$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3456/6C27F25A41A111EAA47D1E86C4F9AE02/KQxAEPrcR2lH4Ak_Q_cATw18XBw.mft File: KQxAEPrcR2lH4Ak_Q_cATw18XBw.mft (raw, json) Hash identifier: liIP1IuV7V/PCuBJ695opQMuJmca+Zq5wwbCaj919Ag= Subject key identifier: 33:36:07:A9:51:C5:EC:78:ED:91:04:66:38:96:B8:FC:3D:9F:63:8E Authority key identifier: 29:0C:40:10:FA:DC:47:69:47:E0:09:3F:43:F7:00:4F:0D:7C:5C:1C Certificate issuer: /CN=A91A3456/serialNumber=290C4010FADC476947E0093F43F7004F0D7C5C1C Certificate serial: 0B1A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KQxAEPrcR2lH4Ak_Q_cATw18XBw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3456/6C27F25A41A111EAA47D1E86C4F9AE02/KQxAEPrcR2lH4Ak_Q_cATw18XBw.mft Manifest number: 0B14 Signing time: Wed 18 Jun 2025 19:08:46 +0000 Manifest this update: Wed 18 Jun 2025 19:08:45 +0000 Manifest next update: Wed 25 Jun 2025 19:08:45 +0000 Files and hashes: 1: KQxAEPrcR2lH4Ak_Q_cATw18XBw.crl (hash: fHoezpZXaMetIT4ju9qSgbG3/xfjy4PN0ZDmrGos0cY=) 2: 496096EE41A311EABAADCE0AC4F9AE02.roa (hash: c6hB6o27DTn4G9KshxwwCrACiildcNHuM9kyD7kWDTE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3456/6C27F25A41A111EAA47D1E86C4F9AE02/KQxAEPrcR2lH4Ak_Q_cATw18XBw.crl rsync://rpki.apnic.net/member_repository/A91A3456/6C27F25A41A111EAA47D1E86C4F9AE02/KQxAEPrcR2lH4Ak_Q_cATw18XBw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KQxAEPrcR2lH4Ak_Q_cATw18XBw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 19:08:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2842 (0xb1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3456, serialNumber=290C4010FADC476947E0093F43F7004F0D7C5C1C Validity Not Before: Jun 18 19:08:45 2025 GMT Not After : Jun 25 19:08:45 2025 GMT Subject: CN=68530ebe-e312 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:70:05:01:d4:df:f5:eb:2c:69:41:3e:07:0a: 9d:b2:6e:57:b1:ec:51:f2:af:db:23:b6:90:a9:06: 8e:b6:37:b0:94:3a:71:95:75:72:63:c4:cb:f8:f9: aa:e0:6a:eb:8d:a6:e1:da:71:1b:a4:69:6b:6f:67: 9f:10:58:34:dd:db:ed:05:c0:56:3c:57:6e:fd:1d: 01:06:8f:c4:c8:11:81:be:5c:da:f5:4d:0b:75:98: a0:68:ec:dc:41:ee:ca:75:fb:d4:09:6f:97:56:d0: 0d:44:d5:2e:c8:75:18:66:62:86:6c:d2:bf:1e:89: e7:28:a1:0f:5a:99:04:89:e1:1d:72:00:30:5a:89: 5b:33:b7:bb:d6:51:a6:77:30:37:a3:4c:e5:28:47: f6:73:1d:b2:55:48:f4:0d:68:42:82:4e:fd:73:8e: c4:4e:5c:0a:4f:a1:0f:98:a6:04:de:84:3a:54:c2: 05:3a:41:54:ba:ee:bc:fa:58:d5:a1:ef:eb:e6:17: 59:0c:ee:3c:b1:67:57:60:7b:74:4e:9a:0d:9f:a9: 7f:a7:b3:4d:c8:ea:85:03:d8:c0:52:85:6e:71:f4: de:56:78:2f:6b:17:fc:15:30:6b:02:6b:f1:85:1f: 1f:42:e6:79:fb:22:47:36:88:96:ea:59:a6:d6:07: 49:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:36:07:A9:51:C5:EC:78:ED:91:04:66:38:96:B8:FC:3D:9F:63:8E X509v3 Authority Key Identifier: keyid:29:0C:40:10:FA:DC:47:69:47:E0:09:3F:43:F7:00:4F:0D:7C:5C:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3456/6C27F25A41A111EAA47D1E86C4F9AE02/KQxAEPrcR2lH4Ak_Q_cATw18XBw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KQxAEPrcR2lH4Ak_Q_cATw18XBw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3456/6C27F25A41A111EAA47D1E86C4F9AE02/KQxAEPrcR2lH4Ak_Q_cATw18XBw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:5e:7e:c7:8d:c5:a7:57:59:c3:9c:d7:3b:18:8e:b4:a1:9f: 4b:4f:7a:74:c5:4e:63:72:d9:af:ba:4e:9e:e9:24:d0:b4:e2: d3:23:b9:ac:e6:b1:28:c4:3c:b8:49:d5:44:2f:49:1a:ac:3f: ac:07:8b:8a:9c:7f:ec:aa:24:38:05:bc:b9:12:13:e0:50:22: b4:59:6e:a5:4f:74:f0:f5:a6:21:f5:79:c1:68:61:56:27:5c: 5e:af:61:d7:43:08:58:50:1d:f1:f5:9b:6a:0c:d6:21:1d:0a: b9:9c:30:a5:0d:02:1d:75:b4:5c:10:d5:81:49:ec:11:06:25: 91:9a:b7:47:4d:a7:5b:40:d7:d8:c7:f0:59:38:ab:39:f9:fb: 1f:e3:ac:5c:6e:28:a2:38:aa:40:c6:15:53:f4:fe:ca:33:dd: 07:7f:83:b4:99:9d:e7:29:6c:43:b7:f4:2a:22:5d:5c:e9:5b: 71:9b:89:e0:9f:50:26:26:85:fb:c8:0c:6c:27:9d:24:fd:f7: 2d:1e:f0:8d:70:e6:f0:11:0e:87:f9:b9:0e:00:63:b4:c2:7e: 54:77:e3:e9:5b:af:fa:cf:cd:77:c6:55:22:a1:6f:7d:60:ea: ee:f7:d1:15:63:1d:bf:82:cb:60:3d:52:7a:a9:a8:98:38:ce: 90:44:24:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCxowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTM0NTYxMTAvBgNVBAUTKDI5MEM0MDEwRkFEQzQ3Njk0N0UwMDkzRjQzRjcwMDRG MEQ3QzVDMUMwHhcNMjUwNjE4MTkwODQ1WhcNMjUwNjI1MTkwODQ1WjAYMRYwFAYD VQQDEw02ODUzMGViZS1lMzEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwXAFAdTf9essaUE+Bwqdsm5XsexR8q/bI7aQqQaOtjewlDpxlXVyY8TL+Pmq 4Grrjabh2nEbpGlrb2efEFg03dvtBcBWPFdu/R0BBo/EyBGBvlza9U0LdZigaOzc Qe7KdfvUCW+XVtANRNUuyHUYZmKGbNK/HonnKKEPWpkEieEdcgAwWolbM7e71lGm dzA3o0zlKEf2cx2yVUj0DWhCgk79c47ETlwKT6EPmKYE3oQ6VMIFOkFUuu68+ljV oe/r5hdZDO48sWdXYHt0TpoNn6l/p7NNyOqFA9jAUoVucfTeVngvaxf8FTBrAmvx hR8fQuZ5+yJHNoiW6lmm1gdJYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDM2B6lR xex47ZEEZjiWuPw9n2OOMB8GA1UdIwQYMBaAFCkMQBD63EdpR+AJP0P3AE8NfFwc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzQ1Ni82QzI3RjI1QTQx QTExMUVBQTQ3RDFFODZDNEY5QUUwMi9LUXhBRVByY1IybEg0QWtfUV9jQVR3MThY QncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tReEFFUHJjUjJsSDRBa19RX2NBVHcxOFhCdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MzQ1Ni82QzI3RjI1QTQxQTExMUVBQTQ3RDFFODZDNEY5QUUwMi9LUXhBRVByY1Iy bEg0QWtfUV9jQVR3MThYQncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOXn7HjcWnV1nDnNc7GI60oZ9LT3p0xU5jctmvuk6e6STQtOLTI7ms 5rEoxDy4SdVEL0karD+sB4uKnH/sqiQ4Bby5EhPgUCK0WW6lT3Tw9aYh9XnBaGFW J1xer2HXQwhYUB3x9ZtqDNYhHQq5nDClDQIddbRcENWBSewRBiWRmrdHTadbQNfY x/BZOKs5+fsf46xcbiiiOKpAxhVT9P7KM90Hf4O0mZ3nKWxDt/QqIl1c6Vtxm4ng n1AmJoX7yAxsJ50k/fctHvCNcObwEQ6H+bkOAGO0wn5Ud+PpW6/6z813xlUioW99 YOru99EVYx2/gstgPVJ6qaiYOM6QRCR4 -----END CERTIFICATE-----Generated at Thu Jun 19 05:17:39 2025 by rpki-client