$ rpki-client -vvf rpki.apnic.net/member_repository/A91B15DC/4FEC1C04CEED11EFBD655511C4F9AE02/024QQmH4GdaND3C7Ka3-jvRjsu0.mft File: 024QQmH4GdaND3C7Ka3-jvRjsu0.mft (raw, json) Hash identifier: 4fKcd1c62w0WyIZPtbVDT/FfzHn3ys0nSqCGzoFKVrc= Subject key identifier: 6C:08:A7:0C:F2:A6:5B:2D:3E:BC:D3:FA:96:D1:D1:25:31:97:3B:71 Authority key identifier: D3:6E:10:42:61:F8:19:D6:8D:0F:70:BB:29:AD:FE:8E:F4:63:B2:ED Certificate issuer: /CN=A91B15DC/serialNumber=D36E104261F819D68D0F70BB29ADFE8EF463B2ED Certificate serial: 52 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/024QQmH4GdaND3C7Ka3-jvRjsu0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B15DC/4FEC1C04CEED11EFBD655511C4F9AE02/024QQmH4GdaND3C7Ka3-jvRjsu0.mft Manifest number: 51 Signing time: Sun 15 Jun 2025 06:20:45 +0000 Manifest this update: Sun 15 Jun 2025 06:20:45 +0000 Manifest next update: Sun 22 Jun 2025 06:20:45 +0000 Files and hashes: 1: 024QQmH4GdaND3C7Ka3-jvRjsu0.crl (hash: s3KjS+FVnfD/B7zHnvvITVFkbGUHifyWefWiMOiBNpo=) 2: 0A65ADB6CEEE11EFAA2CA812C4F9AE02.roa (hash: BnzgVRQY1lWGd2cFrP1xnxB6cOmKQA86fc66ckx28mQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B15DC/4FEC1C04CEED11EFBD655511C4F9AE02/024QQmH4GdaND3C7Ka3-jvRjsu0.crl rsync://rpki.apnic.net/member_repository/A91B15DC/4FEC1C04CEED11EFBD655511C4F9AE02/024QQmH4GdaND3C7Ka3-jvRjsu0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/024QQmH4GdaND3C7Ka3-jvRjsu0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 06:20:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 82 (0x52) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B15DC, serialNumber=D36E104261F819D68D0F70BB29ADFE8EF463B2ED Validity Not Before: Jun 15 06:20:45 2025 GMT Not After : Jun 22 06:20:45 2025 GMT Subject: CN=684e663d-0b9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:9b:35:f3:48:74:ed:32:7d:78:e7:a4:90:b8: 5b:9f:f0:8a:53:b6:ae:83:88:79:a2:47:51:4f:2e: ee:27:6e:43:52:51:b5:8a:e6:7b:c5:63:63:70:fc: 26:cb:ea:ac:8d:87:31:1f:aa:8c:b2:1c:ac:21:b9: 47:a4:89:cc:76:24:f7:c9:8b:b6:0f:02:f4:ce:f4: a1:cc:16:01:17:c2:ec:82:75:6b:54:99:49:93:ec: 06:0b:d9:d8:03:83:56:6f:e9:df:85:b5:b5:9b:71: b3:a7:54:4f:b9:37:c7:bd:f9:4d:de:88:86:c1:e5: c6:c8:b9:2e:64:45:ef:2c:99:0b:8b:32:2a:5f:70: 18:7a:f4:ae:6c:09:0b:39:63:9d:b0:05:23:cf:7c: 0f:91:83:93:db:32:b9:b6:a9:45:c2:3d:d2:eb:3c: ac:a8:27:c6:49:99:63:a9:af:93:36:27:f7:8a:78: 4b:36:71:1f:ac:62:f0:d8:30:99:80:f9:fa:c8:a0: 24:2e:0f:5b:b1:06:07:ee:5f:02:2a:8e:f9:83:30: e6:82:18:94:23:b4:30:cb:1c:f9:91:92:15:aa:7b: 13:8c:34:94:7b:60:e9:df:cd:9a:27:38:29:a4:b5: 15:8f:59:b1:5b:83:3c:8e:27:33:82:d5:93:65:13: 5c:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:08:A7:0C:F2:A6:5B:2D:3E:BC:D3:FA:96:D1:D1:25:31:97:3B:71 X509v3 Authority Key Identifier: keyid:D3:6E:10:42:61:F8:19:D6:8D:0F:70:BB:29:AD:FE:8E:F4:63:B2:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B15DC/4FEC1C04CEED11EFBD655511C4F9AE02/024QQmH4GdaND3C7Ka3-jvRjsu0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/024QQmH4GdaND3C7Ka3-jvRjsu0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B15DC/4FEC1C04CEED11EFBD655511C4F9AE02/024QQmH4GdaND3C7Ka3-jvRjsu0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:09:2d:3e:be:1b:d7:28:98:99:a9:2c:22:a5:65:6c:d9:e1: 72:7e:56:f6:8a:44:b8:b4:f3:c0:a9:f0:6a:24:d3:96:8c:b5: e6:1b:7d:9b:ff:a2:25:ee:ef:dc:7a:a0:1e:4d:18:85:c8:48: 10:6c:bd:b0:63:98:c1:c5:ba:b6:bb:ff:83:5d:09:1b:fb:6c: db:4d:d1:8d:fc:8b:59:7d:63:99:5b:16:92:12:51:b4:58:75: 4b:1f:f0:43:ca:33:96:37:86:8b:0e:af:f5:46:5f:bf:ce:2a: 16:54:e5:cd:12:cf:ef:76:46:d1:4e:d0:b5:80:ff:06:fe:94: 35:59:86:98:b3:c3:8b:81:e8:6b:cb:94:12:79:d4:a3:58:c0: 96:91:91:53:5d:d3:a1:5a:04:4c:b2:37:3a:b5:1b:6d:33:94: 6a:da:d3:84:b7:62:60:ae:25:59:6f:95:ec:92:fa:de:b7:5c: fe:07:2d:6e:01:9c:d6:7d:11:9e:81:6f:e1:aa:51:6c:f6:4c: d7:d9:ce:ec:45:84:fa:cd:0a:5f:d9:24:cf:8e:cf:f5:aa:b9: dd:0b:77:a3:67:65:a9:3b:db:9e:c5:c3:70:65:0e:0b:8a:2d: 73:4f:e6:df:9a:2d:93:54:84:33:ab:8c:e8:d0:a8:3a:11:dc: 87:33:d6:5d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC MTVEQzExMC8GA1UEBRMoRDM2RTEwNDI2MUY4MTlENjhEMEY3MEJCMjlBREZFOEVG NDYzQjJFRDAeFw0yNTA2MTUwNjIwNDVaFw0yNTA2MjIwNjIwNDVaMBgxFjAUBgNV BAMTDTY4NGU2NjNkLTBiOWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCumzXzSHTtMn1456SQuFuf8IpTtq6DiHmiR1FPLu4nbkNSUbWK5nvFY2Nw/CbL 6qyNhzEfqoyyHKwhuUekicx2JPfJi7YPAvTO9KHMFgEXwuyCdWtUmUmT7AYL2dgD g1Zv6d+FtbWbcbOnVE+5N8e9+U3eiIbB5cbIuS5kRe8smQuLMipfcBh69K5sCQs5 Y52wBSPPfA+Rg5PbMrm2qUXCPdLrPKyoJ8ZJmWOpr5M2J/eKeEs2cR+sYvDYMJmA +frIoCQuD1uxBgfuXwIqjvmDMOaCGJQjtDDLHPmRkhWqexOMNJR7YOnfzZonOCmk tRWPWbFbgzyOJzOC1ZNlE1x/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUbAinDPKm Wy0+vNP6ltHRJTGXO3EwHwYDVR0jBBgwFoAU024QQmH4GdaND3C7Ka3+jvRjsu0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIxNURDLzRGRUMxQzA0Q0VF RDExRUZCRDY1NTUxMUM0RjlBRTAyLzAyNFFRbUg0R2RhTkQzQzdLYTMtanZSanN1 MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvMDI0UVFtSDRHZGFORDNDN0thMy1qdlJqc3UwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIx NURDLzRGRUMxQzA0Q0VFRDExRUZCRDY1NTUxMUM0RjlBRTAyLzAyNFFRbUg0R2Rh TkQzQzdLYTMtanZSanN1MC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJQJLT6+G9comJmpLCKlZWzZ4XJ+VvaKRLi088Cp8Gok05aMteYbfZv/ oiXu79x6oB5NGIXISBBsvbBjmMHFura7/4NdCRv7bNtN0Y38i1l9Y5lbFpISUbRY dUsf8EPKM5Y3hosOr/VGX7/OKhZU5c0Sz+92RtFO0LWA/wb+lDVZhpizw4uB6GvL lBJ51KNYwJaRkVNd06FaBEyyNzq1G20zlGra04S3YmCuJVlvleyS+t63XP4HLW4B nNZ9EZ6Bb+GqUWz2TNfZzuxFhPrNCl/ZJM+Oz/Wqud0Ld6NnZak7257Fw3BlDguK LXNP5t+aLZNUhDOrjOjQqDoR3Icz1l0= -----END CERTIFICATE-----Generated at Mon Jun 16 07:00:46 2025 by rpki-client