$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE1BC/896C6C4846CE11E992850A3CC4F9AE02/Qp6b3aKWYgADzsXvq7gj0wP-T3E.mft File: Qp6b3aKWYgADzsXvq7gj0wP-T3E.mft (raw, json) Hash identifier: gl0mlTd4fulrRkBFrQV4LQvv72hDPfCPsKUbDpPQg6Y= Subject key identifier: 74:B1:4E:B7:B1:5C:96:56:99:44:F0:A2:FB:0F:29:26:F3:86:5E:C0 Authority key identifier: 42:9E:9B:DD:A2:96:62:00:03:CE:C5:EF:AB:B8:23:D3:03:FE:4F:71 Certificate issuer: /CN=A91BE1BC/serialNumber=429E9BDDA296620003CEC5EFABB823D303FE4F71 Certificate serial: 102D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qp6b3aKWYgADzsXvq7gj0wP-T3E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BE1BC/896C6C4846CE11E992850A3CC4F9AE02/Qp6b3aKWYgADzsXvq7gj0wP-T3E.mft Manifest number: 1018 Signing time: Sat 14 Jun 2025 17:22:26 +0000 Manifest this update: Sat 14 Jun 2025 17:22:25 +0000 Manifest next update: Sat 21 Jun 2025 17:22:25 +0000 Files and hashes: 1: Qp6b3aKWYgADzsXvq7gj0wP-T3E.crl (hash: 2EQ50Ri2brhtmuqEqKlMv6vBDJvK2W9kX29PN5q277s=) 2: 58FDD2EA10C211EA977E7378C4F9AE02.roa (hash: ZNHHRF85+z4Is0+eLKcAwqdcHd29O7GXMUqQBRk0J/w=) 3: 8C2FEEE0708811ED95A9DC75C4F9AE02.roa (hash: N1sk6XLj5xgH93qOL/I5QuR42p2aQ914FnE3hKMRCac=) 4: 8B7BDC02708811ED95A9DC75C4F9AE02.roa (hash: 9+Gtcwt1HizyRVjiJLATuFRgohbLeetX6+Rnfri/zZI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BE1BC/896C6C4846CE11E992850A3CC4F9AE02/Qp6b3aKWYgADzsXvq7gj0wP-T3E.crl rsync://rpki.apnic.net/member_repository/A91BE1BC/896C6C4846CE11E992850A3CC4F9AE02/Qp6b3aKWYgADzsXvq7gj0wP-T3E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qp6b3aKWYgADzsXvq7gj0wP-T3E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 17:13:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4141 (0x102d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BE1BC, serialNumber=429E9BDDA296620003CEC5EFABB823D303FE4F71 Validity Not Before: Jun 14 17:22:25 2025 GMT Not After : Jun 21 17:22:25 2025 GMT Subject: CN=684dafd2-33e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:89:a9:c8:d5:58:95:b1:ef:f2:86:6e:b0:14: af:fa:0d:c1:05:f7:e4:1e:bd:3e:4c:2f:b4:62:f8: 00:c2:59:80:a2:f2:4b:4a:4d:22:0d:1c:f0:f7:32: 31:62:e5:6b:c3:0a:26:dd:13:07:b4:f8:df:9b:ab: e9:49:0a:ca:ec:41:ea:a9:3a:08:dc:cb:e5:e5:cb: 90:5e:84:91:ac:bb:34:9b:24:b7:a2:55:77:01:fc: fa:db:fb:8d:48:a7:f0:e7:a8:19:77:2d:e4:4a:56: 8e:81:35:b3:c6:2c:ea:af:b4:6e:00:17:28:9b:56: 25:00:bc:fc:c7:05:e3:09:dd:6d:25:d8:a6:71:46: 1e:c8:bc:8b:52:15:09:dc:f3:6d:a9:ae:5b:6a:d7: 05:40:ef:5a:4a:da:d8:fd:bc:95:e2:44:77:49:3b: cf:00:02:1d:9f:7e:ca:b8:94:86:6b:02:47:da:c3: a5:a4:3c:4f:dc:60:e1:24:26:08:1d:ed:e8:fe:f5: d5:f9:e6:51:ca:61:86:d6:d4:da:e9:53:86:31:17: 86:a2:bf:f8:84:87:e6:ed:d2:25:66:5b:2c:e1:c1: 97:7e:d8:c1:6d:fa:5e:a2:3b:ad:6b:de:80:87:c3: 23:c9:bf:70:90:c2:06:a0:01:98:48:ac:21:23:63: 5c:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:B1:4E:B7:B1:5C:96:56:99:44:F0:A2:FB:0F:29:26:F3:86:5E:C0 X509v3 Authority Key Identifier: keyid:42:9E:9B:DD:A2:96:62:00:03:CE:C5:EF:AB:B8:23:D3:03:FE:4F:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BE1BC/896C6C4846CE11E992850A3CC4F9AE02/Qp6b3aKWYgADzsXvq7gj0wP-T3E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qp6b3aKWYgADzsXvq7gj0wP-T3E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE1BC/896C6C4846CE11E992850A3CC4F9AE02/Qp6b3aKWYgADzsXvq7gj0wP-T3E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:3a:83:f1:81:c9:b6:e0:72:cf:0b:a8:dc:83:c8:65:34:e3: 42:16:d1:46:7a:2b:74:e7:7b:23:70:07:9a:c6:f5:15:05:f1: 00:fd:43:0c:ec:e4:9b:e4:02:9e:e0:22:83:0d:8d:9f:53:2a: 6e:a7:14:11:8f:35:e6:de:73:d5:98:31:c6:65:26:e9:4f:fe: 7c:05:d7:1c:5d:cc:9d:94:9c:1b:b3:aa:ec:0d:5f:9d:bd:a2: 52:39:c1:20:64:db:b7:dd:70:5f:b5:df:a8:de:36:c3:30:d6: de:c1:66:f8:2c:34:15:67:0a:6c:f2:04:13:e6:35:4e:a9:7e: 0c:1e:dc:fe:39:10:b7:25:3f:5d:d4:a6:87:52:36:e6:d3:2d: 5e:12:72:83:2c:e6:4d:03:8b:f8:64:61:1e:dc:33:38:20:01: 35:03:8a:eb:04:af:db:b7:23:b2:93:13:24:e7:4b:99:f8:78: 2e:c2:aa:2d:53:2f:c5:88:92:9f:85:af:ac:bf:b4:65:62:21: b6:3f:2b:c2:ff:db:dd:70:d6:6e:1c:84:d4:5d:d0:84:fd:b9: 0f:0d:c0:a6:0a:ef:93:35:9d:8c:8c:be:a6:f5:19:0e:65:fe: 57:bc:e0:5d:00:5d:6f:05:89:5f:b3:6a:60:63:d8:26:90:4b: 94:f5:7e:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEC0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkUxQkMxMTAvBgNVBAUTKDQyOUU5QkREQTI5NjYyMDAwM0NFQzVFRkFCQjgyM0Qz MDNGRTRGNzEwHhcNMjUwNjE0MTcyMjI1WhcNMjUwNjIxMTcyMjI1WjAYMRYwFAYD VQQDEw02ODRkYWZkMi0zM2U2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw4mpyNVYlbHv8oZusBSv+g3BBffkHr0+TC+0YvgAwlmAovJLSk0iDRzw9zIx YuVrwwom3RMHtPjfm6vpSQrK7EHqqToI3Mvl5cuQXoSRrLs0myS3olV3Afz62/uN SKfw56gZdy3kSlaOgTWzxizqr7RuABcom1YlALz8xwXjCd1tJdimcUYeyLyLUhUJ 3PNtqa5batcFQO9aStrY/byV4kR3STvPAAIdn37KuJSGawJH2sOlpDxP3GDhJCYI He3o/vXV+eZRymGG1tTa6VOGMReGor/4hIfm7dIlZlss4cGXftjBbfpeojuta96A h8Mjyb9wkMIGoAGYSKwhI2Nc1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHSxTrex XJZWmUTwovsPKSbzhl7AMB8GA1UdIwQYMBaAFEKem92ilmIAA87F76u4I9MD/k9x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRTFCQy84OTZDNkM0ODQ2 Q0UxMUU5OTI4NTBBM0NDNEY5QUUwMi9RcDZiM2FLV1lnQUR6c1h2cTdnajB3UC1U M0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FwNmIzYUtXWWdBRHpzWHZxN2dqMHdQLVQzRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RTFCQy84OTZDNkM0ODQ2Q0UxMUU5OTI4NTBBM0NDNEY5QUUwMi9RcDZiM2FLV1ln QUR6c1h2cTdnajB3UC1UM0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCOoPxgcm24HLPC6jcg8hlNONCFtFGeit053sjcAeaxvUVBfEA/UMM 7OSb5AKe4CKDDY2fUypupxQRjzXm3nPVmDHGZSbpT/58BdccXcydlJwbs6rsDV+d vaJSOcEgZNu33XBftd+o3jbDMNbewWb4LDQVZwps8gQT5jVOqX4MHtz+ORC3JT9d 1KaHUjbm0y1eEnKDLOZNA4v4ZGEe3DM4IAE1A4rrBK/btyOykxMk50uZ+Hguwqot Uy/FiJKfha+sv7RlYiG2PyvC/9vdcNZuHITUXdCE/bkPDcCmCu+TNZ2MjL6m9RkO Zf5XvOBdAF1vBYlfs2pgY9gmkEuU9X4m -----END CERTIFICATE-----Generated at Sat Jun 14 19:26:56 2025 by rpki-client