$ rpki-client -vvf rpki.apnic.net/member_repository/A91580A1/92560A6A374D11EAA0A3BE55C4F9AE02/Q3_zTue8cFDJyEiGqpTOjPUMJPk.mft File: Q3_zTue8cFDJyEiGqpTOjPUMJPk.mft (raw, json) Hash identifier: ATK27eRd2HTiLQbSvNa6nq0g1OJ/dEmOYs58vI1LrRk= Subject key identifier: 3B:F0:A4:D8:D9:BF:AF:78:71:8D:07:ED:EC:1C:EA:DF:5E:9C:8F:FC Authority key identifier: 43:7F:F3:4E:E7:BC:70:50:C9:C8:48:86:AA:94:CE:8C:F5:0C:24:F9 Certificate issuer: /CN=A91580A1/serialNumber=437FF34EE7BC7050C9C84886AA94CE8CF50C24F9 Certificate serial: 081C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q3_zTue8cFDJyEiGqpTOjPUMJPk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91580A1/92560A6A374D11EAA0A3BE55C4F9AE02/Q3_zTue8cFDJyEiGqpTOjPUMJPk.mft Manifest number: 134C Signing time: Thu 12 Jun 2025 18:56:24 +0000 Manifest this update: Thu 12 Jun 2025 18:56:23 +0000 Manifest next update: Thu 19 Jun 2025 18:56:23 +0000 Files and hashes: 1: Q3_zTue8cFDJyEiGqpTOjPUMJPk.crl (hash: C2m7e3cc9rYrWSQ9yIAqDS3iKlUcs2BlDiJJdKGlrss=) 2: B65A4FACE18C11ECB1697F55C4F9AE02.roa (hash: 5zkE6RPNVvetKuzik8vsy3mHeLDd3Wj/ciaGchVH9po=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91580A1/92560A6A374D11EAA0A3BE55C4F9AE02/Q3_zTue8cFDJyEiGqpTOjPUMJPk.crl rsync://rpki.apnic.net/member_repository/A91580A1/92560A6A374D11EAA0A3BE55C4F9AE02/Q3_zTue8cFDJyEiGqpTOjPUMJPk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q3_zTue8cFDJyEiGqpTOjPUMJPk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 18:56:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2076 (0x81c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91580A1, serialNumber=437FF34EE7BC7050C9C84886AA94CE8CF50C24F9 Validity Not Before: Jun 12 18:56:23 2025 GMT Not After : Jun 19 18:56:23 2025 GMT Subject: CN=684b22d7-c19e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:c3:26:ae:75:46:8d:d2:ce:db:4e:a8:7e:a0: b9:cd:a4:00:ae:7f:80:3c:e7:d4:c0:e0:ed:3f:3c: a7:37:8d:6d:e2:f5:2a:0a:3b:d7:f7:8c:52:6e:ca: 64:72:f1:8c:60:ff:42:06:af:ce:36:aa:f1:38:e9: 92:b5:32:d6:7a:24:5b:0a:ff:d4:cb:58:7e:31:df: 33:ab:c2:d2:16:b5:1f:48:18:df:d0:7a:58:bf:5c: e6:22:47:09:39:97:53:08:a2:14:6a:23:f3:38:ac: fe:3f:90:07:e1:1b:79:34:b7:ea:89:1b:9c:8e:b4: 37:4a:ca:1c:97:dd:a1:5d:f5:f0:13:2e:18:9f:b5: f6:68:b9:9d:9e:13:ec:c1:0b:12:f8:d9:af:43:70: 1b:72:70:33:a6:0b:08:9c:bd:a6:25:48:d6:8b:78: 70:bb:2d:7d:91:22:e6:48:e7:51:5e:96:57:10:f1: 9c:45:8c:14:99:d7:b7:8c:c6:60:be:b1:bf:41:fa: e8:6c:48:45:d1:9b:14:29:5d:90:3e:10:d2:08:ed: 84:a8:d9:b0:f2:48:78:14:21:19:17:fd:13:06:a9: 1c:2c:f6:56:4f:3b:9f:23:6e:0b:bd:08:58:46:79: f3:d2:9f:d2:4d:2d:f7:83:1a:a7:5a:0b:92:ba:ff: 4b:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:F0:A4:D8:D9:BF:AF:78:71:8D:07:ED:EC:1C:EA:DF:5E:9C:8F:FC X509v3 Authority Key Identifier: keyid:43:7F:F3:4E:E7:BC:70:50:C9:C8:48:86:AA:94:CE:8C:F5:0C:24:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91580A1/92560A6A374D11EAA0A3BE55C4F9AE02/Q3_zTue8cFDJyEiGqpTOjPUMJPk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q3_zTue8cFDJyEiGqpTOjPUMJPk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91580A1/92560A6A374D11EAA0A3BE55C4F9AE02/Q3_zTue8cFDJyEiGqpTOjPUMJPk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:43:a4:b5:cf:71:d6:a1:2f:ee:fd:c7:9e:78:0f:2a:92:10: 97:26:19:e0:0c:c6:1c:16:a3:9f:44:89:fe:81:56:84:8a:85: 2a:91:3f:96:d5:50:65:3c:cd:8b:a3:b0:93:a2:63:7c:e8:f5: 22:3e:77:66:b6:57:6c:74:74:40:71:ba:ba:e7:56:46:21:f4: 74:00:7e:07:25:41:2e:97:1d:12:ae:da:8d:b4:44:4f:37:58: 2e:88:87:27:37:41:a0:6f:b9:03:87:f9:44:73:39:7a:5f:50: 37:e4:f9:7e:fb:2c:80:ef:0d:3b:19:20:7a:91:9d:f6:50:fd: 90:40:23:ad:49:29:3a:ae:ed:b7:b1:9c:d2:84:a7:b7:a3:f4: e4:f4:ee:9c:93:07:f9:3b:c8:aa:58:13:c9:e8:7c:09:f0:2f: 33:cb:e6:2f:3e:1d:16:7c:bb:fc:97:bd:e0:d3:7d:d8:f6:7a: 9e:14:9e:23:6a:ff:d9:f6:8d:0f:e8:74:82:f6:e2:ed:4d:07: 0a:61:d4:0e:bf:98:49:75:9b:61:41:75:5f:6e:34:50:2d:00: 80:f8:d8:e4:0f:e5:6c:84:ff:6c:ef:30:b8:ac:83:f3:a9:8b: 4a:dd:10:57:17:39:3c:18:b0:bc:45:c5:3f:2c:79:74:e5:ec: 78:29:ab:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCBwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTgwQTExMTAvBgNVBAUTKDQzN0ZGMzRFRTdCQzcwNTBDOUM4NDg4NkFBOTRDRThD RjUwQzI0RjkwHhcNMjUwNjEyMTg1NjIzWhcNMjUwNjE5MTg1NjIzWjAYMRYwFAYD VQQDEw02ODRiMjJkNy1jMTllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA28MmrnVGjdLO206ofqC5zaQArn+APOfUwODtPzynN41t4vUqCjvX94xSbspk cvGMYP9CBq/ONqrxOOmStTLWeiRbCv/Uy1h+Md8zq8LSFrUfSBjf0HpYv1zmIkcJ OZdTCKIUaiPzOKz+P5AH4Rt5NLfqiRucjrQ3Ssocl92hXfXwEy4Yn7X2aLmdnhPs wQsS+NmvQ3AbcnAzpgsInL2mJUjWi3hwuy19kSLmSOdRXpZXEPGcRYwUmde3jMZg vrG/QfrobEhF0ZsUKV2QPhDSCO2EqNmw8kh4FCEZF/0TBqkcLPZWTzufI24LvQhY Rnnz0p/STS33gxqnWguSuv9LywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDvwpNjZ v694cY0H7ewc6t9enI/8MB8GA1UdIwQYMBaAFEN/807nvHBQychIhqqUzoz1DCT5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODBBMS85MjU2MEE2QTM3 NEQxMUVBQTBBM0JFNTVDNEY5QUUwMi9RM196VHVlOGNGREp5RWlHcXBUT2pQVU1K UGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1EzX3pUdWU4Y0ZESnlFaUdxcFRPalBVTUpQay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODBBMS85MjU2MEE2QTM3NEQxMUVBQTBBM0JFNTVDNEY5QUUwMi9RM196VHVlOGNG REp5RWlHcXBUT2pQVU1KUGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCuQ6S1z3HWoS/u/ceeeA8qkhCXJhngDMYcFqOfRIn+gVaEioUqkT+W 1VBlPM2Lo7CTomN86PUiPndmtldsdHRAcbq651ZGIfR0AH4HJUEulx0SrtqNtERP N1guiIcnN0Ggb7kDh/lEczl6X1A35Pl++yyA7w07GSB6kZ32UP2QQCOtSSk6ru23 sZzShKe3o/Tk9O6ckwf5O8iqWBPJ6HwJ8C8zy+YvPh0WfLv8l73g033Y9nqeFJ4j av/Z9o0P6HSC9uLtTQcKYdQOv5hJdZthQXVfbjRQLQCA+NjkD+VshP9s7zC4rIPz qYtK3RBXFzk8GLC8RcU/LHl05ex4Katm -----END CERTIFICATE-----Generated at Sat Jun 14 19:31:37 2025 by rpki-client