$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0EE/435C3EE009C011EEBE12583AC4F9AE02/qju6qgnV04M0CJnW1TqW1UBTnAE.mft File: qju6qgnV04M0CJnW1TqW1UBTnAE.mft (raw, json) Hash identifier: PYUSyOVIg403voACUJ8U06z3Jc94xV9kZkfEDOgxoxA= Subject key identifier: A3:2D:C3:24:16:DE:BF:2B:2C:B7:CB:F8:36:EC:92:3F:88:22:68:C2 Authority key identifier: AA:3B:BA:AA:09:D5:D3:83:34:08:99:D6:D5:3A:96:D5:40:53:9C:01 Certificate issuer: /CN=A915A0EE/serialNumber=AA3BBAAA09D5D383340899D6D53A96D540539C01 Certificate serial: 017F Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/qju6qgnV04M0CJnW1TqW1UBTnAE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A0EE/435C3EE009C011EEBE12583AC4F9AE02/qju6qgnV04M0CJnW1TqW1UBTnAE.mft Manifest number: 017D Signing time: Sat 21 Jun 2025 02:54:58 +0000 Manifest this update: Sat 21 Jun 2025 02:54:58 +0000 Manifest next update: Sat 28 Jun 2025 02:54:58 +0000 Files and hashes: 1: qju6qgnV04M0CJnW1TqW1UBTnAE.crl (hash: nfXLAPI2zssFNG0SrTb9va+TqEeUMfOkbw1pfOtGsx4=) 2: 37B56C103AA111F0AB9C9C63C4F9AE02.roa (hash: +VI30a7iGnBTntTbzqOGgbI6ufcRR7N7PHwBl75oMqg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A0EE/435C3EE009C011EEBE12583AC4F9AE02/qju6qgnV04M0CJnW1TqW1UBTnAE.crl rsync://rpki.apnic.net/member_repository/A915A0EE/435C3EE009C011EEBE12583AC4F9AE02/qju6qgnV04M0CJnW1TqW1UBTnAE.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/qju6qgnV04M0CJnW1TqW1UBTnAE.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Jun 2025 02:50:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 383 (0x17f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A0EE, serialNumber=AA3BBAAA09D5D383340899D6D53A96D540539C01 Validity Not Before: Jun 21 02:54:58 2025 GMT Not After : Jun 28 02:54:58 2025 GMT Subject: CN=68561f02-944c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:de:9a:cc:23:e4:5a:46:10:61:83:ca:13:28: b5:d7:af:30:93:1b:c6:99:77:bb:c1:e7:03:75:15: 83:e7:2c:27:9c:3e:7b:f0:06:20:af:4c:e6:89:80: 55:ee:ad:ad:79:0b:8f:e0:e9:65:47:fc:ae:42:30: 4d:ed:b3:cd:bf:be:95:f1:99:c6:88:8a:3e:e2:1b: ad:aa:bc:52:bf:6f:1e:7e:92:35:3e:4d:83:5e:2e: ea:91:17:bd:3d:bc:7c:86:7f:b7:11:66:b9:99:cd: 7d:0a:c5:a1:2f:84:3e:23:1f:a6:00:f1:c3:11:56: 32:d4:17:bd:b0:41:eb:9b:29:c4:b6:99:54:92:ca: e3:d8:68:34:7a:20:3e:15:92:01:7d:cc:f7:1d:2c: 1b:d3:1e:85:97:3a:8e:7a:e1:81:42:e3:b7:f7:ca: b3:e3:e2:d0:60:d3:e0:64:ee:94:d7:31:de:79:a7: 03:85:4b:36:c5:74:b9:f5:e4:7f:9f:60:3d:7c:c8: f0:0a:93:cf:ec:5c:91:44:7d:f7:1a:df:10:a1:81: fd:bd:b4:29:f5:34:d4:e2:10:78:3a:1b:23:60:af: 14:8d:cd:81:3c:46:c1:da:3b:b4:fd:13:c8:36:aa: 13:47:e2:8c:4d:3f:1b:85:ec:a6:74:02:37:b1:c8: bc:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:2D:C3:24:16:DE:BF:2B:2C:B7:CB:F8:36:EC:92:3F:88:22:68:C2 X509v3 Authority Key Identifier: keyid:AA:3B:BA:AA:09:D5:D3:83:34:08:99:D6:D5:3A:96:D5:40:53:9C:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A0EE/435C3EE009C011EEBE12583AC4F9AE02/qju6qgnV04M0CJnW1TqW1UBTnAE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/qju6qgnV04M0CJnW1TqW1UBTnAE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0EE/435C3EE009C011EEBE12583AC4F9AE02/qju6qgnV04M0CJnW1TqW1UBTnAE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:06:45:1b:15:ab:2b:8c:bb:06:9f:35:61:96:b6:9e:db:36: bc:3b:7a:2b:2e:9e:c7:45:70:fd:cd:43:5d:cd:c1:56:34:ac: f9:54:11:fc:1e:96:e2:e5:ff:2c:a1:ba:f8:fe:90:36:12:3a: 75:2a:e2:09:09:b0:8f:0c:8a:f3:c0:9b:49:21:5d:fa:c9:f0: 7e:d5:cf:23:18:67:36:27:c6:c7:48:6f:55:33:48:d3:0f:a1: 25:ca:98:a0:c6:1f:cf:68:23:75:60:81:72:54:e8:6a:86:83: 23:83:d0:27:85:b8:c3:30:b2:50:74:fe:b3:7f:41:68:fa:1c: f9:e9:eb:ea:af:1d:82:00:4f:44:d0:04:cd:4f:14:7d:83:fc: a8:21:5b:2b:21:5c:ac:f0:92:b3:99:50:0c:69:71:4a:99:4d: a6:3d:69:a3:50:f9:c4:56:22:55:4a:0d:34:72:c8:e9:46:35: a2:9c:d2:d8:31:98:aa:20:43:9d:b2:16:16:0f:a5:68:74:eb: 5a:7e:55:b4:45:69:a2:b9:3d:e4:b5:4c:c8:7b:0a:13:5a:98: 36:48:f0:5e:b7:35:70:4b:b3:4a:53:1b:cf:64:3e:f6:40:59: 01:85:9f:dc:ba:8a:1f:0e:c4:38:9c:3a:8f:e9:3e:ce:9c:2f: ac:16:1d:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAX8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUEwRUUxMTAvBgNVBAUTKEFBM0JCQUFBMDlENUQzODMzNDA4OTlENkQ1M0E5NkQ1 NDA1MzlDMDEwHhcNMjUwNjIxMDI1NDU4WhcNMjUwNjI4MDI1NDU4WjAYMRYwFAYD VQQDEw02ODU2MWYwMi05NDRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt96azCPkWkYQYYPKEyi1168wkxvGmXe7wecDdRWD5ywnnD578AYgr0zmiYBV 7q2teQuP4OllR/yuQjBN7bPNv76V8ZnGiIo+4hutqrxSv28efpI1Pk2DXi7qkRe9 Pbx8hn+3EWa5mc19CsWhL4Q+Ix+mAPHDEVYy1Be9sEHrmynEtplUksrj2Gg0eiA+ FZIBfcz3HSwb0x6FlzqOeuGBQuO398qz4+LQYNPgZO6U1zHeeacDhUs2xXS59eR/ n2A9fMjwCpPP7FyRRH33Gt8QoYH9vbQp9TTU4hB4OhsjYK8Ujc2BPEbB2ju0/RPI NqoTR+KMTT8bheymdAI3sci8PwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKMtwyQW 3r8rLLfL+Dbskj+IImjCMB8GA1UdIwQYMBaAFKo7uqoJ1dODNAiZ1tU6ltVAU5wB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTBFRS80MzVDM0VFMDA5 QzAxMUVFQkUxMjU4M0FDNEY5QUUwMi9xanU2cWduVjA0TTBDSm5XMVRxVzFVQlRu QUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL3FqdTZxZ25WMDRNMENKblcxVHFXMVVCVG5BRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QTBFRS80MzVDM0VFMDA5QzAxMUVFQkUxMjU4M0FDNEY5QUUwMi9xanU2cWduVjA0 TTBDSm5XMVRxVzFVQlRuQUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWBkUbFasrjLsGnzVhlrae2za8O3orLp7HRXD9zUNdzcFWNKz5VBH8 Hpbi5f8sobr4/pA2Ejp1KuIJCbCPDIrzwJtJIV36yfB+1c8jGGc2J8bHSG9VM0jT D6Elypigxh/PaCN1YIFyVOhqhoMjg9AnhbjDMLJQdP6zf0Fo+hz56evqrx2CAE9E 0ATNTxR9g/yoIVsrIVys8JKzmVAMaXFKmU2mPWmjUPnEViJVSg00csjpRjWinNLY MZiqIEOdshYWD6VodOtaflW0RWmiuT3ktUzIewoTWpg2SPBetzVwS7NKUxvPZD72 QFkBhZ/cuoofDsQ4nDqP6T7OnC+sFh3B -----END CERTIFICATE-----Generated at Sat Jun 21 10:41:44 2025 by rpki-client