$ rpki-client -vvf rpki.apnic.net/member_repository/A91953AF/043160B0CA0411EEBCD01770C4F9AE02/qCS2Y_P1o0-C7iJyqK795Dt5vZM.mft File: qCS2Y_P1o0-C7iJyqK795Dt5vZM.mft (raw, json) Hash identifier: BEC6l/S+lBYhpuQhQ7AgSbpmGOykQWyR+B5gQgnCAIY= Subject key identifier: 3E:72:5A:E8:B5:67:B9:41:74:DF:88:17:B9:E4:18:B4:51:09:48:D8 Authority key identifier: A8:24:B6:63:F3:F5:A3:4F:82:EE:22:72:A8:AE:FD:E4:3B:79:BD:93 Certificate issuer: /CN=A91953AF/serialNumber=A824B663F3F5A34F82EE2272A8AEFDE43B79BD93 Certificate serial: FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qCS2Y_P1o0-C7iJyqK795Dt5vZM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91953AF/043160B0CA0411EEBCD01770C4F9AE02/qCS2Y_P1o0-C7iJyqK795Dt5vZM.mft Manifest number: FC Signing time: Thu 19 Jun 2025 04:32:27 +0000 Manifest this update: Thu 19 Jun 2025 04:32:27 +0000 Manifest next update: Thu 26 Jun 2025 04:32:27 +0000 Files and hashes: 1: qCS2Y_P1o0-C7iJyqK795Dt5vZM.crl (hash: ktVdN6MsiGyZhP7yE7QMV00N4BH5vW9etNmuCe9MbFI=) 2: 593AFF1ACA0611EEBA01A22CC4F9AE02.roa (hash: 5Igi5uwLEP9LNSo1jtb9EAzRP4JXP+61tZCh/iJ8p+M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91953AF/043160B0CA0411EEBCD01770C4F9AE02/qCS2Y_P1o0-C7iJyqK795Dt5vZM.crl rsync://rpki.apnic.net/member_repository/A91953AF/043160B0CA0411EEBCD01770C4F9AE02/qCS2Y_P1o0-C7iJyqK795Dt5vZM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qCS2Y_P1o0-C7iJyqK795Dt5vZM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 04:32:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 254 (0xfe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91953AF, serialNumber=A824B663F3F5A34F82EE2272A8AEFDE43B79BD93 Validity Not Before: Jun 19 04:32:27 2025 GMT Not After : Jun 26 04:32:27 2025 GMT Subject: CN=685392db-0d08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:2f:df:94:d0:cc:2d:ef:e4:a2:5a:a6:9a:83: d0:39:56:24:ce:64:38:51:cc:34:3e:88:2e:98:16: 40:a6:77:2b:af:17:3f:5b:09:7a:e5:60:de:27:99: b6:07:9b:38:a3:cd:f4:0b:9a:8b:18:4d:60:58:02: c4:57:ae:e7:7d:2d:8c:24:4e:c9:1b:48:b2:04:58: b9:af:00:ae:a9:82:d2:ed:67:02:62:cf:21:99:c7: 4e:aa:ff:00:9e:bc:98:d9:b0:42:67:70:e0:9b:d9: c3:79:24:2b:e6:cc:eb:bc:97:4f:6f:5d:7c:fa:fb: cb:6d:85:36:f5:b0:da:63:17:8d:55:5f:3c:44:03: bc:ce:3c:99:a4:cf:f8:f8:f8:c9:a1:41:ea:9c:3b: b3:ba:75:26:69:15:d3:b1:c4:1e:31:02:90:86:c0: 21:62:dd:2d:17:69:b3:92:fb:af:c7:ee:18:ea:66: 85:5e:40:54:60:58:31:6f:47:e2:03:17:62:37:e9: 4f:be:55:c6:77:e8:cb:8c:96:ff:5e:79:38:13:5e: b2:4b:ad:53:f1:8c:29:8a:b5:67:42:27:83:c3:f4: 70:39:36:a2:48:b9:4c:11:79:f9:1d:05:24:18:10: 28:d8:04:8c:0e:f3:ca:96:66:c8:bf:ae:a4:a8:d2: 38:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:72:5A:E8:B5:67:B9:41:74:DF:88:17:B9:E4:18:B4:51:09:48:D8 X509v3 Authority Key Identifier: keyid:A8:24:B6:63:F3:F5:A3:4F:82:EE:22:72:A8:AE:FD:E4:3B:79:BD:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91953AF/043160B0CA0411EEBCD01770C4F9AE02/qCS2Y_P1o0-C7iJyqK795Dt5vZM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qCS2Y_P1o0-C7iJyqK795Dt5vZM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91953AF/043160B0CA0411EEBCD01770C4F9AE02/qCS2Y_P1o0-C7iJyqK795Dt5vZM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:15:67:a1:94:ab:dd:39:32:28:be:f6:b6:3c:82:d0:e6:0e: 09:27:de:2b:30:39:11:f8:7d:5a:e2:ef:09:b8:f8:2c:cf:f4: 84:ff:85:fb:b6:81:7b:77:a6:13:14:d9:5d:70:69:60:89:40: 3f:b1:ba:77:74:88:b1:0f:a5:4b:69:d0:50:e7:6b:bd:5c:fe: 72:a0:01:bd:54:c3:78:54:dc:7f:37:b7:53:b1:4d:c3:aa:96: 88:0c:87:d4:a4:17:8a:93:c1:08:e5:a6:32:31:cf:11:75:6c: 4b:06:04:41:c6:a8:d6:10:d7:25:56:b3:5a:f2:27:73:b5:46: ac:e0:05:21:b6:5a:1c:f6:8c:54:ce:8c:c0:c2:fe:69:3e:ed: dc:b8:1e:7f:48:1a:da:fb:06:c4:4c:80:4d:84:e9:59:7c:ac: 27:9b:9d:a1:5c:d5:83:54:c9:0d:45:8a:bd:46:94:b8:a0:c0: b2:50:97:ba:75:29:1e:5f:72:e7:33:65:7c:ef:da:9e:20:c2: 20:6f:08:d7:70:95:bb:7f:cf:48:34:06:3f:1b:04:43:c7:24: 35:fe:8a:8e:5f:90:81:3e:ab:bb:10:06:10:30:e6:10:6a:ef: 6f:fa:bc:a0:f8:21:ab:cd:97:10:ce:d5:ab:a4:c9:98:98:09: 90:a2:54:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAP4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTUzQUYxMTAvBgNVBAUTKEE4MjRCNjYzRjNGNUEzNEY4MkVFMjI3MkE4QUVGREU0 M0I3OUJEOTMwHhcNMjUwNjE5MDQzMjI3WhcNMjUwNjI2MDQzMjI3WjAYMRYwFAYD VQQDEw02ODUzOTJkYi0wZDA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqC/flNDMLe/kolqmmoPQOVYkzmQ4Ucw0PogumBZApncrrxc/Wwl65WDeJ5m2 B5s4o830C5qLGE1gWALEV67nfS2MJE7JG0iyBFi5rwCuqYLS7WcCYs8hmcdOqv8A nryY2bBCZ3Dgm9nDeSQr5szrvJdPb118+vvLbYU29bDaYxeNVV88RAO8zjyZpM/4 +PjJoUHqnDuzunUmaRXTscQeMQKQhsAhYt0tF2mzkvuvx+4Y6maFXkBUYFgxb0fi AxdiN+lPvlXGd+jLjJb/Xnk4E16yS61T8YwpirVnQieDw/RwOTaiSLlMEXn5HQUk GBAo2ASMDvPKlmbIv66kqNI4RwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD5yWui1 Z7lBdN+IF7nkGLRRCUjYMB8GA1UdIwQYMBaAFKgktmPz9aNPgu4icqiu/eQ7eb2T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTNBRi8wNDMxNjBCMENB MDQxMUVFQkNEMDE3NzBDNEY5QUUwMi9xQ1MyWV9QMW8wLUM3aUp5cUs3OTVEdDV2 Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FDUzJZX1AxbzAtQzdpSnlxSzc5NUR0NXZaTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NTNBRi8wNDMxNjBCMENBMDQxMUVFQkNEMDE3NzBDNEY5QUUwMi9xQ1MyWV9QMW8w LUM3aUp5cUs3OTVEdDV2Wk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC2FWehlKvdOTIovva2PILQ5g4JJ94rMDkR+H1a4u8JuPgsz/SE/4X7 toF7d6YTFNldcGlgiUA/sbp3dIixD6VLadBQ52u9XP5yoAG9VMN4VNx/N7dTsU3D qpaIDIfUpBeKk8EI5aYyMc8RdWxLBgRBxqjWENclVrNa8idztUas4AUhtloc9oxU zozAwv5pPu3cuB5/SBra+wbETIBNhOlZfKwnm52hXNWDVMkNRYq9RpS4oMCyUJe6 dSkeX3LnM2V879qeIMIgbwjXcJW7f89INAY/GwRDxyQ1/oqOX5CBPqu7EAYQMOYQ au9v+ryg+CGrzZcQztWrpMmYmAmQolQ6 -----END CERTIFICATE-----Generated at Fri Jun 20 07:10:37 2025 by rpki-client