$ rpki-client -vvf rpki.apnic.net/member_repository/A914D6FC/88759182432F11EDBBD98F5CC4F9AE02/qL9U9ggZZyIZNcsXzBPr-4QaYMI.mft File: qL9U9ggZZyIZNcsXzBPr-4QaYMI.mft (raw, json) Hash identifier: VdAK6eltOX1FlJt30JtgqUtUA4SjGfcQZs8N9fARYQI= Subject key identifier: 5E:BA:A6:9B:04:68:CA:64:46:AA:E9:5C:C8:AB:A5:7B:54:6B:6C:8F Authority key identifier: A8:BF:54:F6:08:19:67:22:19:35:CB:17:CC:13:EB:FB:84:1A:60:C2 Certificate issuer: /CN=A914D6FC/serialNumber=A8BF54F6081967221935CB17CC13EBFB841A60C2 Certificate serial: 020A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qL9U9ggZZyIZNcsXzBPr-4QaYMI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914D6FC/88759182432F11EDBBD98F5CC4F9AE02/qL9U9ggZZyIZNcsXzBPr-4QaYMI.mft Manifest number: 0201 Signing time: Sun 15 Jun 2025 01:43:32 +0000 Manifest this update: Sun 15 Jun 2025 01:43:32 +0000 Manifest next update: Sun 22 Jun 2025 01:43:32 +0000 Files and hashes: 1: qL9U9ggZZyIZNcsXzBPr-4QaYMI.crl (hash: Zec54DLsUCggPgp5nsKvL2CLaXyzlaEkeFHvJbs2hxA=) 2: 11EC50B48B8F11EF8DE96E60C4F9AE02.roa (hash: dBzmelJqZJRJwarLr24Qo4vmuBT6QmKRJnEzxT0UO6A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914D6FC/88759182432F11EDBBD98F5CC4F9AE02/qL9U9ggZZyIZNcsXzBPr-4QaYMI.crl rsync://rpki.apnic.net/member_repository/A914D6FC/88759182432F11EDBBD98F5CC4F9AE02/qL9U9ggZZyIZNcsXzBPr-4QaYMI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qL9U9ggZZyIZNcsXzBPr-4QaYMI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 01:43:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 522 (0x20a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914D6FC, serialNumber=A8BF54F6081967221935CB17CC13EBFB841A60C2 Validity Not Before: Jun 15 01:43:32 2025 GMT Not After : Jun 22 01:43:32 2025 GMT Subject: CN=684e2544-9345 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:5d:66:b5:9b:0d:c9:d2:f8:76:2f:e3:0c:9c: f2:2d:b7:c1:d1:35:82:e4:9b:86:36:6f:3c:50:7a: 57:7e:6b:b7:98:f8:02:22:6c:59:79:ff:7e:2d:4a: 9f:41:54:4f:de:86:51:31:0e:6b:27:d7:0a:20:a4: 3a:77:ef:37:5f:95:4a:89:10:c9:93:d7:1b:d1:72: b5:98:33:fb:19:51:1b:6a:6a:fe:df:33:8f:0e:47: 46:e8:0d:ca:c9:8a:12:8b:af:49:45:a4:90:af:8f: 8f:80:d6:90:2c:66:f7:fa:cf:13:86:10:0d:5b:7c: 66:35:5e:72:1c:5e:84:54:f2:99:e8:75:2a:97:c8: 98:c5:32:ab:7f:86:68:28:f8:2f:5d:61:58:90:e5: 51:b4:8f:2b:76:d7:80:e5:ae:60:cc:16:36:dd:5e: a9:3b:31:f9:2f:c1:b8:8a:d1:8a:7e:a4:07:fd:24: a1:76:29:8d:cd:0a:2e:bf:0e:14:5f:53:12:1f:0f: 2f:bc:15:a8:3a:e2:bd:3a:67:60:3d:4a:c5:d3:b8: 55:c9:ef:d3:5b:b2:f5:1b:ca:35:ab:4b:46:9a:2b: 94:05:98:c7:7b:9c:68:a6:01:cb:39:ed:e3:17:bb: d1:5b:be:7b:07:61:54:e1:88:27:61:33:b5:c4:3b: 82:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:BA:A6:9B:04:68:CA:64:46:AA:E9:5C:C8:AB:A5:7B:54:6B:6C:8F X509v3 Authority Key Identifier: keyid:A8:BF:54:F6:08:19:67:22:19:35:CB:17:CC:13:EB:FB:84:1A:60:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914D6FC/88759182432F11EDBBD98F5CC4F9AE02/qL9U9ggZZyIZNcsXzBPr-4QaYMI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qL9U9ggZZyIZNcsXzBPr-4QaYMI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D6FC/88759182432F11EDBBD98F5CC4F9AE02/qL9U9ggZZyIZNcsXzBPr-4QaYMI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:da:27:3b:cf:6d:3a:da:19:04:ee:58:2b:90:6e:49:b1:73: 85:f9:2d:89:d0:da:e9:38:6c:4e:05:43:b8:3d:cf:11:7d:9c: 2d:7a:bb:56:3a:71:71:d1:f4:ee:0e:69:d8:06:f1:89:67:3b: 43:95:0d:3a:1a:bc:f2:9b:9b:bf:5d:fe:86:b4:96:cf:30:6d: d2:4f:b4:ef:0d:c4:65:69:c6:45:05:95:38:42:af:5b:50:3d: 1e:ee:6a:09:77:b0:97:c7:b6:01:78:57:ec:da:7a:a4:9b:01: 4d:11:81:71:b7:4c:bd:9a:37:61:fd:73:5c:7b:5c:e8:8b:3c: 0f:40:09:df:0b:af:95:f8:d5:9c:a5:14:1c:df:21:8c:b3:51: 64:b7:b9:02:c1:a9:48:e8:21:40:cc:fa:a2:29:e8:3b:6a:d9: 3f:ab:77:21:90:0d:d9:87:52:18:f4:73:30:b6:a8:40:3e:65: 36:58:1e:3f:35:21:48:c7:3b:79:fa:af:28:a6:62:ad:b2:2c: 49:28:32:8f:f4:6e:76:f4:cf:85:1f:05:fd:02:42:0b:07:c9: 65:ec:ef:2d:48:62:86:b3:72:e1:8c:0d:fc:a4:9d:6c:21:62: 6f:ff:b1:e6:18:15:79:cb:9e:ba:d4:b6:44:e9:12:7b:18:af: 9e:ac:2b:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEQ2RkMxMTAvBgNVBAUTKEE4QkY1NEY2MDgxOTY3MjIxOTM1Q0IxN0NDMTNFQkZC ODQxQTYwQzIwHhcNMjUwNjE1MDE0MzMyWhcNMjUwNjIyMDE0MzMyWjAYMRYwFAYD VQQDEw02ODRlMjU0NC05MzQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArF1mtZsNydL4di/jDJzyLbfB0TWC5JuGNm88UHpXfmu3mPgCImxZef9+LUqf QVRP3oZRMQ5rJ9cKIKQ6d+83X5VKiRDJk9cb0XK1mDP7GVEbamr+3zOPDkdG6A3K yYoSi69JRaSQr4+PgNaQLGb3+s8ThhANW3xmNV5yHF6EVPKZ6HUql8iYxTKrf4Zo KPgvXWFYkOVRtI8rdteA5a5gzBY23V6pOzH5L8G4itGKfqQH/SShdimNzQouvw4U X1MSHw8vvBWoOuK9OmdgPUrF07hVye/TW7L1G8o1q0tGmiuUBZjHe5xopgHLOe3j F7vRW757B2FU4YgnYTO1xDuCZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF66ppsE aMpkRqrpXMirpXtUa2yPMB8GA1UdIwQYMBaAFKi/VPYIGWciGTXLF8wT6/uEGmDC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RDZGQy84ODc1OTE4MjQz MkYxMUVEQkJEOThGNUNDNEY5QUUwMi9xTDlVOWdnWlp5SVpOY3NYekJQci00UWFZ TUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FMOVU5Z2daWnlJWk5jc1h6QlByLTRRYVlNSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RDZGQy84ODc1OTE4MjQzMkYxMUVEQkJEOThGNUNDNEY5QUUwMi9xTDlVOWdnWlp5 SVpOY3NYekJQci00UWFZTUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB12ic7z2062hkE7lgrkG5JsXOF+S2J0NrpOGxOBUO4Pc8RfZwtertW OnFx0fTuDmnYBvGJZztDlQ06Grzym5u/Xf6GtJbPMG3ST7TvDcRlacZFBZU4Qq9b UD0e7moJd7CXx7YBeFfs2nqkmwFNEYFxt0y9mjdh/XNce1zoizwPQAnfC6+V+NWc pRQc3yGMs1Fkt7kCwalI6CFAzPqiKeg7atk/q3chkA3Zh1IY9HMwtqhAPmU2WB4/ NSFIxzt5+q8opmKtsixJKDKP9G529M+FHwX9AkILB8ll7O8tSGKGs3LhjA38pJ1s IWJv/7HmGBV5y5661LZE6RJ7GK+erCt+ -----END CERTIFICATE-----Generated at Sun Jun 15 09:50:20 2025 by rpki-client