$ rpki-client -vvf rpki.apnic.net/member_repository/A91CED30/C77455C0AE1E11EEA7EA0A77C4F9AE02/CqcW6oHMxdteS6chFMNCmhnW2V8.mft File: CqcW6oHMxdteS6chFMNCmhnW2V8.mft (raw, json) Hash identifier: vPqWw7QlmzSg0lY2WxhCN8Eb5CeQKrXwjGfeCzJ6qaw= Subject key identifier: 51:FF:21:E7:E0:CD:59:09:71:03:17:79:C3:53:22:2E:70:D9:CB:B8 Authority key identifier: 0A:A7:16:EA:81:CC:C5:DB:5E:4B:A7:21:14:C3:42:9A:19:D6:D9:5F Certificate issuer: /CN=A91CED30/serialNumber=0AA716EA81CCC5DB5E4BA72114C3429A19D6D95F Certificate serial: 010E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqcW6oHMxdteS6chFMNCmhnW2V8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CED30/C77455C0AE1E11EEA7EA0A77C4F9AE02/CqcW6oHMxdteS6chFMNCmhnW2V8.mft Manifest number: 010C Signing time: Fri 13 Jun 2025 03:54:29 +0000 Manifest this update: Fri 13 Jun 2025 03:54:29 +0000 Manifest next update: Fri 20 Jun 2025 03:54:29 +0000 Files and hashes: 1: CqcW6oHMxdteS6chFMNCmhnW2V8.crl (hash: oHCO9Va9/HziIzH7VqBwdQvql+ZBjjKaphFTUOE+aVk=) 2: E188F6AEAE1F11EE9E818D16C4F9AE02.roa (hash: pJb5BTsbuqpgQP5Gvhc/gW9a2gX+v1FlOBgvzyj/io0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CED30/C77455C0AE1E11EEA7EA0A77C4F9AE02/CqcW6oHMxdteS6chFMNCmhnW2V8.crl rsync://rpki.apnic.net/member_repository/A91CED30/C77455C0AE1E11EEA7EA0A77C4F9AE02/CqcW6oHMxdteS6chFMNCmhnW2V8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqcW6oHMxdteS6chFMNCmhnW2V8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 03:54:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 270 (0x10e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CED30, serialNumber=0AA716EA81CCC5DB5E4BA72114C3429A19D6D95F Validity Not Before: Jun 13 03:54:29 2025 GMT Not After : Jun 20 03:54:29 2025 GMT Subject: CN=684ba0f5-8b46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:a4:ab:23:a2:dd:ef:49:96:58:14:85:9b:c0: f7:c7:16:6b:3c:9f:40:50:2b:b6:bb:29:68:da:3e: 00:bc:41:50:9b:f5:d5:c1:f1:8e:ba:4c:1f:86:6c: a1:eb:79:35:b9:88:88:20:5d:de:c7:12:e9:f6:0d: 20:e1:04:f0:5b:ca:7e:ca:9c:f0:af:c3:87:11:15: f1:fa:98:d2:69:65:d2:90:b7:82:d0:27:8d:ef:6c: b8:34:94:20:cd:9b:86:06:c8:ac:a4:2a:08:a0:11: d6:da:72:11:7a:92:65:de:0d:c4:31:1c:21:e5:b7: 47:09:0c:02:e1:88:f5:bc:5d:55:86:4b:eb:5d:da: 4b:85:10:bd:4a:c6:9a:e4:3b:ea:be:5d:14:bd:14: 9f:f2:35:43:56:65:72:2f:a2:f6:92:23:81:50:bd: 21:82:77:6c:58:c9:6d:86:f6:0a:bb:d0:8d:85:88: af:e6:13:cd:97:3a:35:a2:3c:ef:08:79:57:d5:2e: c8:08:42:a2:12:27:33:d5:3c:62:dd:21:60:05:59: 68:79:5e:4a:f4:ff:22:a9:18:0b:c5:70:0f:4d:32: c7:7c:83:b3:ec:32:11:e8:70:fd:96:1c:9c:87:33: 60:c0:7e:3a:74:85:05:3b:58:da:bd:c7:f6:7d:79: ca:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:FF:21:E7:E0:CD:59:09:71:03:17:79:C3:53:22:2E:70:D9:CB:B8 X509v3 Authority Key Identifier: keyid:0A:A7:16:EA:81:CC:C5:DB:5E:4B:A7:21:14:C3:42:9A:19:D6:D9:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CED30/C77455C0AE1E11EEA7EA0A77C4F9AE02/CqcW6oHMxdteS6chFMNCmhnW2V8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqcW6oHMxdteS6chFMNCmhnW2V8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CED30/C77455C0AE1E11EEA7EA0A77C4F9AE02/CqcW6oHMxdteS6chFMNCmhnW2V8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:3a:01:08:93:92:12:05:5e:9f:59:10:48:ee:8d:8d:8c:ca: d2:53:e5:a7:84:a5:59:71:37:94:e9:2e:59:0e:55:bb:29:53: fd:6c:45:18:85:44:77:d7:cb:10:5b:04:4a:62:48:f9:8c:d5: 76:0d:05:d1:00:e6:e8:2c:02:eb:75:38:34:37:c4:80:b9:3f: d4:89:b4:d5:39:9e:ba:a0:d0:77:73:4a:9e:f1:f4:55:21:bc: 42:d6:06:a8:25:07:86:98:16:33:70:4b:a0:c0:d5:0e:08:d2: 7b:59:e3:31:49:3e:8c:31:9d:64:ca:df:5b:66:a0:cc:a3:84: 3b:c7:ac:6d:7f:fa:2b:82:2e:70:f9:91:43:d8:04:05:73:e9: 05:81:da:f0:fa:c2:ce:1f:c6:76:22:34:e7:34:71:2e:73:dc: d7:74:29:f8:df:c6:12:50:78:f6:b2:1a:1f:75:d2:69:00:ca: 75:86:09:e5:ce:2a:9b:6f:3b:56:ff:60:99:52:9f:7d:54:d8: 59:22:0a:ed:59:c4:8c:fc:f6:ee:b5:7a:81:4a:b9:46:a3:32: 78:c4:9d:db:f3:08:ed:b5:4d:a5:4e:7b:c5:37:b8:a7:de:d0: c9:3b:d4:ce:51:02:c0:90:ab:8e:64:b2:18:7f:52:32:fa:52: 47:ea:03:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VEMzAxMTAvBgNVBAUTKDBBQTcxNkVBODFDQ0M1REI1RTRCQTcyMTE0QzM0MjlB MTlENkQ5NUYwHhcNMjUwNjEzMDM1NDI5WhcNMjUwNjIwMDM1NDI5WjAYMRYwFAYD VQQDEw02ODRiYTBmNS04YjQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3aSrI6Ld70mWWBSFm8D3xxZrPJ9AUCu2uylo2j4AvEFQm/XVwfGOukwfhmyh 63k1uYiIIF3exxLp9g0g4QTwW8p+ypzwr8OHERXx+pjSaWXSkLeC0CeN72y4NJQg zZuGBsispCoIoBHW2nIRepJl3g3EMRwh5bdHCQwC4Yj1vF1VhkvrXdpLhRC9Ssaa 5Dvqvl0UvRSf8jVDVmVyL6L2kiOBUL0hgndsWMlthvYKu9CNhYiv5hPNlzo1ojzv CHlX1S7ICEKiEicz1Txi3SFgBVloeV5K9P8iqRgLxXAPTTLHfIOz7DIR6HD9lhyc hzNgwH46dIUFO1javcf2fXnKWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFH/Iefg zVkJcQMXecNTIi5w2cu4MB8GA1UdIwQYMBaAFAqnFuqBzMXbXkunIRTDQpoZ1tlf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUQzMC9DNzc0NTVDMEFF MUUxMUVFQTdFQTBBNzdDNEY5QUUwMi9DcWNXNm9ITXhkdGVTNmNoRk1OQ21oblcy VjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NxY1c2b0hNeGR0ZVM2Y2hGTU5DbWhuVzJWOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RUQzMC9DNzc0NTVDMEFFMUUxMUVFQTdFQTBBNzdDNEY5QUUwMi9DcWNXNm9ITXhk dGVTNmNoRk1OQ21oblcyVjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQOgEIk5ISBV6fWRBI7o2NjMrSU+WnhKVZcTeU6S5ZDlW7KVP9bEUY hUR318sQWwRKYkj5jNV2DQXRAOboLALrdTg0N8SAuT/UibTVOZ66oNB3c0qe8fRV IbxC1gaoJQeGmBYzcEugwNUOCNJ7WeMxST6MMZ1kyt9bZqDMo4Q7x6xtf/orgi5w +ZFD2AQFc+kFgdrw+sLOH8Z2IjTnNHEuc9zXdCn438YSUHj2shofddJpAMp1hgnl ziqbbztW/2CZUp99VNhZIgrtWcSM/PbutXqBSrlGozJ4xJ3b8wjttU2lTnvFN7in 3tDJO9TOUQLAkKuOZLIYf1Iy+lJH6gNZ -----END CERTIFICATE-----Generated at Sat Jun 14 19:12:29 2025 by rpki-client