$ rpki-client -vvf rpki.apnic.net/member_repository/A91978DD/CC18D9D4E0B611E799A2B682C4F9AE02/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.mft File: Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.mft (raw, json) Hash identifier: JXBGmTP3PLuLntCMMjr/afghU2xjLrGu1oviKDGaGFc= Subject key identifier: E3:BC:98:B4:D7:D0:0F:09:B1:64:AD:64:7C:0B:67:C9:9A:A3:19:C8 Authority key identifier: 43:D2:50:D5:C1:F6:09:ED:17:4D:FF:26:43:01:DB:45:BE:25:B1:B4 Certificate issuer: /CN=A91978DD/serialNumber=43D250D5C1F609ED174DFF264301DB45BE25B1B4 Certificate serial: 173B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91978DD/CC18D9D4E0B611E799A2B682C4F9AE02/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.mft Manifest number: 1732 Signing time: Sat 14 Jun 2025 16:34:24 +0000 Manifest this update: Sat 14 Jun 2025 16:34:24 +0000 Manifest next update: Sat 21 Jun 2025 16:34:24 +0000 Files and hashes: 1: Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.crl (hash: 9TShJGKiQyhM9EXM8m3W7N86gD9z97ujNI50M136Kc8=) 2: 16ABD910E0C111E7BA64DE22C4F9AE02.roa (hash: Ooak6D5iQ2fJ6FZTf7sU2wRFg0kTNy2Wu4Ysho3zOO0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91978DD/CC18D9D4E0B611E799A2B682C4F9AE02/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.crl rsync://rpki.apnic.net/member_repository/A91978DD/CC18D9D4E0B611E799A2B682C4F9AE02/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 16:34:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5947 (0x173b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91978DD, serialNumber=43D250D5C1F609ED174DFF264301DB45BE25B1B4 Validity Not Before: Jun 14 16:34:24 2025 GMT Not After : Jun 21 16:34:24 2025 GMT Subject: CN=684da490-bf66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c7:3e:dd:ff:d5:15:0a:64:78:07:ba:73:89: 8b:aa:e6:cd:70:7f:31:dc:01:95:8c:35:60:9a:a8: 54:72:a7:87:71:41:ae:bd:ee:2b:eb:8a:55:ad:ca: e1:a3:b0:f8:16:64:40:19:7a:9b:24:a4:9b:0a:97: db:7b:e4:68:d4:f2:40:12:30:c0:7f:7d:13:81:21: 41:81:ab:3b:fb:95:06:9f:ff:f2:ea:8c:63:b8:d7: a7:a7:8a:dd:89:f8:28:60:30:f0:af:ec:4f:ed:6f: f6:83:96:88:bb:93:2f:ce:79:30:22:7d:d5:d4:90: 0b:89:80:c3:6b:2f:57:2b:0e:9c:31:91:3e:55:76: e7:fd:5f:9e:81:a4:44:a7:92:38:ee:0f:0e:74:ae: 8f:be:7f:15:47:41:00:17:72:b7:d4:13:be:d7:a8: 4f:9c:5a:a6:49:70:97:64:bd:86:02:fd:3e:23:35: b3:f7:09:8c:79:58:1e:6c:30:13:79:6b:cb:06:43: 2c:47:48:47:0c:e4:34:ad:40:ec:ee:b4:b7:2b:c0: 68:39:1f:dd:61:1c:fe:84:6d:27:53:0c:20:b7:26: b6:26:34:fd:d3:e0:01:f2:6b:aa:a7:f4:d7:9b:d4: b7:ff:e1:cc:76:8b:30:52:31:db:56:0c:58:ca:a0: 79:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:BC:98:B4:D7:D0:0F:09:B1:64:AD:64:7C:0B:67:C9:9A:A3:19:C8 X509v3 Authority Key Identifier: keyid:43:D2:50:D5:C1:F6:09:ED:17:4D:FF:26:43:01:DB:45:BE:25:B1:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91978DD/CC18D9D4E0B611E799A2B682C4F9AE02/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91978DD/CC18D9D4E0B611E799A2B682C4F9AE02/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:1a:58:f7:df:d7:4a:6b:f8:c3:58:3d:3c:24:c7:37:91:fa: d0:16:76:57:1b:2d:16:4d:e7:c2:a0:19:b2:5f:e1:c4:93:f9: 40:7b:59:fe:70:7f:d1:13:d3:5a:b1:89:39:00:e8:8a:92:66: 9a:26:51:85:88:dd:39:07:dc:9a:46:30:dd:51:5c:73:49:b7: b2:11:95:68:85:c2:d0:52:3f:53:04:e5:ea:0b:83:c8:40:c2: 35:ba:c5:75:63:15:ac:c8:6d:0c:00:45:24:7c:96:81:be:03: 48:18:0f:7b:9f:1e:ae:32:4d:dd:1b:42:93:6a:9e:cd:73:d5: 3b:47:0f:0f:c3:bd:01:1c:e7:57:ee:6d:31:be:ab:1a:d5:5e: 9f:bc:85:a6:02:63:5b:44:6b:7e:c6:14:b4:70:39:25:ed:4e: 51:ff:29:e1:d9:cb:07:4c:fd:6e:96:04:83:b1:b3:56:ae:1b: 9e:d1:e7:ea:34:ba:1f:05:ac:b7:2e:71:4d:6e:8a:b6:0d:53: 7a:6d:5c:6b:f6:23:d6:22:82:73:05:f8:22:05:45:82:65:e6: 77:a8:ba:94:68:44:20:67:bd:e7:e9:5f:ad:6c:ef:e1:1f:4e: 4c:eb:9e:2c:9c:75:da:10:34:d7:02:bf:20:dc:29:f4:39:e4: 05:81:52:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFzswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTc4REQxMTAvBgNVBAUTKDQzRDI1MEQ1QzFGNjA5RUQxNzRERkYyNjQzMDFEQjQ1 QkUyNUIxQjQwHhcNMjUwNjE0MTYzNDI0WhcNMjUwNjIxMTYzNDI0WjAYMRYwFAYD VQQDEw02ODRkYTQ5MC1iZjY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwcc+3f/VFQpkeAe6c4mLqubNcH8x3AGVjDVgmqhUcqeHcUGuve4r64pVrcrh o7D4FmRAGXqbJKSbCpfbe+Ro1PJAEjDAf30TgSFBgas7+5UGn//y6oxjuNenp4rd ifgoYDDwr+xP7W/2g5aIu5MvznkwIn3V1JALiYDDay9XKw6cMZE+VXbn/V+egaRE p5I47g8OdK6Pvn8VR0EAF3K31BO+16hPnFqmSXCXZL2GAv0+IzWz9wmMeVgebDAT eWvLBkMsR0hHDOQ0rUDs7rS3K8BoOR/dYRz+hG0nUwwgtya2JjT90+AB8muqp/TX m9S3/+HMdoswUjHbVgxYyqB5kwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOO8mLTX 0A8JsWStZHwLZ8maoxnIMB8GA1UdIwQYMBaAFEPSUNXB9gntF03/JkMB20W+JbG0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzhERC9DQzE4RDlENEUw QjYxMUU3OTlBMkI2ODJDNEY5QUUwMi9ROUpRMWNIMkNlMFhUZjhtUXdIYlJiNGxz YlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1E5SlExY0gyQ2UwWFRmOG1Rd0hiUmI0bHNiUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzhERC9DQzE4RDlENEUwQjYxMUU3OTlBMkI2ODJDNEY5QUUwMi9ROUpRMWNIMkNl MFhUZjhtUXdIYlJiNGxzYlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOGlj339dKa/jDWD08JMc3kfrQFnZXGy0WTefCoBmyX+HEk/lAe1n+ cH/RE9NasYk5AOiKkmaaJlGFiN05B9yaRjDdUVxzSbeyEZVohcLQUj9TBOXqC4PI QMI1usV1YxWsyG0MAEUkfJaBvgNIGA97nx6uMk3dG0KTap7Nc9U7Rw8Pw70BHOdX 7m0xvqsa1V6fvIWmAmNbRGt+xhS0cDkl7U5R/ynh2csHTP1ulgSDsbNWrhue0efq NLofBay3LnFNboq2DVN6bVxr9iPWIoJzBfgiBUWCZeZ3qLqUaEQgZ73n6V+tbO/h H05M654snHXaEDTXAr8g3Cn0OeQFgVKx -----END CERTIFICATE-----Generated at Sun Jun 15 10:07:19 2025 by rpki-client