$ rpki-client -vvf rpki.apnic.net/member_repository/A9147609/632C30AE440E11E8903D3A5BC4F9AE02/RQlomWbTeSdWnPLLtE_-k6yo5oE.mft File: RQlomWbTeSdWnPLLtE_-k6yo5oE.mft (raw, json) Hash identifier: DFjdpC3YbSocwHjxXDR30/3NK1i0qOM3lAONqMQ9Vas= Subject key identifier: 38:9A:5A:63:34:89:0C:7E:E7:B7:C9:81:62:84:7D:30:A9:04:1C:32 Authority key identifier: 45:09:68:99:66:D3:79:27:56:9C:F2:CB:B4:4F:FE:93:AC:A8:E6:81 Certificate issuer: /CN=A9147609/serialNumber=4509689966D37927569CF2CBB44FFE93ACA8E681 Certificate serial: 07F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RQlomWbTeSdWnPLLtE_-k6yo5oE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147609/632C30AE440E11E8903D3A5BC4F9AE02/RQlomWbTeSdWnPLLtE_-k6yo5oE.mft Manifest number: 1DC3 Signing time: Sat 14 Jun 2025 16:45:17 +0000 Manifest this update: Sat 14 Jun 2025 16:45:16 +0000 Manifest next update: Sat 21 Jun 2025 16:45:16 +0000 Files and hashes: 1: RQlomWbTeSdWnPLLtE_-k6yo5oE.crl (hash: FivgcT5Qk8cw73ODoWs6Fpwy8UD7hLF1ETwYl79hodY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147609/632C30AE440E11E8903D3A5BC4F9AE02/RQlomWbTeSdWnPLLtE_-k6yo5oE.crl rsync://rpki.apnic.net/member_repository/A9147609/632C30AE440E11E8903D3A5BC4F9AE02/RQlomWbTeSdWnPLLtE_-k6yo5oE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RQlomWbTeSdWnPLLtE_-k6yo5oE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 16:45:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2032 (0x7f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147609, serialNumber=4509689966D37927569CF2CBB44FFE93ACA8E681 Validity Not Before: Jun 14 16:45:16 2025 GMT Not After : Jun 21 16:45:16 2025 GMT Subject: CN=684da71d-8e54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:c4:a4:53:fc:8f:07:bb:59:5a:c4:0d:6b:d9: 75:53:81:70:70:dd:88:05:91:36:da:c7:bd:38:03: a2:dc:20:13:58:18:f1:ec:7d:29:6a:70:20:2e:68: a2:ee:d1:72:be:14:36:86:bc:6e:66:7e:86:64:e3: e6:ab:4a:92:b2:fa:43:4f:a2:1d:39:f9:11:bf:b0: be:65:3e:25:47:28:96:08:13:d2:46:ce:0e:08:c1: d9:cd:31:e0:18:cf:9d:b2:ec:92:16:ef:72:2f:ed: f2:09:f3:36:65:31:1f:b2:3f:be:4a:81:07:12:9c: 30:60:5e:73:00:a5:59:00:36:0c:4e:f2:da:e8:14: da:93:bf:ea:7b:5e:62:02:76:79:b0:34:d1:5b:18: 9e:75:ac:a8:39:3c:4c:18:f9:be:f2:14:c5:0d:83: 54:5e:95:27:f9:e0:4d:be:4a:78:24:3d:d3:54:61: 74:eb:91:d3:56:91:30:5e:53:83:c8:dc:e4:b7:cf: e7:a4:d1:da:60:23:15:eb:da:89:27:1c:ea:e1:20: f7:de:83:de:1e:38:b2:81:1f:86:b5:27:60:19:ac: 63:fa:3f:e3:b4:dd:0e:28:a6:43:e7:bc:c7:a2:d2: cf:c0:8d:57:f4:c3:05:97:b9:9f:39:a7:b5:6d:70: 33:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:9A:5A:63:34:89:0C:7E:E7:B7:C9:81:62:84:7D:30:A9:04:1C:32 X509v3 Authority Key Identifier: keyid:45:09:68:99:66:D3:79:27:56:9C:F2:CB:B4:4F:FE:93:AC:A8:E6:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147609/632C30AE440E11E8903D3A5BC4F9AE02/RQlomWbTeSdWnPLLtE_-k6yo5oE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RQlomWbTeSdWnPLLtE_-k6yo5oE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147609/632C30AE440E11E8903D3A5BC4F9AE02/RQlomWbTeSdWnPLLtE_-k6yo5oE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:a7:dc:45:92:e2:44:79:e3:7e:4e:d1:e7:cf:4d:8b:38:f1: ac:4e:2b:51:66:a6:27:fa:87:b5:08:a6:4a:bb:b2:4e:e1:bb: 79:90:a5:b9:b3:31:8e:ea:6c:b7:c5:f1:7c:17:94:79:3b:07: 8a:e2:e6:ab:87:5a:cf:bc:49:b1:8e:00:82:81:ef:13:9f:26: 88:ee:48:2a:5e:de:30:d4:ec:f3:08:de:c5:b3:10:e5:48:30: 80:c9:f7:51:df:e1:fb:ac:20:38:aa:f9:3f:fd:56:3e:2e:c8: 4b:c8:9a:bb:77:c1:8c:c7:4d:34:b0:b2:da:4b:b1:13:56:cd: e8:87:ab:fa:dd:72:08:ff:fa:09:f4:18:72:74:0a:f9:44:53: 4b:90:09:00:17:69:9d:94:8d:62:fa:a1:e0:a9:d2:03:a7:82: 64:78:f1:f9:f6:aa:56:a2:7d:66:20:2f:ec:85:f0:55:55:c0: 95:61:ba:b7:c5:11:ae:f3:2d:e4:83:3e:b4:5a:0b:c2:39:56: d3:1b:9d:2b:89:47:ce:08:d8:4f:4f:d0:0b:79:a2:2d:f1:bb: 56:19:f9:e2:c0:08:fd:ec:7a:cd:d8:12:ea:36:26:e7:36:52: b6:06:f5:55:c6:f8:a6:1d:57:0f:12:3e:3a:bd:6c:b9:5c:7e: b0:49:cd:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB/AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc2MDkxMTAvBgNVBAUTKDQ1MDk2ODk5NjZEMzc5Mjc1NjlDRjJDQkI0NEZGRTkz QUNBOEU2ODEwHhcNMjUwNjE0MTY0NTE2WhcNMjUwNjIxMTY0NTE2WjAYMRYwFAYD VQQDEw02ODRkYTcxZC04ZTU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmsSkU/yPB7tZWsQNa9l1U4FwcN2IBZE22se9OAOi3CATWBjx7H0panAgLmii 7tFyvhQ2hrxuZn6GZOPmq0qSsvpDT6IdOfkRv7C+ZT4lRyiWCBPSRs4OCMHZzTHg GM+dsuySFu9yL+3yCfM2ZTEfsj++SoEHEpwwYF5zAKVZADYMTvLa6BTak7/qe15i AnZ5sDTRWxiedayoOTxMGPm+8hTFDYNUXpUn+eBNvkp4JD3TVGF065HTVpEwXlOD yNzkt8/npNHaYCMV69qJJxzq4SD33oPeHjiygR+GtSdgGaxj+j/jtN0OKKZD57zH otLPwI1X9MMFl7mfOae1bXAztwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDiaWmM0 iQx+57fJgWKEfTCpBBwyMB8GA1UdIwQYMBaAFEUJaJlm03knVpzyy7RP/pOsqOaB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzYwOS82MzJDMzBBRTQ0 MEUxMUU4OTAzRDNBNUJDNEY5QUUwMi9SUWxvbVdiVGVTZFduUExMdEVfLWs2eW81 b0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JRbG9tV2JUZVNkV25QTEx0RV8tazZ5bzVvRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzYwOS82MzJDMzBBRTQ0MEUxMUU4OTAzRDNBNUJDNEY5QUUwMi9SUWxvbVdiVGVT ZFduUExMdEVfLWs2eW81b0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBEp9xFkuJEeeN+TtHnz02LOPGsTitRZqYn+oe1CKZKu7JO4bt5kKW5 szGO6my3xfF8F5R5OweK4uarh1rPvEmxjgCCge8TnyaI7kgqXt4w1OzzCN7FsxDl SDCAyfdR3+H7rCA4qvk//VY+LshLyJq7d8GMx000sLLaS7ETVs3oh6v63XII//oJ 9BhydAr5RFNLkAkAF2mdlI1i+qHgqdIDp4JkePH59qpWon1mIC/shfBVVcCVYbq3 xRGu8y3kgz60WgvCOVbTG50riUfOCNhPT9ALeaIt8btWGfniwAj97HrN2BLqNibn NlK2BvVVxvimHVcPEj46vWy5XH6wSc0M -----END CERTIFICATE-----Generated at Sun Jun 15 10:24:11 2025 by rpki-client