$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC415/BD1C935CD73211EEA183F50AC4F9AE02/qC5jMev0T1j8ZZmG2wVExmFfJvE.mft File: qC5jMev0T1j8ZZmG2wVExmFfJvE.mft (raw, json) Hash identifier: YCNDabAiSFeop620nPpvC5PiCuZyVugWJQgUvIm/+dg= Subject key identifier: 32:E7:02:FC:FF:2C:E7:25:1F:36:94:33:88:1F:69:E9:E0:7B:41:07 Authority key identifier: A8:2E:63:31:EB:F4:4F:58:FC:65:99:86:DB:05:44:C6:61:5F:26:F1 Certificate issuer: /CN=A91AC415/serialNumber=A82E6331EBF44F58FC659986DB0544C6615F26F1 Certificate serial: FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qC5jMev0T1j8ZZmG2wVExmFfJvE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AC415/BD1C935CD73211EEA183F50AC4F9AE02/qC5jMev0T1j8ZZmG2wVExmFfJvE.mft Manifest number: F6 Signing time: Sun 15 Jun 2025 04:26:29 +0000 Manifest this update: Sun 15 Jun 2025 04:26:29 +0000 Manifest next update: Sun 22 Jun 2025 04:26:28 +0000 Files and hashes: 1: qC5jMev0T1j8ZZmG2wVExmFfJvE.crl (hash: dI+i5x0oOHuWVQcB1kQzpioBODbSeFroN2xZILMSDKI=) 2: B57678E8D73711EEAECFA720C4F9AE02.roa (hash: 1mdRwvV5n8x0UgBPlIBjHnwgQhIGSx8VQkbewDudiQM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AC415/BD1C935CD73211EEA183F50AC4F9AE02/qC5jMev0T1j8ZZmG2wVExmFfJvE.crl rsync://rpki.apnic.net/member_repository/A91AC415/BD1C935CD73211EEA183F50AC4F9AE02/qC5jMev0T1j8ZZmG2wVExmFfJvE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qC5jMev0T1j8ZZmG2wVExmFfJvE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 252 (0xfc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AC415, serialNumber=A82E6331EBF44F58FC659986DB0544C6615F26F1 Validity Not Before: Jun 15 04:26:29 2025 GMT Not After : Jun 22 04:26:28 2025 GMT Subject: CN=684e4b75-1144 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:74:4c:01:2f:b7:ca:e0:45:72:35:4d:bd:05: 5b:34:d9:bd:36:6a:db:20:fa:b3:4d:6b:c1:be:78: ad:73:af:85:d7:21:92:0e:94:5d:c7:af:b1:30:14: 9c:83:2e:42:13:f2:7c:4f:4e:12:57:43:f0:ef:05: 45:11:b0:31:64:e6:05:f6:fc:dc:79:16:39:06:0c: c1:d9:f3:05:be:69:57:88:d8:27:f2:67:08:c1:dc: 58:90:9b:c9:31:06:05:52:cb:91:31:71:ab:3d:3e: ec:df:eb:92:ae:e8:ce:da:9c:9b:10:e3:59:03:13: a0:b4:e9:41:fa:a2:e1:11:04:91:97:dc:fb:67:4e: 2c:03:6b:ba:72:28:c9:80:31:cb:ec:e3:cf:76:46: 99:a7:88:32:1d:b9:38:f9:ed:92:c7:d0:2f:8d:f3: 61:20:19:aa:0c:17:76:72:42:07:05:1d:c3:e2:15: f1:df:d3:19:f2:76:50:85:32:56:38:ed:67:45:b0: 7b:42:4a:86:bf:15:18:7d:11:9f:cf:25:e4:10:77: 7c:04:33:59:9e:81:73:f5:d9:2f:3b:d9:5c:b4:71: b4:57:f3:63:f2:1f:5a:01:86:29:6a:88:70:dd:ac: 77:8a:7b:a2:c7:d8:90:93:45:5a:db:e0:57:2f:ed: 6c:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:E7:02:FC:FF:2C:E7:25:1F:36:94:33:88:1F:69:E9:E0:7B:41:07 X509v3 Authority Key Identifier: keyid:A8:2E:63:31:EB:F4:4F:58:FC:65:99:86:DB:05:44:C6:61:5F:26:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AC415/BD1C935CD73211EEA183F50AC4F9AE02/qC5jMev0T1j8ZZmG2wVExmFfJvE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qC5jMev0T1j8ZZmG2wVExmFfJvE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC415/BD1C935CD73211EEA183F50AC4F9AE02/qC5jMev0T1j8ZZmG2wVExmFfJvE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c1:8d:52:18:d3:3e:dd:94:60:c8:3b:1f:1c:1f:1c:a7:a3:05: b1:67:61:2b:74:0f:d9:ba:56:d2:47:ca:67:1a:86:c8:6d:40: e3:a2:08:1b:6b:8d:c1:e0:b1:20:51:3b:ba:07:82:2f:e5:6c: d2:e0:58:c3:23:3b:7b:0b:be:8e:22:0b:7d:75:3e:38:e6:b2: c2:68:19:d2:49:d8:2c:c4:77:32:f5:f4:db:79:3f:80:b7:69: b4:23:78:c2:a9:91:f7:2d:02:c9:56:ff:c3:b1:00:b1:2c:ee: 8c:8d:f6:4b:51:20:7c:64:f4:6e:ca:a9:c7:e7:a9:73:20:b4: 30:9d:ef:bc:95:60:f2:c2:e1:e3:6e:f5:3b:31:96:65:0f:93: e6:be:47:da:64:87:55:32:3e:52:fe:e3:76:34:4e:74:70:38: 94:88:d6:f9:65:ac:84:1e:ca:e9:58:54:bd:55:f2:b9:48:b8: 7f:ab:4a:06:b9:a0:c7:24:84:ec:67:f8:41:e3:d8:1c:32:57: ae:ae:fe:09:57:b1:4f:28:da:5f:8d:32:ec:c4:9f:41:44:38: 68:ee:2a:34:bd:46:10:24:72:bd:08:2f:70:8b:53:f2:d2:98: 30:e9:8d:32:44:9c:0c:5f:3e:13:d6:b8:d6:10:a0:d6:64:7b: 94:04:3a:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUM0MTUxMTAvBgNVBAUTKEE4MkU2MzMxRUJGNDRGNThGQzY1OTk4NkRCMDU0NEM2 NjE1RjI2RjEwHhcNMjUwNjE1MDQyNjI5WhcNMjUwNjIyMDQyNjI4WjAYMRYwFAYD VQQDEw02ODRlNGI3NS0xMTQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArnRMAS+3yuBFcjVNvQVbNNm9NmrbIPqzTWvBvnitc6+F1yGSDpRdx6+xMBSc gy5CE/J8T04SV0Pw7wVFEbAxZOYF9vzceRY5BgzB2fMFvmlXiNgn8mcIwdxYkJvJ MQYFUsuRMXGrPT7s3+uSrujO2pybEONZAxOgtOlB+qLhEQSRl9z7Z04sA2u6cijJ gDHL7OPPdkaZp4gyHbk4+e2Sx9AvjfNhIBmqDBd2ckIHBR3D4hXx39MZ8nZQhTJW OO1nRbB7QkqGvxUYfRGfzyXkEHd8BDNZnoFz9dkvO9lctHG0V/Nj8h9aAYYpaohw 3ax3inuix9iQk0Va2+BXL+1shwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDLnAvz/ LOclHzaUM4gfaenge0EHMB8GA1UdIwQYMBaAFKguYzHr9E9Y/GWZhtsFRMZhXybx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQzQxNS9CRDFDOTM1Q0Q3 MzIxMUVFQTE4M0Y1MEFDNEY5QUUwMi9xQzVqTWV2MFQxajhaWm1HMndWRXhtRmZK dkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FDNWpNZXYwVDFqOFpabUcyd1ZFeG1GZkp2RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QzQxNS9CRDFDOTM1Q0Q3MzIxMUVFQTE4M0Y1MEFDNEY5QUUwMi9xQzVqTWV2MFQx ajhaWm1HMndWRXhtRmZKdkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDBjVIY0z7dlGDIOx8cHxynowWxZ2ErdA/ZulbSR8pnGobIbUDjoggb a43B4LEgUTu6B4Iv5WzS4FjDIzt7C76OIgt9dT445rLCaBnSSdgsxHcy9fTbeT+A t2m0I3jCqZH3LQLJVv/DsQCxLO6MjfZLUSB8ZPRuyqnH56lzILQwne+8lWDywuHj bvU7MZZlD5PmvkfaZIdVMj5S/uN2NE50cDiUiNb5ZayEHsrpWFS9VfK5SLh/q0oG uaDHJITsZ/hB49gcMleurv4JV7FPKNpfjTLsxJ9BRDho7io0vUYQJHK9CC9wi1Py 0pgw6Y0yRJwMXz4T1rjWEKDWZHuUBDo2 -----END CERTIFICATE-----Generated at Sun Jun 15 09:44:49 2025 by rpki-client