$ rpki-client -vvf rpki.apnic.net/member_repository/A9138BC1/152D5C861B6911F0BFFC3F2FC4F9AE02/Qnc6qEHXDnPE730nyY_LnUQgxGw.mft File: Qnc6qEHXDnPE730nyY_LnUQgxGw.mft (raw, json) Hash identifier: pZ3JCUPJzvVeAuTfRPMEXXPwFGuokHZ78HTI5jJsSG0= Subject key identifier: BA:F5:5F:4B:5B:49:7C:3A:27:26:C5:70:AA:9D:D8:3D:5F:D3:21:77 Authority key identifier: 42:77:3A:A8:41:D7:0E:73:C4:EF:7D:27:C9:8F:CB:9D:44:20:C4:6C Certificate issuer: /CN=A9138BC1/serialNumber=42773AA841D70E73C4EF7D27C98FCB9D4420C46C Certificate serial: 1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qnc6qEHXDnPE730nyY_LnUQgxGw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9138BC1/152D5C861B6911F0BFFC3F2FC4F9AE02/Qnc6qEHXDnPE730nyY_LnUQgxGw.mft Manifest number: 1D Signing time: Fri 13 Jun 2025 06:47:19 +0000 Manifest this update: Fri 13 Jun 2025 06:47:18 +0000 Manifest next update: Fri 20 Jun 2025 06:47:18 +0000 Files and hashes: 1: Qnc6qEHXDnPE730nyY_LnUQgxGw.crl (hash: XPydjJmyDZneE/gZT7jSjlpQT4w5jPdWGkvWtJR+Vjc=) 2: 6ADACB0A1B6911F09204CE2FC4F9AE02.roa (hash: gqxaCaR+XnfSGCVk4MotcSInE621jLFW8PAuLJkFUyI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9138BC1/152D5C861B6911F0BFFC3F2FC4F9AE02/Qnc6qEHXDnPE730nyY_LnUQgxGw.crl rsync://rpki.apnic.net/member_repository/A9138BC1/152D5C861B6911F0BFFC3F2FC4F9AE02/Qnc6qEHXDnPE730nyY_LnUQgxGw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qnc6qEHXDnPE730nyY_LnUQgxGw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 06:47:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30 (0x1e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9138BC1, serialNumber=42773AA841D70E73C4EF7D27C98FCB9D4420C46C Validity Not Before: Jun 13 06:47:18 2025 GMT Not After : Jun 20 06:47:18 2025 GMT Subject: CN=684bc977-da13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:73:35:54:b2:34:e4:96:bd:13:47:af:80:62: ef:a6:11:e0:28:d8:e7:be:e8:49:07:db:8b:72:d8: 48:3d:c4:f4:b2:d4:cb:e7:75:c1:5f:82:c4:50:33: a7:a6:f5:47:d1:3a:7c:4b:81:fa:c4:0e:6c:0b:f0: ab:89:d5:fe:b0:c3:e5:b9:b1:44:ed:70:0e:e1:d0: 19:ed:8c:39:4b:d2:e5:20:6c:6a:82:d8:a2:1c:2f: 05:af:3a:c6:21:52:e9:01:d6:fa:8d:af:3f:c6:60: f4:ba:0d:3b:22:a1:e0:82:66:29:2a:b9:cf:96:b9: dc:e4:e8:e0:1a:90:90:99:0f:73:a1:57:2d:2b:52: 63:96:04:30:88:2f:52:40:fc:0f:2b:8d:a6:02:79: 79:2b:5f:41:e1:4b:c7:f3:a4:bd:12:f6:d3:a3:77: ba:1a:98:b6:71:13:d6:5d:8a:2c:dd:72:a6:0f:92: f7:fb:65:8a:ce:41:06:57:58:74:52:b7:93:35:72: cd:75:cf:1f:cd:66:40:f5:2a:3f:2d:33:5b:82:04: 08:b7:66:ca:a6:81:f6:c6:74:d9:bd:40:68:b4:b5: e1:53:33:b1:eb:c7:d4:a0:97:66:b0:30:c7:ce:8b: 9b:ed:1e:e5:2a:20:ef:15:ae:83:ad:93:ea:38:c5: 76:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:F5:5F:4B:5B:49:7C:3A:27:26:C5:70:AA:9D:D8:3D:5F:D3:21:77 X509v3 Authority Key Identifier: keyid:42:77:3A:A8:41:D7:0E:73:C4:EF:7D:27:C9:8F:CB:9D:44:20:C4:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9138BC1/152D5C861B6911F0BFFC3F2FC4F9AE02/Qnc6qEHXDnPE730nyY_LnUQgxGw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qnc6qEHXDnPE730nyY_LnUQgxGw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138BC1/152D5C861B6911F0BFFC3F2FC4F9AE02/Qnc6qEHXDnPE730nyY_LnUQgxGw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:66:67:53:c1:49:f4:aa:71:9e:82:b3:c3:e0:fc:db:4a:c2: 5e:7a:a7:ee:28:54:e1:5e:b4:36:d5:a0:57:7b:a5:e7:44:b3: 97:2e:29:54:54:27:70:b8:7b:91:ba:81:1d:7b:28:33:37:28: a0:1d:d1:97:c6:16:79:f5:25:d8:e4:98:27:c8:29:8a:3e:d9: 7c:0e:3c:c3:88:e5:5a:7d:21:e8:b2:74:68:7d:42:6e:eb:f2: e3:a9:e8:59:46:f0:d3:57:03:f0:9c:01:43:92:f8:a3:fe:13: 27:05:4b:08:8a:ea:b1:0b:08:29:7d:35:13:a9:b8:6c:93:73: 72:1b:5c:ee:97:a5:66:50:0e:47:56:90:57:46:60:a8:7e:13: 9d:c7:97:91:fe:1a:98:e2:1c:d9:30:5f:30:4e:a4:67:22:2a: 3f:20:5d:8a:51:e4:5f:94:c0:50:4c:e3:9f:70:0e:63:ab:82: ea:6a:21:8b:a8:2c:70:ee:37:f8:8a:4f:d0:cf:32:ec:c9:8d: ab:56:64:71:30:a5:4e:d3:07:9b:1a:f3:4f:66:65:b9:71:54: 81:89:68:3c:b0:b0:df:4d:f3:e6:60:b2:38:f7:96:a3:58:1c: b2:2a:e7:0a:8c:d9:d6:95:b8:b4:c2:ca:b1:93:08:16:fb:2d: a4:bf:0c:e5 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz OEJDMTExMC8GA1UEBRMoNDI3NzNBQTg0MUQ3MEU3M0M0RUY3RDI3Qzk4RkNCOUQ0 NDIwQzQ2QzAeFw0yNTA2MTMwNjQ3MThaFw0yNTA2MjAwNjQ3MThaMBgxFjAUBgNV BAMTDTY4NGJjOTc3LWRhMTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD0czVUsjTklr0TR6+AYu+mEeAo2Oe+6EkH24ty2Eg9xPSy1MvndcFfgsRQM6em 9UfROnxLgfrEDmwL8KuJ1f6ww+W5sUTtcA7h0BntjDlL0uUgbGqC2KIcLwWvOsYh UukB1vqNrz/GYPS6DTsioeCCZikquc+Wudzk6OAakJCZD3OhVy0rUmOWBDCIL1JA /A8rjaYCeXkrX0HhS8fzpL0S9tOjd7oamLZxE9ZdiizdcqYPkvf7ZYrOQQZXWHRS t5M1cs11zx/NZkD1Kj8tM1uCBAi3ZsqmgfbGdNm9QGi0teFTM7Hrx9Sgl2awMMfO i5vtHuUqIO8VroOtk+o4xXYVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUuvVfS1tJ fDonJsVwqp3YPV/TIXcwHwYDVR0jBBgwFoAUQnc6qEHXDnPE730nyY/LnUQgxGww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM4QkMxLzE1MkQ1Qzg2MUI2 OTExRjBCRkZDM0YyRkM0RjlBRTAyL1FuYzZxRUhYRG5QRTczMG55WV9MblVRZ3hH dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUW5jNnFFSFhEblBFNzMwbnlZX0xuVVFneEd3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM4 QkMxLzE1MkQ1Qzg2MUI2OTExRjBCRkZDM0YyRkM0RjlBRTAyL1FuYzZxRUhYRG5Q RTczMG55WV9MblVRZ3hHdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAABmZ1PBSfSqcZ6Cs8Pg/NtKwl56p+4oVOFetDbVoFd7pedEs5cuKVRU J3C4e5G6gR17KDM3KKAd0ZfGFnn1JdjkmCfIKYo+2XwOPMOI5Vp9IeiydGh9Qm7r 8uOp6FlG8NNXA/CcAUOS+KP+EycFSwiK6rELCCl9NROpuGyTc3IbXO6XpWZQDkdW kFdGYKh+E53Hl5H+GpjiHNkwXzBOpGciKj8gXYpR5F+UwFBM459wDmOrgupqIYuo LHDuN/iKT9DPMuzJjatWZHEwpU7TB5sa809mZblxVIGJaDywsN9N8+Zgsjj3lqNY HLIq5wqM2daVuLTCyrGTCBb7LaS/DOU= -----END CERTIFICATE-----Generated at Sat Jun 14 19:05:40 2025 by rpki-client