$ rpki-client -vvf rpki.apnic.net/member_repository/A91580E4/5C0C955008BC11F0BEB4F552C4F9AE02/QuOGLXRTXCypqrN6cZW1keruIeU.mft File: QuOGLXRTXCypqrN6cZW1keruIeU.mft (raw, json) Hash identifier: CAFcFmWhPQrv2+pxViBzDt6gtVAVg+YELUI0NPEKxFI= Subject key identifier: 26:81:E2:D1:96:A4:3B:96:72:F8:EA:99:F0:11:12:74:2C:37:39:46 Authority key identifier: 42:E3:86:2D:74:53:5C:2C:A9:AA:B3:7A:71:95:B5:91:EA:EE:21:E5 Certificate issuer: /CN=A91580E4/serialNumber=42E3862D74535C2CA9AAB37A7195B591EAEE21E5 Certificate serial: 2B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QuOGLXRTXCypqrN6cZW1keruIeU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91580E4/5C0C955008BC11F0BEB4F552C4F9AE02/QuOGLXRTXCypqrN6cZW1keruIeU.mft Manifest number: 2A Signing time: Fri 13 Jun 2025 06:39:37 +0000 Manifest this update: Fri 13 Jun 2025 06:39:37 +0000 Manifest next update: Fri 20 Jun 2025 06:39:37 +0000 Files and hashes: 1: QuOGLXRTXCypqrN6cZW1keruIeU.crl (hash: /JDDk8PKz0Zjykwb6MxLUrY3/RC5BadXKqOzlB15o4Q=) 2: E78F55A408BC11F09C4FB471C4F9AE02.roa (hash: voOUCH7zRGxksu2fNV8QOYiL4kmVMcLs8S+aobdc9H8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91580E4/5C0C955008BC11F0BEB4F552C4F9AE02/QuOGLXRTXCypqrN6cZW1keruIeU.crl rsync://rpki.apnic.net/member_repository/A91580E4/5C0C955008BC11F0BEB4F552C4F9AE02/QuOGLXRTXCypqrN6cZW1keruIeU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QuOGLXRTXCypqrN6cZW1keruIeU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 06:39:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43 (0x2b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91580E4, serialNumber=42E3862D74535C2CA9AAB37A7195B591EAEE21E5 Validity Not Before: Jun 13 06:39:37 2025 GMT Not After : Jun 20 06:39:37 2025 GMT Subject: CN=684bc7a9-204d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:1c:c8:30:da:dd:2b:49:01:c5:37:85:2b:b6: 9f:1d:bb:a0:03:a4:d6:4e:17:ab:a6:76:ef:7a:38: 95:99:09:f5:36:48:de:ff:c1:8d:ff:30:45:e6:80: 9c:47:e0:95:a9:9a:a5:b2:e5:9d:80:03:aa:10:60: 53:73:1e:1a:23:cc:d8:bb:12:cc:21:90:f3:5c:f1: 33:85:9f:92:4f:89:52:89:52:b7:eb:34:40:dc:2b: ea:5f:c5:85:16:89:60:76:c2:c6:08:8d:23:40:05: f7:cf:71:de:83:9b:b5:e5:f5:5a:f1:8b:1c:ca:dc: 84:35:de:4f:73:93:35:c3:21:df:73:32:d6:8a:11: 43:94:61:4f:3b:a6:12:e6:a0:fd:7b:f9:df:03:cc: b8:a5:36:74:fa:0b:d6:1a:d5:40:a3:c9:ea:98:a4: 3a:ac:1f:b1:7b:2e:e4:7d:2f:19:51:46:d8:fc:64: c3:98:e2:7b:16:9a:d9:ed:65:4e:c3:f3:9b:38:de: 5c:c5:6c:1a:0d:b2:26:19:9c:3b:51:69:74:89:42: 15:57:bc:d0:05:e8:36:47:e2:3e:5b:9a:15:2c:6a: bf:4f:51:60:2e:b8:f8:03:dd:99:f4:d6:37:e8:60: ac:ef:91:c4:e9:39:ea:af:7e:6a:92:7f:c6:7d:48: 6b:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:81:E2:D1:96:A4:3B:96:72:F8:EA:99:F0:11:12:74:2C:37:39:46 X509v3 Authority Key Identifier: keyid:42:E3:86:2D:74:53:5C:2C:A9:AA:B3:7A:71:95:B5:91:EA:EE:21:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91580E4/5C0C955008BC11F0BEB4F552C4F9AE02/QuOGLXRTXCypqrN6cZW1keruIeU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QuOGLXRTXCypqrN6cZW1keruIeU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91580E4/5C0C955008BC11F0BEB4F552C4F9AE02/QuOGLXRTXCypqrN6cZW1keruIeU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:9e:4f:ec:19:de:b4:e2:15:07:b9:9a:ab:87:e4:9d:5a:fa: 43:4f:b7:7f:b4:be:fd:14:aa:a2:a1:62:30:89:ca:bd:f5:fb: bb:6b:ab:8a:36:f9:c5:8f:c0:1f:05:d9:2c:55:00:38:16:ac: 5f:86:5a:5e:6a:dd:9b:3b:57:84:69:39:5a:4d:c0:05:30:f4: 2d:35:02:5f:be:7f:ee:21:da:d5:68:ca:5c:b3:ea:dd:b4:3e: 59:16:6e:87:ac:50:89:b4:9a:f8:d8:69:ce:e9:07:94:89:a0: bc:28:05:f3:05:fa:56:57:75:db:b8:1e:80:cc:05:f6:77:e8: 4d:16:94:98:59:7b:2f:cc:9f:98:c0:03:3d:83:c7:4c:aa:70: ce:25:85:09:43:82:6b:2e:42:44:61:f9:6f:a5:6a:e7:80:8f: 43:9d:52:2b:de:6f:23:f1:4b:e2:0a:4b:d1:48:bc:43:24:f4: ee:51:29:45:fc:dc:5f:6d:e9:d2:9e:fb:66:e7:6b:4b:b9:a8: e2:26:97:74:6c:35:b7:24:26:05:e8:a7:a9:f9:a5:8b:d9:e1: 75:6f:e1:06:26:bb:f2:b6:f4:93:3c:a2:e6:a8:e3:24:d8:4c: 83:66:57:70:35:b7:e9:10:8e:61:79:86:23:70:6b:74:f0:c4: ae:44:2c:a9 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 ODBFNDExMC8GA1UEBRMoNDJFMzg2MkQ3NDUzNUMyQ0E5QUFCMzdBNzE5NUI1OTFF QUVFMjFFNTAeFw0yNTA2MTMwNjM5MzdaFw0yNTA2MjAwNjM5MzdaMBgxFjAUBgNV BAMTDTY4NGJjN2E5LTIwNGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDQHMgw2t0rSQHFN4Urtp8du6ADpNZOF6umdu96OJWZCfU2SN7/wY3/MEXmgJxH 4JWpmqWy5Z2AA6oQYFNzHhojzNi7EswhkPNc8TOFn5JPiVKJUrfrNEDcK+pfxYUW iWB2wsYIjSNABffPcd6Dm7Xl9VrxixzK3IQ13k9zkzXDId9zMtaKEUOUYU87phLm oP17+d8DzLilNnT6C9Ya1UCjyeqYpDqsH7F7LuR9LxlRRtj8ZMOY4nsWmtntZU7D 85s43lzFbBoNsiYZnDtRaXSJQhVXvNAF6DZH4j5bmhUsar9PUWAuuPgD3Zn01jfo YKzvkcTpOeqvfmqSf8Z9SGvLAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUJoHi0Zak O5Zy+OqZ8BESdCw3OUYwHwYDVR0jBBgwFoAUQuOGLXRTXCypqrN6cZW1keruIeUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU4MEU0LzVDMEM5NTUwMDhC QzExRjBCRUI0RjU1MkM0RjlBRTAyL1F1T0dMWFJUWEN5cHFyTjZjWlcxa2VydUll VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUXVPR0xYUlRYQ3lwcXJONmNaVzFrZXJ1SWVVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU4 MEU0LzVDMEM5NTUwMDhCQzExRjBCRUI0RjU1MkM0RjlBRTAyL1F1T0dMWFJUWEN5 cHFyTjZjWlcxa2VydUllVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACaeT+wZ3rTiFQe5mquH5J1a+kNPt3+0vv0UqqKhYjCJyr31+7trq4o2 +cWPwB8F2SxVADgWrF+GWl5q3Zs7V4RpOVpNwAUw9C01Al++f+4h2tVoylyz6t20 PlkWboesUIm0mvjYac7pB5SJoLwoBfMF+lZXddu4HoDMBfZ36E0WlJhZey/Mn5jA Az2Dx0yqcM4lhQlDgmsuQkRh+W+laueAj0OdUivebyPxS+IKS9FIvEMk9O5RKUX8 3F9t6dKe+2bna0u5qOIml3RsNbckJgXop6n5pYvZ4XVv4QYmu/K29JM8ouao4yTY TINmV3A1t+kQjmF5hiNwa3TwxK5ELKk= -----END CERTIFICATE-----Generated at Sat Jun 14 19:02:26 2025 by rpki-client