$ rpki-client -vvf rpki.apnic.net/member_repository/A9136CB3/A5FD84F2571B11EEB418AB3EC4F9AE02/q0Xb_DVXfyfJn89Ao5s4azI1Cto.mft File: q0Xb_DVXfyfJn89Ao5s4azI1Cto.mft (raw, json) Hash identifier: ujEV4lA4vGj1tFogAopnYsF9bzWJ+BB71T3wNWOVPyQ= Subject key identifier: CE:D9:B8:A7:D0:9D:96:57:41:45:D1:29:0D:9E:28:11:9D:7D:4A:64 Authority key identifier: AB:45:DB:FC:35:57:7F:27:C9:9F:CF:40:A3:9B:38:6B:32:35:0A:DA Certificate issuer: /CN=A9136CB3/serialNumber=AB45DBFC35577F27C99FCF40A39B386B32350ADA Certificate serial: 0153 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q0Xb_DVXfyfJn89Ao5s4azI1Cto.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136CB3/A5FD84F2571B11EEB418AB3EC4F9AE02/q0Xb_DVXfyfJn89Ao5s4azI1Cto.mft Manifest number: 014B Signing time: Sun 15 Jun 2025 03:28:22 +0000 Manifest this update: Sun 15 Jun 2025 03:28:21 +0000 Manifest next update: Sun 22 Jun 2025 03:28:21 +0000 Files and hashes: 1: q0Xb_DVXfyfJn89Ao5s4azI1Cto.crl (hash: sOsV4st9tIxnGqGOKKhAldYqUa2a1M8cDnpK41iPtOk=) 2: B210BF28D1BF11EF95281B83C4F9AE02.roa (hash: ZnF+YTP2pRwfo0eUOGSGb1Y71fB7TRDK5QfyiO+cZbM=) 3: 20DA8B7E571D11EEAA430244C4F9AE02.roa (hash: dRKaSZEwPfTmZ9fnNDPlpvp0Ujh9QZMuM+RN8ZLvFSw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136CB3/A5FD84F2571B11EEB418AB3EC4F9AE02/q0Xb_DVXfyfJn89Ao5s4azI1Cto.crl rsync://rpki.apnic.net/member_repository/A9136CB3/A5FD84F2571B11EEB418AB3EC4F9AE02/q0Xb_DVXfyfJn89Ao5s4azI1Cto.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q0Xb_DVXfyfJn89Ao5s4azI1Cto.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 339 (0x153) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136CB3, serialNumber=AB45DBFC35577F27C99FCF40A39B386B32350ADA Validity Not Before: Jun 15 03:28:21 2025 GMT Not After : Jun 22 03:28:21 2025 GMT Subject: CN=684e3dd6-7a6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a2:df:a2:e7:f9:7c:9b:35:b3:c2:5f:23:39: b4:d4:d3:eb:8c:35:5a:c6:57:0f:8a:c1:ca:8b:78: cd:c4:d1:78:96:d1:9e:ff:fb:47:f0:01:c0:42:ba: 41:6e:1f:0c:18:53:20:d8:39:0c:17:be:1d:36:9e: 9e:38:49:63:32:e6:3e:51:54:b1:85:d7:69:4f:21: 67:15:c5:cd:d9:7d:2e:50:43:a5:62:0d:2b:6e:ac: 77:81:f9:5e:86:ee:74:69:8a:bd:3b:3f:c1:cc:58: ec:fa:c0:2b:82:fa:60:f6:8e:23:9f:b5:0c:86:03: 46:68:cf:87:59:1e:55:69:02:68:73:45:f5:d8:69: ff:d3:a1:19:f0:f8:4d:44:38:b5:78:33:6b:c7:bd: 9d:0e:b2:1a:7c:cd:5b:67:fd:3e:08:e8:e8:d7:d1: f8:5c:68:f7:a4:19:3a:4a:f3:00:68:40:07:10:da: d2:b5:ce:ae:85:60:77:fe:ff:a8:42:a5:bb:e3:00: f1:b4:a2:44:a7:de:0c:6b:f0:1e:30:58:3f:0c:54: ab:5a:dc:4b:be:c2:97:a2:73:7c:a5:61:60:07:9f: 6c:ae:b7:ee:c0:ae:87:94:60:67:76:97:f0:b6:9f: 7c:15:03:7e:5b:ec:f8:c2:3f:8b:1c:9a:3e:3c:ed: 39:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:D9:B8:A7:D0:9D:96:57:41:45:D1:29:0D:9E:28:11:9D:7D:4A:64 X509v3 Authority Key Identifier: keyid:AB:45:DB:FC:35:57:7F:27:C9:9F:CF:40:A3:9B:38:6B:32:35:0A:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136CB3/A5FD84F2571B11EEB418AB3EC4F9AE02/q0Xb_DVXfyfJn89Ao5s4azI1Cto.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q0Xb_DVXfyfJn89Ao5s4azI1Cto.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136CB3/A5FD84F2571B11EEB418AB3EC4F9AE02/q0Xb_DVXfyfJn89Ao5s4azI1Cto.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:da:b8:02:0b:06:20:f0:44:9c:b4:a4:b0:04:94:78:4c:29: f7:bb:24:33:28:ee:26:60:88:fe:83:12:6d:0a:6b:40:54:3b: ad:9f:9b:25:ff:a0:1c:c4:86:2b:22:2a:db:e7:23:94:3c:21: 13:e0:97:f3:b0:b4:87:6f:d0:df:30:b4:87:ab:e3:74:49:de: 95:20:a2:0a:08:dd:8c:96:89:a6:c2:39:12:7e:c3:d4:2a:9b: f5:1c:bd:08:c5:0e:ae:db:ed:04:3e:01:1f:95:c1:e8:0c:c3: 69:06:6a:9c:7a:d7:67:00:22:cd:95:4d:9e:5f:1f:2d:01:13: f8:ed:71:4d:1d:06:1f:10:d1:bd:d8:c0:e4:e3:79:c3:7c:e9: 52:39:a3:61:1d:51:e5:6a:19:c9:ee:34:92:2e:e3:e6:77:1c: 17:5d:72:db:17:3f:83:08:15:22:8e:38:61:c9:10:99:86:f6: 77:65:42:98:24:1e:34:d5:59:99:34:df:a9:28:61:8e:4d:d9: 6d:a6:6d:19:69:f0:18:89:f4:c8:43:8c:89:37:38:f7:93:d3: b7:bb:5e:44:b6:15:cf:d0:02:b7:2c:ff:8c:f6:85:59:f1:fb: b1:1f:ff:4f:64:4e:9f:95:58:e7:d8:e7:f6:02:00:c6:83:c7: 5a:f8:02:b0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzZDQjMxMTAvBgNVBAUTKEFCNDVEQkZDMzU1NzdGMjdDOTlGQ0Y0MEEzOUIzODZC MzIzNTBBREEwHhcNMjUwNjE1MDMyODIxWhcNMjUwNjIyMDMyODIxWjAYMRYwFAYD VQQDEw02ODRlM2RkNi03YTZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwqLfouf5fJs1s8JfIzm01NPrjDVaxlcPisHKi3jNxNF4ltGe//tH8AHAQrpB bh8MGFMg2DkMF74dNp6eOEljMuY+UVSxhddpTyFnFcXN2X0uUEOlYg0rbqx3gfle hu50aYq9Oz/BzFjs+sArgvpg9o4jn7UMhgNGaM+HWR5VaQJoc0X12Gn/06EZ8PhN RDi1eDNrx72dDrIafM1bZ/0+COjo19H4XGj3pBk6SvMAaEAHENrStc6uhWB3/v+o QqW74wDxtKJEp94Ma/AeMFg/DFSrWtxLvsKXonN8pWFgB59srrfuwK6HlGBndpfw tp98FQN+W+z4wj+LHJo+PO05qQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM7ZuKfQ nZZXQUXRKQ2eKBGdfUpkMB8GA1UdIwQYMBaAFKtF2/w1V38nyZ/PQKObOGsyNQra MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkNCMy9BNUZEODRGMjU3 MUIxMUVFQjQxOEFCM0VDNEY5QUUwMi9xMFhiX0RWWGZ5ZkpuODlBbzVzNGF6STFD dG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3EwWGJfRFZYZnlmSm44OUFvNXM0YXpJMUN0by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NkNCMy9BNUZEODRGMjU3MUIxMUVFQjQxOEFCM0VDNEY5QUUwMi9xMFhiX0RWWGZ5 ZkpuODlBbzVzNGF6STFDdG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAc2rgCCwYg8ESctKSwBJR4TCn3uyQzKO4mYIj+gxJtCmtAVDutn5sl /6AcxIYrIirb5yOUPCET4JfzsLSHb9DfMLSHq+N0Sd6VIKIKCN2MlommwjkSfsPU Kpv1HL0IxQ6u2+0EPgEflcHoDMNpBmqcetdnACLNlU2eXx8tARP47XFNHQYfENG9 2MDk43nDfOlSOaNhHVHlahnJ7jSSLuPmdxwXXXLbFz+DCBUijjhhyRCZhvZ3ZUKY JB401VmZNN+pKGGOTdltpm0ZafAYifTIQ4yJNzj3k9O3u15EthXP0AK3LP+M9oVZ 8fuxH/9PZE6flVjn2Of2AgDGg8da+AKw -----END CERTIFICATE-----Generated at Sun Jun 15 08:40:42 2025 by rpki-client