$ rpki-client -vvf rpki.apnic.net/member_repository/A917D121/8B0F8B0C0EC811EBA5042C2AC4F9AE02/cqUfTuqiGLczbu_3p6WMsa5UQjk.mft File: cqUfTuqiGLczbu_3p6WMsa5UQjk.mft (raw, json) Hash identifier: weoCc0DJo3gpeAecKaG3bWaXGgmokqEkRMQCZQxwb5c= Subject key identifier: 0C:7C:88:C2:98:A7:0B:E9:0A:0A:65:9E:FD:BB:87:C1:8A:1D:E4:1E Authority key identifier: 72:A5:1F:4E:EA:A2:18:B7:33:6E:EF:F7:A7:A5:8C:B1:AE:54:42:39 Certificate issuer: /CN=A917D121/serialNumber=72A51F4EEAA218B7336EEFF7A7A58CB1AE544239 Certificate serial: 0799 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cqUfTuqiGLczbu_3p6WMsa5UQjk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D121/8B0F8B0C0EC811EBA5042C2AC4F9AE02/cqUfTuqiGLczbu_3p6WMsa5UQjk.mft Manifest number: 0792 Signing time: Sat 14 Jun 2025 21:09:08 +0000 Manifest this update: Sat 14 Jun 2025 21:09:07 +0000 Manifest next update: Sat 21 Jun 2025 21:09:07 +0000 Files and hashes: 1: cqUfTuqiGLczbu_3p6WMsa5UQjk.crl (hash: sNnEtcvQOGoI+ViOczpGnc2mvLOLpe2ZLUyZzuY3GeY=) 2: DAAB94840EC911EBA913852BC4F9AE02.roa (hash: 5bBWhpUzFVVFApumie9XG8UpL1cOYbfpPDdsz7OV/tg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D121/8B0F8B0C0EC811EBA5042C2AC4F9AE02/cqUfTuqiGLczbu_3p6WMsa5UQjk.crl rsync://rpki.apnic.net/member_repository/A917D121/8B0F8B0C0EC811EBA5042C2AC4F9AE02/cqUfTuqiGLczbu_3p6WMsa5UQjk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cqUfTuqiGLczbu_3p6WMsa5UQjk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 21:09:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1945 (0x799) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D121, serialNumber=72A51F4EEAA218B7336EEFF7A7A58CB1AE544239 Validity Not Before: Jun 14 21:09:07 2025 GMT Not After : Jun 21 21:09:07 2025 GMT Subject: CN=684de4f3-06e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:28:7c:ac:58:09:a8:a4:97:90:38:90:69:2a: a0:c0:63:74:11:14:3e:b8:27:a0:1f:e2:92:44:01: 5f:3e:01:ac:86:1e:76:f8:c4:3c:18:b1:c6:17:dd: 3b:8f:aa:09:59:6c:52:28:9d:7c:88:43:07:fd:bb: e9:b0:93:67:1c:6a:de:55:c6:c5:0f:56:1d:2f:ef: fc:18:76:9a:1e:88:24:ae:56:53:8e:dd:c5:db:8c: 41:59:3f:13:0a:86:25:4e:88:4c:15:85:40:8b:a6: 9f:00:d6:44:ad:a2:14:d8:e2:67:14:9b:51:cf:4b: ea:97:47:43:ba:7b:e0:0a:d5:6e:dc:51:8f:be:dc: 88:fe:fb:73:79:63:2e:68:bf:1a:fe:65:53:29:7a: f7:33:6a:4e:2c:9f:4c:f2:e4:45:27:0c:22:df:8e: 3a:8c:1a:53:d3:67:90:82:7c:a0:99:95:de:c3:17: 42:e9:bf:1d:91:eb:3b:3e:be:96:ef:6f:46:dd:06: f9:ca:fc:f8:22:ac:0a:36:31:28:0c:7f:63:8c:b2: 79:62:d0:fd:fa:1b:33:91:4d:b1:63:8c:2a:4c:88: 6e:09:ea:09:f2:a5:24:6a:cc:95:10:bf:f8:9e:9c: 2f:06:11:79:49:2e:28:c3:7e:cd:c5:50:e2:65:f2: 9c:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:7C:88:C2:98:A7:0B:E9:0A:0A:65:9E:FD:BB:87:C1:8A:1D:E4:1E X509v3 Authority Key Identifier: keyid:72:A5:1F:4E:EA:A2:18:B7:33:6E:EF:F7:A7:A5:8C:B1:AE:54:42:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D121/8B0F8B0C0EC811EBA5042C2AC4F9AE02/cqUfTuqiGLczbu_3p6WMsa5UQjk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cqUfTuqiGLczbu_3p6WMsa5UQjk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D121/8B0F8B0C0EC811EBA5042C2AC4F9AE02/cqUfTuqiGLczbu_3p6WMsa5UQjk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:4d:1e:0f:c3:fc:1e:e3:08:b1:6a:77:d8:30:c6:d6:74:f8: fc:e3:04:f4:45:1c:2c:45:9b:c4:73:cc:2a:3d:aa:ff:ce:c2: bd:2e:0e:50:ac:b2:e7:bd:f5:55:dd:7a:b3:1c:1a:da:cf:a6: 89:b7:26:a4:35:ca:87:3d:6b:c2:06:ae:59:bf:b6:5e:e1:c3: ed:8a:15:f5:1e:19:77:cf:05:52:20:18:f2:5e:ca:e4:aa:ca: 63:68:f5:99:ea:f8:08:8f:60:19:82:c9:d1:ca:6e:2b:96:6b: c6:4f:7b:42:8a:0c:58:05:1c:4b:70:dc:1a:1e:42:6b:56:17: eb:80:ca:06:ab:b6:68:36:1d:e7:8d:41:a1:63:fe:f9:c1:12: 13:45:44:2b:e7:eb:15:b9:ed:b5:74:65:38:75:ea:db:2e:61: 3c:97:fb:c8:e8:c3:42:32:d4:51:c0:e1:fb:e3:9d:60:a0:23: 3b:94:ef:5a:a4:3b:9c:2e:b1:1e:ff:10:bb:f0:a6:e3:25:33: b2:9a:c3:b4:3c:ec:3b:ba:b5:8b:f6:03:e1:25:8f:d1:8c:c9: ad:ca:3a:bd:af:db:57:aa:64:b4:06:8d:fd:6f:ef:54:21:e8: 52:ae:63:8b:24:58:d5:68:01:ef:e9:ba:89:58:ba:d0:db:28: 16:b8:66:3f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB5kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0QxMjExMTAvBgNVBAUTKDcyQTUxRjRFRUFBMjE4QjczMzZFRUZGN0E3QTU4Q0Ix QUU1NDQyMzkwHhcNMjUwNjE0MjEwOTA3WhcNMjUwNjIxMjEwOTA3WjAYMRYwFAYD VQQDEw02ODRkZTRmMy0wNmU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnyh8rFgJqKSXkDiQaSqgwGN0ERQ+uCegH+KSRAFfPgGshh52+MQ8GLHGF907 j6oJWWxSKJ18iEMH/bvpsJNnHGreVcbFD1YdL+/8GHaaHogkrlZTjt3F24xBWT8T CoYlTohMFYVAi6afANZEraIU2OJnFJtRz0vql0dDunvgCtVu3FGPvtyI/vtzeWMu aL8a/mVTKXr3M2pOLJ9M8uRFJwwi3446jBpT02eQgnygmZXewxdC6b8dkes7Pr6W 729G3Qb5yvz4IqwKNjEoDH9jjLJ5YtD9+hszkU2xY4wqTIhuCeoJ8qUkasyVEL/4 npwvBhF5SS4ow37NxVDiZfKc8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAx8iMKY pwvpCgplnv27h8GKHeQeMB8GA1UdIwQYMBaAFHKlH07qohi3M27v96eljLGuVEI5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDEyMS84QjBGOEIwQzBF QzgxMUVCQTUwNDJDMkFDNEY5QUUwMi9jcVVmVHVxaUdMY3pidV8zcDZXTXNhNVVR amsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NxVWZUdXFpR0xjemJ1XzNwNldNc2E1VVFqay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RDEyMS84QjBGOEIwQzBFQzgxMUVCQTUwNDJDMkFDNEY5QUUwMi9jcVVmVHVxaUdM Y3pidV8zcDZXTXNhNVVRamsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgTR4Pw/we4wixanfYMMbWdPj84wT0RRwsRZvEc8wqPar/zsK9Lg5Q rLLnvfVV3XqzHBraz6aJtyakNcqHPWvCBq5Zv7Ze4cPtihX1Hhl3zwVSIBjyXsrk qspjaPWZ6vgIj2AZgsnRym4rlmvGT3tCigxYBRxLcNwaHkJrVhfrgMoGq7ZoNh3n jUGhY/75wRITRUQr5+sVue21dGU4derbLmE8l/vI6MNCMtRRwOH7451goCM7lO9a pDucLrEe/xC78KbjJTOymsO0POw7urWL9gPhJY/RjMmtyjq9r9tXqmS0Bo39b+9U IehSrmOLJFjVaAHv6bqJWLrQ2ygWuGY/ -----END CERTIFICATE-----Generated at Sun Jun 15 08:29:18 2025 by rpki-client