$ rpki-client -vvf rpki.apnic.net/member_repository/A9184324/EAA9CCD47B1C11EFAC109416C4F9AE02/qFaPUnk8w0hXhQxPLtOK4LGJcPg.mft File: qFaPUnk8w0hXhQxPLtOK4LGJcPg.mft (raw, json) Hash identifier: uUWxIGnVBkUUGffHK6Gxav1HD0V+dp7BucAuwGVc9W8= Subject key identifier: 54:A0:F4:7F:F8:57:67:D7:54:5B:7F:EB:1E:70:11:4E:31:A9:5C:73 Authority key identifier: A8:56:8F:52:79:3C:C3:48:57:85:0C:4F:2E:D3:8A:E0:B1:89:70:F8 Certificate issuer: /CN=A9184324/serialNumber=A8568F52793CC34857850C4F2ED38AE0B18970F8 Certificate serial: 93 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qFaPUnk8w0hXhQxPLtOK4LGJcPg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9184324/EAA9CCD47B1C11EFAC109416C4F9AE02/qFaPUnk8w0hXhQxPLtOK4LGJcPg.mft Manifest number: 8E Signing time: Thu 19 Jun 2025 05:51:35 +0000 Manifest this update: Thu 19 Jun 2025 05:51:34 +0000 Manifest next update: Thu 26 Jun 2025 05:51:34 +0000 Files and hashes: 1: qFaPUnk8w0hXhQxPLtOK4LGJcPg.crl (hash: ZEpkg186WjBul8ziiOQCx7rqRzZIDhlpcKw9sh0WXnk=) 2: 4C575EBA7C4911EF8E4FFA2CC4F9AE02.roa (hash: 98w4yl1iX/DBuRnZm4wgf0B6PYVS6iqXA6ulWZHNh70=) 3: 5C8F63FE7C4911EF81434A2DC4F9AE02.roa (hash: xISmEUj+M4vxMbA55xtFZk8Qasu4uZXOcEk4pXZEXDI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9184324/EAA9CCD47B1C11EFAC109416C4F9AE02/qFaPUnk8w0hXhQxPLtOK4LGJcPg.crl rsync://rpki.apnic.net/member_repository/A9184324/EAA9CCD47B1C11EFAC109416C4F9AE02/qFaPUnk8w0hXhQxPLtOK4LGJcPg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qFaPUnk8w0hXhQxPLtOK4LGJcPg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 05:51:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 147 (0x93) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9184324, serialNumber=A8568F52793CC34857850C4F2ED38AE0B18970F8 Validity Not Before: Jun 19 05:51:34 2025 GMT Not After : Jun 26 05:51:34 2025 GMT Subject: CN=6853a566-1360 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:ca:d4:03:76:48:10:15:e1:2b:a0:28:a0:e2: 8f:d7:43:ad:0c:2d:9f:68:55:73:4d:fa:c0:46:42: 59:95:0a:65:bb:e2:69:9f:9f:1b:59:2f:16:7e:b8: 3e:ba:0d:39:3c:a7:9a:af:64:0d:24:3d:cf:e3:0f: 89:5e:2e:2b:3a:45:5d:f7:cf:42:82:ca:04:ef:ed: e2:ea:24:f8:97:fa:d6:ba:b0:08:9d:60:81:34:dc: df:fb:a2:2d:7e:74:f5:03:97:e6:fc:d9:a6:ac:0c: 21:9d:29:ab:4f:03:c4:c2:7b:85:2c:de:c9:c9:59: a9:5e:bd:5f:e9:55:f3:c0:7b:4c:3a:a1:b7:a7:da: 4f:5d:d5:87:06:60:1c:16:9e:69:18:5e:dc:ff:9e: 77:32:fb:c2:ad:27:72:e6:89:b6:4e:3e:85:05:bf: eb:7d:26:f4:c7:c6:16:45:9a:8c:88:3e:4c:01:b8: 90:bd:4b:4e:f1:ec:5b:69:f4:c4:32:6f:88:65:48: c0:c8:3f:52:42:32:ac:6c:9b:68:73:90:49:2b:9f: 0e:b6:8f:de:59:5e:d0:46:52:72:e5:c4:8f:57:4d: eb:ce:55:d3:98:0a:42:98:0e:7d:b6:75:05:91:9e: ce:fb:bc:44:23:8c:aa:0b:23:f8:c0:b2:04:f4:e7: 0e:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:A0:F4:7F:F8:57:67:D7:54:5B:7F:EB:1E:70:11:4E:31:A9:5C:73 X509v3 Authority Key Identifier: keyid:A8:56:8F:52:79:3C:C3:48:57:85:0C:4F:2E:D3:8A:E0:B1:89:70:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9184324/EAA9CCD47B1C11EFAC109416C4F9AE02/qFaPUnk8w0hXhQxPLtOK4LGJcPg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qFaPUnk8w0hXhQxPLtOK4LGJcPg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184324/EAA9CCD47B1C11EFAC109416C4F9AE02/qFaPUnk8w0hXhQxPLtOK4LGJcPg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:2f:31:9e:49:10:9c:d5:00:a9:93:c7:48:4e:a3:ba:85:7f: e5:c5:4a:35:8d:9a:5b:68:48:a5:80:f5:c6:d7:86:c4:39:0e: ca:a7:14:c2:f8:84:91:9e:19:08:42:1b:75:cf:3a:87:40:e9: 8e:55:29:d9:cf:2e:b2:8d:28:ca:93:93:c7:08:13:c6:30:99: e0:99:f3:52:89:80:80:4c:bb:cb:db:c4:cc:91:32:d2:61:01: d9:73:0c:de:42:d5:4d:d4:09:ed:7a:0c:5f:71:e5:e9:4b:ba: 63:f9:27:e4:c8:23:1b:ac:89:84:5f:51:90:27:5a:20:c0:1f: 84:5f:fe:34:24:8d:b7:2b:a2:23:21:3e:2a:2e:1a:ae:19:f1: bb:54:f6:e5:8c:e0:95:eb:3c:86:dc:ab:20:9f:25:5b:1a:37: 03:e0:6d:ec:27:db:15:b3:e6:64:87:07:6e:86:01:ef:8e:76: 80:38:eb:86:19:34:5d:39:ee:ea:fb:01:ad:82:13:b7:32:bd: 0c:bd:e0:21:da:77:7d:99:5e:9b:c5:5b:62:9c:f1:0c:18:db: 71:47:79:b1:78:da:d5:4c:a6:5d:e3:67:4d:28:ea:92:d5:37: c1:61:4e:e3:04:fc:d1:8d:54:3d:f8:1e:b8:69:55:25:57:08: c5:f8:cd:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQzMjQxMTAvBgNVBAUTKEE4NTY4RjUyNzkzQ0MzNDg1Nzg1MEM0RjJFRDM4QUUw QjE4OTcwRjgwHhcNMjUwNjE5MDU1MTM0WhcNMjUwNjI2MDU1MTM0WjAYMRYwFAYD VQQDEw02ODUzYTU2Ni0xMzYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8crUA3ZIEBXhK6AooOKP10OtDC2faFVzTfrARkJZlQplu+Jpn58bWS8Wfrg+ ug05PKear2QNJD3P4w+JXi4rOkVd989CgsoE7+3i6iT4l/rWurAInWCBNNzf+6It fnT1A5fm/NmmrAwhnSmrTwPEwnuFLN7JyVmpXr1f6VXzwHtMOqG3p9pPXdWHBmAc Fp5pGF7c/553MvvCrSdy5om2Tj6FBb/rfSb0x8YWRZqMiD5MAbiQvUtO8exbafTE Mm+IZUjAyD9SQjKsbJtoc5BJK58Oto/eWV7QRlJy5cSPV03rzlXTmApCmA59tnUF kZ7O+7xEI4yqCyP4wLIE9OcODQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFSg9H/4 V2fXVFt/6x5wEU4xqVxzMB8GA1UdIwQYMBaAFKhWj1J5PMNIV4UMTy7TiuCxiXD4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDMyNC9FQUE5Q0NENDdC MUMxMUVGQUMxMDk0MTZDNEY5QUUwMi9xRmFQVW5rOHcwaFhoUXhQTHRPSzRMR0pj UGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3FGYVBVbms4dzBoWGhReFBMdE9LNExHSmNQZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDMyNC9FQUE5Q0NENDdCMUMxMUVGQUMxMDk0MTZDNEY5QUUwMi9xRmFQVW5rOHcw aFhoUXhQTHRPSzRMR0pjUGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFLzGeSRCc1QCpk8dITqO6hX/lxUo1jZpbaEilgPXG14bEOQ7KpxTC +ISRnhkIQht1zzqHQOmOVSnZzy6yjSjKk5PHCBPGMJngmfNSiYCATLvL28TMkTLS YQHZcwzeQtVN1AntegxfceXpS7pj+SfkyCMbrImEX1GQJ1ogwB+EX/40JI23K6Ij IT4qLhquGfG7VPbljOCV6zyG3KsgnyVbGjcD4G3sJ9sVs+ZkhwduhgHvjnaAOOuG GTRdOe7q+wGtghO3Mr0MveAh2nd9mV6bxVtinPEMGNtxR3mxeNrVTKZd42dNKOqS 1TfBYU7jBPzRjVQ9+B64aVUlVwjF+M2p -----END CERTIFICATE-----Generated at Fri Jun 20 23:38:17 2025 by rpki-client