$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.mft File: Q-o6LcCMXh8s1oQRZEoFwHbojAg.mft (raw, json) Hash identifier: dxq5y4H5O3WsK+0ZXTjE9L4UqHAV6r2gqNUkel7QYhA= Subject key identifier: 72:7B:A6:3C:B3:8B:CD:D1:C1:D9:AD:F6:F0:08:9F:53:91:2F:E3:89 Authority key identifier: 43:EA:3A:2D:C0:8C:5E:1F:2C:D6:84:11:64:4A:05:C0:76:E8:8C:08 Certificate issuer: /CN=A91BE146/serialNumber=43EA3A2DC08C5E1F2CD68411644A05C076E88C08 Certificate serial: 05F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-o6LcCMXh8s1oQRZEoFwHbojAg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.mft Manifest number: 05E2 Signing time: Sat 14 Jun 2025 22:46:08 +0000 Manifest this update: Sat 14 Jun 2025 22:46:08 +0000 Manifest next update: Sat 21 Jun 2025 22:46:08 +0000 Files and hashes: 1: Q-o6LcCMXh8s1oQRZEoFwHbojAg.crl (hash: UcYPebtUxFoASBk6WB3NwP4iL4c13NN2qeKDuio1feI=) 2: 87BF5BF6BD3411EB99D25F26C4F9AE02.roa (hash: sbTShmIKKL0T6wr1tqxxOL+QE1luTX7NDd7NnR8wp7g=) 3: 49FAAD72591211EDA743880DC4F9AE02.roa (hash: krevIMI6IUNw/+chMIBio+O1qxsYHBvCeuqJ7cXD7Gc=) 4: 0E0DBEA4327411ED80554E32C4F9AE02.roa (hash: WXJDLjhJd3w6bj++/nA2IppIGCY5Tdg8yehmeKyxNgI=) 5: DD46BB92EDAB11EDBE91BB82C4F9AE02.roa (hash: 1NiFRWSUDBEKjygUm/VPv7UX405Nm7i1bZRm8rES/iU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.crl rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-o6LcCMXh8s1oQRZEoFwHbojAg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 22:46:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1527 (0x5f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BE146, serialNumber=43EA3A2DC08C5E1F2CD68411644A05C076E88C08 Validity Not Before: Jun 14 22:46:08 2025 GMT Not After : Jun 21 22:46:08 2025 GMT Subject: CN=684dfbb0-2b07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:5b:4a:9e:a7:24:2e:3c:d3:13:c2:8f:0c:bb: 65:53:5d:90:50:8b:6f:1c:81:78:29:6e:82:e6:ec: 95:c4:bc:fc:6b:d6:f2:af:3e:23:2f:24:29:a4:0f: ec:d4:46:b1:50:85:da:56:b6:c7:13:02:68:2a:00: 73:51:18:9b:e0:f9:3e:4f:6b:7c:fb:f8:2e:33:75: 7c:17:3c:7e:ba:10:da:ef:64:1b:67:62:26:5b:46: b9:4a:03:5d:3f:6c:e8:74:00:df:73:4e:a7:77:d9: 7c:c9:fc:f7:39:28:b1:f1:c3:c3:d1:d5:42:c2:e1: c7:a4:38:fd:62:28:96:28:ad:75:5b:2f:11:14:13: 7a:a5:0f:0e:47:ca:9c:a0:23:4f:79:03:ce:59:0f: cf:cd:4a:bf:47:ff:d6:e9:f9:3d:32:5c:43:5d:1b: c9:56:d5:28:23:af:97:8a:66:4e:61:d5:b6:b0:a8: 5c:62:ea:7b:77:dc:48:e0:b5:76:80:83:66:ac:cf: 71:25:0b:0c:3a:e3:73:e9:67:13:d4:15:da:ed:a8: d3:56:d0:d0:fb:ac:0f:29:64:22:b8:dd:39:9e:26: 6b:4d:c6:dc:0a:2d:81:75:0a:81:ea:d7:4a:58:26: 5d:15:90:53:13:10:2a:a9:67:5c:30:9a:92:da:b0: 24:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:7B:A6:3C:B3:8B:CD:D1:C1:D9:AD:F6:F0:08:9F:53:91:2F:E3:89 X509v3 Authority Key Identifier: keyid:43:EA:3A:2D:C0:8C:5E:1F:2C:D6:84:11:64:4A:05:C0:76:E8:8C:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-o6LcCMXh8s1oQRZEoFwHbojAg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:b7:b3:56:cf:52:25:21:96:f6:6c:ca:5e:d5:0a:9a:ef:cd: 2a:73:5b:6b:da:13:a2:41:95:2b:5f:f5:47:ab:4e:94:7a:2c: 13:5c:d0:5f:7e:e2:f9:7f:b7:b4:d2:8c:4e:2c:a6:0e:a3:1a: fe:fa:70:b0:2d:4d:67:3a:ca:65:21:44:e7:ad:33:f9:ec:72: 0a:bd:9e:64:35:86:82:4d:24:d3:42:4d:ba:65:07:eb:21:49: bc:20:7f:39:f7:93:32:76:69:9e:64:d3:8f:f3:3c:4a:86:cb: e3:87:a7:c1:64:de:4c:84:bb:6a:11:88:b0:a6:41:c2:b6:5c: 8f:d6:9f:9d:4f:ed:11:4e:ba:50:34:f8:bd:c2:f4:65:d5:c8: 47:3c:96:ff:9c:f2:76:b8:a4:7c:1a:bd:a7:d6:1f:60:4b:75: a0:d0:f7:cc:39:83:b9:2c:1d:87:93:d5:eb:a2:aa:e3:03:7f: 94:17:d9:28:ef:a5:cd:dc:e1:6c:0f:02:24:86:10:91:2e:5f: dc:b9:3a:7e:bf:71:c5:70:31:67:4b:71:5f:86:84:95:dd:d7: b9:b4:be:8c:66:51:e5:f2:a1:81:9d:8e:df:25:df:45:db:5f: bc:e4:9f:37:45:77:27:5c:e3:e5:54:19:2d:a0:52:a3:b9:18: eb:aa:42:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBfcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkUxNDYxMTAvBgNVBAUTKDQzRUEzQTJEQzA4QzVFMUYyQ0Q2ODQxMTY0NEEwNUMw NzZFODhDMDgwHhcNMjUwNjE0MjI0NjA4WhcNMjUwNjIxMjI0NjA4WjAYMRYwFAYD VQQDEw02ODRkZmJiMC0yYjA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxFtKnqckLjzTE8KPDLtlU12QUItvHIF4KW6C5uyVxLz8a9byrz4jLyQppA/s 1EaxUIXaVrbHEwJoKgBzURib4Pk+T2t8+/guM3V8Fzx+uhDa72QbZ2ImW0a5SgNd P2zodADfc06nd9l8yfz3OSix8cPD0dVCwuHHpDj9YiiWKK11Wy8RFBN6pQ8OR8qc oCNPeQPOWQ/PzUq/R//W6fk9MlxDXRvJVtUoI6+XimZOYdW2sKhcYup7d9xI4LV2 gINmrM9xJQsMOuNz6WcT1BXa7ajTVtDQ+6wPKWQiuN05niZrTcbcCi2BdQqB6tdK WCZdFZBTExAqqWdcMJqS2rAk2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHJ7pjyz i83Rwdmt9vAIn1ORL+OJMB8GA1UdIwQYMBaAFEPqOi3AjF4fLNaEEWRKBcB26IwI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRTE0Ni9FNDFBQjQyQUJE MzExMUVCQkZDM0Y5MjFDNEY5QUUwMi9RLW82TGNDTVhoOHMxb1FSWkVvRndIYm9q QWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1EtbzZMY0NNWGg4czFvUVJaRW9Gd0hib2pBZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RTE0Ni9FNDFBQjQyQUJEMzExMUVCQkZDM0Y5MjFDNEY5QUUwMi9RLW82TGNDTVho OHMxb1FSWkVvRndIYm9qQWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6t7NWz1IlIZb2bMpe1Qqa780qc1tr2hOiQZUrX/VHq06UeiwTXNBf fuL5f7e00oxOLKYOoxr++nCwLU1nOsplIUTnrTP57HIKvZ5kNYaCTSTTQk26ZQfr IUm8IH8595MydmmeZNOP8zxKhsvjh6fBZN5MhLtqEYiwpkHCtlyP1p+dT+0RTrpQ NPi9wvRl1chHPJb/nPJ2uKR8Gr2n1h9gS3Wg0PfMOYO5LB2Hk9XroqrjA3+UF9ko 76XN3OFsDwIkhhCRLl/cuTp+v3HFcDFnS3FfhoSV3de5tL6MZlHl8qGBnY7fJd9F 21+85J83RXcnXOPlVBktoFKjuRjrqkKb -----END CERTIFICATE-----Generated at Sun Jun 15 08:34:06 2025 by rpki-client