$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1A4E/A49B4D7437C611EA9D96AE51C4F9AE02/qSFjXHST8hzSYJPVkDUQgC9ONYY.mft File: qSFjXHST8hzSYJPVkDUQgC9ONYY.mft (raw, json) Hash identifier: LVTFGqjGKUn71qBcmFJoaVI/nufq9WFBNpvchOKXAs0= Subject key identifier: 25:F0:25:53:2D:9B:E8:B1:66:D2:54:AC:11:D7:A9:80:FA:29:44:58 Authority key identifier: A9:21:63:5C:74:93:F2:1C:D2:60:93:D5:90:35:10:80:2F:4E:35:86 Certificate issuer: /CN=A91C1A4E/serialNumber=A921635C7493F21CD26093D5903510802F4E3586 Certificate serial: 0B81 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSFjXHST8hzSYJPVkDUQgC9ONYY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1A4E/A49B4D7437C611EA9D96AE51C4F9AE02/qSFjXHST8hzSYJPVkDUQgC9ONYY.mft Manifest number: 0B62 Signing time: Sat 14 Jun 2025 18:58:56 +0000 Manifest this update: Sat 14 Jun 2025 18:58:56 +0000 Manifest next update: Sat 21 Jun 2025 18:58:56 +0000 Files and hashes: 1: qSFjXHST8hzSYJPVkDUQgC9ONYY.crl (hash: m6X4cvvXZ+ajgdEXiBqMR5sbStAZQFYBxTD/5wBroMc=) 2: 8610B9DCF33F11EEB412F210C4F9AE02.roa (hash: pnaBbR2DtiTGY+c3G7fBP288UhK6UiUJopbmpztAwNM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1A4E/A49B4D7437C611EA9D96AE51C4F9AE02/qSFjXHST8hzSYJPVkDUQgC9ONYY.crl rsync://rpki.apnic.net/member_repository/A91C1A4E/A49B4D7437C611EA9D96AE51C4F9AE02/qSFjXHST8hzSYJPVkDUQgC9ONYY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSFjXHST8hzSYJPVkDUQgC9ONYY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 18:58:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2945 (0xb81) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1A4E, serialNumber=A921635C7493F21CD26093D5903510802F4E3586 Validity Not Before: Jun 14 18:58:56 2025 GMT Not After : Jun 21 18:58:56 2025 GMT Subject: CN=684dc670-52f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:25:7d:c4:2e:ac:7a:a0:c4:2a:bf:f0:4b:da: f2:48:59:a1:71:71:de:88:29:02:5b:20:11:82:cb: ab:d5:4f:30:8d:d8:64:ce:95:28:a3:6d:81:40:7f: a4:52:37:9e:73:21:92:99:d0:17:5e:3d:51:23:6a: 1a:2e:89:d9:dc:a8:ef:c0:f6:31:f5:88:f6:f6:a2: 2f:30:2a:1d:64:01:06:c9:aa:d3:36:e8:eb:db:ae: 8c:cd:af:cb:95:37:f3:2f:dd:09:ec:10:ad:5e:e9: f3:91:be:98:9d:83:8c:8f:a7:e5:e7:76:79:cc:03: 7f:77:bb:03:d1:23:b9:e2:31:05:00:f0:b0:7f:b0: ba:42:92:1b:ca:49:fc:16:61:93:8d:14:5f:16:ba: b1:48:64:50:61:68:41:24:ed:c0:49:93:65:ea:cd: 9e:00:d0:af:8a:cc:51:b4:b2:f6:fb:a9:1f:00:b1: e0:bd:04:48:51:45:df:8f:d4:9d:ea:5a:e8:f9:f0: 0c:8b:ae:8e:5e:b2:70:f0:d6:ce:f0:0c:dc:bd:13: 8c:9d:8b:7b:dd:20:0e:21:9f:7d:88:77:63:3e:b3: 51:c4:a2:05:3e:07:05:a9:71:61:b0:7b:16:0c:e0: 6c:a8:78:bf:46:35:40:8f:4a:b3:f8:af:2d:55:46: 9c:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:F0:25:53:2D:9B:E8:B1:66:D2:54:AC:11:D7:A9:80:FA:29:44:58 X509v3 Authority Key Identifier: keyid:A9:21:63:5C:74:93:F2:1C:D2:60:93:D5:90:35:10:80:2F:4E:35:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1A4E/A49B4D7437C611EA9D96AE51C4F9AE02/qSFjXHST8hzSYJPVkDUQgC9ONYY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSFjXHST8hzSYJPVkDUQgC9ONYY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1A4E/A49B4D7437C611EA9D96AE51C4F9AE02/qSFjXHST8hzSYJPVkDUQgC9ONYY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:28:c8:f9:75:a3:81:96:80:be:1a:80:2c:c1:3b:04:8e:80: d9:b1:e6:36:7a:33:74:7b:19:d7:2d:6b:4c:89:1f:b9:f9:ea: 75:4b:b7:f5:34:25:8c:cf:e1:2e:d3:fc:b6:77:0a:63:7e:db: 32:fb:92:fc:07:8d:de:89:22:c5:0b:fd:4b:b3:65:28:5f:f6: d5:19:20:cf:f6:77:eb:3c:67:a6:75:e3:1d:11:e4:70:7b:16: c2:73:ba:c7:4a:94:ff:f5:7b:69:e1:ab:d6:a6:83:db:2a:df: 9a:76:70:33:8c:43:9f:9d:e7:f4:4d:b2:50:14:ab:6d:7a:41: 0e:2d:21:cf:8b:ba:ad:0e:00:63:c8:fd:fd:29:97:d8:86:4f: 49:e7:bd:1e:9b:91:e0:63:a5:94:74:20:28:3b:a7:ba:c0:05: da:41:22:a6:f3:f6:d4:49:8c:83:12:1e:80:47:9a:f5:04:19: 55:57:f6:40:8f:e9:1f:43:7c:6e:f9:33:e8:75:36:fd:79:4b: db:83:4f:8a:4f:c6:13:ea:c3:14:7f:be:68:03:43:70:d2:8e: d3:be:c3:41:60:0e:ab:e0:1d:b7:19:01:29:58:f0:78:57:ff: ab:1d:03:1e:0e:cd:ff:46:50:72:0b:de:31:d8:01:2f:15:e7: ec:79:d7:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC4EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzFBNEUxMTAvBgNVBAUTKEE5MjE2MzVDNzQ5M0YyMUNEMjYwOTNENTkwMzUxMDgw MkY0RTM1ODYwHhcNMjUwNjE0MTg1ODU2WhcNMjUwNjIxMTg1ODU2WjAYMRYwFAYD VQQDEw02ODRkYzY3MC01MmY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwiV9xC6seqDEKr/wS9rySFmhcXHeiCkCWyARgsur1U8wjdhkzpUoo22BQH+k UjeecyGSmdAXXj1RI2oaLonZ3KjvwPYx9Yj29qIvMCodZAEGyarTNujr266Mza/L lTfzL90J7BCtXunzkb6YnYOMj6fl53Z5zAN/d7sD0SO54jEFAPCwf7C6QpIbykn8 FmGTjRRfFrqxSGRQYWhBJO3ASZNl6s2eANCvisxRtLL2+6kfALHgvQRIUUXfj9Sd 6lro+fAMi66OXrJw8NbO8AzcvROMnYt73SAOIZ99iHdjPrNRxKIFPgcFqXFhsHsW DOBsqHi/RjVAj0qz+K8tVUacHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCXwJVMt m+ixZtJUrBHXqYD6KURYMB8GA1UdIwQYMBaAFKkhY1x0k/Ic0mCT1ZA1EIAvTjWG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMUE0RS9BNDlCNEQ3NDM3 QzYxMUVBOUQ5NkFFNTFDNEY5QUUwMi9xU0ZqWEhTVDhoelNZSlBWa0RVUWdDOU9O WVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FTRmpYSFNUOGh6U1lKUFZrRFVRZ0M5T05ZWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MUE0RS9BNDlCNEQ3NDM3QzYxMUVBOUQ5NkFFNTFDNEY5QUUwMi9xU0ZqWEhTVDho elNZSlBWa0RVUWdDOU9OWVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5KMj5daOBloC+GoAswTsEjoDZseY2ejN0exnXLWtMiR+5+ep1S7f1 NCWMz+Eu0/y2dwpjftsy+5L8B43eiSLFC/1Ls2UoX/bVGSDP9nfrPGemdeMdEeRw exbCc7rHSpT/9Xtp4avWpoPbKt+adnAzjEOfnef0TbJQFKttekEOLSHPi7qtDgBj yP39KZfYhk9J570em5HgY6WUdCAoO6e6wAXaQSKm8/bUSYyDEh6AR5r1BBlVV/ZA j+kfQ3xu+TPodTb9eUvbg0+KT8YT6sMUf75oA0Nw0o7TvsNBYA6r4B23GQEpWPB4 V/+rHQMeDs3/RlByC94x2AEvFefsedfp -----END CERTIFICATE-----Generated at Sun Jun 15 10:12:17 2025 by rpki-client