$ rpki-client -vvf rpki.apnic.net/member_repository/A914B45F/8CA20A1CAAD211EF9AA0EF80C4F9AE02/QRUiNGCj3frIOoL8YbK-nsYmwgw.mft File: QRUiNGCj3frIOoL8YbK-nsYmwgw.mft (raw, json) Hash identifier: FfJR3SW16PmvRYDeqyGQ4NqC2aCFsOn8e/eYMJjj374= Subject key identifier: E8:B2:18:F9:2F:E4:3F:7A:02:D7:AC:90:A4:60:BC:55:F5:C2:6F:08 Authority key identifier: 41:15:22:34:60:A3:DD:FA:C8:3A:82:FC:61:B2:BE:9E:C6:26:C2:0C Certificate issuer: /CN=A914B45F/serialNumber=4115223460A3DDFAC83A82FC61B2BE9EC626C20C Certificate serial: 6D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QRUiNGCj3frIOoL8YbK-nsYmwgw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B45F/8CA20A1CAAD211EF9AA0EF80C4F9AE02/QRUiNGCj3frIOoL8YbK-nsYmwgw.mft Manifest number: 6C Signing time: Thu 19 Jun 2025 03:22:51 +0000 Manifest this update: Thu 19 Jun 2025 03:22:50 +0000 Manifest next update: Thu 26 Jun 2025 03:22:50 +0000 Files and hashes: 1: QRUiNGCj3frIOoL8YbK-nsYmwgw.crl (hash: k95MpN7nEQ3V4pwTiaRFaqExb3AaLkpxtl73+c5EVH4=) 2: 2017BFC2B07211EF83629B37C4F9AE02.roa (hash: mN3+2+qtTy+oq/2mSPD3LwNlHAef4eKWai8tbwHg/2k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B45F/8CA20A1CAAD211EF9AA0EF80C4F9AE02/QRUiNGCj3frIOoL8YbK-nsYmwgw.crl rsync://rpki.apnic.net/member_repository/A914B45F/8CA20A1CAAD211EF9AA0EF80C4F9AE02/QRUiNGCj3frIOoL8YbK-nsYmwgw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QRUiNGCj3frIOoL8YbK-nsYmwgw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 03:22:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 109 (0x6d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B45F, serialNumber=4115223460A3DDFAC83A82FC61B2BE9EC626C20C Validity Not Before: Jun 19 03:22:50 2025 GMT Not After : Jun 26 03:22:50 2025 GMT Subject: CN=6853828b-48a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c4:34:35:c3:74:46:8b:ad:08:98:94:20:dd: 25:1c:52:28:d6:ba:d3:ff:bc:f9:4f:2e:e3:43:b6: d7:a8:86:6c:af:b2:d5:00:ea:51:58:b6:b6:f6:2a: e3:b6:22:1f:ca:c0:2d:89:ee:94:b7:6b:56:cc:45: f7:13:97:ea:c6:dc:a0:53:04:d1:da:e6:a2:1f:f6: 18:14:f7:2f:f9:2e:0d:d9:cc:97:dc:1f:fe:ae:9d: 7f:fd:4c:31:e4:5f:80:a5:71:38:c7:06:e8:c5:86: ca:26:0f:fd:75:a0:67:fb:96:06:66:c1:b1:0f:54: 4a:20:fb:ad:74:e9:0b:5b:42:59:0a:a7:46:c4:df: 38:82:c4:b5:e5:f7:9d:67:b1:6d:87:2a:19:96:07: e9:45:7d:46:39:4a:24:68:4e:3f:d5:96:77:53:90: ba:23:5e:16:a9:e5:96:82:df:cf:98:15:50:b1:fb: 60:70:12:5b:97:6c:e2:16:67:b3:56:1f:dc:8e:ae: 84:4b:39:92:54:9a:8c:62:a3:86:68:49:05:52:c3: 58:8e:97:d8:69:d5:77:93:23:bb:98:ba:70:9e:81: 28:58:f5:3d:51:a9:bd:57:8e:14:9f:e1:2e:06:60: 15:5b:11:57:4a:86:07:e8:0d:7f:60:5d:da:f4:d8: 41:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:B2:18:F9:2F:E4:3F:7A:02:D7:AC:90:A4:60:BC:55:F5:C2:6F:08 X509v3 Authority Key Identifier: keyid:41:15:22:34:60:A3:DD:FA:C8:3A:82:FC:61:B2:BE:9E:C6:26:C2:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B45F/8CA20A1CAAD211EF9AA0EF80C4F9AE02/QRUiNGCj3frIOoL8YbK-nsYmwgw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QRUiNGCj3frIOoL8YbK-nsYmwgw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B45F/8CA20A1CAAD211EF9AA0EF80C4F9AE02/QRUiNGCj3frIOoL8YbK-nsYmwgw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:93:7a:4b:be:4d:86:e1:0a:44:dc:ee:60:2d:e4:34:95:10: 0b:20:63:8b:6e:63:b4:d8:5f:ed:04:ee:8f:5d:d7:b6:58:b7: 58:52:b3:94:75:9e:09:6c:aa:48:09:3a:a4:28:fd:1e:d2:82: 4d:62:ed:1a:4a:d1:5b:5c:bd:2f:b1:d3:20:0c:9f:95:1c:81: fb:7d:23:84:13:cc:f0:96:13:b5:3f:2d:d6:1a:5a:37:00:33: 3d:88:17:ec:4f:b6:0a:de:4c:15:53:0c:c9:7d:7d:22:60:7a: 28:16:e4:39:6c:65:5a:bc:1f:4a:1e:6f:a4:f7:af:d6:17:34: 0c:76:46:5f:ee:dd:1a:6f:f2:52:28:68:97:dd:50:66:5b:88: 1e:ba:63:2e:22:34:75:13:13:21:81:23:63:0d:03:2e:cb:67: 62:d6:e9:02:e0:21:19:3a:71:c3:14:7f:cd:e4:03:92:de:ff: 63:09:33:19:28:2f:fd:40:90:dd:ab:73:38:ae:17:68:be:32: 96:2f:0d:30:c2:62:6a:cb:d3:62:6d:2c:80:ce:34:39:a0:02: 81:e5:db:3a:ce:a5:94:0e:4d:e1:95:49:b5:21:60:cd:cb:2e: 56:2a:ea:2d:b4:e7:1a:f0:67:5b:89:b7:6d:8f:c7:8d:42:dd: f5:8f:33:b7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 QjQ1RjExMC8GA1UEBRMoNDExNTIyMzQ2MEEzRERGQUM4M0E4MkZDNjFCMkJFOUVD NjI2QzIwQzAeFw0yNTA2MTkwMzIyNTBaFw0yNTA2MjYwMzIyNTBaMBgxFjAUBgNV BAMTDTY4NTM4MjhiLTQ4YTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCzxDQ1w3RGi60ImJQg3SUcUijWutP/vPlPLuNDtteohmyvstUA6lFYtrb2KuO2 Ih/KwC2J7pS3a1bMRfcTl+rG3KBTBNHa5qIf9hgU9y/5Lg3ZzJfcH/6unX/9TDHk X4ClcTjHBujFhsomD/11oGf7lgZmwbEPVEog+6106QtbQlkKp0bE3ziCxLXl951n sW2HKhmWB+lFfUY5SiRoTj/VlndTkLojXhap5ZaC38+YFVCx+2BwEluXbOIWZ7NW H9yOroRLOZJUmoxio4ZoSQVSw1iOl9hp1XeTI7uYunCegShY9T1Rqb1XjhSf4S4G YBVbEVdKhgfoDX9gXdr02EEXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU6LIY+S/k P3oC16yQpGC8VfXCbwgwHwYDVR0jBBgwFoAUQRUiNGCj3frIOoL8YbK+nsYmwgww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRCNDVGLzhDQTIwQTFDQUFE MjExRUY5QUEwRUY4MEM0RjlBRTAyL1FSVWlOR0NqM2ZySU9vTDhZYkstbnNZbXdn dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvUVJVaU5HQ2ozZnJJT29MOFliSy1uc1ltd2d3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRC NDVGLzhDQTIwQTFDQUFEMjExRUY5QUEwRUY4MEM0RjlBRTAyL1FSVWlOR0NqM2Zy SU9vTDhZYkstbnNZbXdndy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKuTeku+TYbhCkTc7mAt5DSVEAsgY4tuY7TYX+0E7o9d17ZYt1hSs5R1 nglsqkgJOqQo/R7Sgk1i7RpK0VtcvS+x0yAMn5Ucgft9I4QTzPCWE7U/LdYaWjcA Mz2IF+xPtgreTBVTDMl9fSJgeigW5DlsZVq8H0oeb6T3r9YXNAx2Rl/u3Rpv8lIo aJfdUGZbiB66Yy4iNHUTEyGBI2MNAy7LZ2LW6QLgIRk6ccMUf83kA5Le/2MJMxko L/1AkN2rcziuF2i+MpYvDTDCYmrL02JtLIDONDmgAoHl2zrOpZQOTeGVSbUhYM3L LlYq6i205xrwZ1uJt22Px41C3fWPM7c= -----END CERTIFICATE-----Generated at Fri Jun 20 02:33:29 2025 by rpki-client