$ rpki-client -vvf rpki.apnic.net/member_repository/A9140436/1561BEDE765711EF8BFC7A11C4F9AE02/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.mft File: QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.mft (raw, json) Hash identifier: U0e4D4MkSB0qknUO2cNKxa876PFd4HLPkei+mkpaxO0= Subject key identifier: 48:26:13:3B:CF:17:53:55:B8:53:8E:39:1C:77:3C:79:8A:8C:ED:05 Authority key identifier: 42:C2:CB:A4:7F:AD:38:9F:D1:8B:61:CA:E2:24:72:D6:1E:0E:A8:96 Certificate issuer: /CN=A9140436/serialNumber=42C2CBA47FAD389FD18B61CAE22472D61E0EA896 Certificate serial: 94 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9140436/1561BEDE765711EF8BFC7A11C4F9AE02/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.mft Manifest number: 91 Signing time: Sat 21 Jun 2025 05:32:12 +0000 Manifest this update: Sat 21 Jun 2025 05:32:12 +0000 Manifest next update: Sat 28 Jun 2025 05:32:12 +0000 Files and hashes: 1: QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.crl (hash: ZSpZkbJ9p5Y413PFjRnTLsGHodCPmNNjXkmp9P+OwWQ=) 2: 5F18EB127A7E11EF932E0B3EC4F9AE02.roa (hash: Rjd53QdMueDJga8fsZ46U1pxir9CvtJnZAWgLguQIlA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9140436/1561BEDE765711EF8BFC7A11C4F9AE02/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.crl rsync://rpki.apnic.net/member_repository/A9140436/1561BEDE765711EF8BFC7A11C4F9AE02/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Jun 2025 05:32:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 148 (0x94) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9140436, serialNumber=42C2CBA47FAD389FD18B61CAE22472D61E0EA896 Validity Not Before: Jun 21 05:32:12 2025 GMT Not After : Jun 28 05:32:12 2025 GMT Subject: CN=685643dc-7e3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:cf:aa:9a:24:03:7c:54:10:fa:ad:81:a8:d5: c1:ba:7e:02:92:29:14:72:90:b2:7a:ab:fb:0c:95: bb:00:68:c7:72:6c:4b:28:5e:ec:a0:1e:9f:33:5b: d3:ed:d9:ae:57:9e:be:f0:f9:67:86:b3:53:94:d8: 82:83:41:f6:5e:26:7e:fc:84:fb:42:65:7d:e5:2e: 82:87:1d:9d:51:31:60:ef:a5:46:c0:4b:a9:45:a4: d5:ac:61:ba:66:a4:3e:95:81:bb:19:23:1f:fb:c4: 83:d3:0c:27:9c:f3:6c:9b:7f:08:5e:c5:89:83:72: 20:a6:3c:02:56:31:57:bd:7d:ac:73:67:91:71:ac: 5c:34:d6:e0:30:2b:36:0f:78:b8:ef:a9:d4:6e:9f: f4:a4:e5:6e:f2:aa:47:35:a1:74:f2:d8:aa:d7:88: 31:e0:79:79:57:f8:e6:5c:c1:e1:84:d8:e2:fc:fa: 78:ba:59:87:51:a1:09:a8:50:3a:3a:f5:ce:7e:bd: 60:56:1d:61:62:dd:ef:eb:0d:f4:a4:23:52:48:42: 3b:53:fc:31:b9:5c:9b:43:2e:c6:b2:3d:ae:e3:c9: 8d:30:7d:0f:cc:f4:66:fe:0c:28:0f:3a:c3:5e:f7: 9c:cb:0e:05:08:38:9a:b2:66:f7:fe:4a:7b:e8:8d: 4e:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:26:13:3B:CF:17:53:55:B8:53:8E:39:1C:77:3C:79:8A:8C:ED:05 X509v3 Authority Key Identifier: keyid:42:C2:CB:A4:7F:AD:38:9F:D1:8B:61:CA:E2:24:72:D6:1E:0E:A8:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9140436/1561BEDE765711EF8BFC7A11C4F9AE02/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140436/1561BEDE765711EF8BFC7A11C4F9AE02/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:3e:f9:e8:06:6a:78:be:a6:bc:b7:91:b1:13:da:db:85:85: 7a:19:cb:a7:e7:7a:01:2d:9d:aa:3e:ce:75:54:79:69:db:a5: e7:b2:64:e7:65:81:69:50:fa:06:4c:50:85:8a:8b:84:10:b4: 83:bb:5e:46:61:c5:67:cf:15:5b:68:c7:cf:3d:45:90:52:91: a5:7d:53:ac:a0:ab:71:b9:89:59:07:1c:9d:a3:a1:38:3a:b2: 45:56:67:08:98:23:9a:cc:d8:b4:a3:86:26:8b:6b:5d:17:0b: 01:0b:fc:c7:f3:ed:58:a2:3f:aa:fc:49:b0:5a:31:fa:19:c1: af:4f:b9:10:82:f0:f6:5d:7e:f2:50:4a:45:d1:52:01:c9:e0: 52:81:c9:0f:42:48:bf:89:a7:62:f0:c0:49:28:73:48:38:6d: d3:66:da:cf:12:e9:e2:7c:62:aa:8a:2c:8f:b1:46:06:ef:9e: 53:42:02:1a:98:4e:47:40:13:b3:9d:2e:9c:94:58:68:99:6b: a9:ed:ec:30:59:65:67:4a:97:9a:45:de:7c:f1:62:50:a7:cc: 10:f3:2b:8a:d9:f4:6a:06:d7:ec:50:52:d5:e3:a2:d4:d6:73: 27:da:a0:19:24:ad:7c:46:b2:f1:d7:66:98:90:42:eb:2a:70: c4:ab:7b:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDA0MzYxMTAvBgNVBAUTKDQyQzJDQkE0N0ZBRDM4OUZEMThCNjFDQUUyMjQ3MkQ2 MUUwRUE4OTYwHhcNMjUwNjIxMDUzMjEyWhcNMjUwNjI4MDUzMjEyWjAYMRYwFAYD VQQDEw02ODU2NDNkYy03ZTNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtM+qmiQDfFQQ+q2BqNXBun4CkikUcpCyeqv7DJW7AGjHcmxLKF7soB6fM1vT 7dmuV56+8PlnhrNTlNiCg0H2XiZ+/IT7QmV95S6Chx2dUTFg76VGwEupRaTVrGG6 ZqQ+lYG7GSMf+8SD0wwnnPNsm38IXsWJg3IgpjwCVjFXvX2sc2eRcaxcNNbgMCs2 D3i476nUbp/0pOVu8qpHNaF08tiq14gx4Hl5V/jmXMHhhNji/Pp4ulmHUaEJqFA6 OvXOfr1gVh1hYt3v6w30pCNSSEI7U/wxuVybQy7Gsj2u48mNMH0PzPRm/gwoDzrD Xvecyw4FCDiasmb3/kp76I1OjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEgmEzvP F1NVuFOOORx3PHmKjO0FMB8GA1UdIwQYMBaAFELCy6R/rTif0YthyuIkctYeDqiW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDQzNi8xNTYxQkVERTc2 NTcxMUVGOEJGQzdBMTFDNEY5QUUwMi9Rc0xMcEgtdE9KX1JpMkhLNGlSeTFoNE9x SlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1FzTExwSC10T0pfUmkySEs0aVJ5MWg0T3FKWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MDQzNi8xNTYxQkVERTc2NTcxMUVGOEJGQzdBMTFDNEY5QUUwMi9Rc0xMcEgtdE9K X1JpMkhLNGlSeTFoNE9xSlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3PvnoBmp4vqa8t5GxE9rbhYV6Gcun53oBLZ2qPs51VHlp26XnsmTn ZYFpUPoGTFCFiouEELSDu15GYcVnzxVbaMfPPUWQUpGlfVOsoKtxuYlZBxydo6E4 OrJFVmcImCOazNi0o4Ymi2tdFwsBC/zH8+1Yoj+q/EmwWjH6GcGvT7kQgvD2XX7y UEpF0VIByeBSgckPQki/iadi8MBJKHNIOG3TZtrPEunifGKqiiyPsUYG755TQgIa mE5HQBOznS6clFhomWup7ewwWWVnSpeaRd588WJQp8wQ8yuK2fRqBtfsUFLV46LU 1nMn2qAZJK18RrLx12aYkELrKnDEq3vC -----END CERTIFICATE-----Generated at Sun Jun 22 08:59:21 2025 by rpki-client