$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/q2foL8hqrKgqz_jcNkXNcWEBP3Y.mft File: q2foL8hqrKgqz_jcNkXNcWEBP3Y.mft (raw, json) Hash identifier: G3JBdxDiF761LlUeEx9DZN+BrIzITp6QibOWUci5mRQ= Subject key identifier: B7:8D:2C:D7:D9:7D:CC:10:6D:AD:DC:19:0E:0E:EF:B5:89:30:E0:C8 Authority key identifier: AB:67:E8:2F:C8:6A:AC:A8:2A:CF:F8:DC:36:45:CD:71:61:01:3F:76 Certificate issuer: /CN=A91D1E4C/serialNumber=AB67E82FC86AACA82ACFF8DC3645CD7161013F76 Certificate serial: 02FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2foL8hqrKgqz_jcNkXNcWEBP3Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/q2foL8hqrKgqz_jcNkXNcWEBP3Y.mft Manifest number: 0B05 Signing time: Sat 14 Jun 2025 20:36:19 +0000 Manifest this update: Sat 14 Jun 2025 20:36:18 +0000 Manifest next update: Sat 21 Jun 2025 20:36:18 +0000 Files and hashes: 1: q2foL8hqrKgqz_jcNkXNcWEBP3Y.crl (hash: Gj48p0obY+sEQd6D5oiwlcm/LJfwT8Vp6UsL5CPaZts=) 2: 743B3188E57211ECBC81A87EC4F9AE02.roa (hash: ukecD2pxHGlgKyIFMtJzbdcdaqfvaNOkIkVTe1ei8KE=) 3: FC358296CFA011EDA4AC5B18C4F9AE02.roa (hash: Kfs6t0RkTXatIBLPnXrK64Ffg/DQYtGVawG99/fXQls=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/q2foL8hqrKgqz_jcNkXNcWEBP3Y.crl rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/q2foL8hqrKgqz_jcNkXNcWEBP3Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2foL8hqrKgqz_jcNkXNcWEBP3Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 20:36:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 762 (0x2fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1E4C, serialNumber=AB67E82FC86AACA82ACFF8DC3645CD7161013F76 Validity Not Before: Jun 14 20:36:18 2025 GMT Not After : Jun 21 20:36:18 2025 GMT Subject: CN=684ddd43-32f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:64:5c:bb:5b:ad:ef:18:59:21:01:7c:0a:1e: dc:69:4f:2c:d5:b9:47:c3:17:ed:58:46:c1:0d:67: 31:d2:78:ff:7d:64:d8:10:8b:78:b2:2b:67:bd:e6: a9:37:94:67:b5:99:00:88:c1:94:c5:80:3b:ed:08: d0:89:57:8a:dd:22:50:66:64:a5:9c:b0:d4:f8:a5: ba:c1:25:02:00:69:50:56:67:2f:32:cb:d6:64:91: 13:6f:b1:3c:b2:5a:7f:34:b5:33:ec:57:75:76:94: 35:c6:a5:dc:97:d6:7f:ea:ce:20:ff:47:6a:42:32: 63:83:5a:2b:7d:4d:b9:b3:92:4b:b6:0f:2a:a8:47: 36:c2:0f:19:a9:61:be:9d:d7:4b:10:49:da:b9:8d: 5d:89:cd:f0:0a:b3:da:01:a4:be:a4:44:56:d4:61: 40:01:d1:59:86:26:2f:7d:2c:d8:fc:b9:85:ed:19: d5:40:a9:2a:98:28:68:8c:9a:f6:a4:31:f6:1c:ec: 52:b6:c7:ba:05:7f:19:01:0d:56:2b:8b:0e:11:34: bd:ec:f0:d8:02:96:37:08:1d:64:8f:29:81:b3:e3: be:34:ed:61:c3:f7:2a:0a:59:52:e9:b7:d4:4e:47: 74:bf:da:9e:e6:7a:65:f3:50:c4:4f:7c:2a:95:cd: a4:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:8D:2C:D7:D9:7D:CC:10:6D:AD:DC:19:0E:0E:EF:B5:89:30:E0:C8 X509v3 Authority Key Identifier: keyid:AB:67:E8:2F:C8:6A:AC:A8:2A:CF:F8:DC:36:45:CD:71:61:01:3F:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/q2foL8hqrKgqz_jcNkXNcWEBP3Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2foL8hqrKgqz_jcNkXNcWEBP3Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/q2foL8hqrKgqz_jcNkXNcWEBP3Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:87:61:b5:33:81:13:df:52:27:b1:ca:42:5e:5f:42:37:fe: 92:6c:a7:67:ad:58:59:10:8f:d4:7d:29:9e:a6:2e:6c:6b:58: 9d:df:8b:6d:ac:80:60:05:5c:f5:2d:34:49:db:c9:e6:6d:97: 40:cf:1d:e9:c9:4f:0b:71:2e:2f:3a:90:7d:af:fb:45:9a:fb: 4d:dd:b9:f5:80:ac:a4:92:0b:6e:a4:85:9d:d3:32:ed:f7:98: 7c:3d:72:38:1c:66:d2:3a:ae:1b:36:e9:af:26:dc:48:82:02: b5:23:78:ea:af:bb:97:e4:fb:c9:e8:31:1a:89:6d:bb:68:a6: 6d:1e:c5:8d:c6:f6:fc:01:a0:7c:89:7b:d7:6a:2b:59:a5:03: 9b:99:df:60:f1:fa:9b:fe:66:ba:2d:d3:68:92:ff:61:12:08: b5:a2:85:75:11:75:84:5a:3b:0c:04:86:69:d0:63:f8:03:47: d6:22:4e:e2:7f:ea:46:e6:cb:94:5c:56:70:18:47:9a:1a:bd: 47:ca:99:f9:d4:fc:73:3a:29:48:82:02:75:6b:82:03:d0:45: 77:6f:6d:af:0c:b4:95:92:64:1b:ee:fb:1f:e7:3f:47:78:e1: 8c:ab:da:37:5f:d4:84:fd:9b:d0:f1:c7:1a:0b:2e:cc:fc:4a: ac:59:83:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAvowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDFFNEMxMTAvBgNVBAUTKEFCNjdFODJGQzg2QUFDQTgyQUNGRjhEQzM2NDVDRDcx NjEwMTNGNzYwHhcNMjUwNjE0MjAzNjE4WhcNMjUwNjIxMjAzNjE4WjAYMRYwFAYD VQQDEw02ODRkZGQ0My0zMmY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6mRcu1ut7xhZIQF8Ch7caU8s1blHwxftWEbBDWcx0nj/fWTYEIt4sitnveap N5RntZkAiMGUxYA77QjQiVeK3SJQZmSlnLDU+KW6wSUCAGlQVmcvMsvWZJETb7E8 slp/NLUz7Fd1dpQ1xqXcl9Z/6s4g/0dqQjJjg1orfU25s5JLtg8qqEc2wg8ZqWG+ nddLEEnauY1dic3wCrPaAaS+pERW1GFAAdFZhiYvfSzY/LmF7RnVQKkqmChojJr2 pDH2HOxStse6BX8ZAQ1WK4sOETS97PDYApY3CB1kjymBs+O+NO1hw/cqCllS6bfU Tkd0v9qe5npl81DET3wqlc2kgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLeNLNfZ fcwQba3cGQ4O77WJMODIMB8GA1UdIwQYMBaAFKtn6C/IaqyoKs/43DZFzXFhAT92 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMUU0Qy83REFEQTU2Q0Q5 NEQxMUVBQTYwNEFDNTNDNEY5QUUwMi9xMmZvTDhocXJLZ3F6X2pjTmtYTmNXRUJQ M1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3EyZm9MOGhxcktncXpfamNOa1hOY1dFQlAzWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MUU0Qy83REFEQTU2Q0Q5NEQxMUVBQTYwNEFDNTNDNEY5QUUwMi9xMmZvTDhocXJL Z3F6X2pjTmtYTmNXRUJQM1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVh2G1M4ET31InscpCXl9CN/6SbKdnrVhZEI/UfSmepi5sa1id34tt rIBgBVz1LTRJ28nmbZdAzx3pyU8LcS4vOpB9r/tFmvtN3bn1gKykkgtupIWd0zLt 95h8PXI4HGbSOq4bNumvJtxIggK1I3jqr7uX5PvJ6DEaiW27aKZtHsWNxvb8AaB8 iXvXaitZpQObmd9g8fqb/ma6LdNokv9hEgi1ooV1EXWEWjsMBIZp0GP4A0fWIk7i f+pG5suUXFZwGEeaGr1Hypn51PxzOilIggJ1a4ID0EV3b22vDLSVkmQb7vsf5z9H eOGMq9o3X9SE/ZvQ8ccaCy7M/EqsWYOs -----END CERTIFICATE-----Generated at Sun Jun 15 05:01:39 2025 by rpki-client