$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8BB1/51F9F6143D2511F080C48955C4F9AE02/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.mft File: QSqNF9-Qeng3ZQEqg7eLfLHKJRI.mft (raw, json) Hash identifier: 3C3uCG9wyTW70rlHERach8ACH22x8Cubcp/fCZjrM2A= Subject key identifier: CA:53:CB:15:2F:93:FF:6F:8A:78:35:F4:E3:60:05:F2:28:26:5D:F3 Authority key identifier: 41:2A:8D:17:DF:90:7A:78:37:65:01:2A:83:B7:8B:7C:B1:CA:25:12 Certificate issuer: /CN=A91D8BB1/serialNumber=412A8D17DF907A783765012A83B78B7CB1CA2512 Certificate serial: 0D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8BB1/51F9F6143D2511F080C48955C4F9AE02/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.mft Manifest number: 0D Signing time: Thu 19 Jun 2025 07:29:18 +0000 Manifest this update: Thu 19 Jun 2025 07:29:18 +0000 Manifest next update: Thu 26 Jun 2025 07:29:17 +0000 Files and hashes: 1: QSqNF9-Qeng3ZQEqg7eLfLHKJRI.crl (hash: vEBbeq6cnr/rhbFD4ihElCXu1ozkXeDfV449lwPAqV4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8BB1/51F9F6143D2511F080C48955C4F9AE02/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.crl rsync://rpki.apnic.net/member_repository/A91D8BB1/51F9F6143D2511F080C48955C4F9AE02/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 07:29:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13 (0xd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8BB1, serialNumber=412A8D17DF907A783765012A83B78B7CB1CA2512 Validity Not Before: Jun 19 07:29:18 2025 GMT Not After : Jun 26 07:29:17 2025 GMT Subject: CN=6853bc4e-5813 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:cc:f5:79:4b:74:0f:b8:41:33:f0:7c:20:d7: a7:c1:1e:87:f4:d7:fc:e4:58:2a:5c:02:61:cf:ec: 2d:00:9b:ba:aa:84:06:5e:59:53:18:9b:0f:88:84: 7a:0a:1e:8b:c0:7e:cf:4b:52:5c:df:a8:88:8d:9d: 84:fb:96:40:95:e8:8d:d3:f1:31:9c:de:e4:2b:61: 86:34:d7:ba:0a:30:38:b3:a6:07:f3:61:4f:36:51: 73:71:b3:36:72:05:56:60:5d:f2:b7:cf:62:dd:77: e8:29:4f:5c:82:f5:60:24:e6:54:7f:b2:1c:1d:01: ad:e2:26:51:30:8d:7b:a4:67:6c:16:73:4f:41:60: c5:fd:06:5a:02:03:6b:d8:1f:0c:aa:d5:e2:dc:95: ff:73:cb:c1:d9:c8:3a:3c:16:9d:7e:fe:bc:d8:c6: bc:a9:f7:c4:1a:d7:2f:55:af:4a:fa:d0:43:05:43: 6d:0c:b5:1b:e6:c1:fd:9d:8c:c1:bc:9c:3a:fc:83: e4:03:e6:47:76:30:4b:5f:0c:f9:21:87:ea:f1:9a: b3:17:a0:e9:4b:82:9a:93:59:b4:1d:41:37:6a:81: 80:23:58:53:94:b6:19:f4:2e:d4:7e:3e:6a:77:f4: 05:50:04:d0:35:d1:4d:bf:75:a3:ad:95:13:6f:2b: 05:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:53:CB:15:2F:93:FF:6F:8A:78:35:F4:E3:60:05:F2:28:26:5D:F3 X509v3 Authority Key Identifier: keyid:41:2A:8D:17:DF:90:7A:78:37:65:01:2A:83:B7:8B:7C:B1:CA:25:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8BB1/51F9F6143D2511F080C48955C4F9AE02/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8BB1/51F9F6143D2511F080C48955C4F9AE02/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:8d:38:62:99:ad:c2:e3:b2:7d:57:35:7b:96:e5:aa:7b:c1: 4a:ff:32:dd:7c:c4:22:58:cf:24:e3:2a:22:1f:dd:4e:de:2f: d7:39:35:9e:ae:d3:f0:53:27:1d:eb:40:49:ea:40:5c:88:56: d6:cf:c0:87:c4:43:d5:d2:23:c5:aa:ed:bd:44:94:7a:2b:cc: 60:45:50:38:b0:38:13:56:06:c8:e6:ce:a3:d1:4f:9a:c0:05: 68:bb:2f:32:a3:9b:d5:52:b6:6f:d5:0c:b9:fb:70:74:c9:90: e6:85:1e:4f:7e:1c:8a:eb:e1:30:d9:d2:06:50:d5:6c:ad:5d: 99:4d:28:e1:73:12:3f:9e:ff:1d:ef:e7:45:59:2f:d3:70:18: 71:78:ce:65:77:26:d3:de:75:65:48:e4:17:4b:7d:e6:9d:63: 38:b1:84:c8:cb:5b:ae:35:46:68:2d:3a:32:f9:9a:c2:e3:b4: 85:19:1d:59:de:65:32:cf:6a:89:5e:8f:9a:c2:9c:9e:27:f1: c2:ff:68:b1:23:e2:70:6d:85:f9:53:76:05:83:ba:40:68:4c: 49:82:3a:28:39:8c:78:23:28:a0:36:ad:39:90:37:d5:24:cc: 4d:f5:ad:e9:00:2e:09:00:30:0f:5f:4a:91:81:fa:59:71:51: 46:8e:b4:0d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE OEJCMTExMC8GA1UEBRMoNDEyQThEMTdERjkwN0E3ODM3NjUwMTJBODNCNzhCN0NC MUNBMjUxMjAeFw0yNTA2MTkwNzI5MThaFw0yNTA2MjYwNzI5MTdaMBgxFjAUBgNV BAMTDTY4NTNiYzRlLTU4MTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDVzPV5S3QPuEEz8Hwg16fBHof01/zkWCpcAmHP7C0Am7qqhAZeWVMYmw+IhHoK HovAfs9LUlzfqIiNnYT7lkCV6I3T8TGc3uQrYYY017oKMDizpgfzYU82UXNxszZy BVZgXfK3z2Ldd+gpT1yC9WAk5lR/shwdAa3iJlEwjXukZ2wWc09BYMX9BloCA2vY Hwyq1eLclf9zy8HZyDo8Fp1+/rzYxryp98Qa1y9Vr0r60EMFQ20MtRvmwf2djMG8 nDr8g+QD5kd2MEtfDPkhh+rxmrMXoOlLgpqTWbQdQTdqgYAjWFOUthn0LtR+Pmp3 9AVQBNA10U2/daOtlRNvKwV/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUylPLFS+T /2+KeDX042AF8igmXfMwHwYDVR0jBBgwFoAUQSqNF9+Qeng3ZQEqg7eLfLHKJRIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4QkIxLzUxRjlGNjE0M0Qy NTExRjA4MEM0ODk1NUM0RjlBRTAyL1FTcU5GOS1RZW5nM1pRRXFnN2VMZkxIS0pS SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvUVNxTkY5LVFlbmczWlFFcWc3ZUxmTEhLSlJJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4 QkIxLzUxRjlGNjE0M0QyNTExRjA4MEM0ODk1NUM0RjlBRTAyL1FTcU5GOS1RZW5n M1pRRXFnN2VMZkxIS0pSSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADeNOGKZrcLjsn1XNXuW5ap7wUr/Mt18xCJYzyTjKiIf3U7eL9c5NZ6u 0/BTJx3rQEnqQFyIVtbPwIfEQ9XSI8Wq7b1ElHorzGBFUDiwOBNWBsjmzqPRT5rA BWi7LzKjm9VStm/VDLn7cHTJkOaFHk9+HIrr4TDZ0gZQ1WytXZlNKOFzEj+e/x3v 50VZL9NwGHF4zmV3JtPedWVI5BdLfeadYzixhMjLW641RmgtOjL5msLjtIUZHVne ZTLPaolej5rCnJ4n8cL/aLEj4nBthflTdgWDukBoTEmCOig5jHgjKKA2rTmQN9Uk zE31rekALgkAMA9fSpGB+llxUUaOtA0= -----END CERTIFICATE-----Generated at Thu Jun 19 14:23:08 2025 by rpki-client