKGchqiZLLCZDHh4L2XOwPkBKA4 c09PoH0Maslpsch2usVTmf4hyZCBh73P2tIQqoYPd7ewFPw/t8Ikh5KFhWIIkyzv NfIndDZQ4CLdQ9s35mLcjj6E2FPIedROnJNgLa65TGI6Z+YaOUkBDHnpp9X9/eMc NfalDJ+8UbSbrZwkpLqXISZvqV6YP407Rp8Dn1Clw6Ad+xUgMDSQCuwid1gWTZu1 vDovdqWS4A9iOHKx96TKz71s9oR7VpXe -----END CERTIFICATE-----Generated at Sun Jun 15 09:42:49 2025 by rpki-client