$ rpki-client -vvf rpki.apnic.net/member_repository/A91C27E8/692F72F2F9BA11E7A4C2943BC4F9AE02/qXUlmYQNbuyqG_aMCQWtffRpouc.mft File: qXUlmYQNbuyqG_aMCQWtffRpouc.mft (raw, json) Hash identifier: AePUK04E5jNwpnBE0xxKpf+UE+cskZHniK43dMOtfww= Subject key identifier: 48:AF:29:10:0C:07:CC:73:E2:08:F9:17:9F:D8:CF:66:50:F3:44:F4 Authority key identifier: A9:75:25:99:84:0D:6E:EC:AA:1B:F6:8C:09:05:AD:7D:F4:69:A2:E7 Certificate issuer: /CN=A91C27E8/serialNumber=A9752599840D6EECAA1BF68C0905AD7DF469A2E7 Certificate serial: 16C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qXUlmYQNbuyqG_aMCQWtffRpouc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C27E8/692F72F2F9BA11E7A4C2943BC4F9AE02/qXUlmYQNbuyqG_aMCQWtffRpouc.mft Manifest number: 16B5 Signing time: Sat 14 Jun 2025 16:37:15 +0000 Manifest this update: Sat 14 Jun 2025 16:37:15 +0000 Manifest next update: Sat 21 Jun 2025 16:37:15 +0000 Files and hashes: 1: qXUlmYQNbuyqG_aMCQWtffRpouc.crl (hash: 9Y4g0PSBBXKqqby9+AGKHXDiF46df8jU64XhjW4/Obs=) 2: BAD2356E153411E892E6D468C4F9AE02.roa (hash: ZwNXUOwbbGwEvsT0YYSZl1NqDpf0fkjGMPzYp65wdFE=) 3: 777FA9ECF9BC11E79E1A9E3FC4F9AE02.roa (hash: fI6pWEKhcfnz5T7b0Qu0ji5oi9dMvf4xCNtRiu+OZoY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C27E8/692F72F2F9BA11E7A4C2943BC4F9AE02/qXUlmYQNbuyqG_aMCQWtffRpouc.crl rsync://rpki.apnic.net/member_repository/A91C27E8/692F72F2F9BA11E7A4C2943BC4F9AE02/qXUlmYQNbuyqG_aMCQWtffRpouc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qXUlmYQNbuyqG_aMCQWtffRpouc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 16:13:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5829 (0x16c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C27E8, serialNumber=A9752599840D6EECAA1BF68C0905AD7DF469A2E7 Validity Not Before: Jun 14 16:37:15 2025 GMT Not After : Jun 21 16:37:15 2025 GMT Subject: CN=684da53b-2424 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:a1:45:44:c0:25:bc:66:5d:42:ee:57:15:25: 51:2d:60:9e:ff:54:93:e7:69:39:db:b6:f4:7c:dd: 55:2b:f0:ac:8f:5a:0a:4d:cf:d4:10:0b:38:08:f0: 62:1a:28:af:89:f4:2a:47:f8:d3:c0:9e:87:d9:67: cb:78:73:4a:74:a7:78:13:8d:75:42:ba:34:33:61: 20:c3:7a:23:71:05:fa:18:98:d3:10:13:1d:b9:56: d9:5f:d2:f0:46:7a:c1:ef:74:19:fd:78:d3:a1:56: b8:cd:ad:43:81:7f:f7:b3:19:c5:41:d9:81:c6:74: 07:79:84:cf:57:37:9a:30:3f:10:bf:62:d0:9f:0e: 0b:79:ff:c2:61:b6:b0:10:83:b9:b1:21:0c:7e:cf: 96:43:07:9f:9e:3e:a6:ae:2d:f3:2c:3a:e9:6d:c8: f8:a5:30:17:b1:2e:b0:c3:06:d9:22:58:5f:de:0f: 81:1d:b4:17:13:66:ef:58:dc:14:6e:a8:23:d7:61: ec:08:3d:ca:cb:80:74:00:e8:5c:67:3a:61:56:8a: 41:5b:09:91:6d:86:d3:d2:24:ba:e5:34:25:94:71: 8d:02:c2:a4:67:64:0d:34:2b:86:f8:a8:7f:9b:df: 0c:19:9e:a9:88:28:43:71:68:6a:f3:d3:c7:c5:c7: b2:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:AF:29:10:0C:07:CC:73:E2:08:F9:17:9F:D8:CF:66:50:F3:44:F4 X509v3 Authority Key Identifier: keyid:A9:75:25:99:84:0D:6E:EC:AA:1B:F6:8C:09:05:AD:7D:F4:69:A2:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C27E8/692F72F2F9BA11E7A4C2943BC4F9AE02/qXUlmYQNbuyqG_aMCQWtffRpouc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qXUlmYQNbuyqG_aMCQWtffRpouc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C27E8/692F72F2F9BA11E7A4C2943BC4F9AE02/qXUlmYQNbuyqG_aMCQWtffRpouc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:6c:f4:70:38:fc:1d:c2:8b:12:84:36:55:b9:55:e2:71:87: 56:c7:42:a4:d0:59:43:2b:0b:f9:16:86:9b:14:87:49:05:97: 2d:fa:1a:fb:75:c3:9d:8d:df:84:e7:60:b7:89:25:b9:a6:68: ae:39:9e:54:57:2c:b1:7b:a7:c4:94:d7:9d:94:3c:1a:ad:be: bc:4e:37:e0:46:a9:4d:fb:7c:b3:e6:b4:48:69:4d:50:8b:a4: 99:bf:3d:f8:a0:f9:68:f4:f4:82:c9:72:bf:c3:47:15:52:45: b2:ed:b0:73:1c:94:13:1e:cb:46:ef:9c:f7:89:c8:be:69:b7: d2:fc:2b:58:fc:b1:a0:0c:f1:8d:63:b9:94:59:92:24:64:67: 5c:4b:6e:e1:58:83:12:ca:82:33:2f:bc:12:0f:90:92:0a:89: 86:d7:d9:33:c2:09:0d:2c:48:7f:64:a8:52:c2:d7:41:f8:51: 42:a4:ce:20:8c:79:8e:92:15:22:4a:b7:5e:95:51:ed:90:6f: c9:ae:41:1a:eb:05:79:5f:f2:ab:fd:db:6d:bf:54:dc:63:39: 67:0f:f2:af:29:1b:c4:87:04:4d:bf:11:74:2f:07:a2:e3:8d: 6f:c5:3b:73:eb:f0:90:39:54:ab:18:b8:ef:26:d3:7b:f7:b9: 3e:2e:13:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFsUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzI3RTgxMTAvBgNVBAUTKEE5NzUyNTk5ODQwRDZFRUNBQTFCRjY4QzA5MDVBRDdE RjQ2OUEyRTcwHhcNMjUwNjE0MTYzNzE1WhcNMjUwNjIxMTYzNzE1WjAYMRYwFAYD VQQDEw02ODRkYTUzYi0yNDI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz6FFRMAlvGZdQu5XFSVRLWCe/1ST52k527b0fN1VK/Csj1oKTc/UEAs4CPBi GiivifQqR/jTwJ6H2WfLeHNKdKd4E411Qro0M2Egw3ojcQX6GJjTEBMduVbZX9Lw RnrB73QZ/XjToVa4za1DgX/3sxnFQdmBxnQHeYTPVzeaMD8Qv2LQnw4Lef/CYbaw EIO5sSEMfs+WQwefnj6mri3zLDrpbcj4pTAXsS6wwwbZIlhf3g+BHbQXE2bvWNwU bqgj12HsCD3Ky4B0AOhcZzphVopBWwmRbYbT0iS65TQllHGNAsKkZ2QNNCuG+Kh/ m98MGZ6piChDcWhq89PHxceybQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEivKRAM B8xz4gj5F5/Yz2ZQ80T0MB8GA1UdIwQYMBaAFKl1JZmEDW7sqhv2jAkFrX30aaLn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMjdFOC82OTJGNzJGMkY5 QkExMUU3QTRDMjk0M0JDNEY5QUUwMi9xWFVsbVlRTmJ1eXFHX2FNQ1FXdGZmUnBv dWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FYVWxtWVFOYnV5cUdfYU1DUVd0ZmZScG91Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MjdFOC82OTJGNzJGMkY5QkExMUU3QTRDMjk0M0JDNEY5QUUwMi9xWFVsbVlRTmJ1 eXFHX2FNQ1FXdGZmUnBvdWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQbPRwOPwdwosShDZVuVXicYdWx0Kk0FlDKwv5FoabFIdJBZct+hr7 dcOdjd+E52C3iSW5pmiuOZ5UVyyxe6fElNedlDwarb68TjfgRqlN+3yz5rRIaU1Q i6SZvz34oPlo9PSCyXK/w0cVUkWy7bBzHJQTHstG75z3ici+abfS/CtY/LGgDPGN Y7mUWZIkZGdcS27hWIMSyoIzL7wSD5CSComG19kzwgkNLEh/ZKhSwtdB+FFCpM4g jHmOkhUiSrdelVHtkG/JrkEa6wV5X/Kr/dttv1TcYzlnD/KvKRvEhwRNvxF0Lwei 441vxTtz6/CQOVSrGLjvJtN797k+LhPJ -----END CERTIFICATE-----Generated at Sat Jun 14 19:08:42 2025 by rpki-client