$ rpki-client -vvf rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.mft File: qxHoCfK8ZrDR5guKMfhrW4LgDjk.mft (raw, json) Hash identifier: fJfpd/xC+Uh5dic4d1ANvsZIArQywZeJJ9U0Q/NfDWg= Subject key identifier: F6:CC:39:C0:FA:3E:F9:24:3B:95:C3:4C:7A:C3:E9:F8:F5:30:7F:03 Authority key identifier: AB:11:E8:09:F2:BC:66:B0:D1:E6:0B:8A:31:F8:6B:5B:82:E0:0E:39 Certificate issuer: /CN=A9191FA5/serialNumber=AB11E809F2BC66B0D1E60B8A31F86B5B82E00E39 Certificate serial: 361E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.mft Manifest number: 3569 Signing time: Sat 14 Jun 2025 14:27:40 +0000 Manifest this update: Sat 14 Jun 2025 14:27:40 +0000 Manifest next update: Sat 21 Jun 2025 14:27:40 +0000 Files and hashes: 1: qxHoCfK8ZrDR5guKMfhrW4LgDjk.crl (hash: VJvFGAyTXFP82ar4GpoiIbOzUTlGyGWUaDtJDNZCwQw=) 2: FF09B6BEC2E511EBBDB1B180C4F9AE02.roa (hash: UZZtq0Dq01P92PMAlRpFWd+m2fzHte7Vnx91o/rKWY0=) 3: B8E7D994D00711EAB66A1255C4F9AE02.roa (hash: NTDwpkNkDHYvPlbXgriI89H0onb/SkI96RAfrzWAkp8=) 4: FDE510BCC2E511EBBDB1B180C4F9AE02.roa (hash: 20lxG5YaQGKYCeNDIccsMuS2DiiyPh+IbwNarzaaMG8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.crl rsync://rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 14:27:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13854 (0x361e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191FA5, serialNumber=AB11E809F2BC66B0D1E60B8A31F86B5B82E00E39 Validity Not Before: Jun 14 14:27:40 2025 GMT Not After : Jun 21 14:27:40 2025 GMT Subject: CN=684d86dc-503c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:42:53:3d:8f:ef:88:22:71:fa:7b:81:47:38: 0b:f5:f3:ec:d4:ff:69:87:5d:aa:5f:6d:cb:2d:33: 4e:c5:aa:a8:8a:ea:3e:4c:a6:86:2e:2f:b6:b0:d9: 8a:13:b3:35:11:1c:b4:9c:13:09:d2:62:2a:8d:9f: 33:93:42:8f:31:59:0c:da:97:6e:55:88:e8:c9:6d: d8:9e:d6:bc:45:af:51:2c:b2:aa:c3:90:08:68:fd: 03:4a:0c:a4:fb:37:09:18:38:75:67:35:45:8e:07: 96:fd:3c:77:02:ab:a0:67:a0:71:19:b9:4f:e0:75: a1:41:4d:b0:39:1a:48:1d:f0:1e:3e:bb:a6:3c:36: 65:74:73:ec:38:89:8c:4a:98:8e:78:42:ba:51:bc: da:b2:90:dd:0f:fa:71:42:3d:51:4f:a5:25:ad:17: 0e:73:93:7e:62:fc:94:fa:e8:ca:36:9a:80:f2:0a: 74:09:61:1f:14:71:06:61:38:65:e4:54:3e:5b:8d: b5:c1:3e:b5:8c:b8:8a:eb:87:29:9a:a8:61:91:0e: c7:4f:69:0a:dc:55:26:79:05:d4:74:99:f1:f0:95: 0a:97:1c:31:67:d0:b4:3d:15:4a:ba:4b:03:b1:b2: bc:7f:ad:a3:0f:ca:45:02:a6:14:ac:ee:8e:1c:04: ac:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:CC:39:C0:FA:3E:F9:24:3B:95:C3:4C:7A:C3:E9:F8:F5:30:7F:03 X509v3 Authority Key Identifier: keyid:AB:11:E8:09:F2:BC:66:B0:D1:E6:0B:8A:31:F8:6B:5B:82:E0:0E:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:7c:6b:a1:46:be:5e:9b:08:4b:95:b2:8b:69:4e:2b:ad:43: 66:fc:33:e0:f9:15:38:96:b1:ed:6f:d0:c9:6b:97:c9:1e:2b: 24:f3:ec:91:3c:4a:77:f6:7c:4a:34:58:5c:79:80:eb:60:cc: c3:e8:dc:6e:a1:63:6f:4f:fd:58:31:d5:b5:83:9c:11:a3:f6: fd:b3:d7:9d:74:82:6d:ac:54:d7:13:5c:16:d9:cc:fb:dd:08: d2:03:f6:04:20:8e:0e:b9:2f:61:e3:e3:04:e9:f8:b2:46:76: 37:a6:66:eb:af:9c:7b:b4:b6:6c:94:b3:9d:f3:95:0e:d3:14: 96:f3:96:47:b9:2c:7d:33:c7:dc:b9:33:8b:8d:9c:b0:d9:7b: a4:b6:08:57:bc:3b:84:50:0a:39:da:cc:77:06:5b:71:56:af: 00:16:ad:cb:78:29:bf:05:ff:24:07:d2:c2:ee:87:a1:b5:c0: 27:86:e8:24:d3:dc:ac:da:95:02:ea:14:65:9b:49:cd:b2:1c: 0d:e2:6a:6c:3e:56:98:66:6e:d3:a7:18:39:a5:80:71:e1:de: 93:af:80:31:b1:6b:03:19:8c:b6:9b:7c:37:ff:a4:6f:66:31: 1f:6f:cd:18:d8:6b:6d:df:64:8f:c7:fd:43:48:33:12:3a:af: 60:88:50:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNh4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTFGQTUxMTAvBgNVBAUTKEFCMTFFODA5RjJCQzY2QjBEMUU2MEI4QTMxRjg2QjVC ODJFMDBFMzkwHhcNMjUwNjE0MTQyNzQwWhcNMjUwNjIxMTQyNzQwWjAYMRYwFAYD VQQDEw02ODRkODZkYy01MDNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvkJTPY/viCJx+nuBRzgL9fPs1P9ph12qX23LLTNOxaqoiuo+TKaGLi+2sNmK E7M1ERy0nBMJ0mIqjZ8zk0KPMVkM2pduVYjoyW3Ynta8Ra9RLLKqw5AIaP0DSgyk +zcJGDh1ZzVFjgeW/Tx3AqugZ6BxGblP4HWhQU2wORpIHfAePrumPDZldHPsOImM SpiOeEK6UbzaspDdD/pxQj1RT6UlrRcOc5N+YvyU+ujKNpqA8gp0CWEfFHEGYThl 5FQ+W421wT61jLiK64cpmqhhkQ7HT2kK3FUmeQXUdJnx8JUKlxwxZ9C0PRVKuksD sbK8f62jD8pFAqYUrO6OHASsZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPbMOcD6 PvkkO5XDTHrD6fj1MH8DMB8GA1UdIwQYMBaAFKsR6AnyvGaw0eYLijH4a1uC4A45 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MUZBNS8wODA1NkNFNDFE ODcxMUUyOUREM0M2REUwOEIwMkNEMi9xeEhvQ2ZLOFpyRFI1Z3VLTWZoclc0TGdE amsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3F4SG9DZks4WnJEUjVndUtNZmhyVzRMZ0Rqay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MUZBNS8wODA1NkNFNDFEODcxMUUyOUREM0M2REUwOEIwMkNEMi9xeEhvQ2ZLOFpy RFI1Z3VLTWZoclc0TGdEamsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4fGuhRr5emwhLlbKLaU4rrUNm/DPg+RU4lrHtb9DJa5fJHisk8+yR PEp39nxKNFhceYDrYMzD6NxuoWNvT/1YMdW1g5wRo/b9s9eddIJtrFTXE1wW2cz7 3QjSA/YEII4OuS9h4+ME6fiyRnY3pmbrr5x7tLZslLOd85UO0xSW85ZHuSx9M8fc uTOLjZyw2XuktghXvDuEUAo52sx3BltxVq8AFq3LeCm/Bf8kB9LC7oehtcAnhugk 09ys2pUC6hRlm0nNshwN4mpsPlaYZm7Tpxg5pYBx4d6Tr4AxsWsDGYy2m3w3/6Rv ZjEfb80Y2Gtt32SPx/1DSDMSOq9giFAY -----END CERTIFICATE-----Generated at Sun Jun 15 05:05:41 2025 by rpki-client