$ rpki-client -vvf rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/_qS5bzmD92nHM5dFbBK5D2QkbHw.mft File: _qS5bzmD92nHM5dFbBK5D2QkbHw.mft (raw, json) Hash identifier: 2LN3DdgigS0GJ+CcrM9TZ99GXcAN64WL7UbDHcRsKo8= Subject key identifier: 7E:AF:8F:36:63:D1:07:C6:E6:4C:B5:15:75:07:C6:13:7C:1E:D4:41 Authority key identifier: FE:A4:B9:6F:39:83:F7:69:C7:33:97:45:6C:12:B9:0F:64:24:6C:7C Certificate issuer: /CN=A916D36A/serialNumber=FEA4B96F3983F769C73397456C12B90F64246C7C Certificate serial: 1867 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_qS5bzmD92nHM5dFbBK5D2QkbHw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/_qS5bzmD92nHM5dFbBK5D2QkbHw.mft Manifest number: 1850 Signing time: Mon 16 Jun 2025 16:34:21 +0000 Manifest this update: Mon 16 Jun 2025 16:34:20 +0000 Manifest next update: Mon 23 Jun 2025 16:34:20 +0000 Files and hashes: 1: _qS5bzmD92nHM5dFbBK5D2QkbHw.crl (hash: t+LMGrZ84wNMP+bOQKhMeHHN8VLwXqakqd93pStHdJE=) 2: 8C3BBD78F0D611EDAF996E15C4F9AE02.roa (hash: N7dx64GJQaTD+hfotgNWy8WEHDuKcv63Y/iKVEUUUcc=) 3: C6454260AA9A11E7B4776E52C4F9AE02.roa (hash: 0pdtzVqkZfrRuKXWFlClUIrZtwjYq09u9Tu2fAJzA2k=) 4: 7F77220A143811EE97A64D19C4F9AE02.roa (hash: ifAfuqdkBihiiYwd3cqT6s5KTTI/lvGZWL7UrWL4Qzs=) 5: 5A8744D8143411EEAB1A5D73C4F9AE02.roa (hash: x8Y3lIEpnx3SAsHPEwwS/VLgFTVHt3ABZ23zAnhnfc0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/_qS5bzmD92nHM5dFbBK5D2QkbHw.crl rsync://rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/_qS5bzmD92nHM5dFbBK5D2QkbHw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_qS5bzmD92nHM5dFbBK5D2QkbHw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 16:34:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6247 (0x1867) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916D36A, serialNumber=FEA4B96F3983F769C73397456C12B90F64246C7C Validity Not Before: Jun 16 16:34:20 2025 GMT Not After : Jun 23 16:34:20 2025 GMT Subject: CN=6850478c-9b13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:bb:9d:2b:6b:9f:16:41:ac:6f:55:da:e7:c3: d3:61:09:aa:9a:53:e0:ea:58:37:e3:42:d7:2f:dc: a3:bb:29:e9:83:c5:93:46:b7:66:a5:d3:b3:a0:2b: 77:5d:a2:16:8f:2b:a8:7c:76:b2:41:71:27:ae:ca: 6b:6e:bb:4f:f1:e6:02:ad:19:4a:55:66:97:0b:49: 2a:99:62:04:fd:e2:3e:bb:e1:43:0b:22:68:29:08: a6:89:ab:18:c5:d5:6b:ea:45:8d:df:b7:44:1e:95: 52:10:91:fe:3a:eb:e6:04:94:41:87:19:fb:dc:a3: 2f:e5:2f:77:09:c7:82:74:2e:53:bd:15:9c:38:fd: b2:2f:2e:27:1d:9a:ca:04:0b:14:d2:1a:40:e9:52: 3f:2c:f7:80:dc:ce:a4:e8:53:10:2f:85:8c:e7:5e: 68:29:96:8f:e3:e9:92:4b:fa:c9:2b:d3:35:2f:d4: da:86:93:d4:2c:1d:2d:6d:06:45:fb:34:ef:66:ca: 72:99:4a:85:2a:64:9d:f2:e6:4b:52:e6:62:bc:21: 23:64:e2:48:24:43:aa:73:56:80:42:13:a7:7a:d1: c3:54:57:26:87:f4:4b:f7:78:80:ac:af:b5:fb:6e: 36:ff:ce:cb:e1:dd:ea:c0:5f:b2:fa:0a:11:3a:47: 5e:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:AF:8F:36:63:D1:07:C6:E6:4C:B5:15:75:07:C6:13:7C:1E:D4:41 X509v3 Authority Key Identifier: keyid:FE:A4:B9:6F:39:83:F7:69:C7:33:97:45:6C:12:B9:0F:64:24:6C:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/_qS5bzmD92nHM5dFbBK5D2QkbHw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_qS5bzmD92nHM5dFbBK5D2QkbHw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/_qS5bzmD92nHM5dFbBK5D2QkbHw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:3b:f0:0e:d6:94:e5:90:76:d9:31:a9:a4:da:65:2e:0e:84: 8b:c6:eb:eb:5a:bf:38:d4:07:18:6f:c9:ef:9b:3f:39:31:f2: fe:ae:78:01:92:c9:40:e7:64:b7:59:62:b0:2a:3a:54:52:e3: 61:89:00:38:48:56:62:6d:8f:07:2c:5e:ad:23:6e:83:1c:6b: 7f:bf:c9:d8:eb:6f:c3:f9:bb:65:74:f6:0c:05:ba:bf:45:74: 96:13:bf:c2:ef:bd:38:15:d7:9f:3a:c0:8e:66:6c:5a:31:1e: 63:2f:ba:df:a0:e1:2a:0b:6a:ec:85:b0:23:64:25:2e:c1:a1: 9a:3b:29:50:51:90:f9:7a:12:86:05:92:c3:d8:7c:b0:c0:27: a8:11:3c:6d:b4:f1:b1:31:1c:69:a9:63:75:50:d9:fe:ad:c6: 8b:15:f9:08:fe:08:16:0f:28:16:1a:41:12:8a:27:8a:1d:42: 76:28:47:4d:83:fd:08:72:cc:c7:7e:ab:6a:a1:f1:6d:32:a0: c7:76:9b:4f:f1:2a:6c:db:0a:e8:82:cf:b1:1e:3c:cf:ac:8d: ac:52:14:a7:86:07:ce:3f:f3:12:36:3f:f6:58:a4:6f:0c:23: ed:13:de:83:cb:f1:67:a6:e3:88:15:1b:e9:15:a3:83:da:51: 09:3f:d7:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGGcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkQzNkExMTAvBgNVBAUTKEZFQTRCOTZGMzk4M0Y3NjlDNzMzOTc0NTZDMTJCOTBG NjQyNDZDN0MwHhcNMjUwNjE2MTYzNDIwWhcNMjUwNjIzMTYzNDIwWjAYMRYwFAYD VQQDEw02ODUwNDc4Yy05YjEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt7udK2ufFkGsb1Xa58PTYQmqmlPg6lg340LXL9yjuynpg8WTRrdmpdOzoCt3 XaIWjyuofHayQXEnrsprbrtP8eYCrRlKVWaXC0kqmWIE/eI+u+FDCyJoKQimiasY xdVr6kWN37dEHpVSEJH+OuvmBJRBhxn73KMv5S93CceCdC5TvRWcOP2yLy4nHZrK BAsU0hpA6VI/LPeA3M6k6FMQL4WM515oKZaP4+mSS/rJK9M1L9TahpPULB0tbQZF +zTvZspymUqFKmSd8uZLUuZivCEjZOJIJEOqc1aAQhOnetHDVFcmh/RL93iArK+1 +242/87L4d3qwF+y+goROkdewQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH6vjzZj 0QfG5ky1FXUHxhN8HtRBMB8GA1UdIwQYMBaAFP6kuW85g/dpxzOXRWwSuQ9kJGx8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDM2QS8zN0FCRDcwOEFB OUExMUU3QkFDNDEyNTJDNEY5QUUwMi9fcVM1YnptRDkybkhNNWRGYkJLNUQyUWti SHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19xUzViem1EOTJuSE01ZEZiQks1RDJRa2JIdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RDM2QS8zN0FCRDcwOEFBOUExMUU3QkFDNDEyNTJDNEY5QUUwMi9fcVM1YnptRDky bkhNNWRGYkJLNUQyUWtiSHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1O/AO1pTlkHbZMamk2mUuDoSLxuvrWr841AcYb8nvmz85MfL+rngB kslA52S3WWKwKjpUUuNhiQA4SFZibY8HLF6tI26DHGt/v8nY62/D+btldPYMBbq/ RXSWE7/C7704FdefOsCOZmxaMR5jL7rfoOEqC2rshbAjZCUuwaGaOylQUZD5ehKG BZLD2HywwCeoETxttPGxMRxpqWN1UNn+rcaLFfkI/ggWDygWGkESiieKHUJ2KEdN g/0IcszHfqtqofFtMqDHdptP8Sps2wrogs+xHjzPrI2sUhSnhgfOP/MSNj/2WKRv DCPtE96Dy/FnpuOIFRvpFaOD2lEJP9eM -----END CERTIFICATE-----Generated at Tue Jun 17 11:58:10 2025 by rpki-client