$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA96A/D4C168826A6E11EF84F98E35C4F9AE02/DN1QWDLqjJpNI7EGNyAdeUKVZMA.mft File: DN1QWDLqjJpNI7EGNyAdeUKVZMA.mft (raw, json) Hash identifier: CxDcZhFVKLWMn86zaQ6FGLhhiB4/xKUQxSgUg3dQysk= Subject key identifier: 64:78:94:07:1E:AB:15:5F:B2:3F:37:0A:96:C5:E1:DD:76:C2:CD:3E Authority key identifier: 0C:DD:50:58:32:EA:8C:9A:4D:23:B1:06:37:20:1D:79:42:95:64:C0 Certificate issuer: /CN=A91AA96A/serialNumber=0CDD505832EA8C9A4D23B10637201D79429564C0 Certificate serial: A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DN1QWDLqjJpNI7EGNyAdeUKVZMA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AA96A/D4C168826A6E11EF84F98E35C4F9AE02/DN1QWDLqjJpNI7EGNyAdeUKVZMA.mft Manifest number: 9B Signing time: Fri 13 Jun 2025 05:21:32 +0000 Manifest this update: Fri 13 Jun 2025 05:21:31 +0000 Manifest next update: Fri 20 Jun 2025 05:21:31 +0000 Files and hashes: 1: DN1QWDLqjJpNI7EGNyAdeUKVZMA.crl (hash: s8UQny059BITmVdadtHFQwAz3DBJpDuByzGjZ+B5QwA=) 2: 6E7D3C16816811EF99DD7787C4F9AE02.roa (hash: GJjFHlhUrw3PK9n6h+pqP/cBSWFV8op0nahH1r+sT6k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AA96A/D4C168826A6E11EF84F98E35C4F9AE02/DN1QWDLqjJpNI7EGNyAdeUKVZMA.crl rsync://rpki.apnic.net/member_repository/A91AA96A/D4C168826A6E11EF84F98E35C4F9AE02/DN1QWDLqjJpNI7EGNyAdeUKVZMA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DN1QWDLqjJpNI7EGNyAdeUKVZMA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 05:21:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 163 (0xa3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AA96A, serialNumber=0CDD505832EA8C9A4D23B10637201D79429564C0 Validity Not Before: Jun 13 05:21:31 2025 GMT Not After : Jun 20 05:21:31 2025 GMT Subject: CN=684bb55b-ae72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b3:02:f0:23:9e:2e:6a:72:69:08:69:0b:10: 7b:35:94:0c:ad:72:cf:c4:c0:65:eb:d3:c0:3a:bf: 2f:0b:60:2d:fe:cf:64:03:52:26:b3:b8:6a:93:70: dc:a8:4e:ef:bd:6c:88:20:8d:84:19:83:d9:e2:3e: 4e:96:83:91:46:96:1a:c1:64:bc:87:4a:f2:aa:8b: 86:41:8b:5a:ef:77:52:20:31:f4:d4:10:88:2d:01: 95:6c:7c:be:c6:48:5f:50:d7:84:b0:f6:a9:75:ee: 6f:a5:de:98:11:66:fd:07:53:a0:4d:c6:cb:90:db: 26:62:0c:ff:07:b1:fb:e5:0f:ac:73:18:90:9b:4b: 57:eb:c4:1e:cf:ed:0c:32:c9:21:2a:f2:94:dc:f6: a0:d4:5f:72:54:1e:87:34:6b:e6:ff:16:b8:5d:8c: 6a:3f:8c:57:48:dd:1e:5d:2f:af:ea:01:74:82:33: bc:be:8c:c6:f1:ff:4f:82:5f:91:0c:45:a8:1a:66: da:a3:81:21:08:66:df:c4:4a:ff:1b:71:56:7a:f2: ad:a5:cd:6f:da:62:c0:9a:97:a6:3d:13:96:38:59: 30:d3:14:a2:cc:95:76:8c:a0:a1:89:51:55:18:15: e7:bb:0d:d4:10:90:53:eb:d0:75:16:b4:d2:49:d9: e4:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:78:94:07:1E:AB:15:5F:B2:3F:37:0A:96:C5:E1:DD:76:C2:CD:3E X509v3 Authority Key Identifier: keyid:0C:DD:50:58:32:EA:8C:9A:4D:23:B1:06:37:20:1D:79:42:95:64:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AA96A/D4C168826A6E11EF84F98E35C4F9AE02/DN1QWDLqjJpNI7EGNyAdeUKVZMA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DN1QWDLqjJpNI7EGNyAdeUKVZMA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA96A/D4C168826A6E11EF84F98E35C4F9AE02/DN1QWDLqjJpNI7EGNyAdeUKVZMA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:f3:cc:46:6e:68:ee:52:be:92:f7:4d:16:c1:9b:30:3e:ce: 8d:ec:d9:98:aa:d0:1a:36:91:99:6f:be:58:ea:0e:fe:89:74: 32:9f:cb:fe:e7:02:cf:b0:c9:a4:f8:e3:f1:a5:46:a1:bd:d2: e5:37:ab:a3:3d:ee:e7:f2:6d:a0:0f:79:e8:03:37:6a:b6:a0: 24:cf:b7:14:57:af:2f:04:53:e0:68:4d:34:09:d4:ae:ee:c7: 1b:e1:d7:b7:ca:1d:37:3f:6b:0c:df:1d:51:26:a3:b0:ef:c3: b9:20:ff:8d:6f:c4:1f:2e:0a:de:1f:cb:69:62:f6:d1:05:91: 3c:91:93:36:7f:d7:42:3c:76:e6:1c:d2:95:68:8a:a9:4c:fa: 6f:60:7b:a4:2e:81:04:ec:90:7a:a2:94:7e:9d:39:f1:b4:7d: 26:94:10:33:76:bc:06:9a:85:df:86:66:b8:b9:5a:9c:38:31: ee:c7:fc:1e:b5:92:a5:81:a9:73:5d:66:79:2e:05:4f:3e:95: 99:34:b6:8d:0a:b4:a3:4b:6f:b3:e1:3a:c7:d6:56:24:2a:5f: 5e:b9:64:d8:d1:d2:ea:a4:4f:e2:c6:7b:f3:38:1c:d7:b4:fc: ab:d6:e9:90:c5:c7:27:2e:dd:13:8d:b4:b9:44:80:e9:e7:d5: 00:4e:ee:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUE5NkExMTAvBgNVBAUTKDBDREQ1MDU4MzJFQThDOUE0RDIzQjEwNjM3MjAxRDc5 NDI5NTY0QzAwHhcNMjUwNjEzMDUyMTMxWhcNMjUwNjIwMDUyMTMxWjAYMRYwFAYD VQQDEw02ODRiYjU1Yi1hZTcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs7MC8COeLmpyaQhpCxB7NZQMrXLPxMBl69PAOr8vC2At/s9kA1Ims7hqk3Dc qE7vvWyIII2EGYPZ4j5OloORRpYawWS8h0ryqouGQYta73dSIDH01BCILQGVbHy+ xkhfUNeEsPapde5vpd6YEWb9B1OgTcbLkNsmYgz/B7H75Q+scxiQm0tX68Qez+0M MskhKvKU3Pag1F9yVB6HNGvm/xa4XYxqP4xXSN0eXS+v6gF0gjO8vozG8f9Pgl+R DEWoGmbao4EhCGbfxEr/G3FWevKtpc1v2mLAmpemPROWOFkw0xSizJV2jKChiVFV GBXnuw3UEJBT69B1FrTSSdnkmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGR4lAce qxVfsj83CpbF4d12ws0+MB8GA1UdIwQYMBaAFAzdUFgy6oyaTSOxBjcgHXlClWTA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQTk2QS9ENEMxNjg4MjZB NkUxMUVGODRGOThFMzVDNEY5QUUwMi9ETjFRV0RMcWpKcE5JN0VHTnlBZGVVS1Za TUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ROMVFXRExxakpwTkk3RUdOeUFkZVVLVlpNQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QTk2QS9ENEMxNjg4MjZBNkUxMUVGODRGOThFMzVDNEY5QUUwMi9ETjFRV0RMcWpK cE5JN0VHTnlBZGVVS1ZaTUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBh88xGbmjuUr6S900WwZswPs6N7NmYqtAaNpGZb75Y6g7+iXQyn8v+ 5wLPsMmk+OPxpUahvdLlN6ujPe7n8m2gD3noAzdqtqAkz7cUV68vBFPgaE00CdSu 7scb4de3yh03P2sM3x1RJqOw78O5IP+Nb8QfLgreH8tpYvbRBZE8kZM2f9dCPHbm HNKVaIqpTPpvYHukLoEE7JB6opR+nTnxtH0mlBAzdrwGmoXfhma4uVqcODHux/we tZKlgalzXWZ5LgVPPpWZNLaNCrSjS2+z4TrH1lYkKl9euWTY0dLqpE/ixnvzOBzX tPyr1umQxccnLt0TjbS5RIDp59UATu6V -----END CERTIFICATE-----Generated at Sun Jun 15 07:12:17 2025 by rpki-client