$ rpki-client -vvf rpki.apnic.net/member_repository/A9188F72/CAAF0D4C0E2C11F08F1D6981C4F9AE02/qpCd6zVb4xTwVTIZQw0JrOLY53E.mft File: qpCd6zVb4xTwVTIZQw0JrOLY53E.mft (raw, json) Hash identifier: u0YCtaFSlVM9s5arbYQrtNSW2mJUzolvWl0tZTwnEdQ= Subject key identifier: 95:16:A7:7F:8D:20:F3:C7:BE:40:8C:F6:E1:A3:AA:C0:CC:3B:0C:C2 Authority key identifier: AA:90:9D:EB:35:5B:E3:14:F0:55:32:19:43:0D:09:AC:E2:D8:E7:71 Certificate issuer: /CN=A9188F72/serialNumber=AA909DEB355BE314F0553219430D09ACE2D8E771 Certificate serial: 29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qpCd6zVb4xTwVTIZQw0JrOLY53E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9188F72/CAAF0D4C0E2C11F08F1D6981C4F9AE02/qpCd6zVb4xTwVTIZQw0JrOLY53E.mft Manifest number: 29 Signing time: Sun 15 Jun 2025 06:52:23 +0000 Manifest this update: Sun 15 Jun 2025 06:52:22 +0000 Manifest next update: Sun 22 Jun 2025 06:52:22 +0000 Files and hashes: 1: qpCd6zVb4xTwVTIZQw0JrOLY53E.crl (hash: Dv+mNLq8NsAaOcbgquOHi2yEHR9/96N4CKVRQ7ivy3o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9188F72/CAAF0D4C0E2C11F08F1D6981C4F9AE02/qpCd6zVb4xTwVTIZQw0JrOLY53E.crl rsync://rpki.apnic.net/member_repository/A9188F72/CAAF0D4C0E2C11F08F1D6981C4F9AE02/qpCd6zVb4xTwVTIZQw0JrOLY53E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qpCd6zVb4xTwVTIZQw0JrOLY53E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 06:52:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41 (0x29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9188F72, serialNumber=AA909DEB355BE314F0553219430D09ACE2D8E771 Validity Not Before: Jun 15 06:52:22 2025 GMT Not After : Jun 22 06:52:22 2025 GMT Subject: CN=684e6da7-74d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:da:8a:c7:ee:b9:1d:97:97:0e:f4:b8:b5:46: e6:4a:7d:ca:cf:f3:0e:66:02:95:ab:28:cf:b1:e0: ce:79:2b:a6:d1:ac:7a:90:8b:f5:c4:fb:4e:bd:e5: ba:fc:08:ca:98:5a:61:5c:52:91:ab:b9:5b:c5:4c: 9a:b8:37:c8:c6:75:d6:55:e8:40:a4:c1:ff:18:88: b5:4a:6d:b1:78:bc:f0:4d:cb:dd:62:41:79:26:d0: 23:1a:7c:3a:c1:a8:63:35:bb:95:e5:74:d8:ed:cb: a7:e2:ce:41:07:78:7f:2a:22:d5:6f:5a:1d:b6:67: f5:41:6e:e7:37:d4:e3:9f:09:fc:50:4e:16:d3:8f: 96:e0:33:e8:e3:86:99:2b:60:4e:a1:40:de:a9:a1: d3:03:ae:c3:c4:08:8f:e3:00:a8:fe:f7:26:db:ed: b8:cd:3a:6f:06:68:a4:36:48:37:9c:bf:bb:f2:73: dc:28:b8:c5:69:2a:28:fc:69:8e:06:d3:91:37:3f: 60:c5:d2:14:96:79:28:24:a1:4f:ee:7a:09:23:e6: c8:48:24:9c:b1:62:77:50:d8:6c:5f:db:a0:64:34: 4e:b5:f2:89:52:c8:4e:8a:b3:c8:75:89:fb:b0:45: 39:06:12:ae:18:04:e7:7f:c4:aa:5f:98:56:31:a0: fc:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:16:A7:7F:8D:20:F3:C7:BE:40:8C:F6:E1:A3:AA:C0:CC:3B:0C:C2 X509v3 Authority Key Identifier: keyid:AA:90:9D:EB:35:5B:E3:14:F0:55:32:19:43:0D:09:AC:E2:D8:E7:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9188F72/CAAF0D4C0E2C11F08F1D6981C4F9AE02/qpCd6zVb4xTwVTIZQw0JrOLY53E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qpCd6zVb4xTwVTIZQw0JrOLY53E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188F72/CAAF0D4C0E2C11F08F1D6981C4F9AE02/qpCd6zVb4xTwVTIZQw0JrOLY53E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:8a:4e:81:82:c6:91:b3:02:b2:d7:cd:3b:db:ab:bb:1c:31: 35:87:2d:3d:d6:9b:f8:0d:15:ea:6e:54:6e:cd:0a:76:c1:0c: 25:62:34:75:36:a8:20:49:2f:be:98:4e:4a:d5:53:95:1c:fc: d6:27:7f:49:34:c5:a1:7c:1f:c4:f1:88:44:f6:94:5a:d2:8b: 35:88:ac:c6:bd:cd:bb:44:0f:25:8a:25:24:78:29:b5:c6:ea: d3:2f:95:47:d9:a7:1c:6d:a8:0f:fc:c0:76:f3:6c:b6:f7:aa: 26:ce:55:ec:db:d7:16:77:c8:27:89:a7:c2:6d:1c:f0:fa:59: 90:fd:7d:29:82:e9:d7:73:78:e1:02:ce:6a:2b:a8:3e:07:b4: c7:87:74:5a:b7:a1:7c:fb:c5:3b:59:16:b2:77:80:42:87:f2: 14:fc:fd:0a:72:35:ce:40:8a:d9:1b:c6:b4:ce:d1:f6:ab:72: fe:15:c6:0e:c4:f1:8f:71:29:92:05:0d:86:ef:0c:df:78:e2: 99:75:dd:c2:44:cf:2a:ee:50:f2:98:11:b7:3c:84:00:77:fe: 1f:58:2f:cd:2a:5f:39:e8:e9:27:ff:9d:c2:33:13:8c:06:38: 8c:b2:1d:95:46:34:10:7d:43:62:a0:cf:ca:b8:46:ac:67:ec: cf:f3:ba:b8 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 OEY3MjExMC8GA1UEBRMoQUE5MDlERUIzNTVCRTMxNEYwNTUzMjE5NDMwRDA5QUNF MkQ4RTc3MTAeFw0yNTA2MTUwNjUyMjJaFw0yNTA2MjIwNjUyMjJaMBgxFjAUBgNV BAMTDTY4NGU2ZGE3LTc0ZDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC72orH7rkdl5cO9Li1RuZKfcrP8w5mApWrKM+x4M55K6bRrHqQi/XE+0695br8 CMqYWmFcUpGruVvFTJq4N8jGddZV6ECkwf8YiLVKbbF4vPBNy91iQXkm0CMafDrB qGM1u5XldNjty6fizkEHeH8qItVvWh22Z/VBbuc31OOfCfxQThbTj5bgM+jjhpkr YE6hQN6podMDrsPECI/jAKj+9ybb7bjNOm8GaKQ2SDecv7vyc9wouMVpKij8aY4G 05E3P2DF0hSWeSgkoU/uegkj5shIJJyxYndQ2Gxf26BkNE618olSyE6Ks8h1ifuw RTkGEq4YBOd/xKpfmFYxoPzbAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUlRanf40g 88e+QIz24aOqwMw7DMIwHwYDVR0jBBgwFoAUqpCd6zVb4xTwVTIZQw0JrOLY53Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg4RjcyL0NBQUYwRDRDMEUy QzExRjA4RjFENjk4MUM0RjlBRTAyL3FwQ2Q2elZiNHhUd1ZUSVpRdzBKck9MWTUz RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcXBDZDZ6VmI0eFR3VlRJWlF3MEpyT0xZNTNFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg4 RjcyL0NBQUYwRDRDMEUyQzExRjA4RjFENjk4MUM0RjlBRTAyL3FwQ2Q2elZiNHhU d1ZUSVpRdzBKck9MWTUzRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFuKToGCxpGzArLXzTvbq7scMTWHLT3Wm/gNFepuVG7NCnbBDCViNHU2 qCBJL76YTkrVU5Uc/NYnf0k0xaF8H8TxiET2lFrSizWIrMa9zbtEDyWKJSR4KbXG 6tMvlUfZpxxtqA/8wHbzbLb3qibOVezb1xZ3yCeJp8JtHPD6WZD9fSmC6ddzeOEC zmorqD4HtMeHdFq3oXz7xTtZFrJ3gEKH8hT8/QpyNc5AitkbxrTO0farcv4Vxg7E 8Y9xKZIFDYbvDN944pl13cJEzyruUPKYEbc8hAB3/h9YL80qXzno6Sf/ncIzE4wG OIyyHZVGNBB9Q2Kgz8q4Rqxn7M/zurg= -----END CERTIFICATE-----Generated at Mon Jun 16 15:57:41 2025 by rpki-client