$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB04D/E958AFE6019C11EC91644B7BC4F9AE02/qhOo9ipv0n6bme44axRRnm_MhjI.mft File: qhOo9ipv0n6bme44axRRnm_MhjI.mft (raw, json) Hash identifier: Li21X1wwCwLgSG6cXrfH1xIcCkXGeViw0n7rS9QhmF8= Subject key identifier: FF:50:EA:45:E9:73:05:BE:1E:7B:D7:D7:A8:C9:7F:CF:A8:39:28:49 Authority key identifier: AA:13:A8:F6:2A:6F:D2:7E:9B:99:EE:38:6B:14:51:9E:6F:CC:86:32 Certificate issuer: /CN=A91DB04D/serialNumber=AA13A8F62A6FD27E9B99EE386B14519E6FCC8632 Certificate serial: 0531 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qhOo9ipv0n6bme44axRRnm_MhjI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB04D/E958AFE6019C11EC91644B7BC4F9AE02/qhOo9ipv0n6bme44axRRnm_MhjI.mft Manifest number: 052B Signing time: Mon 16 Jun 2025 23:11:49 +0000 Manifest this update: Mon 16 Jun 2025 23:11:49 +0000 Manifest next update: Mon 23 Jun 2025 23:11:49 +0000 Files and hashes: 1: qhOo9ipv0n6bme44axRRnm_MhjI.crl (hash: GkUJXyFUlWvo182tG2OZRaMzWZYCP0d5ZLTW3MPyUEQ=) 2: 5913DBAA01A011ECBFF72849C4F9AE02.roa (hash: L2t/K4jYZMjKtZ2tLHjje+iSEvp8dgbz2aouwvg2y60=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB04D/E958AFE6019C11EC91644B7BC4F9AE02/qhOo9ipv0n6bme44axRRnm_MhjI.crl rsync://rpki.apnic.net/member_repository/A91DB04D/E958AFE6019C11EC91644B7BC4F9AE02/qhOo9ipv0n6bme44axRRnm_MhjI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qhOo9ipv0n6bme44axRRnm_MhjI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 23:11:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1329 (0x531) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB04D, serialNumber=AA13A8F62A6FD27E9B99EE386B14519E6FCC8632 Validity Not Before: Jun 16 23:11:49 2025 GMT Not After : Jun 23 23:11:49 2025 GMT Subject: CN=6850a4b5-8fb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:b9:7d:2a:be:08:18:ad:57:1a:c7:5f:0b:fe: c3:48:f0:65:f2:6b:98:ef:b6:8b:82:b5:e2:68:8b: 2c:b4:4e:48:f3:f6:ff:17:05:dc:04:22:d3:33:f6: e3:52:a2:a8:a7:e2:36:f0:a1:60:1c:5e:c2:40:24: 3d:e3:48:0f:2e:35:6f:47:fd:b6:d8:18:dd:d8:23: fc:ee:60:11:46:af:0b:fd:65:8a:59:c9:a6:1b:26: cf:a1:1f:6b:9b:5d:3a:84:65:39:bf:75:fa:bc:0c: 19:f8:fd:d2:1c:40:2d:2e:48:ef:df:92:af:53:71: 2d:4d:b9:43:5d:48:fb:4c:13:40:19:c3:63:81:2b: ec:47:49:3c:40:57:40:a8:b1:8f:38:88:fd:85:57: 96:8c:67:52:5c:fa:ec:09:3e:c4:00:31:f0:3e:a0: ff:6d:ca:20:2b:15:53:0b:a0:18:ac:73:f0:c2:06: bf:e6:8b:7b:d9:bd:cf:24:a2:58:3a:0f:65:b1:2c: 19:be:84:f7:16:8a:01:cf:16:e7:9e:c5:a8:88:cf: d2:8d:77:14:72:a5:98:1e:88:4e:ba:5f:42:5e:fd: 22:29:51:6e:7c:9a:c6:5b:2e:90:fa:80:66:a3:59: 12:de:5b:6c:d1:9c:0e:1e:32:0f:b7:b4:66:b4:10: 0d:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:50:EA:45:E9:73:05:BE:1E:7B:D7:D7:A8:C9:7F:CF:A8:39:28:49 X509v3 Authority Key Identifier: keyid:AA:13:A8:F6:2A:6F:D2:7E:9B:99:EE:38:6B:14:51:9E:6F:CC:86:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB04D/E958AFE6019C11EC91644B7BC4F9AE02/qhOo9ipv0n6bme44axRRnm_MhjI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qhOo9ipv0n6bme44axRRnm_MhjI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB04D/E958AFE6019C11EC91644B7BC4F9AE02/qhOo9ipv0n6bme44axRRnm_MhjI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:6f:68:8c:9f:fa:f3:40:a0:34:4c:5b:4d:6a:9a:6a:87:0a: aa:71:5c:c1:54:88:c9:85:ed:85:54:49:c1:98:5b:f2:d8:a6: df:79:ff:2d:cf:6a:c9:d1:73:ad:1b:15:b9:08:a2:0c:65:11: 64:89:5d:f8:bc:9c:fa:2d:93:28:82:77:1e:09:62:ff:eb:f2: 5a:0e:fc:53:08:7e:3e:56:ec:04:41:cc:b6:09:0f:b0:2e:99: a1:01:31:7c:ca:47:58:0c:77:eb:b6:28:67:ee:f8:ad:07:b9: b8:d9:42:1b:81:26:fd:c2:82:ea:10:05:e8:23:76:ff:81:7b: bd:58:27:64:df:db:d0:3d:a9:51:6d:13:b9:48:63:11:44:79: d6:88:10:6c:09:37:e4:7d:e5:ee:21:53:17:db:21:b5:42:08: fc:76:50:48:73:ec:d2:1c:34:8c:56:6b:7f:af:fe:98:77:32: 7b:1f:1e:39:93:25:c2:ab:83:5f:cf:03:b0:87:06:e3:24:e9: 8a:13:a8:63:a9:c4:36:8e:0a:dd:5f:99:b6:3c:e0:d6:7e:49: d7:d4:d6:42:16:07:3d:08:ab:af:ae:6b:88:7f:7d:5d:6f:d5: 16:db:d9:36:7a:a6:0f:70:b7:36:6a:8a:ef:80:ba:74:97:e9: e8:3f:68:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBTEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REIwNEQxMTAvBgNVBAUTKEFBMTNBOEY2MkE2RkQyN0U5Qjk5RUUzODZCMTQ1MTlF NkZDQzg2MzIwHhcNMjUwNjE2MjMxMTQ5WhcNMjUwNjIzMjMxMTQ5WjAYMRYwFAYD VQQDEw02ODUwYTRiNS04ZmI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4Ll9Kr4IGK1XGsdfC/7DSPBl8muY77aLgrXiaIsstE5I8/b/FwXcBCLTM/bj UqKop+I28KFgHF7CQCQ940gPLjVvR/222Bjd2CP87mARRq8L/WWKWcmmGybPoR9r m106hGU5v3X6vAwZ+P3SHEAtLkjv35KvU3EtTblDXUj7TBNAGcNjgSvsR0k8QFdA qLGPOIj9hVeWjGdSXPrsCT7EADHwPqD/bcogKxVTC6AYrHPwwga/5ot72b3PJKJY Og9lsSwZvoT3FooBzxbnnsWoiM/SjXcUcqWYHohOul9CXv0iKVFufJrGWy6Q+oBm o1kS3lts0ZwOHjIPt7RmtBAN+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP9Q6kXp cwW+HnvX16jJf8+oOShJMB8GA1UdIwQYMBaAFKoTqPYqb9J+m5nuOGsUUZ5vzIYy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjA0RC9FOTU4QUZFNjAx OUMxMUVDOTE2NDRCN0JDNEY5QUUwMi9xaE9vOWlwdjBuNmJtZTQ0YXhSUm5tX01o akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FoT285aXB2MG42Ym1lNDRheFJSbm1fTWhqSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjA0RC9FOTU4QUZFNjAxOUMxMUVDOTE2NDRCN0JDNEY5QUUwMi9xaE9vOWlwdjBu NmJtZTQ0YXhSUm5tX01oakkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOb2iMn/rzQKA0TFtNappqhwqqcVzBVIjJhe2FVEnBmFvy2Kbfef8t z2rJ0XOtGxW5CKIMZRFkiV34vJz6LZMognceCWL/6/JaDvxTCH4+VuwEQcy2CQ+w LpmhATF8ykdYDHfrtihn7vitB7m42UIbgSb9woLqEAXoI3b/gXu9WCdk39vQPalR bRO5SGMRRHnWiBBsCTfkfeXuIVMX2yG1Qgj8dlBIc+zSHDSMVmt/r/6YdzJ7Hx45 kyXCq4NfzwOwhwbjJOmKE6hjqcQ2jgrdX5m2PODWfknX1NZCFgc9CKuvrmuIf31d b9UW29k2eqYPcLc2aorvgLp0l+noP2ji -----END CERTIFICATE-----Generated at Wed Jun 18 02:56:32 2025 by rpki-client