$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9484/0A0F85FC290E11E593BFC626C4F9AE02/E1-CL_RWQDka60bEN1QQAmBpOlc.mft File: E1-CL_RWQDka60bEN1QQAmBpOlc.mft (raw, json) Hash identifier: 2X25ZtXPNmZgedh+FeiCIBM/MO9YXxbTcmM05Jy723Q= Subject key identifier: 45:CD:76:26:9C:33:1E:56:09:B3:A9:54:99:97:58:73:D5:E6:69:3F Authority key identifier: 13:5F:82:2F:F4:56:40:39:1A:EB:46:C4:37:54:10:02:60:69:3A:57 Certificate issuer: /CN=A91C9484/serialNumber=135F822FF45640391AEB46C43754100260693A57 Certificate serial: 250F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E1-CL_RWQDka60bEN1QQAmBpOlc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9484/0A0F85FC290E11E593BFC626C4F9AE02/E1-CL_RWQDka60bEN1QQAmBpOlc.mft Manifest number: 250F Signing time: Wed 18 Jun 2025 14:45:35 +0000 Manifest this update: Wed 18 Jun 2025 14:45:34 +0000 Manifest next update: Wed 25 Jun 2025 14:45:34 +0000 Files and hashes: 1: E1-CL_RWQDka60bEN1QQAmBpOlc.crl (hash: r0Sb5FZ2/HXlhmflESEsdd1eXn73FmUVEvKyg8/89E4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9484/0A0F85FC290E11E593BFC626C4F9AE02/E1-CL_RWQDka60bEN1QQAmBpOlc.crl rsync://rpki.apnic.net/member_repository/A91C9484/0A0F85FC290E11E593BFC626C4F9AE02/E1-CL_RWQDka60bEN1QQAmBpOlc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E1-CL_RWQDka60bEN1QQAmBpOlc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 14:45:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9487 (0x250f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9484, serialNumber=135F822FF45640391AEB46C43754100260693A57 Validity Not Before: Jun 18 14:45:34 2025 GMT Not After : Jun 25 14:45:34 2025 GMT Subject: CN=6852d10e-dc54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:12:83:20:24:53:4d:b1:37:80:03:07:27:db: bc:03:94:aa:86:07:a4:b9:7c:50:a5:59:1e:02:3e: 76:ba:b5:e0:80:10:f4:7f:4e:d4:e6:80:7c:0e:a4: 0a:7b:85:b3:9d:15:28:be:c6:d4:d9:2a:87:c3:19: 0b:79:02:64:28:08:41:b5:d6:85:5f:11:4f:bd:a5: 27:8a:ad:a1:e9:e3:40:66:fe:dd:d0:e2:bf:1c:57: 6e:12:33:c8:55:bc:3b:ca:c2:1d:db:a4:cc:05:22: 04:b2:c6:11:5f:9a:1f:e5:ca:a6:d9:c1:82:60:bf: 4f:fc:a7:c3:92:d9:db:01:ad:34:d2:75:b9:54:84: dd:4b:aa:14:4a:75:36:f7:7f:14:3d:5b:1b:af:ce: dc:3d:b1:be:0e:17:82:4f:f5:78:35:e1:62:73:cc: 16:16:38:23:dc:3f:58:30:b1:6b:64:27:cf:a5:1c: 13:18:af:a8:d8:06:b0:86:7d:6e:94:3c:a8:a4:4e: ac:f8:18:b1:d4:74:d4:89:df:03:61:7d:e6:87:36: 0a:88:ec:65:68:b6:f7:1a:b3:78:33:04:8f:ce:40: 9d:5d:39:6a:93:8d:bb:2a:d5:76:3b:77:84:2a:e3: b4:b2:b8:49:d2:0a:22:94:90:95:6b:6a:96:76:a0: b3:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:CD:76:26:9C:33:1E:56:09:B3:A9:54:99:97:58:73:D5:E6:69:3F X509v3 Authority Key Identifier: keyid:13:5F:82:2F:F4:56:40:39:1A:EB:46:C4:37:54:10:02:60:69:3A:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9484/0A0F85FC290E11E593BFC626C4F9AE02/E1-CL_RWQDka60bEN1QQAmBpOlc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E1-CL_RWQDka60bEN1QQAmBpOlc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9484/0A0F85FC290E11E593BFC626C4F9AE02/E1-CL_RWQDka60bEN1QQAmBpOlc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:e3:73:c5:7e:97:d1:e2:77:21:64:ec:89:6d:ab:d6:b3:87: 2b:a7:96:d5:2b:2d:0e:53:b4:94:93:43:c7:ed:3d:e7:47:5b: e6:58:2c:9b:db:2d:36:2b:0c:de:c7:36:5a:1c:88:53:42:d0: 15:7a:13:e1:8c:ac:23:5a:25:cf:d3:ff:0b:3d:e4:04:2a:3e: c9:22:1d:07:bd:d9:d5:2d:bb:04:b0:1c:6e:a7:cb:f2:b3:31: 2f:fd:52:e8:2a:00:dd:af:3d:63:ba:9c:86:fb:8d:17:9f:97: ef:b4:9c:11:b6:2c:0d:98:64:e3:76:0e:99:b4:61:ed:22:50: 69:e0:84:58:de:07:f8:19:8e:ae:d6:9e:ff:0c:0f:10:49:29: 72:ea:17:cf:31:ae:d3:0a:0a:aa:71:bc:97:58:59:d3:76:3b: fb:75:4d:7e:89:58:f4:b8:7b:07:54:82:5d:11:cb:b1:04:22: 27:a6:a4:a3:6b:83:a8:ed:e7:f6:ec:f2:01:07:6f:22:ec:f1: d0:2b:25:d0:ae:0e:bb:e9:88:dc:b5:e7:f4:3e:e9:b1:6c:c5: 6c:6c:df:a6:38:c8:a5:39:b3:aa:fd:cc:2a:f2:d2:fc:2d:92: 56:82:79:f5:c5:3a:a8:d2:5e:81:c6:8e:8c:c4:3f:24:16:ad: 9c:8b:f9:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJQ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzk0ODQxMTAvBgNVBAUTKDEzNUY4MjJGRjQ1NjQwMzkxQUVCNDZDNDM3NTQxMDAy NjA2OTNBNTcwHhcNMjUwNjE4MTQ0NTM0WhcNMjUwNjI1MTQ0NTM0WjAYMRYwFAYD VQQDEw02ODUyZDEwZS1kYzU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnRKDICRTTbE3gAMHJ9u8A5SqhgekuXxQpVkeAj52urXggBD0f07U5oB8DqQK e4WznRUovsbU2SqHwxkLeQJkKAhBtdaFXxFPvaUniq2h6eNAZv7d0OK/HFduEjPI Vbw7ysId26TMBSIEssYRX5of5cqm2cGCYL9P/KfDktnbAa000nW5VITdS6oUSnU2 938UPVsbr87cPbG+DheCT/V4NeFic8wWFjgj3D9YMLFrZCfPpRwTGK+o2Aawhn1u lDyopE6s+Bix1HTUid8DYX3mhzYKiOxlaLb3GrN4MwSPzkCdXTlqk427KtV2O3eE KuO0srhJ0goilJCVa2qWdqCzMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEXNdiac Mx5WCbOpVJmXWHPV5mk/MB8GA1UdIwQYMBaAFBNfgi/0VkA5GutGxDdUEAJgaTpX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTQ4NC8wQTBGODVGQzI5 MEUxMUU1OTNCRkM2MjZDNEY5QUUwMi9FMS1DTF9SV1FEa2E2MGJFTjFRUUFtQnBP bGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0UxLUNMX1JXUURrYTYwYkVOMVFRQW1CcE9sYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTQ4NC8wQTBGODVGQzI5MEUxMUU1OTNCRkM2MjZDNEY5QUUwMi9FMS1DTF9SV1FE a2E2MGJFTjFRUUFtQnBPbGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/43PFfpfR4nchZOyJbavWs4crp5bVKy0OU7SUk0PH7T3nR1vmWCyb 2y02KwzexzZaHIhTQtAVehPhjKwjWiXP0/8LPeQEKj7JIh0HvdnVLbsEsBxup8vy szEv/VLoKgDdrz1jupyG+40Xn5fvtJwRtiwNmGTjdg6ZtGHtIlBp4IRY3gf4GY6u 1p7/DA8QSSly6hfPMa7TCgqqcbyXWFnTdjv7dU1+iVj0uHsHVIJdEcuxBCInpqSj a4Oo7ef27PIBB28i7PHQKyXQrg676Yjctef0PumxbMVsbN+mOMilObOq/cwq8tL8 LZJWgnn1xTqo0l6Bxo6MxD8kFq2ci/mD -----END CERTIFICATE-----Generated at Thu Jun 19 02:38:56 2025 by rpki-client