$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADBA2/D6954412553B11E7AA0EDE2AC4F9AE02/qmMtxAKnAveanDaT6cxGxZge6Ow.mft File: qmMtxAKnAveanDaT6cxGxZge6Ow.mft (raw, json) Hash identifier: N6NpfKk+vF9xKMS2DTXiSlmF0g+3QTieeQCZvW7OUDE= Subject key identifier: 17:CB:70:AD:82:DB:85:9E:CB:89:77:A8:E6:9F:52:95:67:41:F8:57 Authority key identifier: AA:63:2D:C4:02:A7:02:F7:9A:9C:36:93:E9:CC:46:C5:98:1E:E8:EC Certificate issuer: /CN=A91ADBA2/serialNumber=AA632DC402A702F79A9C3693E9CC46C5981EE8EC Certificate serial: 19FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qmMtxAKnAveanDaT6cxGxZge6Ow.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ADBA2/D6954412553B11E7AA0EDE2AC4F9AE02/qmMtxAKnAveanDaT6cxGxZge6Ow.mft Manifest number: 19F4 Signing time: Sat 14 Jun 2025 16:20:26 +0000 Manifest this update: Sat 14 Jun 2025 16:20:25 +0000 Manifest next update: Sat 21 Jun 2025 16:20:25 +0000 Files and hashes: 1: qmMtxAKnAveanDaT6cxGxZge6Ow.crl (hash: CeUl8u+3l7vQNcPiRdU/qsUQebA/W2wdIUpHV2kFXV0=) 2: 6C30EF68D9AD11EBA5CFBB17C4F9AE02.roa (hash: JD/t6QBbxRTutJyXKFJnddzibwxtjVqq1blAC5X3uC4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ADBA2/D6954412553B11E7AA0EDE2AC4F9AE02/qmMtxAKnAveanDaT6cxGxZge6Ow.crl rsync://rpki.apnic.net/member_repository/A91ADBA2/D6954412553B11E7AA0EDE2AC4F9AE02/qmMtxAKnAveanDaT6cxGxZge6Ow.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qmMtxAKnAveanDaT6cxGxZge6Ow.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 16:20:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6651 (0x19fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ADBA2, serialNumber=AA632DC402A702F79A9C3693E9CC46C5981EE8EC Validity Not Before: Jun 14 16:20:25 2025 GMT Not After : Jun 21 16:20:25 2025 GMT Subject: CN=684da14a-c4f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:ba:b2:7d:db:f4:19:73:c0:9e:12:2c:a3:03: e0:0d:34:3e:41:05:8a:ce:dc:08:bc:76:3a:97:c5: 8e:0e:57:69:fc:a3:d8:f6:92:76:3e:66:12:dc:34: a0:93:20:78:47:ea:01:26:96:1b:d2:6a:6f:f1:b2: 21:ec:6a:90:c4:42:45:c7:5c:d3:e3:18:4f:18:f2: 6b:bc:4c:58:d3:91:0b:7b:6b:20:8f:fc:ac:32:e3: eb:a5:ff:6e:96:c9:03:eb:81:27:46:94:57:db:08: 20:6d:61:e8:86:51:d4:36:ba:ac:40:dc:f7:f5:9f: 4d:5a:de:52:35:a4:f2:ae:e8:67:a2:fb:a0:48:d4: b4:5a:9a:47:49:f9:dd:a2:b6:79:91:de:0d:ee:60: 02:d4:61:56:59:96:1a:77:a0:b6:d8:90:d0:d7:30: e2:af:43:16:fe:a0:3a:39:28:66:f4:1f:c6:1f:df: c4:e2:a3:1a:ca:b9:fb:a4:1d:44:ae:29:50:27:b0: 4d:fd:46:83:f6:4c:a8:35:eb:73:87:42:f8:95:10: bc:a4:e7:d4:c9:61:e4:1e:40:b2:d2:46:d8:d2:1f: 91:20:e3:fd:20:4b:a6:8a:80:5d:fd:cb:91:06:8e: ab:c7:77:8e:55:43:55:c1:2e:e9:16:16:c7:df:fd: e6:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:CB:70:AD:82:DB:85:9E:CB:89:77:A8:E6:9F:52:95:67:41:F8:57 X509v3 Authority Key Identifier: keyid:AA:63:2D:C4:02:A7:02:F7:9A:9C:36:93:E9:CC:46:C5:98:1E:E8:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ADBA2/D6954412553B11E7AA0EDE2AC4F9AE02/qmMtxAKnAveanDaT6cxGxZge6Ow.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qmMtxAKnAveanDaT6cxGxZge6Ow.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADBA2/D6954412553B11E7AA0EDE2AC4F9AE02/qmMtxAKnAveanDaT6cxGxZge6Ow.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:73:37:08:7c:f2:0d:46:33:7a:c4:a7:c2:32:36:52:9e:8e: 03:ed:68:65:bc:00:1f:1d:84:9d:be:5a:f5:2d:b5:65:71:4f: 76:f9:ef:b7:b3:c2:1c:86:c8:4f:19:fd:f0:bb:b2:96:9b:5b: c4:fc:3e:43:79:cb:ab:91:3f:e9:9b:85:84:5a:f3:4d:73:d5: f0:fb:2e:7b:da:a0:b3:56:c0:17:80:85:05:c5:cc:8a:9f:39: b2:ff:08:28:83:aa:68:96:46:b2:f1:ce:8e:15:f5:9d:3a:be: 54:60:8a:01:29:29:90:e8:22:6e:b9:be:b3:c5:fd:44:71:b4: 29:58:dc:46:c8:81:8c:aa:dc:6a:1f:46:06:df:b2:16:4f:50: 7e:6a:e1:3f:77:f6:e8:b3:d2:ed:a2:69:63:48:57:22:8d:47: 5c:bd:57:20:a7:f4:66:3c:b7:78:1a:37:50:ce:62:54:f0:af: 5f:96:39:81:dd:57:c7:20:c1:8d:a0:ea:90:c9:13:30:33:19: 53:52:e9:dc:df:7d:44:7e:05:d8:8e:0f:78:d9:d0:52:ca:d8: 97:ef:37:a4:73:1a:df:e4:28:cf:f8:7b:5a:ce:17:12:a1:dc: 64:70:fb:cd:8b:5a:03:b3:d9:f4:28:5c:8c:dc:78:3f:a2:22: 36:fb:fb:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGfswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QURCQTIxMTAvBgNVBAUTKEFBNjMyREM0MDJBNzAyRjc5QTlDMzY5M0U5Q0M0NkM1 OTgxRUU4RUMwHhcNMjUwNjE0MTYyMDI1WhcNMjUwNjIxMTYyMDI1WjAYMRYwFAYD VQQDEw02ODRkYTE0YS1jNGYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA17qyfdv0GXPAnhIsowPgDTQ+QQWKztwIvHY6l8WODldp/KPY9pJ2PmYS3DSg kyB4R+oBJpYb0mpv8bIh7GqQxEJFx1zT4xhPGPJrvExY05ELe2sgj/ysMuPrpf9u lskD64EnRpRX2wggbWHohlHUNrqsQNz39Z9NWt5SNaTyruhnovugSNS0WppHSfnd orZ5kd4N7mAC1GFWWZYad6C22JDQ1zDir0MW/qA6OShm9B/GH9/E4qMayrn7pB1E rilQJ7BN/UaD9kyoNetzh0L4lRC8pOfUyWHkHkCy0kbY0h+RIOP9IEumioBd/cuR Bo6rx3eOVUNVwS7pFhbH3/3m9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBfLcK2C 24Wey4l3qOafUpVnQfhXMB8GA1UdIwQYMBaAFKpjLcQCpwL3mpw2k+nMRsWYHujs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBREJBMi9ENjk1NDQxMjU1 M0IxMUU3QUEwRURFMkFDNEY5QUUwMi9xbU10eEFLbkF2ZWFuRGFUNmN4R3haZ2U2 T3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FtTXR4QUtuQXZlYW5EYVQ2Y3hHeFpnZTZPdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB REJBMi9ENjk1NDQxMjU1M0IxMUU3QUEwRURFMkFDNEY5QUUwMi9xbU10eEFLbkF2 ZWFuRGFUNmN4R3haZ2U2T3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXczcIfPINRjN6xKfCMjZSno4D7WhlvAAfHYSdvlr1LbVlcU92+e+3 s8IchshPGf3wu7KWm1vE/D5DecurkT/pm4WEWvNNc9Xw+y572qCzVsAXgIUFxcyK nzmy/wgog6polkay8c6OFfWdOr5UYIoBKSmQ6CJuub6zxf1EcbQpWNxGyIGMqtxq H0YG37IWT1B+auE/d/bos9LtomljSFcijUdcvVcgp/RmPLd4GjdQzmJU8K9fljmB 3VfHIMGNoOqQyRMwMxlTUunc331EfgXYjg942dBSytiX7zekcxrf5CjP+HtazhcS odxkcPvNi1oDs9n0KFyM3Hg/oiI2+/u8 -----END CERTIFICATE-----Generated at Sun Jun 15 09:38:07 2025 by rpki-client