$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE89F/AFFD21706DCB11EF9B39B865C4F9AE02/QxsKSDX89paz7NM1klqOE2EM0Tc.mft File: QxsKSDX89paz7NM1klqOE2EM0Tc.mft (raw, json) Hash identifier: dU8FgG8yY1wwQULVYXzhdNH0ehURm31a5xLUBtKx8bo= Subject key identifier: AC:85:B9:2F:62:17:EB:26:BD:8F:88:EA:3A:D6:63:92:0F:05:D4:A5 Authority key identifier: 43:1B:0A:48:35:FC:F6:96:B3:EC:D3:35:92:5A:8E:13:61:0C:D1:37 Certificate issuer: /CN=A91BE89F/serialNumber=431B0A4835FCF696B3ECD335925A8E13610CD137 Certificate serial: 95 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QxsKSDX89paz7NM1klqOE2EM0Tc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BE89F/AFFD21706DCB11EF9B39B865C4F9AE02/QxsKSDX89paz7NM1klqOE2EM0Tc.mft Manifest number: 93 Signing time: Tue 17 Jun 2025 05:21:43 +0000 Manifest this update: Tue 17 Jun 2025 05:21:43 +0000 Manifest next update: Tue 24 Jun 2025 05:21:43 +0000 Files and hashes: 1: QxsKSDX89paz7NM1klqOE2EM0Tc.crl (hash: vBtXtMtqQ+iNQgJ1248WrHXeM2h8D5Kf4dd1J/CCWRE=) 2: 49ADB44C6DCC11EF8BE2A566C4F9AE02.roa (hash: mtRkpBofIEP/NFZvK+kr1cdx0dZa5TNObQf1xWdBFqI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BE89F/AFFD21706DCB11EF9B39B865C4F9AE02/QxsKSDX89paz7NM1klqOE2EM0Tc.crl rsync://rpki.apnic.net/member_repository/A91BE89F/AFFD21706DCB11EF9B39B865C4F9AE02/QxsKSDX89paz7NM1klqOE2EM0Tc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QxsKSDX89paz7NM1klqOE2EM0Tc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 05:21:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 149 (0x95) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BE89F, serialNumber=431B0A4835FCF696B3ECD335925A8E13610CD137 Validity Not Before: Jun 17 05:21:43 2025 GMT Not After : Jun 24 05:21:43 2025 GMT Subject: CN=6850fb67-8832 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:89:78:b5:e3:6a:13:a2:59:5a:f9:88:bb:95: 12:fa:d8:65:e1:2d:7e:6d:a6:aa:e7:54:8f:06:d0: b1:a6:69:0d:73:e4:09:ad:86:ca:03:bf:2f:66:32: 10:57:79:2e:3e:c3:6a:fe:be:bc:22:14:88:10:b3: f1:5b:a8:02:f9:ae:30:fb:a5:c8:aa:d0:cc:de:9b: 77:fb:ad:67:34:92:80:1e:8e:11:de:5b:bc:73:28: 74:14:11:6b:24:da:13:91:a2:a4:27:73:66:11:38: 6e:03:4e:c2:a7:fc:11:ad:8c:5f:85:86:b4:65:61: cb:6b:9d:b0:96:22:21:65:e1:a2:db:46:40:f0:ed: 54:ab:5c:36:11:4d:3f:3c:63:c9:3f:25:4d:4b:d9: fb:24:99:96:45:19:50:f1:db:30:49:ad:0c:63:22: 82:0f:35:b8:96:3b:c6:7c:a3:47:5a:c0:d5:6a:93: 16:eb:87:2d:45:bc:f8:38:21:75:d8:c5:9d:0b:16: 50:c6:1b:08:a8:84:9d:a3:4f:a7:4f:a0:2f:58:9b: c5:1a:b3:5a:d8:00:fd:fb:42:9c:f7:45:5b:c2:86: 90:c3:15:bf:e6:c3:89:d4:33:aa:5a:f7:21:6e:40: 29:f7:74:37:ec:6d:9e:22:76:5b:da:b8:49:c8:ad: c9:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:85:B9:2F:62:17:EB:26:BD:8F:88:EA:3A:D6:63:92:0F:05:D4:A5 X509v3 Authority Key Identifier: keyid:43:1B:0A:48:35:FC:F6:96:B3:EC:D3:35:92:5A:8E:13:61:0C:D1:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BE89F/AFFD21706DCB11EF9B39B865C4F9AE02/QxsKSDX89paz7NM1klqOE2EM0Tc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QxsKSDX89paz7NM1klqOE2EM0Tc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE89F/AFFD21706DCB11EF9B39B865C4F9AE02/QxsKSDX89paz7NM1klqOE2EM0Tc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:0b:af:49:5b:a7:0f:a3:2a:f0:4f:26:71:84:c5:88:1c:83: cc:14:99:97:ef:02:6d:20:96:f7:d8:43:21:ce:82:79:8d:0d: 16:f3:37:44:5b:48:2a:19:09:54:45:ab:51:95:d3:86:7b:f4: ce:d2:c0:1a:5b:79:b9:11:1b:01:7b:12:84:f2:71:0d:b7:74: 96:9f:f5:b1:fe:14:f2:40:08:7a:41:6f:19:ef:b6:02:59:9e: 9c:0f:af:6d:8d:3b:29:2b:6e:7c:d8:2e:29:b1:9e:be:85:ef: 5b:cd:8b:ab:0c:9e:a1:24:02:26:50:f9:86:11:0a:fb:38:0e: 54:05:9c:dd:d0:b5:0b:95:73:cd:c6:d1:66:99:f6:86:4e:ea: 70:59:44:df:61:91:7a:c8:51:11:14:08:f3:74:24:42:dd:71: ef:95:78:e5:e3:1e:b9:c9:f4:21:64:dd:a4:89:bc:0b:5b:eb: 22:cd:98:57:ca:dc:61:43:d3:27:f5:46:97:13:1f:58:b7:f2: 42:36:eb:39:24:ad:ee:08:67:74:1d:4b:39:81:67:61:b1:db: 57:41:6b:88:a9:3e:3b:c4:76:a9:f1:5d:f7:ea:37:3d:8f:a9: eb:d8:4a:17:a6:8c:1a:fd:1a:28:df:8f:ec:fd:88:9a:07:12: 79:30:f8:41 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkU4OUYxMTAvBgNVBAUTKDQzMUIwQTQ4MzVGQ0Y2OTZCM0VDRDMzNTkyNUE4RTEz NjEwQ0QxMzcwHhcNMjUwNjE3MDUyMTQzWhcNMjUwNjI0MDUyMTQzWjAYMRYwFAYD VQQDEw02ODUwZmI2Ny04ODMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtYl4teNqE6JZWvmIu5US+thl4S1+baaq51SPBtCxpmkNc+QJrYbKA78vZjIQ V3kuPsNq/r68IhSIELPxW6gC+a4w+6XIqtDM3pt3+61nNJKAHo4R3lu8cyh0FBFr JNoTkaKkJ3NmEThuA07Cp/wRrYxfhYa0ZWHLa52wliIhZeGi20ZA8O1Uq1w2EU0/ PGPJPyVNS9n7JJmWRRlQ8dswSa0MYyKCDzW4ljvGfKNHWsDVapMW64ctRbz4OCF1 2MWdCxZQxhsIqISdo0+nT6AvWJvFGrNa2AD9+0Kc90VbwoaQwxW/5sOJ1DOqWvch bkAp93Q37G2eInZb2rhJyK3JwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKyFuS9i F+smvY+I6jrWY5IPBdSlMB8GA1UdIwQYMBaAFEMbCkg1/PaWs+zTNZJajhNhDNE3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRTg5Ri9BRkZEMjE3MDZE Q0IxMUVGOUIzOUI4NjVDNEY5QUUwMi9ReHNLU0RYODlwYXo3Tk0xa2xxT0UyRU0w VGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1F4c0tTRFg4OXBhejdOTTFrbHFPRTJFTTBUYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RTg5Ri9BRkZEMjE3MDZEQ0IxMUVGOUIzOUI4NjVDNEY5QUUwMi9ReHNLU0RYODlw YXo3Tk0xa2xxT0UyRU0wVGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7C69JW6cPoyrwTyZxhMWIHIPMFJmX7wJtIJb32EMhzoJ5jQ0W8zdE W0gqGQlURatRldOGe/TO0sAaW3m5ERsBexKE8nENt3SWn/Wx/hTyQAh6QW8Z77YC WZ6cD69tjTspK2582C4psZ6+he9bzYurDJ6hJAImUPmGEQr7OA5UBZzd0LULlXPN xtFmmfaGTupwWUTfYZF6yFERFAjzdCRC3XHvlXjl4x65yfQhZN2kibwLW+sizZhX ytxhQ9Mn9UaXEx9Yt/JCNus5JK3uCGd0HUs5gWdhsdtXQWuIqT47xHap8V336jc9 j6nr2EoXpowa/Roo34/s/YiaBxJ5MPhB -----END CERTIFICATE-----Generated at Wed Jun 18 10:11:15 2025 by rpki-client