$ rpki-client -vvf rpki.apnic.net/member_repository/A9176E1D/FE8835BCF9F011EFB77A8C6EC4F9AE02/CqbkgyhCXhJMVhwqwYfIoZYkcRA.mft File: CqbkgyhCXhJMVhwqwYfIoZYkcRA.mft (raw, json) Hash identifier: DuwdWlKnIFUu/evj43IcMzOa9vFTWwUA5oTuQpjEDlg= Subject key identifier: B9:36:94:E4:8C:0C:01:75:CD:4A:DA:03:82:40:85:E1:ED:29:11:83 Authority key identifier: 0A:A6:E4:83:28:42:5E:12:4C:56:1C:2A:C1:87:C8:A1:96:24:71:10 Certificate issuer: /CN=A9176E1D/serialNumber=0AA6E48328425E124C561C2AC187C8A196247110 Certificate serial: 3C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqbkgyhCXhJMVhwqwYfIoZYkcRA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9176E1D/FE8835BCF9F011EFB77A8C6EC4F9AE02/CqbkgyhCXhJMVhwqwYfIoZYkcRA.mft Manifest number: 39 Signing time: Sun 15 Jun 2025 06:41:22 +0000 Manifest this update: Sun 15 Jun 2025 06:41:21 +0000 Manifest next update: Sun 22 Jun 2025 06:41:21 +0000 Files and hashes: 1: CqbkgyhCXhJMVhwqwYfIoZYkcRA.crl (hash: mt+DIKe72mh1+/Pn4/RjGy4cx9v047cvmVAoXk0tqmU=) 2: 8A5CF8F0FB7411EF83C11685C4F9AE02.roa (hash: gNUxEstcyYM8bAYzOWKSq0siVBhwvrTxTLZTCsVvFik=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9176E1D/FE8835BCF9F011EFB77A8C6EC4F9AE02/CqbkgyhCXhJMVhwqwYfIoZYkcRA.crl rsync://rpki.apnic.net/member_repository/A9176E1D/FE8835BCF9F011EFB77A8C6EC4F9AE02/CqbkgyhCXhJMVhwqwYfIoZYkcRA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqbkgyhCXhJMVhwqwYfIoZYkcRA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 06:41:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60 (0x3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9176E1D, serialNumber=0AA6E48328425E124C561C2AC187C8A196247110 Validity Not Before: Jun 15 06:41:21 2025 GMT Not After : Jun 22 06:41:21 2025 GMT Subject: CN=684e6b12-f0ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:25:38:e4:df:61:7c:7e:71:42:ba:ee:8b:89: 9a:05:5b:01:24:08:18:1f:4a:3e:dc:ec:c7:b2:6e: 3d:64:97:d0:09:43:14:2b:db:0a:69:b6:a9:e3:78: 69:2e:05:d2:ef:c4:ed:c4:ae:11:bc:06:b8:55:3f: fc:3a:9c:a6:22:bf:a4:17:54:77:7e:87:2d:72:e6: 0e:e6:ef:8d:a0:b6:c6:72:8b:4a:61:04:5b:d8:c0: 2e:ac:ce:bd:4e:4b:0e:a0:81:44:06:74:18:af:30: 9d:8f:41:b0:80:12:f1:3b:08:eb:0e:51:db:1e:d3: 26:ac:44:b2:4b:e8:1c:aa:61:a8:bb:55:bb:1f:a1: 5f:01:66:41:3d:2a:6f:bb:f0:9c:3b:e6:0a:1a:5e: 6b:df:f8:6e:86:e1:49:c7:f7:5f:ac:50:0a:f2:39: b7:63:ce:0b:c7:5d:e1:d0:72:8c:cb:91:21:9f:a2: c8:a5:f5:5b:b6:28:82:c2:e5:6d:c8:7b:94:4e:8a: 67:55:b4:77:c7:34:ba:d8:7c:a8:4e:ba:fd:bd:c4: e3:e2:e2:65:00:16:8f:52:ac:ec:f8:d1:0a:83:66: 77:13:f6:58:1e:59:aa:20:f1:ea:8f:99:94:4c:aa: 16:79:d0:a2:cf:f5:d4:83:bf:b2:67:e8:e9:e3:8c: e4:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:36:94:E4:8C:0C:01:75:CD:4A:DA:03:82:40:85:E1:ED:29:11:83 X509v3 Authority Key Identifier: keyid:0A:A6:E4:83:28:42:5E:12:4C:56:1C:2A:C1:87:C8:A1:96:24:71:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9176E1D/FE8835BCF9F011EFB77A8C6EC4F9AE02/CqbkgyhCXhJMVhwqwYfIoZYkcRA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqbkgyhCXhJMVhwqwYfIoZYkcRA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176E1D/FE8835BCF9F011EFB77A8C6EC4F9AE02/CqbkgyhCXhJMVhwqwYfIoZYkcRA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:f3:40:ee:8e:7f:28:73:b7:e7:8e:71:40:7c:3b:5d:d9:8a: 7e:b0:70:ab:dd:a8:4b:23:25:c8:e2:d4:02:12:90:e6:d7:fe: 2c:64:b5:69:e7:fe:48:dd:a4:c2:25:f2:42:5e:5c:9b:1e:13: b9:88:7f:9a:28:b8:04:3d:af:42:1c:9a:52:42:f6:26:db:e0: 89:df:a4:95:c6:05:50:f5:22:f8:f3:c5:48:4a:48:e5:d0:1b: 33:4a:9a:b2:fa:25:07:a0:b3:1e:32:38:21:ea:12:85:03:7d: b5:c2:d2:a1:9c:dd:32:38:cb:d4:e3:2a:65:f6:63:d1:1b:8c: de:63:a3:b2:a8:f1:7e:25:cd:47:1a:f0:94:6b:81:52:e1:3b: b7:14:07:8a:4e:f2:6a:09:ea:05:1c:8b:f2:d1:e5:57:95:7e: 3e:2e:8e:1a:9c:94:9b:06:3e:41:a5:04:02:3a:ca:1c:73:58: 16:ce:59:8b:d5:68:28:f4:6d:31:ab:8c:0d:e9:5c:8b:e1:e7: 41:0e:3a:82:a5:c7:10:28:79:b8:91:3d:cb:f2:56:b8:53:ea: 0b:cc:2e:b0:4d:79:dd:a2:2c:be:a1:27:c5:ae:21:d4:66:80: 02:3f:67:8c:9a:57:61:83:e7:f0:ad:03:db:df:16:0f:e0:6b: d4:1e:ca:5b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 NkUxRDExMC8GA1UEBRMoMEFBNkU0ODMyODQyNUUxMjRDNTYxQzJBQzE4N0M4QTE5 NjI0NzExMDAeFw0yNTA2MTUwNjQxMjFaFw0yNTA2MjIwNjQxMjFaMBgxFjAUBgNV BAMTDTY4NGU2YjEyLWYwYWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDXJTjk32F8fnFCuu6LiZoFWwEkCBgfSj7c7Meybj1kl9AJQxQr2wpptqnjeGku BdLvxO3ErhG8BrhVP/w6nKYiv6QXVHd+hy1y5g7m742gtsZyi0phBFvYwC6szr1O Sw6ggUQGdBivMJ2PQbCAEvE7COsOUdse0yasRLJL6ByqYai7VbsfoV8BZkE9Km+7 8Jw75goaXmvf+G6G4UnH91+sUAryObdjzgvHXeHQcozLkSGfosil9Vu2KILC5W3I e5ROimdVtHfHNLrYfKhOuv29xOPi4mUAFo9SrOz40QqDZncT9lgeWaog8eqPmZRM qhZ50KLP9dSDv7Jn6OnjjOQRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUuTaU5IwM AXXNStoDgkCF4e0pEYMwHwYDVR0jBBgwFoAUCqbkgyhCXhJMVhwqwYfIoZYkcRAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc2RTFEL0ZFODgzNUJDRjlG MDExRUZCNzdBOEM2RUM0RjlBRTAyL0NxYmtneWhDWGhKTVZod3F3WWZJb1pZa2NS QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQ3Fia2d5aENYaEpNVmh3cXdZZklvWllrY1JBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc2 RTFEL0ZFODgzNUJDRjlGMDExRUZCNzdBOEM2RUM0RjlBRTAyL0NxYmtneWhDWGhK TVZod3F3WWZJb1pZa2NSQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFfzQO6Ofyhzt+eOcUB8O13Zin6wcKvdqEsjJcji1AISkObX/ixktWnn /kjdpMIl8kJeXJseE7mIf5oouAQ9r0IcmlJC9ibb4InfpJXGBVD1IvjzxUhKSOXQ GzNKmrL6JQegsx4yOCHqEoUDfbXC0qGc3TI4y9TjKmX2Y9EbjN5jo7Ko8X4lzUca 8JRrgVLhO7cUB4pO8moJ6gUci/LR5VeVfj4ujhqclJsGPkGlBAI6yhxzWBbOWYvV aCj0bTGrjA3pXIvh50EOOoKlxxAoebiRPcvyVrhT6gvMLrBNed2iLL6hJ8WuIdRm gAI/Z4yaV2GD5/CtA9vfFg/ga9Qeyls= -----END CERTIFICATE-----Generated at Sun Jun 15 21:58:21 2025 by rpki-client