$ rpki-client -vvf rpki.apnic.net/member_repository/A918D0E6/D8ADD9423F3711EAA786434BC4F9AE02/dQWoa19PqlBUPSSMbwhUxQWu3A8.mft File: dQWoa19PqlBUPSSMbwhUxQWu3A8.mft (raw, json) Hash identifier: JSowYDYQo/+wmVuTVaFunk40ATr/tI+7bbzbTf/n1io= Subject key identifier: AD:C3:D8:83:5E:53:19:F4:B3:7F:C3:12:6E:44:10:47:49:92:50:33 Authority key identifier: 75:05:A8:6B:5F:4F:AA:50:54:3D:24:8C:6F:08:54:C5:05:AE:DC:0F Certificate issuer: /CN=A918D0E6/serialNumber=7505A86B5F4FAA50543D248C6F0854C505AEDC0F Certificate serial: 0B3E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dQWoa19PqlBUPSSMbwhUxQWu3A8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D0E6/D8ADD9423F3711EAA786434BC4F9AE02/dQWoa19PqlBUPSSMbwhUxQWu3A8.mft Manifest number: 0B2F Signing time: Sat 14 Jun 2025 19:04:16 +0000 Manifest this update: Sat 14 Jun 2025 19:04:15 +0000 Manifest next update: Sat 21 Jun 2025 19:04:15 +0000 Files and hashes: 1: dQWoa19PqlBUPSSMbwhUxQWu3A8.crl (hash: qPUBYBBwpRFpiOQpcm1HBcky900wgYUMA5GeTmrPY8U=) 2: 4B1D295E9EA211EB901A9532C4F9AE02.roa (hash: 6+05b8G0TEW8X4nNCgb84dRnZnbGJzRjWgQsJpxv0jY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D0E6/D8ADD9423F3711EAA786434BC4F9AE02/dQWoa19PqlBUPSSMbwhUxQWu3A8.crl rsync://rpki.apnic.net/member_repository/A918D0E6/D8ADD9423F3711EAA786434BC4F9AE02/dQWoa19PqlBUPSSMbwhUxQWu3A8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dQWoa19PqlBUPSSMbwhUxQWu3A8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 19:04:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2878 (0xb3e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D0E6, serialNumber=7505A86B5F4FAA50543D248C6F0854C505AEDC0F Validity Not Before: Jun 14 19:04:15 2025 GMT Not After : Jun 21 19:04:15 2025 GMT Subject: CN=684dc7b0-d3bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:af:33:30:e4:88:8b:89:63:f7:6c:d9:11:c6: 1d:22:d8:ab:70:e6:18:3a:df:d1:60:f3:9f:8a:5f: b3:74:41:e0:01:d8:21:34:b7:dd:bb:8e:bb:77:c7: fa:81:58:be:40:67:58:d3:0f:5d:2a:35:1f:a5:9a: f4:dc:4e:8d:b0:1e:3f:67:49:3b:d6:e6:6d:05:af: 03:b0:96:70:65:6f:40:92:dc:7d:41:c4:55:57:94: 97:3d:b6:6a:ff:6b:d2:37:01:ac:d5:0b:fe:2d:e4: 71:66:cf:66:3d:af:f2:07:c3:ef:76:19:67:79:40: aa:df:37:c9:dd:df:32:1d:6d:a8:c3:f5:c2:69:c6: dd:f9:46:91:84:7e:ad:5f:c9:84:96:9d:58:bc:cc: 1f:e9:ba:39:bd:29:c0:8a:48:50:25:0a:90:fa:b7: 1a:fc:e2:41:59:4f:6d:32:cb:33:75:f2:0b:c1:70: c4:b1:61:af:55:03:1a:6a:b8:f9:05:19:81:e8:0d: ce:df:2f:30:ad:a7:e1:7a:36:2b:e0:cb:06:1b:25: bd:ce:c1:48:01:44:f6:c5:c7:35:72:35:32:b3:1b: 47:9d:41:2d:a8:b1:73:f5:10:1b:65:c2:c3:f0:45: bc:e3:9e:7c:95:8d:53:a2:26:35:c4:ac:c1:bd:8f: ba:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:C3:D8:83:5E:53:19:F4:B3:7F:C3:12:6E:44:10:47:49:92:50:33 X509v3 Authority Key Identifier: keyid:75:05:A8:6B:5F:4F:AA:50:54:3D:24:8C:6F:08:54:C5:05:AE:DC:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D0E6/D8ADD9423F3711EAA786434BC4F9AE02/dQWoa19PqlBUPSSMbwhUxQWu3A8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dQWoa19PqlBUPSSMbwhUxQWu3A8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D0E6/D8ADD9423F3711EAA786434BC4F9AE02/dQWoa19PqlBUPSSMbwhUxQWu3A8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:48:11:2a:25:72:15:89:5f:6f:40:3c:86:cb:0a:2e:f6:58: 47:4a:e6:4b:a4:92:e5:32:29:48:9d:f4:1e:5c:76:af:07:cc: 7a:ff:b7:88:d9:bf:af:3a:e7:00:bc:d5:8a:30:8e:df:ea:ea: 56:e9:ce:13:1b:eb:e3:fc:78:4c:9a:97:04:61:8a:77:52:a3: 28:72:ee:70:20:0f:cc:59:e1:79:d4:8d:a9:9f:48:47:71:e4: d9:a2:a5:eb:1a:15:e6:3d:17:37:59:c6:ad:08:35:f8:22:af: 18:ca:9c:2c:20:65:a6:9f:82:99:9b:38:85:e3:6e:ad:32:57: 74:4c:04:ce:37:ba:06:50:1d:84:8b:38:cb:fc:d7:42:6e:de: 5c:2d:82:30:98:b2:07:c5:51:fa:60:88:6a:7a:d7:47:b3:28: 3d:35:58:4d:64:46:a7:5c:1b:21:7f:39:71:7f:42:d3:e1:f4: b4:ce:25:0b:fb:3e:ea:3f:98:c7:26:fa:c5:21:ee:b0:be:07: 83:89:59:67:ba:86:18:af:93:4d:49:3f:f4:f2:fd:0c:c0:7b: 7f:01:5e:70:0c:76:0f:cb:bb:c5:a1:c9:49:7c:25:6e:c7:e8: 18:f9:36:45:b3:af:7c:5b:f3:32:b5:83:b2:85:d5:ad:1e:59: 66:1e:82:0d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCz4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQwRTYxMTAvBgNVBAUTKDc1MDVBODZCNUY0RkFBNTA1NDNEMjQ4QzZGMDg1NEM1 MDVBRURDMEYwHhcNMjUwNjE0MTkwNDE1WhcNMjUwNjIxMTkwNDE1WjAYMRYwFAYD VQQDEw02ODRkYzdiMC1kM2JkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv68zMOSIi4lj92zZEcYdItircOYYOt/RYPOfil+zdEHgAdghNLfdu467d8f6 gVi+QGdY0w9dKjUfpZr03E6NsB4/Z0k71uZtBa8DsJZwZW9Aktx9QcRVV5SXPbZq /2vSNwGs1Qv+LeRxZs9mPa/yB8PvdhlneUCq3zfJ3d8yHW2ow/XCacbd+UaRhH6t X8mElp1YvMwf6bo5vSnAikhQJQqQ+rca/OJBWU9tMsszdfILwXDEsWGvVQMaarj5 BRmB6A3O3y8wrafhejYr4MsGGyW9zsFIAUT2xcc1cjUysxtHnUEtqLFz9RAbZcLD 8EW84558lY1ToiY1xKzBvY+6jwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK3D2INe Uxn0s3/DEm5EEEdJklAzMB8GA1UdIwQYMBaAFHUFqGtfT6pQVD0kjG8IVMUFrtwP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDBFNi9EOEFERDk0MjNG MzcxMUVBQTc4NjQzNEJDNEY5QUUwMi9kUVdvYTE5UHFsQlVQU1NNYndoVXhRV3Uz QTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RRV29hMTlQcWxCVVBTU01id2hVeFFXdTNBOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RDBFNi9EOEFERDk0MjNGMzcxMUVBQTc4NjQzNEJDNEY5QUUwMi9kUVdvYTE5UHFs QlVQU1NNYndoVXhRV3UzQTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwSBEqJXIViV9vQDyGywou9lhHSuZLpJLlMilInfQeXHavB8x6/7eI 2b+vOucAvNWKMI7f6upW6c4TG+vj/HhMmpcEYYp3UqMocu5wIA/MWeF51I2pn0hH ceTZoqXrGhXmPRc3WcatCDX4Iq8YypwsIGWmn4KZmziF426tMld0TATON7oGUB2E izjL/NdCbt5cLYIwmLIHxVH6YIhqetdHsyg9NVhNZEanXBshfzlxf0LT4fS0ziUL +z7qP5jHJvrFIe6wvgeDiVlnuoYYr5NNST/08v0MwHt/AV5wDHYPy7vFoclJfCVu x+gY+TZFs698W/MytYOyhdWtHllmHoIN -----END CERTIFICATE-----Generated at Mon Jun 16 08:21:28 2025 by rpki-client