$ rpki-client -vvf rpki.apnic.net/member_repository/A915D6C2/F9C46FAC53A211EC9D5E615DC4F9AE02/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.mft File: QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.mft (raw, json) Hash identifier: xBSs2/gDMBuZLn0G5graA8H5N7kXdQAMqWFMGzW7yJw= Subject key identifier: F6:5A:63:BD:36:AB:9E:2B:55:91:D6:7B:FD:F3:2A:05:26:F3:8A:B8 Authority key identifier: 42:B7:49:E1:EC:DB:E0:30:74:7F:8C:B5:74:7F:2D:73:A5:E4:24:54 Certificate issuer: /CN=A915D6C2/serialNumber=42B749E1ECDBE030747F8CB5747F2D73A5E42454 Certificate serial: 046B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D6C2/F9C46FAC53A211EC9D5E615DC4F9AE02/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.mft Manifest number: 0460 Signing time: Sat 14 Jun 2025 23:54:46 +0000 Manifest this update: Sat 14 Jun 2025 23:54:45 +0000 Manifest next update: Sat 21 Jun 2025 23:54:45 +0000 Files and hashes: 1: QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.crl (hash: ZzejIuHCOjy7KfrsekPehyqW2phBzEsUn32cWVtPvxE=) 2: 58A4A3E2B73A11ED8A2A8964C4F9AE02.roa (hash: xz+NY0PKDA1h31JonPA24zzAghWJ7xvhqwh0rxa8hB0=) 3: 5808B946B73A11ED8A2A8964C4F9AE02.roa (hash: XeoWUyV8cBersz5ERZwPilXowKBP6ZkIQoJiUYARqzE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D6C2/F9C46FAC53A211EC9D5E615DC4F9AE02/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.crl rsync://rpki.apnic.net/member_repository/A915D6C2/F9C46FAC53A211EC9D5E615DC4F9AE02/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 23:54:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1131 (0x46b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D6C2, serialNumber=42B749E1ECDBE030747F8CB5747F2D73A5E42454 Validity Not Before: Jun 14 23:54:45 2025 GMT Not After : Jun 21 23:54:45 2025 GMT Subject: CN=684e0bc6-858b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:ec:a5:57:57:3b:93:49:a1:8c:e3:c2:b7:ea: f6:f3:de:85:40:25:88:41:b6:98:22:aa:ef:9b:69: 68:5b:d0:78:0a:08:e8:b4:03:60:6a:c3:4f:81:14: b7:01:fd:d6:1d:b0:c8:b4:de:42:d7:0b:52:ba:9f: dc:bf:4f:4a:c0:17:3e:ca:49:05:2c:9a:44:75:70: 89:ce:ef:bf:6b:dd:cd:8b:48:f8:9a:1a:6d:6e:05: 67:25:e3:4d:10:4e:c8:29:e3:a0:7a:07:9e:ec:82: 44:5d:37:59:90:6f:75:69:d7:19:ef:61:23:fc:b5: c8:ff:91:a5:fb:97:f3:18:34:5d:de:eb:1e:1b:de: 93:85:e7:13:73:13:f7:b0:8f:c4:af:8f:86:2b:d8: c5:91:e5:f1:ac:c4:a9:8e:a7:9f:41:cc:0e:fb:5b: 36:d8:a4:84:c8:26:25:df:f2:53:5d:4c:21:57:b7: 15:a1:06:18:35:6d:84:2b:6b:39:f7:6b:6c:67:aa: 6f:0e:01:33:8e:39:94:a7:fb:ca:67:e4:a1:91:ee: 45:73:fd:f7:de:b5:ed:de:b3:98:c5:4c:31:48:6b: 11:49:92:2f:96:37:47:c0:93:8b:00:3b:05:85:86: 3e:8d:a1:dd:dd:44:a9:2d:d8:fb:12:4d:10:fc:0c: 45:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:5A:63:BD:36:AB:9E:2B:55:91:D6:7B:FD:F3:2A:05:26:F3:8A:B8 X509v3 Authority Key Identifier: keyid:42:B7:49:E1:EC:DB:E0:30:74:7F:8C:B5:74:7F:2D:73:A5:E4:24:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D6C2/F9C46FAC53A211EC9D5E615DC4F9AE02/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D6C2/F9C46FAC53A211EC9D5E615DC4F9AE02/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:9e:de:7a:7a:25:73:f7:a6:01:ab:90:73:8a:90:1c:2c:0f: aa:22:92:48:ab:c6:aa:39:11:67:e7:46:cd:bf:19:a2:20:0f: d2:73:f8:4a:f2:95:e2:24:f8:c4:22:60:ec:1e:73:9c:4b:ed: fa:2f:e1:f8:2c:53:48:f8:1e:44:b9:0b:7b:d6:b2:c3:ef:39: 44:d4:0a:5e:d7:69:b6:ce:5a:2a:11:d8:78:88:79:4b:51:89: 1f:56:89:c1:ea:4d:aa:a1:c9:80:ae:c2:a1:9f:4e:5b:ce:aa: 6c:6d:d5:80:4b:ba:d4:57:a5:b1:37:cf:86:2c:27:da:86:d0: 98:d7:97:e3:83:6e:1e:c0:3b:58:9f:7b:96:80:43:c0:87:0b: f9:b5:00:5c:3a:bd:1f:cd:d1:2a:c6:44:99:10:28:6f:71:50: 5a:dc:89:13:ae:32:0e:a2:52:85:82:51:24:7d:10:60:5c:56: 16:99:8b:a2:27:69:d9:7e:fb:46:cd:f0:12:5f:4e:a0:8b:c0: 54:f2:0b:f2:c2:13:bd:8b:ac:12:f4:8b:de:49:6f:35:9c:33: db:d7:12:5a:30:a8:99:a9:f8:e7:ee:23:b2:eb:6f:60:0d:da: 48:28:45:81:f1:79:a5:a3:70:c1:6e:7f:2b:26:91:00:dd:b9: f8:70:65:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBGswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQ2QzIxMTAvBgNVBAUTKDQyQjc0OUUxRUNEQkUwMzA3NDdGOENCNTc0N0YyRDcz QTVFNDI0NTQwHhcNMjUwNjE0MjM1NDQ1WhcNMjUwNjIxMjM1NDQ1WjAYMRYwFAYD VQQDEw02ODRlMGJjNi04NThiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1uylV1c7k0mhjOPCt+r2896FQCWIQbaYIqrvm2loW9B4CgjotANgasNPgRS3 Af3WHbDItN5C1wtSup/cv09KwBc+ykkFLJpEdXCJzu+/a93Ni0j4mhptbgVnJeNN EE7IKeOgegee7IJEXTdZkG91adcZ72Ej/LXI/5Gl+5fzGDRd3useG96ThecTcxP3 sI/Er4+GK9jFkeXxrMSpjqefQcwO+1s22KSEyCYl3/JTXUwhV7cVoQYYNW2EK2s5 92tsZ6pvDgEzjjmUp/vKZ+Shke5Fc/333rXt3rOYxUwxSGsRSZIvljdHwJOLADsF hYY+jaHd3USpLdj7Ek0Q/AxFvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPZaY702 q54rVZHWe/3zKgUm84q4MB8GA1UdIwQYMBaAFEK3SeHs2+AwdH+MtXR/LXOl5CRU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDZDMi9GOUM0NkZBQzUz QTIxMUVDOUQ1RTYxNURDNEY5QUUwMi9RcmRKNGV6YjREQjBmNHkxZEg4dGM2WGtK RlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FyZEo0ZXpiNERCMGY0eTFkSDh0YzZYa0pGUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDZDMi9GOUM0NkZBQzUzQTIxMUVDOUQ1RTYxNURDNEY5QUUwMi9RcmRKNGV6YjRE QjBmNHkxZEg4dGM2WGtKRlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBInt56eiVz96YBq5BzipAcLA+qIpJIq8aqORFn50bNvxmiIA/Sc/hK 8pXiJPjEImDsHnOcS+36L+H4LFNI+B5EuQt71rLD7zlE1Ape12m2zloqEdh4iHlL UYkfVonB6k2qocmArsKhn05bzqpsbdWAS7rUV6WxN8+GLCfahtCY15fjg24ewDtY n3uWgEPAhwv5tQBcOr0fzdEqxkSZEChvcVBa3IkTrjIOolKFglEkfRBgXFYWmYui J2nZfvtGzfASX06gi8BU8gvywhO9i6wS9IveSW81nDPb1xJaMKiZqfjn7iOy629g DdpIKEWB8Xmlo3DBbn8rJpEA3bn4cGWM -----END CERTIFICATE-----Generated at Sun Jun 15 04:49:32 2025 by rpki-client