$ rpki-client -vvf rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/QOWCY5crniQUK6qbWvoFNIGjcZ4.mft File: QOWCY5crniQUK6qbWvoFNIGjcZ4.mft (raw, json) Hash identifier: Em4D3Qx2AYeaxO7/fN6qpxQGSVK467DTQe3s6cF+Uoc= Subject key identifier: 28:95:44:76:A2:D5:1D:B4:BC:C0:E4:D4:52:FA:34:22:B7:91:AA:6D Authority key identifier: 40:E5:82:63:97:2B:9E:24:14:2B:AA:9B:5A:FA:05:34:81:A3:71:9E Certificate issuer: /CN=A91C31A2/serialNumber=40E58263972B9E24142BAA9B5AFA053481A3719E Certificate serial: 0241 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QOWCY5crniQUK6qbWvoFNIGjcZ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/QOWCY5crniQUK6qbWvoFNIGjcZ4.mft Manifest number: 0230 Signing time: Tue 17 Jun 2025 01:31:15 +0000 Manifest this update: Tue 17 Jun 2025 01:31:15 +0000 Manifest next update: Tue 24 Jun 2025 01:31:15 +0000 Files and hashes: 1: QOWCY5crniQUK6qbWvoFNIGjcZ4.crl (hash: vNFN5JA2TP/00aNDlf0hldrENW/qeunVvAuBhipoOQ4=) 2: EE83B18A7F7E11ED86E00936C4F9AE02.roa (hash: foc/Rgh+D7sXQX3ATXjse5P2fbG3rVc6pPyYs/SuwvQ=) 3: 94855EA0357711EDB81B8A34C4F9AE02.roa (hash: IN+H6LUETq8W/dLs0PZX77bed7F0mQsx+AWJPeSHLek=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/QOWCY5crniQUK6qbWvoFNIGjcZ4.crl rsync://rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/QOWCY5crniQUK6qbWvoFNIGjcZ4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QOWCY5crniQUK6qbWvoFNIGjcZ4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 01:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 577 (0x241) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C31A2, serialNumber=40E58263972B9E24142BAA9B5AFA053481A3719E Validity Not Before: Jun 17 01:31:15 2025 GMT Not After : Jun 24 01:31:15 2025 GMT Subject: CN=6850c563-700f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:c9:2b:3e:c2:61:33:b4:7a:77:dc:aa:7f:f6: 24:c7:70:cd:1b:36:08:96:4e:7b:7e:9f:ca:fc:93: 61:32:c2:b8:50:e5:d8:87:b8:7c:28:ee:16:36:5d: a8:d6:06:a3:a9:0b:c0:66:a5:da:d8:f7:aa:56:00: 06:f8:30:60:c2:8e:86:ea:af:d5:81:f2:2b:8c:4e: 95:b0:5c:e4:99:fe:8b:08:49:4a:df:2b:5b:f3:70: ff:e7:08:13:b6:35:90:cc:5c:9e:0f:e5:4a:f3:a4: 2a:b4:a0:3c:16:e4:ee:04:a4:d7:2f:48:f0:24:68: b4:84:c9:b5:86:b3:e7:43:78:55:8f:a8:83:82:81: 8f:f0:80:b8:f9:0f:0f:f1:80:1a:54:7a:19:7b:03: 04:21:af:ac:16:47:a8:43:e8:d5:21:c5:2f:97:a0: 42:bd:2a:ce:26:fb:a6:05:b1:55:d4:ce:eb:98:c7: d9:3b:ba:79:e5:10:58:bf:14:d3:d9:3f:f9:ff:34: ef:19:fa:7a:9e:b3:08:da:08:82:d7:3a:e4:18:2d: 2d:d8:c7:e2:e7:cf:1b:00:08:b2:61:1c:da:8a:92: a0:06:89:70:0b:68:30:17:57:d9:7d:ea:45:94:7b: ac:e0:11:69:9e:cc:ff:8f:d6:f4:a4:d3:8d:ae:3d: 7a:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:95:44:76:A2:D5:1D:B4:BC:C0:E4:D4:52:FA:34:22:B7:91:AA:6D X509v3 Authority Key Identifier: keyid:40:E5:82:63:97:2B:9E:24:14:2B:AA:9B:5A:FA:05:34:81:A3:71:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/QOWCY5crniQUK6qbWvoFNIGjcZ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QOWCY5crniQUK6qbWvoFNIGjcZ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/QOWCY5crniQUK6qbWvoFNIGjcZ4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:17:62:cf:a5:d5:3c:c3:23:ac:59:37:9c:0b:a7:aa:47:b9: 08:66:c9:39:c4:cc:3f:df:9d:f4:c7:6b:59:1f:e5:71:36:32: 1a:64:3c:73:0e:59:23:a1:f3:27:a7:df:ad:41:85:8a:e6:4c: 7a:8c:2d:60:94:dc:73:82:47:d6:3b:32:ec:74:07:e9:42:30: 7e:e6:b2:c7:ef:dc:e0:59:5b:58:4c:b8:17:86:4b:cd:08:02: 4f:e9:1e:29:47:0f:07:17:cf:be:79:b6:b3:99:37:b6:64:64: 5d:13:80:28:21:2e:71:0d:8a:ba:3d:37:a2:0a:56:e3:f5:42: 75:0c:e8:ea:89:64:27:ff:05:23:d7:17:1c:d6:45:ce:15:f4: 5e:4d:34:5b:ee:28:56:e4:39:2d:b3:ea:ef:1c:14:5d:7f:24: ff:82:bb:8e:81:de:d5:93:17:83:c4:c3:30:75:a5:43:f0:5d: fd:1a:39:d3:06:19:e1:21:41:5d:75:15:c9:92:16:fe:4c:34: 1b:00:ab:f6:e2:51:54:c8:f3:33:fe:9b:04:dc:f7:4b:70:0d: 61:5e:c6:13:ee:1b:ce:37:4c:c0:fd:e1:61:22:90:b8:0c:5b: 17:a3:96:72:49:96:41:ac:63:6c:d6:1f:29:e7:91:27:60:23: e7:32:a1:c4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAkEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzMxQTIxMTAvBgNVBAUTKDQwRTU4MjYzOTcyQjlFMjQxNDJCQUE5QjVBRkEwNTM0 ODFBMzcxOUUwHhcNMjUwNjE3MDEzMTE1WhcNMjUwNjI0MDEzMTE1WjAYMRYwFAYD VQQDEw02ODUwYzU2My03MDBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0MkrPsJhM7R6d9yqf/Ykx3DNGzYIlk57fp/K/JNhMsK4UOXYh7h8KO4WNl2o 1gajqQvAZqXa2PeqVgAG+DBgwo6G6q/VgfIrjE6VsFzkmf6LCElK3ytb83D/5wgT tjWQzFyeD+VK86QqtKA8FuTuBKTXL0jwJGi0hMm1hrPnQ3hVj6iDgoGP8IC4+Q8P 8YAaVHoZewMEIa+sFkeoQ+jVIcUvl6BCvSrOJvumBbFV1M7rmMfZO7p55RBYvxTT 2T/5/zTvGfp6nrMI2giC1zrkGC0t2Mfi588bAAiyYRzaipKgBolwC2gwF1fZfepF lHus4BFpnsz/j9b0pNONrj16pwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCiVRHai 1R20vMDk1FL6NCK3kaptMB8GA1UdIwQYMBaAFEDlgmOXK54kFCuqm1r6BTSBo3Ge MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzFBMi9ENDc2RUQ3NjM1 NzIxMUVEQUU5Nzc4MzlDNEY5QUUwMi9RT1dDWTVjcm5pUVVLNnFiV3ZvRk5JR2pj WjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1FPV0NZNWNybmlRVUs2cWJXdm9GTklHamNaNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MzFBMi9ENDc2RUQ3NjM1NzIxMUVEQUU5Nzc4MzlDNEY5QUUwMi9RT1dDWTVjcm5p UVVLNnFiV3ZvRk5JR2pjWjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCpF2LPpdU8wyOsWTecC6eqR7kIZsk5xMw/3530x2tZH+VxNjIaZDxz DlkjofMnp9+tQYWK5kx6jC1glNxzgkfWOzLsdAfpQjB+5rLH79zgWVtYTLgXhkvN CAJP6R4pRw8HF8++ebazmTe2ZGRdE4AoIS5xDYq6PTeiClbj9UJ1DOjqiWQn/wUj 1xcc1kXOFfReTTRb7ihW5Dkts+rvHBRdfyT/gruOgd7VkxeDxMMwdaVD8F39GjnT BhnhIUFddRXJkhb+TDQbAKv24lFUyPMz/psE3PdLcA1hXsYT7hvON0zA/eFhIpC4 DFsXo5ZySZZBrGNs1h8p55EnYCPnMqHE -----END CERTIFICATE-----Generated at Wed Jun 18 16:38:28 2025 by rpki-client