$ rpki-client -vvf rpki.apnic.net/member_repository/A913132A/B11648D81DA711E28B6E86A108B02CD2/cQnPztTUjL9WSOoHl6fHNH1o_xI.mft File: cQnPztTUjL9WSOoHl6fHNH1o_xI.mft (raw, json) Hash identifier: NC8QeNZHdkgRH4XyzUnXG/zXVruMwf9dmKhb0uvQh/k= Subject key identifier: 29:2E:62:2A:9B:A4:7B:7B:6D:44:20:51:AB:1D:A4:79:FF:8C:90:0C Authority key identifier: 71:09:CF:CE:D4:D4:8C:BF:56:48:EA:07:97:A7:C7:34:7D:68:FF:12 Certificate issuer: /CN=A913132A/serialNumber=7109CFCED4D48CBF5648EA0797A7C7347D68FF12 Certificate serial: 348A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cQnPztTUjL9WSOoHl6fHNH1o_xI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913132A/B11648D81DA711E28B6E86A108B02CD2/cQnPztTUjL9WSOoHl6fHNH1o_xI.mft Manifest number: 348A Signing time: Sat 14 Jun 2025 15:12:45 +0000 Manifest this update: Sat 14 Jun 2025 15:12:45 +0000 Manifest next update: Sat 21 Jun 2025 15:12:45 +0000 Files and hashes: 1: cQnPztTUjL9WSOoHl6fHNH1o_xI.crl (hash: LzHvC+iKEY7FpHqbB4vnHcIzNeqgrBP/VPzyOJSy/M4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913132A/B11648D81DA711E28B6E86A108B02CD2/cQnPztTUjL9WSOoHl6fHNH1o_xI.crl rsync://rpki.apnic.net/member_repository/A913132A/B11648D81DA711E28B6E86A108B02CD2/cQnPztTUjL9WSOoHl6fHNH1o_xI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cQnPztTUjL9WSOoHl6fHNH1o_xI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 15:12:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13450 (0x348a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913132A, serialNumber=7109CFCED4D48CBF5648EA0797A7C7347D68FF12 Validity Not Before: Jun 14 15:12:45 2025 GMT Not After : Jun 21 15:12:45 2025 GMT Subject: CN=684d916d-906d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:3c:ad:d2:90:f9:75:6c:91:81:9f:4e:52:d0: d6:eb:7f:1d:af:d3:8d:a1:c6:e5:54:41:03:bd:3d: 6e:b7:16:32:ae:ea:cd:a0:97:14:30:fa:37:04:53: b0:ce:5b:58:50:e2:8b:53:c3:79:6d:16:4c:ea:de: 73:11:f4:d7:37:6c:bb:37:31:65:7c:74:30:04:8a: b4:fe:8b:b1:bd:d9:7f:40:c9:36:c4:6f:a3:f0:02: ff:af:40:50:39:a4:7c:a7:29:65:ab:38:b8:8a:4a: 51:6d:74:f8:f1:73:a3:09:82:d9:89:bc:15:77:85: c6:de:e2:3f:f0:54:c8:eb:da:5b:14:3c:e3:2e:33: 74:6c:8d:d6:cd:28:ec:0b:f3:0a:f5:c8:26:79:01: 9d:8d:c1:69:8a:8f:fe:57:0b:ed:d2:2d:67:2f:3c: 54:07:2f:b9:be:6a:04:b7:57:db:55:50:a7:28:62: 60:ee:8d:49:97:14:bc:27:68:51:a3:af:dd:57:95: 6a:2f:c4:b9:8d:d1:b6:b6:71:ca:1b:8e:4d:fd:b9: 98:79:15:3f:00:df:a2:76:79:ba:f1:45:d1:dc:32: 13:ee:23:a4:41:47:90:c2:53:a7:9e:a4:b3:3e:20: e0:3f:54:9f:e3:99:9e:b0:dc:0e:69:c5:68:f0:51: 76:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:2E:62:2A:9B:A4:7B:7B:6D:44:20:51:AB:1D:A4:79:FF:8C:90:0C X509v3 Authority Key Identifier: keyid:71:09:CF:CE:D4:D4:8C:BF:56:48:EA:07:97:A7:C7:34:7D:68:FF:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913132A/B11648D81DA711E28B6E86A108B02CD2/cQnPztTUjL9WSOoHl6fHNH1o_xI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cQnPztTUjL9WSOoHl6fHNH1o_xI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913132A/B11648D81DA711E28B6E86A108B02CD2/cQnPztTUjL9WSOoHl6fHNH1o_xI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:87:0d:a2:69:cd:4c:5e:79:85:cc:b7:6d:9c:be:10:87:fa: 68:30:a4:f0:b7:28:90:ee:41:7f:4a:ef:e6:ea:3c:27:70:65: b3:e0:94:8b:ad:8b:5d:30:7a:55:a7:f1:dc:cb:be:13:fd:16: db:c5:a6:0a:84:7f:01:5c:b0:92:36:cc:bb:02:81:f4:15:98: ba:1b:20:cb:ae:ac:a8:8f:87:4d:9a:a0:7b:06:89:42:4d:d7: ec:00:06:94:f1:f8:46:d7:a6:82:ee:12:9c:3e:f2:b3:be:20: 91:4c:e2:a1:0d:e9:81:f9:18:fc:c4:1b:03:88:7e:b4:66:bb: c9:1e:c8:a6:40:67:d0:f5:0e:70:ff:0d:b7:6c:9b:09:db:62: 51:b8:9b:3b:4c:e7:f4:42:cc:ec:68:e0:08:79:db:8e:52:7c: 09:67:ae:44:17:0b:73:29:4f:53:4b:e8:bc:63:3a:f0:52:f9: 2a:33:72:7e:75:a9:2a:09:8a:8c:5f:9b:22:41:f9:96:42:82: 0c:51:e7:95:6b:a4:6b:64:40:b4:36:e1:d7:46:25:ed:fb:22: 20:be:c5:cf:27:09:eb:26:fb:09:01:20:6d:cd:f2:db:58:92: 12:5a:f1:16:30:37:35:71:2d:8b:cb:15:7e:11:da:eb:a2:8b: 0d:c3:1f:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNIowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzEzMkExMTAvBgNVBAUTKDcxMDlDRkNFRDRENDhDQkY1NjQ4RUEwNzk3QTdDNzM0 N0Q2OEZGMTIwHhcNMjUwNjE0MTUxMjQ1WhcNMjUwNjIxMTUxMjQ1WjAYMRYwFAYD VQQDEw02ODRkOTE2ZC05MDZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtjyt0pD5dWyRgZ9OUtDW638dr9ONocblVEEDvT1utxYyrurNoJcUMPo3BFOw zltYUOKLU8N5bRZM6t5zEfTXN2y7NzFlfHQwBIq0/ouxvdl/QMk2xG+j8AL/r0BQ OaR8pyllqzi4ikpRbXT48XOjCYLZibwVd4XG3uI/8FTI69pbFDzjLjN0bI3WzSjs C/MK9cgmeQGdjcFpio/+Vwvt0i1nLzxUBy+5vmoEt1fbVVCnKGJg7o1JlxS8J2hR o6/dV5VqL8S5jdG2tnHKG45N/bmYeRU/AN+idnm68UXR3DIT7iOkQUeQwlOnnqSz PiDgP1Sf45mesNwOacVo8FF2OQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCkuYiqb pHt7bUQgUasdpHn/jJAMMB8GA1UdIwQYMBaAFHEJz87U1Iy/VkjqB5enxzR9aP8S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTMyQS9CMTE2NDhEODFE QTcxMUUyOEI2RTg2QTEwOEIwMkNEMi9jUW5QenRUVWpMOVdTT29IbDZmSE5IMW9f eEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NRblB6dFRVakw5V1NPb0hsNmZITkgxb194SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTMyQS9CMTE2NDhEODFEQTcxMUUyOEI2RTg2QTEwOEIwMkNEMi9jUW5QenRUVWpM OVdTT29IbDZmSE5IMW9feEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqhw2iac1MXnmFzLdtnL4Qh/poMKTwtyiQ7kF/Su/m6jwncGWz4JSL rYtdMHpVp/Hcy74T/RbbxaYKhH8BXLCSNsy7AoH0FZi6GyDLrqyoj4dNmqB7BolC TdfsAAaU8fhG16aC7hKcPvKzviCRTOKhDemB+Rj8xBsDiH60ZrvJHsimQGfQ9Q5w /w23bJsJ22JRuJs7TOf0QszsaOAIeduOUnwJZ65EFwtzKU9TS+i8YzrwUvkqM3J+ dakqCYqMX5siQfmWQoIMUeeVa6RrZEC0NuHXRiXt+yIgvsXPJwnrJvsJASBtzfLb WJISWvEWMDc1cS2LyxV+EdrroosNwx8a -----END CERTIFICATE-----Generated at Sun Jun 15 08:46:48 2025 by rpki-client