$ rpki-client -vvf rpki.apnic.net/member_repository/A918779B/7CF59FAA4A7211E983912180C4F9AE02/lqQx7QZ8PrHkc8EwSsbfm3YiVaM.mft File: lqQx7QZ8PrHkc8EwSsbfm3YiVaM.mft (raw, json) Hash identifier: qsNhEMuClzWxZidyy/bHctJxh2uP5/FvW7wW9q9p7VM= Subject key identifier: B9:B2:AE:C7:AC:ED:99:92:04:7F:8A:F9:6F:A9:1E:A1:D2:E1:AD:B3 Authority key identifier: 96:A4:31:ED:06:7C:3E:B1:E4:73:C1:30:4A:C6:DF:9B:76:22:55:A3 Certificate issuer: /CN=A918779B/serialNumber=96A431ED067C3EB1E473C1304AC6DF9B762255A3 Certificate serial: 1005 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lqQx7QZ8PrHkc8EwSsbfm3YiVaM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918779B/7CF59FAA4A7211E983912180C4F9AE02/lqQx7QZ8PrHkc8EwSsbfm3YiVaM.mft Manifest number: 16D9 Signing time: Wed 18 Jun 2025 17:24:30 +0000 Manifest this update: Wed 18 Jun 2025 17:24:30 +0000 Manifest next update: Wed 25 Jun 2025 17:24:30 +0000 Files and hashes: 1: lqQx7QZ8PrHkc8EwSsbfm3YiVaM.crl (hash: IbRgQ4vVi8OmBI4hd6KtDJ6n638UNDVWEgtekxUeHjs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918779B/7CF59FAA4A7211E983912180C4F9AE02/lqQx7QZ8PrHkc8EwSsbfm3YiVaM.crl rsync://rpki.apnic.net/member_repository/A918779B/7CF59FAA4A7211E983912180C4F9AE02/lqQx7QZ8PrHkc8EwSsbfm3YiVaM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lqQx7QZ8PrHkc8EwSsbfm3YiVaM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 17:24:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4101 (0x1005) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918779B, serialNumber=96A431ED067C3EB1E473C1304AC6DF9B762255A3 Validity Not Before: Jun 18 17:24:30 2025 GMT Not After : Jun 25 17:24:30 2025 GMT Subject: CN=6852f64e-3b11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:00:56:83:3b:0c:b8:e2:79:da:ef:0a:98:ee: 98:db:91:e9:c0:9e:5d:27:d8:d0:2a:87:1c:28:cd: e4:65:48:d7:20:14:97:f6:a4:0e:26:67:6b:95:87: 86:9c:d0:bb:93:ec:b8:97:62:84:b9:23:0a:6b:7c: 50:2d:06:55:45:ef:dc:f0:81:92:52:90:69:47:29: 8a:ac:52:ff:b0:57:00:4b:34:30:e3:b0:3c:e4:4d: 1c:15:03:3c:fd:2f:ce:ff:a9:1b:15:0d:27:69:c5: ec:7f:79:5e:35:d5:54:2f:a4:1d:d9:cc:2f:f3:4e: 57:3f:01:87:af:fd:d7:50:11:8b:71:a9:3d:f6:65: ef:78:1f:8c:03:b2:63:b3:1b:99:c1:c1:bd:19:19: fc:23:b5:55:14:e6:57:ce:9c:b6:70:15:df:4e:16: ba:d8:f6:cc:7e:34:32:98:d8:57:bd:80:12:31:17: 34:01:b5:6e:f7:74:40:cc:41:d7:1e:de:0d:34:0b: 50:cd:6b:9c:8e:ac:cc:0b:25:44:72:0e:e5:ab:38: 69:2c:a1:b7:2e:2e:e3:74:a5:48:59:d5:40:12:58: a2:b1:23:33:20:d6:6a:84:8c:ac:66:7b:06:3f:a7: db:3c:3c:8f:ee:dd:bd:54:e7:b6:9a:bf:49:ce:03: 7b:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:B2:AE:C7:AC:ED:99:92:04:7F:8A:F9:6F:A9:1E:A1:D2:E1:AD:B3 X509v3 Authority Key Identifier: keyid:96:A4:31:ED:06:7C:3E:B1:E4:73:C1:30:4A:C6:DF:9B:76:22:55:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918779B/7CF59FAA4A7211E983912180C4F9AE02/lqQx7QZ8PrHkc8EwSsbfm3YiVaM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lqQx7QZ8PrHkc8EwSsbfm3YiVaM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918779B/7CF59FAA4A7211E983912180C4F9AE02/lqQx7QZ8PrHkc8EwSsbfm3YiVaM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:f9:e3:05:af:dd:7f:d3:86:5e:65:a1:74:e9:be:bf:59:db: 8d:17:ae:42:30:9a:fd:ac:bd:0b:3a:af:c1:2e:11:65:a2:b2: d2:98:72:3d:c0:42:78:3f:6a:8f:e3:93:73:1d:df:9e:ec:ce: 1d:6c:a6:ed:d6:88:46:9d:b1:e6:04:4c:57:07:20:d3:c4:85: aa:96:03:8a:87:a6:54:6a:f3:e9:a2:6a:7e:bc:89:e8:ef:3b: 9a:f6:93:5a:57:e3:18:fc:d9:a9:01:71:1d:3d:22:95:5e:54: 55:30:d7:1c:e8:38:db:95:b8:be:6b:2e:e8:40:3e:68:40:4a: 61:ce:69:b0:6e:22:47:f2:6a:c5:19:31:ce:5b:b5:6f:d3:47: 82:1a:23:28:09:f6:36:4b:a9:66:05:48:f2:4b:92:41:f1:b3: dd:85:06:85:13:ca:e6:7c:5f:0d:6c:95:75:3b:02:09:7c:ab: 9d:58:f7:f4:4d:3f:fe:3f:54:47:07:9d:88:02:35:7f:69:5c: ba:9a:76:e0:c6:8b:4f:5c:56:f9:40:72:5b:36:90:61:91:de: 09:56:05:bf:18:e1:44:c0:a3:ac:3d:ad:42:80:8f:52:ee:03: ee:a2:91:b4:6f:35:ad:3d:b5:4b:85:3e:5e:bf:aa:6c:8d:03: 91:e4:99:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEAUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODc3OUIxMTAvBgNVBAUTKDk2QTQzMUVEMDY3QzNFQjFFNDczQzEzMDRBQzZERjlC NzYyMjU1QTMwHhcNMjUwNjE4MTcyNDMwWhcNMjUwNjI1MTcyNDMwWjAYMRYwFAYD VQQDEw02ODUyZjY0ZS0zYjExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxQBWgzsMuOJ52u8KmO6Y25HpwJ5dJ9jQKoccKM3kZUjXIBSX9qQOJmdrlYeG nNC7k+y4l2KEuSMKa3xQLQZVRe/c8IGSUpBpRymKrFL/sFcASzQw47A85E0cFQM8 /S/O/6kbFQ0nacXsf3leNdVUL6Qd2cwv805XPwGHr/3XUBGLcak99mXveB+MA7Jj sxuZwcG9GRn8I7VVFOZXzpy2cBXfTha62PbMfjQymNhXvYASMRc0AbVu93RAzEHX Ht4NNAtQzWucjqzMCyVEcg7lqzhpLKG3Li7jdKVIWdVAEliisSMzINZqhIysZnsG P6fbPDyP7t29VOe2mr9JzgN7QwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLmyrses 7ZmSBH+K+W+pHqHS4a2zMB8GA1UdIwQYMBaAFJakMe0GfD6x5HPBMErG35t2IlWj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Nzc5Qi83Q0Y1OUZBQTRB NzIxMUU5ODM5MTIxODBDNEY5QUUwMi9scVF4N1FaOFBySGtjOEV3U3NiZm0zWWlW YU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xxUXg3UVo4UHJIa2M4RXdTc2JmbTNZaVZhTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Nzc5Qi83Q0Y1OUZBQTRBNzIxMUU5ODM5MTIxODBDNEY5QUUwMi9scVF4N1FaOFBy SGtjOEV3U3NiZm0zWWlWYU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBn+eMFr91/04ZeZaF06b6/WduNF65CMJr9rL0LOq/BLhFlorLSmHI9 wEJ4P2qP45NzHd+e7M4dbKbt1ohGnbHmBExXByDTxIWqlgOKh6ZUavPpomp+vIno 7zua9pNaV+MY/NmpAXEdPSKVXlRVMNcc6Djblbi+ay7oQD5oQEphzmmwbiJH8mrF GTHOW7Vv00eCGiMoCfY2S6lmBUjyS5JB8bPdhQaFE8rmfF8NbJV1OwIJfKudWPf0 TT/+P1RHB52IAjV/aVy6mnbgxotPXFb5QHJbNpBhkd4JVgW/GOFEwKOsPa1CgI9S 7gPuopG0bzWtPbVLhT5ev6psjQOR5JnQ -----END CERTIFICATE-----Generated at Fri Jun 20 19:11:48 2025 by rpki-client