$ rpki-client -vvf rpki.apnic.net/member_repository/A91454B0/1CC4DDB61D8E11E2902E3CEC08B02CD2/QgHlq32GvGha8R8C3mhAUVttgFg.mft File: QgHlq32GvGha8R8C3mhAUVttgFg.mft (raw, json) Hash identifier: 9Jr10oSgn410VOmzfeULSFLGuM2AlMM0BYUXt/Q305c= Subject key identifier: 88:87:02:67:6E:80:BC:7E:E3:6A:48:E0:4C:FA:B3:AA:A5:F0:27:B5 Authority key identifier: 42:01:E5:AB:7D:86:BC:68:5A:F1:1F:02:DE:68:40:51:5B:6D:80:58 Certificate issuer: /CN=A91454B0/serialNumber=4201E5AB7D86BC685AF11F02DE6840515B6D8058 Certificate serial: 3491 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QgHlq32GvGha8R8C3mhAUVttgFg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91454B0/1CC4DDB61D8E11E2902E3CEC08B02CD2/QgHlq32GvGha8R8C3mhAUVttgFg.mft Manifest number: 3491 Signing time: Sat 14 Jun 2025 14:37:44 +0000 Manifest this update: Sat 14 Jun 2025 14:37:44 +0000 Manifest next update: Sat 21 Jun 2025 14:37:44 +0000 Files and hashes: 1: QgHlq32GvGha8R8C3mhAUVttgFg.crl (hash: SO94JRjAv3yCBVRueUwubQBYe0wTK7DGRBJWE52F7tg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91454B0/1CC4DDB61D8E11E2902E3CEC08B02CD2/QgHlq32GvGha8R8C3mhAUVttgFg.crl rsync://rpki.apnic.net/member_repository/A91454B0/1CC4DDB61D8E11E2902E3CEC08B02CD2/QgHlq32GvGha8R8C3mhAUVttgFg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QgHlq32GvGha8R8C3mhAUVttgFg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 14:37:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13457 (0x3491) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91454B0, serialNumber=4201E5AB7D86BC685AF11F02DE6840515B6D8058 Validity Not Before: Jun 14 14:37:44 2025 GMT Not After : Jun 21 14:37:44 2025 GMT Subject: CN=684d8938-c5a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:3c:ec:80:09:f9:16:97:fd:33:48:49:14:4d: a1:68:1d:1a:93:3a:cc:bb:fa:f7:06:67:b7:c6:13: 43:ab:de:61:a3:66:ba:66:d7:2c:72:62:3a:1b:f9: f7:34:b6:21:c8:0a:aa:30:17:c7:28:26:fd:cb:c5: 07:6b:70:b7:5e:d2:01:c5:1a:4a:c5:c5:de:9f:17: 5f:cf:05:65:10:13:90:4f:58:6b:bd:f1:f9:3c:8e: 72:4e:18:64:08:37:f3:46:04:72:42:59:bd:b7:9d: 3b:d2:15:e7:03:46:2e:39:a4:fa:2e:be:c8:42:44: 43:42:26:ba:b8:55:2d:25:a8:96:ee:e2:9a:dc:f1: d9:34:2c:bd:30:d5:4b:0e:c0:85:5b:61:d8:17:e0: b3:6c:e0:ce:eb:6b:d0:12:65:61:18:51:78:06:fc: ab:37:64:8a:5d:92:d8:99:00:00:c0:25:b5:c2:56: f7:c5:20:4e:ed:df:61:d2:be:83:63:7e:94:e6:d1: 76:e4:eb:45:ea:07:18:be:75:6b:eb:3f:29:91:24: 60:ab:af:1c:76:88:5c:62:67:1d:20:3b:ac:6b:7d: 97:47:2e:94:15:ad:b3:a2:c0:28:71:70:8b:65:9c: f2:a2:1d:83:8c:04:3b:fd:48:95:22:4c:07:b2:70: c5:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:87:02:67:6E:80:BC:7E:E3:6A:48:E0:4C:FA:B3:AA:A5:F0:27:B5 X509v3 Authority Key Identifier: keyid:42:01:E5:AB:7D:86:BC:68:5A:F1:1F:02:DE:68:40:51:5B:6D:80:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91454B0/1CC4DDB61D8E11E2902E3CEC08B02CD2/QgHlq32GvGha8R8C3mhAUVttgFg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QgHlq32GvGha8R8C3mhAUVttgFg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91454B0/1CC4DDB61D8E11E2902E3CEC08B02CD2/QgHlq32GvGha8R8C3mhAUVttgFg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:02:ad:07:98:83:7e:d6:d3:da:04:4e:be:cf:92:ec:36:ad: 73:19:36:4b:61:66:5f:5f:27:ff:ad:b0:3a:7f:13:49:98:36: 7f:97:f4:12:a7:1d:f1:9c:4d:d2:72:ce:02:1a:97:01:b9:aa: c1:3a:d4:c5:02:85:83:b1:bb:b6:35:a9:4b:93:76:ad:96:14: 08:7d:76:6e:99:4b:b6:ce:fb:6b:dd:53:89:c5:7a:92:81:81: 14:0b:59:4d:67:12:16:a3:31:cb:12:ed:4c:d2:da:19:09:c9: 03:19:d4:08:29:2e:1f:ea:e7:52:81:68:c6:92:90:6a:99:ef: 88:38:00:e9:59:1c:d7:0d:ab:4a:92:cf:ff:78:32:13:df:4e: 97:1b:45:20:ed:ab:76:a2:24:f5:1c:87:f5:95:2c:8e:8d:27: 76:f7:79:64:a6:54:46:a1:de:b5:51:48:1f:c4:b2:d9:15:78: 89:2d:7e:3e:91:3e:3d:95:66:35:0d:c4:65:70:e9:ca:84:17: e1:3b:18:21:79:cd:1b:a1:55:17:93:16:0b:88:69:bd:c2:c0: a7:b7:1d:3b:39:14:cb:c4:56:97:16:28:b3:62:a9:62:a4:23: a8:46:9f:6d:b8:e2:8d:7a:f3:75:57:a4:e0:11:d9:a4:60:65: ca:02:46:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNJEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDU0QjAxMTAvBgNVBAUTKDQyMDFFNUFCN0Q4NkJDNjg1QUYxMUYwMkRFNjg0MDUx NUI2RDgwNTgwHhcNMjUwNjE0MTQzNzQ0WhcNMjUwNjIxMTQzNzQ0WjAYMRYwFAYD VQQDEw02ODRkODkzOC1jNWE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzTzsgAn5Fpf9M0hJFE2haB0akzrMu/r3Bme3xhNDq95ho2a6ZtcscmI6G/n3 NLYhyAqqMBfHKCb9y8UHa3C3XtIBxRpKxcXenxdfzwVlEBOQT1hrvfH5PI5yThhk CDfzRgRyQlm9t5070hXnA0YuOaT6Lr7IQkRDQia6uFUtJaiW7uKa3PHZNCy9MNVL DsCFW2HYF+CzbODO62vQEmVhGFF4BvyrN2SKXZLYmQAAwCW1wlb3xSBO7d9h0r6D Y36U5tF25OtF6gcYvnVr6z8pkSRgq68cdohcYmcdIDusa32XRy6UFa2zosAocXCL ZZzyoh2DjAQ7/UiVIkwHsnDFSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIiHAmdu gLx+42pI4Ez6s6ql8Ce1MB8GA1UdIwQYMBaAFEIB5at9hrxoWvEfAt5oQFFbbYBY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTRCMC8xQ0M0RERCNjFE OEUxMUUyOTAyRTNDRUMwOEIwMkNEMi9RZ0hscTMyR3ZHaGE4UjhDM21oQVVWdHRn RmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FnSGxxMzJHdkdoYThSOEMzbWhBVVZ0dGdGZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NTRCMC8xQ0M0RERCNjFEOEUxMUUyOTAyRTNDRUMwOEIwMkNEMi9RZ0hscTMyR3ZH aGE4UjhDM21oQVVWdHRnRmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4Aq0HmIN+1tPaBE6+z5LsNq1zGTZLYWZfXyf/rbA6fxNJmDZ/l/QS px3xnE3Scs4CGpcBuarBOtTFAoWDsbu2NalLk3atlhQIfXZumUu2zvtr3VOJxXqS gYEUC1lNZxIWozHLEu1M0toZCckDGdQIKS4f6udSgWjGkpBqme+IOADpWRzXDatK ks//eDIT306XG0Ug7at2oiT1HIf1lSyOjSd293lkplRGod61UUgfxLLZFXiJLX4+ kT49lWY1DcRlcOnKhBfhOxghec0boVUXkxYLiGm9wsCntx07ORTLxFaXFiizYqli pCOoRp9tuOKNevN1V6TgEdmkYGXKAkYI -----END CERTIFICATE-----Generated at Sun Jun 15 09:47:02 2025 by rpki-client