$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD000/E6602ED20DB411EABA5C1D7FC4F9AE02/QOlsrrGdQeDa1lL0Na0I566Anvk.mft File: QOlsrrGdQeDa1lL0Na0I566Anvk.mft (raw, json) Hash identifier: kgEf+4C+SLHq8otPsO1TSJMNZ4/03z7AhjutJy7bd28= Subject key identifier: 93:14:85:85:8A:D7:FC:99:57:74:E0:03:D5:AD:46:34:A4:E3:E7:F5 Authority key identifier: 40:E9:6C:AE:B1:9D:41:E0:DA:D6:52:F4:35:AD:08:E7:AE:80:9E:F9 Certificate issuer: /CN=A91BD000/serialNumber=40E96CAEB19D41E0DAD652F435AD08E7AE809EF9 Certificate serial: 0C2D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOlsrrGdQeDa1lL0Na0I566Anvk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BD000/E6602ED20DB411EABA5C1D7FC4F9AE02/QOlsrrGdQeDa1lL0Na0I566Anvk.mft Manifest number: 0C23 Signing time: Sat 14 Jun 2025 18:30:59 +0000 Manifest this update: Sat 14 Jun 2025 18:30:58 +0000 Manifest next update: Sat 21 Jun 2025 18:30:58 +0000 Files and hashes: 1: QOlsrrGdQeDa1lL0Na0I566Anvk.crl (hash: WnP5+WJ76wmbQGkNJexBkHxHr3lHSzL02T5jg6+VjjM=) 2: A55C1282ACA311EFBA427354C4F9AE02.roa (hash: xR90gNQMnqZeX9/Y9edNzOkrUxu48WORxv+O+Po63Y4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BD000/E6602ED20DB411EABA5C1D7FC4F9AE02/QOlsrrGdQeDa1lL0Na0I566Anvk.crl rsync://rpki.apnic.net/member_repository/A91BD000/E6602ED20DB411EABA5C1D7FC4F9AE02/QOlsrrGdQeDa1lL0Na0I566Anvk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOlsrrGdQeDa1lL0Na0I566Anvk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 18:30:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3117 (0xc2d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BD000, serialNumber=40E96CAEB19D41E0DAD652F435AD08E7AE809EF9 Validity Not Before: Jun 14 18:30:58 2025 GMT Not After : Jun 21 18:30:58 2025 GMT Subject: CN=684dbfe2-08d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:db:df:ea:de:81:e8:e1:30:25:42:47:4d:2e: 14:71:0f:07:03:d6:4a:cf:5d:44:90:d5:d6:aa:3c: 19:da:e4:ac:53:31:23:10:ad:11:70:9a:24:e6:ca: 5c:4a:ab:3f:2f:59:b1:24:bc:77:44:83:d2:64:80: ca:b2:fb:b6:dd:91:f8:db:77:db:d6:f8:47:c3:d0: 5f:d9:bc:ae:7b:60:c1:e0:f4:97:98:db:b2:ed:ac: 46:f0:74:a3:0e:24:0a:8c:e4:01:22:fe:f2:a5:80: 8e:2a:0a:74:b1:ac:e7:fd:e5:dc:4f:3d:0c:0c:e6: 1d:97:c8:21:4f:67:00:cd:3c:83:1f:39:9a:e2:d6: 97:50:13:63:df:1b:46:6b:16:51:f0:ee:43:d8:8c: d7:a4:2f:c8:4e:fb:15:fd:4f:03:9f:29:ce:08:0e: 31:ca:99:70:e6:38:fc:a4:5c:50:eb:85:e7:68:b4: cb:53:f9:8b:da:ec:84:d8:64:18:b8:60:37:cb:a7: 85:60:36:b0:54:dd:d2:d1:18:0f:6e:26:4f:b8:c9: a5:d9:23:f2:17:05:53:d4:00:e6:f4:df:4e:4c:63: 3d:7e:72:cf:d6:ed:00:37:41:b6:f8:0c:4d:02:9f: a6:02:fc:bf:47:1a:71:63:c6:96:f7:49:d6:f2:66: 24:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:14:85:85:8A:D7:FC:99:57:74:E0:03:D5:AD:46:34:A4:E3:E7:F5 X509v3 Authority Key Identifier: keyid:40:E9:6C:AE:B1:9D:41:E0:DA:D6:52:F4:35:AD:08:E7:AE:80:9E:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BD000/E6602ED20DB411EABA5C1D7FC4F9AE02/QOlsrrGdQeDa1lL0Na0I566Anvk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOlsrrGdQeDa1lL0Na0I566Anvk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD000/E6602ED20DB411EABA5C1D7FC4F9AE02/QOlsrrGdQeDa1lL0Na0I566Anvk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:20:3e:30:17:45:5a:d8:69:b6:1e:7d:4a:41:86:67:fd:fc: a1:bf:17:03:91:e5:12:40:37:61:1f:da:53:e2:4c:24:84:4f: b3:25:d1:81:1c:4e:39:68:29:0e:44:21:fe:ce:75:05:4a:0f: 45:0f:aa:3c:a6:79:42:ff:60:b1:7b:79:9e:c4:79:7e:66:e7: 89:df:14:1b:9e:33:da:fb:cd:1d:35:84:8f:ff:b7:b0:9e:25: 1a:27:19:36:1f:10:81:02:b4:ff:21:df:c0:76:f2:3e:d6:38: 6a:3b:39:b1:e7:ef:71:6d:dd:0a:66:66:f9:bb:51:d6:3c:c1: 74:ab:98:52:d8:e6:27:e1:44:d2:76:cd:9b:9f:d0:97:67:72: 3e:7a:23:e7:07:b9:a6:ae:a7:e2:6d:81:9b:df:96:d6:f9:fa: 5f:34:ce:6f:c4:72:18:b6:49:5c:ab:5d:0f:62:9e:d9:3e:bd: c5:a0:fb:ee:4f:c1:6e:fd:b6:e5:11:60:6c:51:46:d2:5f:da: 81:e2:6d:7e:32:7e:9f:55:f6:1c:8d:9f:0f:5e:8c:8e:02:80: 49:3f:7d:88:d7:61:dd:7b:4e:08:4c:e8:61:e0:14:10:07:ec: b1:d2:c2:9c:a5:f5:f5:83:4c:1f:68:d5:1a:01:e3:5b:38:54: fd:fd:b4:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDC0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkQwMDAxMTAvBgNVBAUTKDQwRTk2Q0FFQjE5RDQxRTBEQUQ2NTJGNDM1QUQwOEU3 QUU4MDlFRjkwHhcNMjUwNjE0MTgzMDU4WhcNMjUwNjIxMTgzMDU4WjAYMRYwFAYD VQQDEw02ODRkYmZlMi0wOGQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuNvf6t6B6OEwJUJHTS4UcQ8HA9ZKz11EkNXWqjwZ2uSsUzEjEK0RcJok5spc Sqs/L1mxJLx3RIPSZIDKsvu23ZH423fb1vhHw9Bf2byue2DB4PSXmNuy7axG8HSj DiQKjOQBIv7ypYCOKgp0sazn/eXcTz0MDOYdl8ghT2cAzTyDHzma4taXUBNj3xtG axZR8O5D2IzXpC/ITvsV/U8DnynOCA4xyplw5jj8pFxQ64XnaLTLU/mL2uyE2GQY uGA3y6eFYDawVN3S0RgPbiZPuMml2SPyFwVT1ADm9N9OTGM9fnLP1u0AN0G2+AxN Ap+mAvy/RxpxY8aW90nW8mYkaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJMUhYWK 1/yZV3TgA9WtRjSk4+f1MB8GA1UdIwQYMBaAFEDpbK6xnUHg2tZS9DWtCOeugJ75 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRDAwMC9FNjYwMkVEMjBE QjQxMUVBQkE1QzFEN0ZDNEY5QUUwMi9RT2xzcnJHZFFlRGExbEwwTmEwSTU2NkFu dmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FPbHNyckdkUWVEYTFsTDBOYTBJNTY2QW52ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RDAwMC9FNjYwMkVEMjBEQjQxMUVBQkE1QzFEN0ZDNEY5QUUwMi9RT2xzcnJHZFFl RGExbEwwTmEwSTU2NkFudmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6ID4wF0Va2Gm2Hn1KQYZn/fyhvxcDkeUSQDdhH9pT4kwkhE+zJdGB HE45aCkORCH+znUFSg9FD6o8pnlC/2Cxe3mexHl+ZueJ3xQbnjPa+80dNYSP/7ew niUaJxk2HxCBArT/Id/AdvI+1jhqOzmx5+9xbd0KZmb5u1HWPMF0q5hS2OYn4UTS ds2bn9CXZ3I+eiPnB7mmrqfibYGb35bW+fpfNM5vxHIYtklcq10PYp7ZPr3FoPvu T8Fu/bblEWBsUUbSX9qB4m1+Mn6fVfYcjZ8PXoyOAoBJP32I12Hde04ITOhh4BQQ B+yx0sKcpfX1g0wfaNUaAeNbOFT9/bST -----END CERTIFICATE-----Generated at Sun Jun 15 08:46:26 2025 by rpki-client