$ rpki-client -vvf rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/quxIh3HXuUGFyKkP420pfedshLw.mft File: quxIh3HXuUGFyKkP420pfedshLw.mft (raw, json) Hash identifier: qmvWktz6rdNHinOChMyRgjBjoyq53QlfTAL6Dx4oE+U= Subject key identifier: 11:8E:63:AD:0D:CC:CF:29:CA:48:4A:B4:DE:17:5D:A5:AD:C5:5C:BC Authority key identifier: AA:EC:48:87:71:D7:B9:41:85:C8:A9:0F:E3:6D:29:7D:E7:6C:84:BC Certificate issuer: /CN=A91C60A5/serialNumber=AAEC488771D7B94185C8A90FE36D297DE76C84BC Certificate serial: 82 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/quxIh3HXuUGFyKkP420pfedshLw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/quxIh3HXuUGFyKkP420pfedshLw.mft Manifest number: 7F Signing time: Thu 19 Jun 2025 06:04:46 +0000 Manifest this update: Thu 19 Jun 2025 06:04:45 +0000 Manifest next update: Thu 26 Jun 2025 06:04:45 +0000 Files and hashes: 1: quxIh3HXuUGFyKkP420pfedshLw.crl (hash: Z125FAZM1bTYKOsscoqQBk4pIn29hNf9dr7IcXESb3g=) 2: C5B7E29491F111EFA1C14C61C4F9AE02.roa (hash: id6HTAhbs7lkZSnmnWxvojaKrloCyVbBox6Qwy3+IY8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/quxIh3HXuUGFyKkP420pfedshLw.crl rsync://rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/quxIh3HXuUGFyKkP420pfedshLw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/quxIh3HXuUGFyKkP420pfedshLw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 06:04:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 130 (0x82) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C60A5, serialNumber=AAEC488771D7B94185C8A90FE36D297DE76C84BC Validity Not Before: Jun 19 06:04:45 2025 GMT Not After : Jun 26 06:04:45 2025 GMT Subject: CN=6853a87e-58f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:fc:8f:86:77:fa:b2:f1:4d:79:f3:cb:5c:04: ea:5e:b8:0c:02:bc:3a:04:1a:3d:a7:98:9c:3d:38: 8e:d1:68:b4:2c:1d:19:cd:b3:47:e2:8e:f9:8b:94: f4:82:9d:56:04:15:df:24:1b:b8:70:3f:a9:1e:c0: b7:a5:9d:69:4e:59:18:a6:51:ae:09:14:8a:78:e5: e5:00:b8:22:7b:d5:53:2b:ab:76:c2:ab:a7:2e:0e: 03:d6:68:d3:23:d2:bb:d3:2d:87:fe:d0:b0:f7:b7: 7b:1d:36:d8:aa:2f:3e:f1:41:ce:35:30:f6:c9:de: 66:25:03:d8:48:93:a6:2b:35:a0:44:2f:cd:e9:38: 58:34:d7:a2:1d:d9:ec:23:4e:c0:58:8b:d6:cc:cc: b0:58:ac:ea:d6:75:2f:d3:1b:9d:70:71:d4:cd:55: 45:ed:1b:a9:bd:3a:3b:9d:72:5b:26:7c:7e:21:0c: 28:c3:bc:29:13:f4:35:85:d6:2b:90:9b:9c:4b:06: 1d:5d:93:06:26:d1:62:7a:2d:bb:84:0c:d4:d7:30: 22:4f:40:cd:f7:a0:bc:fd:55:a8:e8:eb:7b:39:4d: 4f:1d:9a:e3:ec:07:a5:ee:b3:bd:92:88:c3:b1:38: a3:c1:3c:3f:47:2e:a6:3b:ba:cd:03:a0:90:30:d6: 63:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:8E:63:AD:0D:CC:CF:29:CA:48:4A:B4:DE:17:5D:A5:AD:C5:5C:BC X509v3 Authority Key Identifier: keyid:AA:EC:48:87:71:D7:B9:41:85:C8:A9:0F:E3:6D:29:7D:E7:6C:84:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/quxIh3HXuUGFyKkP420pfedshLw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/quxIh3HXuUGFyKkP420pfedshLw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/quxIh3HXuUGFyKkP420pfedshLw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:dc:03:75:23:72:b3:48:d4:11:64:19:df:72:ce:bd:99:ec: 7a:51:b0:82:9e:7f:de:89:54:24:d0:bf:f2:2a:6a:09:61:e1: 13:de:5e:69:25:1d:40:c5:38:b7:ca:17:af:92:47:df:2e:b2: 51:08:0c:0d:fc:91:ad:00:77:34:6c:b6:68:26:4a:c3:dc:68: 29:d2:3c:72:57:b0:06:f6:8e:a2:da:06:c4:40:3e:9d:2b:e5: e8:0d:c0:39:1d:46:26:a6:e3:79:8f:f3:82:fd:c4:05:cf:8d: da:16:0f:1e:a1:cd:4e:a7:07:1b:28:8d:cb:44:5a:09:2f:28: 54:f6:3c:c4:65:43:08:08:a6:9a:5b:b9:71:73:1e:75:47:f6: 76:cd:1b:f9:75:ea:37:4a:e9:b8:9e:c7:c2:df:37:7a:02:36: 69:2a:7c:b4:1a:6a:6c:df:24:66:0c:f6:3f:26:03:d3:49:f8: 59:e3:85:3e:5c:0f:8e:c8:f0:03:b1:4c:43:ba:72:94:c8:78: 26:3b:d9:74:c1:21:ac:a1:a7:ef:5d:77:64:0d:bd:60:00:09: 9e:14:f1:ec:5f:35:e0:2d:4b:e6:82:f1:15:b5:fa:ee:f5:64: 34:a0:2e:51:04:d0:65:1c:bf:cc:5f:63:7c:27:90:43:fa:95: fc:94:a9:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzYwQTUxMTAvBgNVBAUTKEFBRUM0ODg3NzFEN0I5NDE4NUM4QTkwRkUzNkQyOTdE RTc2Qzg0QkMwHhcNMjUwNjE5MDYwNDQ1WhcNMjUwNjI2MDYwNDQ1WjAYMRYwFAYD VQQDEw02ODUzYTg3ZS01OGY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm/yPhnf6svFNefPLXATqXrgMArw6BBo9p5icPTiO0Wi0LB0ZzbNH4o75i5T0 gp1WBBXfJBu4cD+pHsC3pZ1pTlkYplGuCRSKeOXlALgie9VTK6t2wqunLg4D1mjT I9K70y2H/tCw97d7HTbYqi8+8UHONTD2yd5mJQPYSJOmKzWgRC/N6ThYNNeiHdns I07AWIvWzMywWKzq1nUv0xudcHHUzVVF7RupvTo7nXJbJnx+IQwow7wpE/Q1hdYr kJucSwYdXZMGJtFiei27hAzU1zAiT0DN96C8/VWo6Ot7OU1PHZrj7Ael7rO9kojD sTijwTw/Ry6mO7rNA6CQMNZjAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBGOY60N zM8pykhKtN4XXaWtxVy8MB8GA1UdIwQYMBaAFKrsSIdx17lBhcipD+NtKX3nbIS8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjBBNS85OTdCMzY2RTkx RjAxMUVGQjY5NjVDMjRDNEY5QUUwMi9xdXhJaDNIWHVVR0Z5S2tQNDIwcGZlZHNo THcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3F1eEloM0hYdVVHRnlLa1A0MjBwZmVkc2hMdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NjBBNS85OTdCMzY2RTkxRjAxMUVGQjY5NjVDMjRDNEY5QUUwMi9xdXhJaDNIWHVV R0Z5S2tQNDIwcGZlZHNoTHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAn3AN1I3KzSNQRZBnfcs69mex6UbCCnn/eiVQk0L/yKmoJYeET3l5p JR1AxTi3yhevkkffLrJRCAwN/JGtAHc0bLZoJkrD3Ggp0jxyV7AG9o6i2gbEQD6d K+XoDcA5HUYmpuN5j/OC/cQFz43aFg8eoc1OpwcbKI3LRFoJLyhU9jzEZUMICKaa W7lxcx51R/Z2zRv5deo3Sum4nsfC3zd6AjZpKny0Gmps3yRmDPY/JgPTSfhZ44U+ XA+OyPADsUxDunKUyHgmO9l0wSGsoafvXXdkDb1gAAmeFPHsXzXgLUvmgvEVtfru 9WQ0oC5RBNBlHL/MX2N8J5BD+pX8lKkO -----END CERTIFICATE-----Generated at Thu Jun 19 15:03:26 2025 by rpki-client