$ rpki-client -vvf rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/tqI-MrRTWVFhXOpKsbaBZQ1pTLc.mft File: tqI-MrRTWVFhXOpKsbaBZQ1pTLc.mft (raw, json) Hash identifier: udjTkrjJUgV2ApURzfPZGdeKf6x1OnKbEA9gkv2bvgI= Subject key identifier: 2C:DB:B8:9E:2B:4D:8D:C9:59:3D:FF:D3:90:8F:77:3D:D1:BB:B8:95 Authority key identifier: B6:A2:3E:32:B4:53:59:51:61:5C:EA:4A:B1:B6:81:65:0D:69:4C:B7 Certificate issuer: /CN=A9185B41/serialNumber=B6A23E32B4535951615CEA4AB1B681650D694CB7 Certificate serial: 0A4C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tqI-MrRTWVFhXOpKsbaBZQ1pTLc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/tqI-MrRTWVFhXOpKsbaBZQ1pTLc.mft Manifest number: 1251 Signing time: Thu 12 Jun 2025 19:29:46 +0000 Manifest this update: Thu 12 Jun 2025 19:29:46 +0000 Manifest next update: Thu 19 Jun 2025 19:29:46 +0000 Files and hashes: 1: tqI-MrRTWVFhXOpKsbaBZQ1pTLc.crl (hash: 7NQ46zAUTBB2rLxoZNcc9jdVxx/E93uJ83s+O6XcAK8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/tqI-MrRTWVFhXOpKsbaBZQ1pTLc.crl rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/tqI-MrRTWVFhXOpKsbaBZQ1pTLc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tqI-MrRTWVFhXOpKsbaBZQ1pTLc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 19:29:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2636 (0xa4c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185B41, serialNumber=B6A23E32B4535951615CEA4AB1B681650D694CB7 Validity Not Before: Jun 12 19:29:46 2025 GMT Not After : Jun 19 19:29:46 2025 GMT Subject: CN=684b2aaa-81c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c5:a2:7d:b5:f9:c7:b3:79:a1:5f:8f:51:4c: 07:72:63:22:94:30:3e:b7:f8:1c:9a:46:61:eb:7b: 05:8b:1b:17:0c:c0:02:db:21:a5:7c:f2:a2:3f:e8: 5c:61:4c:17:b3:b4:5d:64:c3:3b:fb:2a:51:85:08: 9a:8d:4b:ae:10:a6:76:a1:22:90:83:e7:3e:30:61: 34:83:55:64:1b:f3:2c:63:3c:af:ed:88:af:8f:04: 09:e3:90:99:28:8a:a6:e4:53:09:b0:98:f2:26:b4: e7:f9:b2:5a:a6:34:90:5e:0d:83:60:1a:7c:6c:7d: d5:2c:2f:0c:fd:c7:2a:a8:9d:a3:a0:c5:ad:4d:1d: 6c:24:ae:60:50:ad:9e:29:3d:8c:c9:18:f6:a9:f8: 82:6e:91:a6:01:43:84:bd:68:9c:40:39:a5:74:e1: 38:d5:05:5e:33:4f:4c:cd:60:e7:d8:62:b6:dd:15: ec:c9:1b:a2:48:29:34:4d:c5:f0:ab:29:34:e7:b8: 2d:0d:0d:3c:93:18:db:a1:b2:db:91:8e:3f:05:ac: 50:a1:ba:78:90:80:06:15:c7:7f:41:e8:2e:59:ae: 42:97:f8:00:78:62:e0:e3:75:6d:23:f7:b7:f2:4e: 29:1b:ee:ee:96:02:6e:3a:9c:5d:5c:11:32:3f:a0: f8:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:DB:B8:9E:2B:4D:8D:C9:59:3D:FF:D3:90:8F:77:3D:D1:BB:B8:95 X509v3 Authority Key Identifier: keyid:B6:A2:3E:32:B4:53:59:51:61:5C:EA:4A:B1:B6:81:65:0D:69:4C:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/tqI-MrRTWVFhXOpKsbaBZQ1pTLc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tqI-MrRTWVFhXOpKsbaBZQ1pTLc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/tqI-MrRTWVFhXOpKsbaBZQ1pTLc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:18:c6:29:3a:8c:57:42:78:47:9f:12:b8:18:fb:b3:53:ca: e1:5f:dc:4b:2b:45:2d:c9:e9:e1:ee:59:69:93:34:4f:92:0b: da:26:a6:4e:61:9d:57:5e:c7:b6:71:fd:06:55:d3:73:21:64: 7b:68:55:49:c8:fa:f4:17:ab:8c:4b:30:07:5d:bd:f9:78:b5: 6b:2b:2c:44:aa:d4:6a:99:eb:0f:75:84:59:f5:1f:0e:ca:3b: 35:4e:91:bb:db:48:5a:88:6b:dc:00:82:4a:f7:f9:e4:a0:e6: 34:4e:d7:e1:33:76:33:ec:1f:51:b4:f4:2c:08:62:b7:59:72: 0b:1d:3e:0e:52:dc:1c:26:62:47:78:c8:e2:7c:72:0f:8d:14: 07:a3:ec:62:9c:29:ce:3c:13:d2:6e:28:ca:b3:25:f8:0c:99: 72:7d:46:8a:dc:74:79:fd:9f:41:29:7b:48:f5:4d:4a:75:66: ce:e6:42:a9:c0:04:07:03:b6:f0:01:83:79:d5:7b:70:68:73: 67:bb:8b:e6:e6:94:d9:e4:db:4a:17:4b:03:28:a1:e6:9c:b6: 8d:e3:eb:5b:5c:72:e3:7b:e4:1a:f6:04:4e:ac:e6:59:18:6e: 91:b4:97:2c:ae:33:c4:c6:b4:15:35:e8:c3:50:81:43:f4:5d: 08:75:6e:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCkwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODVCNDExMTAvBgNVBAUTKEI2QTIzRTMyQjQ1MzU5NTE2MTVDRUE0QUIxQjY4MTY1 MEQ2OTRDQjcwHhcNMjUwNjEyMTkyOTQ2WhcNMjUwNjE5MTkyOTQ2WjAYMRYwFAYD VQQDEw02ODRiMmFhYS04MWM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtcWifbX5x7N5oV+PUUwHcmMilDA+t/gcmkZh63sFixsXDMAC2yGlfPKiP+hc YUwXs7RdZMM7+ypRhQiajUuuEKZ2oSKQg+c+MGE0g1VkG/MsYzyv7YivjwQJ45CZ KIqm5FMJsJjyJrTn+bJapjSQXg2DYBp8bH3VLC8M/ccqqJ2joMWtTR1sJK5gUK2e KT2MyRj2qfiCbpGmAUOEvWicQDmldOE41QVeM09MzWDn2GK23RXsyRuiSCk0TcXw qyk057gtDQ08kxjbobLbkY4/BaxQobp4kIAGFcd/QeguWa5Cl/gAeGLg43VtI/e3 8k4pG+7ulgJuOpxdXBEyP6D4ZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCzbuJ4r TY3JWT3/05CPdz3Ru7iVMB8GA1UdIwQYMBaAFLaiPjK0U1lRYVzqSrG2gWUNaUy3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUI0MS9BMUVEQ0ZGRTY3 OTkxMUVBQjY3QjM0ODRDNEY5QUUwMi90cUktTXJSVFdWRmhYT3BLc2JhQlpRMXBU TGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RxSS1NclJUV1ZGaFhPcEtzYmFCWlExcFRMYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NUI0MS9BMUVEQ0ZGRTY3OTkxMUVBQjY3QjM0ODRDNEY5QUUwMi90cUktTXJSVFdW RmhYT3BLc2JhQlpRMXBUTGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0GMYpOoxXQnhHnxK4GPuzU8rhX9xLK0Utyenh7llpkzRPkgvaJqZO YZ1XXse2cf0GVdNzIWR7aFVJyPr0F6uMSzAHXb35eLVrKyxEqtRqmesPdYRZ9R8O yjs1TpG720haiGvcAIJK9/nkoOY0TtfhM3Yz7B9RtPQsCGK3WXILHT4OUtwcJmJH eMjifHIPjRQHo+xinCnOPBPSbijKsyX4DJlyfUaK3HR5/Z9BKXtI9U1KdWbO5kKp wAQHA7bwAYN51XtwaHNnu4vm5pTZ5NtKF0sDKKHmnLaN4+tbXHLje+Qa9gROrOZZ GG6RtJcsrjPExrQVNejDUIFD9F0IdW65 -----END CERTIFICATE-----Generated at Sat Jun 14 17:46:45 2025 by rpki-client