$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC966/A1952BA21C1111EAB6C3C76DC4F9AE02/sqJd3hqeyRtZmGpTL3iDVDYYMkg.mft File: sqJd3hqeyRtZmGpTL3iDVDYYMkg.mft (raw, json) Hash identifier: nk5eYO5KhctCmgulLsZjhskIYb9FMKW/C5Bkvhf9Iiw= Subject key identifier: 3B:42:FA:E3:73:40:AF:58:9B:4C:E9:01:19:50:AD:AD:A1:58:41:2F Authority key identifier: B2:A2:5D:DE:1A:9E:C9:1B:59:98:6A:53:2F:78:83:54:36:18:32:48 Certificate issuer: /CN=A91BC966/serialNumber=B2A25DDE1A9EC91B59986A532F78835436183248 Certificate serial: 0C27 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqJd3hqeyRtZmGpTL3iDVDYYMkg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC966/A1952BA21C1111EAB6C3C76DC4F9AE02/sqJd3hqeyRtZmGpTL3iDVDYYMkg.mft Manifest number: 0BFD Signing time: Sun 22 Jun 2025 18:34:49 +0000 Manifest this update: Sun 22 Jun 2025 18:34:48 +0000 Manifest next update: Sun 29 Jun 2025 18:34:48 +0000 Files and hashes: 1: sqJd3hqeyRtZmGpTL3iDVDYYMkg.crl (hash: JVaR/sGyCx3gZtD5GFscq+lx8nmnDZC39qyUuv6q3y0=) 2: A6A53FA2D67E11EEAA2CA218C4F9AE02.roa (hash: vd/2YU/fZHY0X+88OePyC1GrfRf3guoIzxWdo48FOwA=) 3: 5DA849821C1211EA819EA46EC4F9AE02.roa (hash: 9WFKUJqUOgDB07wt9CN3L8jHFMm+Bp2TRv/IY0cRCLM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC966/A1952BA21C1111EAB6C3C76DC4F9AE02/sqJd3hqeyRtZmGpTL3iDVDYYMkg.crl rsync://rpki.apnic.net/member_repository/A91BC966/A1952BA21C1111EAB6C3C76DC4F9AE02/sqJd3hqeyRtZmGpTL3iDVDYYMkg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqJd3hqeyRtZmGpTL3iDVDYYMkg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Jun 2025 18:34:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3111 (0xc27) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC966, serialNumber=B2A25DDE1A9EC91B59986A532F78835436183248 Validity Not Before: Jun 22 18:34:48 2025 GMT Not After : Jun 29 18:34:48 2025 GMT Subject: CN=68584cc8-ad56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:49:aa:58:a9:e8:f4:21:f3:ea:33:62:c4:b4: 73:e6:2c:07:66:8a:d6:28:66:0a:f6:9b:93:fb:12: 42:06:4e:22:c1:6b:48:d3:9b:8a:cb:21:b2:73:f7: 8d:f9:a5:c3:b2:c5:85:ea:19:85:1a:f9:01:82:63: a9:12:54:26:ac:50:49:7b:ae:1d:3f:a8:93:ca:25: d8:c1:3c:d3:40:24:e5:16:0f:d5:41:4e:64:5d:12: 0a:2f:1a:a4:fe:b1:bd:24:d4:1d:08:68:ec:b2:0f: ea:77:64:22:69:0f:03:84:4e:01:54:6c:3a:1a:f4: 28:de:a7:ac:6a:1b:78:07:72:1c:f4:8d:03:cb:83: 25:47:18:4f:c5:25:a2:6f:b1:80:9c:7d:22:51:26: d3:be:98:c3:ac:9c:4c:3c:eb:dd:70:95:b6:af:45: 4f:8e:b9:e1:4e:95:62:da:c2:fd:bd:52:60:cd:5d: 13:9a:42:0a:1f:bf:23:95:d2:a4:12:a9:b4:40:ed: 53:aa:30:8b:59:7b:10:6b:f4:c1:15:51:b2:13:11: 1a:fd:03:81:72:d7:00:a0:ac:f7:df:2c:3e:0a:66: 49:cd:5d:4d:a4:9b:ce:dc:6e:1f:e6:ac:bd:2b:04: cc:61:80:1d:0d:e3:94:60:a6:43:0e:69:ab:c4:a6: f4:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:42:FA:E3:73:40:AF:58:9B:4C:E9:01:19:50:AD:AD:A1:58:41:2F X509v3 Authority Key Identifier: keyid:B2:A2:5D:DE:1A:9E:C9:1B:59:98:6A:53:2F:78:83:54:36:18:32:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC966/A1952BA21C1111EAB6C3C76DC4F9AE02/sqJd3hqeyRtZmGpTL3iDVDYYMkg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqJd3hqeyRtZmGpTL3iDVDYYMkg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC966/A1952BA21C1111EAB6C3C76DC4F9AE02/sqJd3hqeyRtZmGpTL3iDVDYYMkg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:48:fd:68:59:d4:e0:41:47:bb:47:76:4e:ab:dc:db:7f:05: d8:31:42:bf:a2:fd:c5:09:01:5b:c2:a3:c7:19:9f:23:cd:9f: db:7d:83:b5:8a:40:cd:0e:6e:ce:78:9a:dd:e1:34:93:33:24: 15:08:25:aa:77:a8:71:3e:b5:a2:c9:70:62:b2:ad:58:b1:a1: 35:8a:be:3e:a0:7c:60:1a:05:b9:70:95:10:56:95:fc:7e:03: 41:69:05:5c:70:69:05:00:40:11:44:85:33:c8:7b:f6:48:90: b8:e5:26:b6:79:48:19:7c:3d:90:ef:8c:47:cd:43:0b:b9:2b: 67:2c:80:c9:82:21:40:26:a4:67:c0:9e:f7:9d:2d:61:d3:9b: 8d:55:bc:b1:37:3a:68:e0:51:aa:c0:34:4d:00:9f:32:02:3e: 31:13:d0:27:ed:17:91:7a:23:bd:f5:e6:24:4f:a5:b1:69:31: de:15:24:12:3e:15:e9:40:11:9e:4b:54:9c:a4:16:2c:cd:2c: 29:1c:dd:f2:03:77:23:44:66:40:ef:4d:08:6f:21:44:f5:a4: 97:f8:e2:a9:73:26:54:49:12:9a:69:81:ee:46:b7:1c:12:c4: 1a:f4:26:be:dc:13:e1:e1:db:a9:d0:28:ba:22:a4:e1:b0:62: 8c:e1:a0:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDCcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkM5NjYxMTAvBgNVBAUTKEIyQTI1RERFMUE5RUM5MUI1OTk4NkE1MzJGNzg4MzU0 MzYxODMyNDgwHhcNMjUwNjIyMTgzNDQ4WhcNMjUwNjI5MTgzNDQ4WjAYMRYwFAYD VQQDEw02ODU4NGNjOC1hZDU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwkmqWKno9CHz6jNixLRz5iwHZorWKGYK9puT+xJCBk4iwWtI05uKyyGyc/eN +aXDssWF6hmFGvkBgmOpElQmrFBJe64dP6iTyiXYwTzTQCTlFg/VQU5kXRIKLxqk /rG9JNQdCGjssg/qd2QiaQ8DhE4BVGw6GvQo3qesaht4B3Ic9I0Dy4MlRxhPxSWi b7GAnH0iUSbTvpjDrJxMPOvdcJW2r0VPjrnhTpVi2sL9vVJgzV0TmkIKH78jldKk Eqm0QO1TqjCLWXsQa/TBFVGyExEa/QOBctcAoKz33yw+CmZJzV1NpJvO3G4f5qy9 KwTMYYAdDeOUYKZDDmmrxKb0fQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDtC+uNz QK9Ym0zpARlQra2hWEEvMB8GA1UdIwQYMBaAFLKiXd4anskbWZhqUy94g1Q2GDJI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzk2Ni9BMTk1MkJBMjFD MTExMUVBQjZDM0M3NkRDNEY5QUUwMi9zcUpkM2hxZXlSdFptR3BUTDNpRFZEWVlN a2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NxSmQzaHFleVJ0Wm1HcFRMM2lEVkRZWU1rZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Qzk2Ni9BMTk1MkJBMjFDMTExMUVBQjZDM0M3NkRDNEY5QUUwMi9zcUpkM2hxZXlS dFptR3BUTDNpRFZEWVlNa2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBFSP1oWdTgQUe7R3ZOq9zbfwXYMUK/ov3FCQFbwqPHGZ8jzZ/bfYO1 ikDNDm7OeJrd4TSTMyQVCCWqd6hxPrWiyXBisq1YsaE1ir4+oHxgGgW5cJUQVpX8 fgNBaQVccGkFAEARRIUzyHv2SJC45Sa2eUgZfD2Q74xHzUMLuStnLIDJgiFAJqRn wJ73nS1h05uNVbyxNzpo4FGqwDRNAJ8yAj4xE9An7ReReiO99eYkT6WxaTHeFSQS PhXpQBGeS1ScpBYszSwpHN3yA3cjRGZA700IbyFE9aSX+OKpcyZUSRKaaYHuRrcc EsQa9Ca+3BPh4dup0Ci6IqThsGKM4aDY -----END CERTIFICATE-----Generated at Mon Jun 23 05:58:42 2025 by rpki-client