$ rpki-client -vvf rpki.apnic.net/member_repository/A91CACCA/6086D7821DA911E2BB1B4EA408B02CD2/qZ9mmGknIBFUlstFlwLEOtxI1q0.mft File: qZ9mmGknIBFUlstFlwLEOtxI1q0.mft (raw, json) Hash identifier: VFrrDQjt6d2atRb7wtt+Qz7t1ALIyiYisNvglBjofdQ= Subject key identifier: 1E:F1:D8:E0:85:BC:C7:17:B2:1B:3E:8B:83:85:FB:B5:09:FD:BE:E8 Authority key identifier: A9:9F:66:98:69:27:20:11:54:96:CB:45:97:02:C4:3A:DC:48:D6:AD Certificate issuer: /CN=A91CACCA/serialNumber=A99F6698692720115496CB459702C43ADC48D6AD Certificate serial: 348D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZ9mmGknIBFUlstFlwLEOtxI1q0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CACCA/6086D7821DA911E2BB1B4EA408B02CD2/qZ9mmGknIBFUlstFlwLEOtxI1q0.mft Manifest number: 348D Signing time: Mon 16 Jun 2025 15:18:44 +0000 Manifest this update: Mon 16 Jun 2025 15:18:44 +0000 Manifest next update: Mon 23 Jun 2025 15:18:44 +0000 Files and hashes: 1: qZ9mmGknIBFUlstFlwLEOtxI1q0.crl (hash: w9plRx8RyFfJddNowekCOWgErZVhFfyMfbOMARVziCs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CACCA/6086D7821DA911E2BB1B4EA408B02CD2/qZ9mmGknIBFUlstFlwLEOtxI1q0.crl rsync://rpki.apnic.net/member_repository/A91CACCA/6086D7821DA911E2BB1B4EA408B02CD2/qZ9mmGknIBFUlstFlwLEOtxI1q0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZ9mmGknIBFUlstFlwLEOtxI1q0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 15:18:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13453 (0x348d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CACCA, serialNumber=A99F6698692720115496CB459702C43ADC48D6AD Validity Not Before: Jun 16 15:18:44 2025 GMT Not After : Jun 23 15:18:44 2025 GMT Subject: CN=685035d4-373b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:06:5d:70:04:dc:c5:fa:7f:88:d2:36:06:c8: de:6b:ac:e9:56:17:b3:4e:4e:5f:7a:7d:48:9e:54: 7e:b5:1a:5b:ee:9d:7d:40:1e:29:88:32:37:ad:dc: e3:96:95:f4:44:1c:30:2a:2a:5f:23:b3:fa:b4:cb: c0:70:b6:ac:80:65:9a:20:8f:13:26:8a:9f:87:30: 09:78:69:c9:4f:d1:e7:aa:73:2e:6a:49:df:88:d9: 4b:ca:ba:e5:d0:2b:55:a3:c7:22:f0:3e:2d:db:82: 63:95:a2:be:01:0f:6f:2d:04:23:1f:97:f7:9e:08: 1b:a1:37:b5:cc:85:6d:b1:b6:d6:1c:7f:66:01:09: 1d:04:d3:22:68:72:5f:18:3f:c9:fb:cb:b7:6d:bc: 23:c9:0a:12:49:31:fa:5e:75:dd:f3:ad:75:57:4e: 86:57:8a:44:71:f2:ea:7b:7d:d8:64:27:a8:8b:49: ea:a4:de:ae:2b:a6:d2:83:89:3d:be:de:3d:dc:82: 64:ad:97:20:ae:75:9d:d1:f0:2c:65:cb:eb:9e:fd: da:6b:6c:62:0e:20:3a:61:da:d9:6a:67:11:74:bf: af:ec:dd:ff:1a:55:ff:d1:6c:f1:8a:0e:d9:ac:cf: 8d:e0:d9:85:1c:35:bc:aa:99:6a:3d:dd:66:d3:7a: 77:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:F1:D8:E0:85:BC:C7:17:B2:1B:3E:8B:83:85:FB:B5:09:FD:BE:E8 X509v3 Authority Key Identifier: keyid:A9:9F:66:98:69:27:20:11:54:96:CB:45:97:02:C4:3A:DC:48:D6:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CACCA/6086D7821DA911E2BB1B4EA408B02CD2/qZ9mmGknIBFUlstFlwLEOtxI1q0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZ9mmGknIBFUlstFlwLEOtxI1q0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CACCA/6086D7821DA911E2BB1B4EA408B02CD2/qZ9mmGknIBFUlstFlwLEOtxI1q0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:14:bd:a3:9f:d5:ab:00:c5:7e:23:5d:07:bf:87:d9:79:66: 7c:35:3c:da:76:54:7d:31:40:ab:b6:84:9a:0d:f4:ab:13:4d: ce:66:d3:ca:a6:2b:f7:12:58:a3:19:08:e4:20:59:4c:04:ac: 02:bf:8e:47:cd:d7:f9:36:df:75:fb:fb:e3:f2:78:2e:a6:ad: b1:20:b2:86:97:a3:da:bf:76:b7:26:69:c8:64:c0:d5:2e:03: 63:59:16:80:ce:de:b6:eb:e2:8a:7b:5f:42:3c:b1:6b:a4:8c: e8:4d:6f:07:d3:0a:56:41:77:fe:84:d3:6f:9a:ca:4d:29:a4: 4e:82:c7:4e:4f:3b:56:7f:58:8e:e9:0b:8d:51:51:3f:44:11: ae:f7:15:54:97:b0:89:32:42:68:fa:77:d7:49:28:32:ca:63: d4:8a:0d:b0:af:1a:77:15:5f:9c:f8:13:34:1a:d6:2d:f1:69: b2:b5:86:62:c9:4c:fd:cc:0d:bb:4d:62:78:64:be:4f:86:50: db:58:a7:45:36:53:df:72:08:a2:3c:fc:91:37:99:f8:a0:64: ae:98:48:5c:10:ca:a0:72:06:e0:99:65:42:da:24:e1:0a:3c: 7d:a2:77:c7:77:59:82:34:e2:32:0b:45:6b:9a:1a:be:a8:bc: c9:1d:7f:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNI0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0FDQ0ExMTAvBgNVBAUTKEE5OUY2Njk4NjkyNzIwMTE1NDk2Q0I0NTk3MDJDNDNB REM0OEQ2QUQwHhcNMjUwNjE2MTUxODQ0WhcNMjUwNjIzMTUxODQ0WjAYMRYwFAYD VQQDEw02ODUwMzVkNC0zNzNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqgZdcATcxfp/iNI2Bsjea6zpVhezTk5fen1InlR+tRpb7p19QB4piDI3rdzj lpX0RBwwKipfI7P6tMvAcLasgGWaII8TJoqfhzAJeGnJT9HnqnMuaknfiNlLyrrl 0CtVo8ci8D4t24JjlaK+AQ9vLQQjH5f3nggboTe1zIVtsbbWHH9mAQkdBNMiaHJf GD/J+8u3bbwjyQoSSTH6XnXd8611V06GV4pEcfLqe33YZCeoi0nqpN6uK6bSg4k9 vt493IJkrZcgrnWd0fAsZcvrnv3aa2xiDiA6YdrZamcRdL+v7N3/GlX/0Wzxig7Z rM+N4NmFHDW8qplqPd1m03p3BwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB7x2OCF vMcXshs+i4OF+7UJ/b7oMB8GA1UdIwQYMBaAFKmfZphpJyARVJbLRZcCxDrcSNat MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQUNDQS82MDg2RDc4MjFE QTkxMUUyQkIxQjRFQTQwOEIwMkNEMi9xWjltbUdrbklCRlVsc3RGbHdMRU90eEkx cTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FaOW1tR2tuSUJGVWxzdEZsd0xFT3R4STFxMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QUNDQS82MDg2RDc4MjFEQTkxMUUyQkIxQjRFQTQwOEIwMkNEMi9xWjltbUdrbklC RlVsc3RGbHdMRU90eEkxcTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPFL2jn9WrAMV+I10Hv4fZeWZ8NTzadlR9MUCrtoSaDfSrE03OZtPK piv3ElijGQjkIFlMBKwCv45Hzdf5Nt91+/vj8ngupq2xILKGl6Pav3a3JmnIZMDV LgNjWRaAzt626+KKe19CPLFrpIzoTW8H0wpWQXf+hNNvmspNKaROgsdOTztWf1iO 6QuNUVE/RBGu9xVUl7CJMkJo+nfXSSgyymPUig2wrxp3FV+c+BM0GtYt8WmytYZi yUz9zA27TWJ4ZL5PhlDbWKdFNlPfcgiiPPyRN5n4oGSumEhcEMqgcgbgmWVC2iTh Cjx9onfHd1mCNOIyC0Vrmhq+qLzJHX/A -----END CERTIFICATE-----Generated at Wed Jun 18 01:48:16 2025 by rpki-client