$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA2AB/111E55E0097E11EEAE7F351FC4F9AE02/QOlPucJEwgzdpE57Dop6cZqXdA8.mft File: QOlPucJEwgzdpE57Dop6cZqXdA8.mft (raw, json) Hash identifier: CeSYUZ4r0TXMlOfj0F8CKq8gz+QEG/UseyyxlF8SVMU= Subject key identifier: DD:F3:8E:96:93:1C:82:82:9E:CE:00:1E:2C:41:92:CA:05:FF:69:A5 Authority key identifier: 40:E9:4F:B9:C2:44:C2:0C:DD:A4:4E:7B:0E:8A:7A:71:9A:97:74:0F Certificate issuer: /CN=A91BA2AB/serialNumber=40E94FB9C244C20CDDA44E7B0E8A7A719A97740F Certificate serial: 0179 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOlPucJEwgzdpE57Dop6cZqXdA8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA2AB/111E55E0097E11EEAE7F351FC4F9AE02/QOlPucJEwgzdpE57Dop6cZqXdA8.mft Manifest number: 0177 Signing time: Sun 15 Jun 2025 02:56:25 +0000 Manifest this update: Sun 15 Jun 2025 02:56:24 +0000 Manifest next update: Sun 22 Jun 2025 02:56:24 +0000 Files and hashes: 1: QOlPucJEwgzdpE57Dop6cZqXdA8.crl (hash: oI+WV3+nn787KOGGxcmpcNTnAi69SkBdJ9GNs/J7pfY=) 2: 7A8706087CA011EF8491607DC4F9AE02.roa (hash: EAsHcyPYziRKahL54/4beVq18nLBLDrzExkB1EWt7iQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA2AB/111E55E0097E11EEAE7F351FC4F9AE02/QOlPucJEwgzdpE57Dop6cZqXdA8.crl rsync://rpki.apnic.net/member_repository/A91BA2AB/111E55E0097E11EEAE7F351FC4F9AE02/QOlPucJEwgzdpE57Dop6cZqXdA8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOlPucJEwgzdpE57Dop6cZqXdA8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:56:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 377 (0x179) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA2AB, serialNumber=40E94FB9C244C20CDDA44E7B0E8A7A719A97740F Validity Not Before: Jun 15 02:56:24 2025 GMT Not After : Jun 22 02:56:24 2025 GMT Subject: CN=684e3658-b27b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:03:4d:66:83:b7:15:0e:bc:c4:fa:9c:4f:fd: 49:cc:59:3d:5a:b7:04:f7:03:63:e6:da:a1:0d:3b: a3:8d:ee:fb:6c:49:8c:5a:41:f3:70:61:9a:23:06: d5:c5:89:76:60:3f:59:45:34:d1:79:a4:32:a3:bd: d2:cb:e6:d3:eb:ba:1f:86:86:2f:ad:8b:dd:82:4a: ab:3f:e1:83:6b:ec:aa:9c:b3:d8:45:6e:e8:c5:c2: a0:72:e3:66:29:3e:f1:ae:45:66:b0:73:97:70:59: 02:0d:e7:55:3c:4a:6a:a1:d0:ce:1d:3d:2b:fe:22: cb:73:bf:b4:c4:89:6e:fd:b5:7c:3a:02:8c:f0:0e: 1f:f2:a8:59:e3:03:3d:43:e9:27:83:a5:71:2a:11: db:72:7a:b8:65:94:59:8e:00:55:10:ef:e0:d4:70: d2:c2:bc:92:58:94:75:41:f3:f9:cd:d5:38:46:c7: c2:1c:49:22:a8:76:88:7a:76:37:08:15:ab:e9:8a: 6c:c7:29:57:28:e1:be:6d:89:c2:0b:f1:f2:1c:6f: 0f:55:09:e7:6d:ff:bd:45:66:51:2e:45:be:a3:61: 18:7e:13:e5:53:26:4d:f0:83:b3:03:89:03:20:53: a4:21:6d:44:9a:c8:4d:91:d2:a6:e3:63:0c:95:80: be:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:F3:8E:96:93:1C:82:82:9E:CE:00:1E:2C:41:92:CA:05:FF:69:A5 X509v3 Authority Key Identifier: keyid:40:E9:4F:B9:C2:44:C2:0C:DD:A4:4E:7B:0E:8A:7A:71:9A:97:74:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA2AB/111E55E0097E11EEAE7F351FC4F9AE02/QOlPucJEwgzdpE57Dop6cZqXdA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOlPucJEwgzdpE57Dop6cZqXdA8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA2AB/111E55E0097E11EEAE7F351FC4F9AE02/QOlPucJEwgzdpE57Dop6cZqXdA8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:54:bf:af:08:6d:ab:ea:4c:c5:4d:3a:9e:24:e9:f0:57:52: a6:4f:08:13:51:d1:ce:97:0b:aa:73:c1:89:1d:11:e1:c1:4d: af:59:80:1b:8c:88:42:d9:48:36:72:c9:22:0a:bb:cd:e9:e4: 51:a0:b5:d9:15:26:d9:8a:66:0b:70:66:5c:9d:ba:59:88:dc: 83:78:a9:2b:1c:aa:be:4b:3d:c7:cd:1b:06:d6:23:ca:2a:29: 39:91:be:26:d6:fc:8e:4d:1f:62:c5:90:14:e8:77:ba:04:fd: bd:87:c9:f0:4a:ba:9c:35:1d:cc:11:f0:ee:6b:6a:f3:ee:17: 56:f1:c9:ba:2a:98:bb:c4:b8:84:ca:a3:55:d1:20:05:2f:cd: 19:f4:a9:77:79:09:81:24:b1:82:f8:e9:dd:30:8f:c4:6c:ea: 69:04:12:54:19:44:33:e6:ed:5e:b5:67:00:39:62:50:75:b4: dd:af:7a:7a:2c:2e:fa:a0:13:1e:39:1a:5c:ea:05:e2:44:eb: 06:85:fb:45:5d:39:fb:24:b1:53:d5:b9:2f:33:8b:92:78:24: 7e:92:9a:b1:93:ea:4d:ee:c2:6e:09:c3:a5:30:a6:3e:fc:e9: 63:0f:73:61:75:6a:e1:bf:f5:2b:f5:73:fb:f1:19:0c:3d:c9: 02:93:8c:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkEyQUIxMTAvBgNVBAUTKDQwRTk0RkI5QzI0NEMyMENEREE0NEU3QjBFOEE3QTcx OUE5Nzc0MEYwHhcNMjUwNjE1MDI1NjI0WhcNMjUwNjIyMDI1NjI0WjAYMRYwFAYD VQQDEw02ODRlMzY1OC1iMjdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyQNNZoO3FQ68xPqcT/1JzFk9WrcE9wNj5tqhDTujje77bEmMWkHzcGGaIwbV xYl2YD9ZRTTReaQyo73Sy+bT67ofhoYvrYvdgkqrP+GDa+yqnLPYRW7oxcKgcuNm KT7xrkVmsHOXcFkCDedVPEpqodDOHT0r/iLLc7+0xIlu/bV8OgKM8A4f8qhZ4wM9 Q+kng6VxKhHbcnq4ZZRZjgBVEO/g1HDSwrySWJR1QfP5zdU4RsfCHEkiqHaIenY3 CBWr6YpsxylXKOG+bYnCC/HyHG8PVQnnbf+9RWZRLkW+o2EYfhPlUyZN8IOzA4kD IFOkIW1EmshNkdKm42MMlYC+bQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN3zjpaT HIKCns4AHixBksoF/2mlMB8GA1UdIwQYMBaAFEDpT7nCRMIM3aROew6KenGal3QP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTJBQi8xMTFFNTVFMDA5 N0UxMUVFQUU3RjM1MUZDNEY5QUUwMi9RT2xQdWNKRXdnemRwRTU3RG9wNmNacVhk QTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FPbFB1Y0pFd2d6ZHBFNTdEb3A2Y1pxWGRBOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTJBQi8xMTFFNTVFMDA5N0UxMUVFQUU3RjM1MUZDNEY5QUUwMi9RT2xQdWNKRXdn emRwRTU3RG9wNmNacVhkQTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChVL+vCG2r6kzFTTqeJOnwV1KmTwgTUdHOlwuqc8GJHRHhwU2vWYAb jIhC2Ug2cskiCrvN6eRRoLXZFSbZimYLcGZcnbpZiNyDeKkrHKq+Sz3HzRsG1iPK Kik5kb4m1vyOTR9ixZAU6He6BP29h8nwSrqcNR3MEfDua2rz7hdW8cm6Kpi7xLiE yqNV0SAFL80Z9Kl3eQmBJLGC+OndMI/EbOppBBJUGUQz5u1etWcAOWJQdbTdr3p6 LC76oBMeORpc6gXiROsGhftFXTn7JLFT1bkvM4uSeCR+kpqxk+pN7sJuCcOlMKY+ /OljD3NhdWrhv/Ur9XP78RkMPckCk4yL -----END CERTIFICATE-----Generated at Mon Jun 16 05:37:36 2025 by rpki-client