$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2C38/04BAA614A98C11EF9350FB63C4F9AE02/qjXi-Xe1XnL5FjW_fVO861NHmDs.mft File: qjXi-Xe1XnL5FjW_fVO861NHmDs.mft (raw, json) Hash identifier: 2Fr1GsFv8YN/2cLJWYoa54N2/QRXu6yFi4801TWLz9Y= Subject key identifier: 6E:19:8C:68:76:E7:0D:78:04:3A:60:79:8C:46:A6:78:47:B4:B3:E4 Authority key identifier: AA:35:E2:F9:77:B5:5E:72:F9:16:35:BF:7D:53:BC:EB:53:47:98:3B Certificate issuer: /CN=A91D2C38/serialNumber=AA35E2F977B55E72F91635BF7D53BCEB5347983B Certificate serial: 6C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qjXi-Xe1XnL5FjW_fVO861NHmDs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D2C38/04BAA614A98C11EF9350FB63C4F9AE02/qjXi-Xe1XnL5FjW_fVO861NHmDs.mft Manifest number: 6B Signing time: Thu 19 Jun 2025 06:18:22 +0000 Manifest this update: Thu 19 Jun 2025 06:18:22 +0000 Manifest next update: Thu 26 Jun 2025 06:18:22 +0000 Files and hashes: 1: qjXi-Xe1XnL5FjW_fVO861NHmDs.crl (hash: 5jOn7k4gbQGI+WXrun3JmvlmKixy94g6vRpJZ2nbhH8=) 2: 8D6B6D86A98C11EFAAC0F364C4F9AE02.roa (hash: P1YxJ4+gjHWBzmSpF7hBMmYmiKS5/7YJlO0/1zxJNmc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D2C38/04BAA614A98C11EF9350FB63C4F9AE02/qjXi-Xe1XnL5FjW_fVO861NHmDs.crl rsync://rpki.apnic.net/member_repository/A91D2C38/04BAA614A98C11EF9350FB63C4F9AE02/qjXi-Xe1XnL5FjW_fVO861NHmDs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qjXi-Xe1XnL5FjW_fVO861NHmDs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 06:18:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 108 (0x6c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D2C38, serialNumber=AA35E2F977B55E72F91635BF7D53BCEB5347983B Validity Not Before: Jun 19 06:18:22 2025 GMT Not After : Jun 26 06:18:22 2025 GMT Subject: CN=6853abae-eb89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:80:9e:c6:2f:ed:08:b0:21:2a:21:08:04:35: d4:59:27:92:a5:46:70:d5:e1:d4:7b:27:bc:87:36: d3:9f:d9:b8:0b:df:dd:01:25:30:ea:9d:30:a5:50: 57:e0:45:f9:42:bd:23:53:58:13:b4:89:a7:82:bc: 12:b3:64:e0:5e:dc:33:69:7a:9a:1e:62:8a:12:fc: f5:cd:f1:3d:88:1c:eb:b7:2c:1c:a4:f7:5b:04:b1: 3c:56:51:61:eb:4a:6f:8f:c8:98:ae:b9:74:6a:6f: 50:38:74:35:cc:9c:8b:7f:74:24:30:db:41:8d:f5: b1:c5:60:20:c0:a0:4f:c7:7a:e5:f4:4b:19:51:40: a1:e7:c5:5b:ab:b3:22:a9:6a:b6:1d:0a:b3:8b:a6: 70:9f:ee:3c:d3:e9:a4:2e:96:95:bd:c1:55:28:40: f3:3c:74:42:9a:98:b3:43:05:96:c3:be:37:00:4d: 1c:c1:3c:bd:5c:67:75:d2:8b:81:7d:35:f1:32:f3: f7:b2:e2:d5:8e:fc:a4:6a:a8:44:77:df:23:73:d9: b8:b9:89:53:c8:84:13:b3:2b:f0:12:a7:e9:d2:ab: 0e:ea:f4:f5:fa:c6:48:4e:a4:75:ac:1f:29:aa:78: bf:6d:d8:18:38:ee:92:ed:5d:05:12:1d:de:b6:bf: 98:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:19:8C:68:76:E7:0D:78:04:3A:60:79:8C:46:A6:78:47:B4:B3:E4 X509v3 Authority Key Identifier: keyid:AA:35:E2:F9:77:B5:5E:72:F9:16:35:BF:7D:53:BC:EB:53:47:98:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D2C38/04BAA614A98C11EF9350FB63C4F9AE02/qjXi-Xe1XnL5FjW_fVO861NHmDs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qjXi-Xe1XnL5FjW_fVO861NHmDs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2C38/04BAA614A98C11EF9350FB63C4F9AE02/qjXi-Xe1XnL5FjW_fVO861NHmDs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:7a:93:0e:4d:10:5f:54:8b:90:83:54:3b:f0:4b:3e:c5:ba: 4e:9e:ef:40:27:85:72:fc:b4:fb:4d:91:6c:15:63:93:d6:49: 83:02:26:55:5c:93:ab:b2:3d:cf:d7:ae:04:c0:da:b0:f6:c9: 40:55:bd:5f:c4:21:23:43:6f:75:ab:11:7c:15:f4:b2:15:3d: 52:07:fb:c2:f4:5f:18:ba:4a:2b:2a:f6:4d:40:32:53:6a:c2: 00:db:78:14:48:fb:4c:76:8e:c9:52:0e:d1:c9:4a:bd:c6:46: 5f:9d:c8:a9:79:8c:fb:63:d0:7a:8c:30:87:a7:41:56:39:48: 2d:6e:54:1f:97:4e:64:99:8b:62:af:8e:bc:cd:d0:a8:17:6b: 93:65:11:6b:70:1d:15:63:c8:00:77:8b:4a:40:e7:69:58:fc: 1d:e7:02:6a:71:b1:a3:b2:31:1d:96:41:95:c0:41:83:ed:01: 9b:0b:d7:d4:da:d3:31:65:98:e0:c6:9b:a9:f7:ff:ff:34:c2: fa:fb:28:15:92:ff:b3:62:0f:1a:d0:e0:94:44:75:b5:52:50: af:45:ed:70:e1:b4:c7:cb:9b:75:b2:51:14:ab:77:25:2d:4c: 14:96:d1:d1:85:5d:b1:58:50:20:43:b1:e1:88:fe:a6:e2:1a: 9a:03:8b:28 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE MkMzODExMC8GA1UEBRMoQUEzNUUyRjk3N0I1NUU3MkY5MTYzNUJGN0Q1M0JDRUI1 MzQ3OTgzQjAeFw0yNTA2MTkwNjE4MjJaFw0yNTA2MjYwNjE4MjJaMBgxFjAUBgNV BAMTDTY4NTNhYmFlLWViODkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCtgJ7GL+0IsCEqIQgENdRZJ5KlRnDV4dR7J7yHNtOf2bgL390BJTDqnTClUFfg RflCvSNTWBO0iaeCvBKzZOBe3DNpepoeYooS/PXN8T2IHOu3LByk91sEsTxWUWHr Sm+PyJiuuXRqb1A4dDXMnIt/dCQw20GN9bHFYCDAoE/HeuX0SxlRQKHnxVursyKp arYdCrOLpnCf7jzT6aQulpW9wVUoQPM8dEKamLNDBZbDvjcATRzBPL1cZ3XSi4F9 NfEy8/ey4tWO/KRqqER33yNz2bi5iVPIhBOzK/ASp+nSqw7q9PX6xkhOpHWsHymq eL9t2Bg47pLtXQUSHd62v5h1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUbhmMaHbn DXgEOmB5jEameEe0s+QwHwYDVR0jBBgwFoAUqjXi+Xe1XnL5FjW/fVO861NHmDsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQyQzM4LzA0QkFBNjE0QTk4 QzExRUY5MzUwRkI2M0M0RjlBRTAyL3FqWGktWGUxWG5MNUZqV19mVk84NjFOSG1E cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvcWpYaS1YZTFYbkw1RmpXX2ZWTzg2MU5IbURzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQy QzM4LzA0QkFBNjE0QTk4QzExRUY5MzUwRkI2M0M0RjlBRTAyL3FqWGktWGUxWG5M NUZqV19mVk84NjFOSG1Ecy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKJ6kw5NEF9Ui5CDVDvwSz7Fuk6e70AnhXL8tPtNkWwVY5PWSYMCJlVc k6uyPc/XrgTA2rD2yUBVvV/EISNDb3WrEXwV9LIVPVIH+8L0Xxi6Sisq9k1AMlNq wgDbeBRI+0x2jslSDtHJSr3GRl+dyKl5jPtj0HqMMIenQVY5SC1uVB+XTmSZi2Kv jrzN0KgXa5NlEWtwHRVjyAB3i0pA52lY/B3nAmpxsaOyMR2WQZXAQYPtAZsL19Ta 0zFlmODGm6n3//80wvr7KBWS/7NiDxrQ4JREdbVSUK9F7XDhtMfLm3WyURSrdyUt TBSW0dGFXbFYUCBDseGI/qbiGpoDiyg= -----END CERTIFICATE-----Generated at Fri Jun 20 10:03:53 2025 by rpki-client