$ rpki-client -vvf rpki.apnic.net/member_repository/A913E9AD/FD723C50A43111EAB7721E6AC4F9AE02/QWpUTLUK6kcDnxO8WMNBDH_miM4.mft File: QWpUTLUK6kcDnxO8WMNBDH_miM4.mft (raw, json) Hash identifier: HCIVcpzoNU1QAfmOgpvGs3nmFZ25vSa7xiKhcnuly9Q= Subject key identifier: AF:D1:1F:34:38:34:9E:E1:DF:9C:AE:2B:2C:99:94:97:E4:A3:9D:F4 Authority key identifier: 41:6A:54:4C:B5:0A:EA:47:03:9F:13:BC:58:C3:41:0C:7F:E6:88:CE Certificate issuer: /CN=A913E9AD/serialNumber=416A544CB50AEA47039F13BC58C3410C7FE688CE Certificate serial: 0920 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QWpUTLUK6kcDnxO8WMNBDH_miM4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E9AD/FD723C50A43111EAB7721E6AC4F9AE02/QWpUTLUK6kcDnxO8WMNBDH_miM4.mft Manifest number: 0919 Signing time: Sat 14 Jun 2025 20:06:01 +0000 Manifest this update: Sat 14 Jun 2025 20:06:00 +0000 Manifest next update: Sat 21 Jun 2025 20:06:00 +0000 Files and hashes: 1: QWpUTLUK6kcDnxO8WMNBDH_miM4.crl (hash: VlScVNc+5ZTZwSaEeUDnl93udIZJAWkunf47/dnA7jo=) 2: 04758F0AA43411EAA22B0871C4F9AE02.roa (hash: gLtq1uRfz9P1m1h8+/+e4fI782kx3+paUmd4vGjKTlg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E9AD/FD723C50A43111EAB7721E6AC4F9AE02/QWpUTLUK6kcDnxO8WMNBDH_miM4.crl rsync://rpki.apnic.net/member_repository/A913E9AD/FD723C50A43111EAB7721E6AC4F9AE02/QWpUTLUK6kcDnxO8WMNBDH_miM4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QWpUTLUK6kcDnxO8WMNBDH_miM4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 20:06:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2336 (0x920) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E9AD, serialNumber=416A544CB50AEA47039F13BC58C3410C7FE688CE Validity Not Before: Jun 14 20:06:00 2025 GMT Not After : Jun 21 20:06:00 2025 GMT Subject: CN=684dd628-9cd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:43:d0:9c:ce:e3:17:a4:43:da:30:df:85:2c: 98:c0:ff:24:9b:78:5a:34:ba:94:99:91:28:23:33: 49:28:49:1b:c5:6d:d9:11:bb:8d:5c:fd:4c:40:27: 82:09:67:3d:19:36:11:27:44:71:01:a0:dc:9a:a7: 8b:c9:7c:cd:88:e3:5e:dd:53:5d:93:6e:f8:c0:87: 8d:17:6e:49:9b:24:19:4a:bc:36:c6:11:c1:07:27: fd:4d:48:3b:64:1a:41:43:8b:f4:03:70:32:a5:d2: 0a:15:9f:54:5e:fd:6e:2d:8b:ab:ea:76:5f:14:c9: ab:f7:3f:4c:74:e7:a1:ed:f6:78:92:51:30:a9:43: ea:af:66:fc:1a:58:90:6a:b8:98:cd:d7:23:16:81: a4:88:bf:0a:33:f8:78:54:68:5a:5f:d6:a2:b2:84: 6a:39:66:a3:d2:65:23:d6:ac:c1:4a:03:4f:5d:ad: b9:11:9f:9d:e3:82:7a:4d:2c:ab:72:10:08:19:5b: 77:84:b5:6f:59:02:52:7c:a8:a9:ac:96:6b:53:88: af:1a:ea:7e:c5:f4:00:62:f3:d8:02:68:42:13:4e: fe:7a:c1:ec:68:f2:16:e6:65:ea:a5:1b:ee:9a:a5: 0e:b1:1f:cb:f4:c9:78:42:99:0b:da:1e:13:42:74: 8e:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:D1:1F:34:38:34:9E:E1:DF:9C:AE:2B:2C:99:94:97:E4:A3:9D:F4 X509v3 Authority Key Identifier: keyid:41:6A:54:4C:B5:0A:EA:47:03:9F:13:BC:58:C3:41:0C:7F:E6:88:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E9AD/FD723C50A43111EAB7721E6AC4F9AE02/QWpUTLUK6kcDnxO8WMNBDH_miM4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QWpUTLUK6kcDnxO8WMNBDH_miM4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E9AD/FD723C50A43111EAB7721E6AC4F9AE02/QWpUTLUK6kcDnxO8WMNBDH_miM4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:77:5d:08:bb:22:4b:94:f5:bc:1d:70:ff:01:d6:3d:8b:0d: 3e:2e:af:76:d8:32:ed:6a:49:6a:19:8a:ae:a4:39:36:94:dd: 75:2e:5b:4a:de:36:bf:9e:fa:af:4a:48:91:d9:ce:33:7b:57: 92:4f:e1:03:7f:c0:3c:f7:ba:a0:48:b1:89:99:a9:b8:6d:d1: 41:15:98:74:e1:fd:46:be:a4:4e:5f:e4:95:fc:be:3c:4c:9d: 73:45:84:ba:c1:f8:37:d7:10:0f:a3:8a:0d:f9:e7:06:87:e4: c3:d6:ad:8f:bc:c5:cc:7b:5f:a1:4e:18:5c:fb:3c:8b:ad:11: 40:5b:c5:e4:4b:7c:e5:8c:9e:02:23:60:85:c0:0c:d8:8a:61: 50:15:bd:b5:f8:50:f8:45:2c:d9:cf:b9:14:d6:55:a3:f5:aa: aa:b0:19:a7:b3:66:e9:85:2b:33:e2:cd:66:4e:cc:fb:6d:f8: ad:ff:e9:13:08:75:c7:f7:fa:ea:6a:0e:cb:85:1f:12:7e:ed: 9f:f3:f5:0b:66:f9:e0:88:97:6c:0a:72:f6:55:a8:fa:05:d3: 2d:90:2e:28:21:84:d3:9c:07:cf:5a:c8:c0:54:9f:34:6e:70: fb:40:24:79:07:bb:37:7c:a5:8a:19:ee:34:95:29:ce:64:86: fe:48:77:bb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCSAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0U5QUQxMTAvBgNVBAUTKDQxNkE1NDRDQjUwQUVBNDcwMzlGMTNCQzU4QzM0MTBD N0ZFNjg4Q0UwHhcNMjUwNjE0MjAwNjAwWhcNMjUwNjIxMjAwNjAwWjAYMRYwFAYD VQQDEw02ODRkZDYyOC05Y2Q4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvkPQnM7jF6RD2jDfhSyYwP8km3haNLqUmZEoIzNJKEkbxW3ZEbuNXP1MQCeC CWc9GTYRJ0RxAaDcmqeLyXzNiONe3VNdk274wIeNF25JmyQZSrw2xhHBByf9TUg7 ZBpBQ4v0A3AypdIKFZ9UXv1uLYur6nZfFMmr9z9MdOeh7fZ4klEwqUPqr2b8GliQ ariYzdcjFoGkiL8KM/h4VGhaX9aisoRqOWaj0mUj1qzBSgNPXa25EZ+d44J6TSyr chAIGVt3hLVvWQJSfKiprJZrU4ivGup+xfQAYvPYAmhCE07+esHsaPIW5mXqpRvu mqUOsR/L9Ml4QpkL2h4TQnSO/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK/RHzQ4 NJ7h35yuKyyZlJfko530MB8GA1UdIwQYMBaAFEFqVEy1CupHA58TvFjDQQx/5ojO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRTlBRC9GRDcyM0M1MEE0 MzExMUVBQjc3MjFFNkFDNEY5QUUwMi9RV3BVVExVSzZrY0RueE84V01OQkRIX21p TTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FXcFVUTFVLNmtjRG54TzhXTU5CREhfbWlNNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RTlBRC9GRDcyM0M1MEE0MzExMUVBQjc3MjFFNkFDNEY5QUUwMi9RV3BVVExVSzZr Y0RueE84V01OQkRIX21pTTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCsd10IuyJLlPW8HXD/AdY9iw0+Lq922DLtaklqGYqupDk2lN11LltK 3ja/nvqvSkiR2c4ze1eST+EDf8A897qgSLGJmam4bdFBFZh04f1GvqROX+SV/L48 TJ1zRYS6wfg31xAPo4oN+ecGh+TD1q2PvMXMe1+hThhc+zyLrRFAW8XkS3zljJ4C I2CFwAzYimFQFb21+FD4RSzZz7kU1lWj9aqqsBmns2bphSsz4s1mTsz7bfit/+kT CHXH9/rqag7LhR8Sfu2f8/ULZvngiJdsCnL2Vaj6BdMtkC4oIYTTnAfPWsjAVJ80 bnD7QCR5B7s3fKWKGe40lSnOZIb+SHe7 -----END CERTIFICATE-----Generated at Sun Jun 15 08:41:46 2025 by rpki-client