$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC017/105AC8FC90C311EDBA1DCC23C4F9AE02/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.mft File: CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.mft (raw, json) Hash identifier: gBAY+bfEtTzsnfPtT3mKB0kVdiAmLtEcDS1Zda6oApw= Subject key identifier: F2:C0:56:C7:28:ED:D2:38:83:84:BB:3F:A1:03:43:EF:9D:C8:A1:F3 Authority key identifier: 0A:A5:DE:29:26:5A:08:E2:7A:58:1D:89:44:65:BD:CD:B7:37:09:BB Certificate issuer: /CN=A91DC017/serialNumber=0AA5DE29265A08E27A581D894465BDCDB73709BB Certificate serial: 01E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC017/105AC8FC90C311EDBA1DCC23C4F9AE02/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.mft Manifest number: 01D6 Signing time: Tue 17 Jun 2025 02:05:17 +0000 Manifest this update: Tue 17 Jun 2025 02:05:16 +0000 Manifest next update: Tue 24 Jun 2025 02:05:16 +0000 Files and hashes: 1: CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.crl (hash: PdzQ7a+bPgmcGpDXf0tKeDrvE8nHhGMkAfruHIon0tU=) 2: C0C268B8441C11EF9E110F1EC4F9AE02.roa (hash: jnHEv+tk9LEmiC9T0eLpIu0ka8tlgw/1HGmQA/hDw9s=) 3: 1B8DE01C641911EF83FFBF3CC4F9AE02.roa (hash: Tod+meVH3/YYDYyQo78I9vVyyLfaumC1ya5cnKT+hFM=) 4: 08A1C0B8DC5011EF9C212C5CC4F9AE02.roa (hash: 3zWqR+4/bbh/62pxX54wkuJs0uKg6zeZhN4dCLWwFho=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC017/105AC8FC90C311EDBA1DCC23C4F9AE02/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.crl rsync://rpki.apnic.net/member_repository/A91DC017/105AC8FC90C311EDBA1DCC23C4F9AE02/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 02:05:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 489 (0x1e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC017, serialNumber=0AA5DE29265A08E27A581D894465BDCDB73709BB Validity Not Before: Jun 17 02:05:16 2025 GMT Not After : Jun 24 02:05:16 2025 GMT Subject: CN=6850cd5d-d744 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:69:1b:f6:31:c0:7a:20:ad:0b:56:c5:6a:41: 81:62:94:f9:c6:23:25:16:df:da:38:08:e4:90:d4: 62:c1:63:d8:f7:62:e4:04:a0:b6:2e:b6:81:6a:3c: a3:3a:5c:03:a5:62:b5:6b:5c:44:6f:3b:63:88:a6: 42:1b:07:a8:b9:e6:4e:fd:59:5a:f8:ac:9d:09:0d: 07:ff:6f:aa:06:c0:1c:31:d2:96:73:b3:27:9f:1c: 95:02:e2:f4:a7:f9:cf:01:ac:b6:22:d5:94:c1:8a: c5:87:5a:48:5b:4e:6d:a2:21:9f:5d:c2:52:3e:5c: f8:c1:c5:58:81:a3:09:cb:61:09:be:8b:85:b0:92: 47:6e:a7:42:ce:80:1f:09:c0:65:8b:98:b8:e2:78: db:3b:6f:9f:fd:7a:f9:5d:7f:66:f8:3c:ac:86:ff: 4a:42:2b:c4:eb:8e:a1:f1:4c:02:78:28:d1:d4:95: 8d:8f:03:84:98:a1:44:de:d2:55:73:0d:ad:5c:2d: 73:54:24:18:de:90:7a:9b:80:c9:75:28:e8:3f:ae: 5b:c4:c5:a5:0d:c7:dc:73:24:61:e6:13:1e:77:07: 89:bf:0e:e9:c0:21:a4:60:fd:7a:80:03:ad:e0:c0: 93:15:18:ba:68:9a:17:e2:eb:5d:55:30:f1:88:39: 63:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:C0:56:C7:28:ED:D2:38:83:84:BB:3F:A1:03:43:EF:9D:C8:A1:F3 X509v3 Authority Key Identifier: keyid:0A:A5:DE:29:26:5A:08:E2:7A:58:1D:89:44:65:BD:CD:B7:37:09:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC017/105AC8FC90C311EDBA1DCC23C4F9AE02/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC017/105AC8FC90C311EDBA1DCC23C4F9AE02/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:62:6d:76:71:53:97:ae:a9:39:fb:60:97:75:93:4a:f3:a8: 95:94:3a:30:7d:8c:a5:73:72:d0:58:a5:aa:55:d1:33:ad:5c: e3:02:de:e5:6e:21:24:25:a0:bc:90:c6:16:c1:c6:af:46:7a: 86:10:fa:92:25:e9:c7:1b:e8:31:ef:01:76:9f:22:0a:e5:1d: a7:c9:6f:ef:59:e1:85:b5:9a:92:d2:17:3b:a9:8b:89:5c:84: e9:ff:92:df:f8:85:4a:6f:20:34:a0:07:0f:48:af:5b:ac:86: 83:96:68:73:48:d2:61:15:b4:e3:69:db:4e:11:a9:92:fd:1e: 71:1b:be:16:1b:16:84:79:1b:bd:e4:d9:2b:7a:98:ff:d1:40: 04:c7:c6:be:33:2e:9d:63:51:56:b4:f7:80:a8:4d:1d:f8:ac: eb:39:3e:93:8a:ec:d9:60:bd:f5:97:03:86:a6:7e:b7:70:c9: ac:e0:e0:f0:b5:f1:71:29:7d:e4:a7:1e:49:90:a5:c8:71:3c: 04:6a:23:9c:60:74:d1:57:89:61:75:b6:22:76:00:a3:56:87: 70:d9:74:63:4f:c8:a3:42:88:54:cd:0e:5d:9d:70:ee:48:12: cd:7d:af:3c:bf:b6:06:fb:64:d7:05:88:38:df:32:99:80:a2: d9:9f:53:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAekwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REMwMTcxMTAvBgNVBAUTKDBBQTVERTI5MjY1QTA4RTI3QTU4MUQ4OTQ0NjVCRENE QjczNzA5QkIwHhcNMjUwNjE3MDIwNTE2WhcNMjUwNjI0MDIwNTE2WjAYMRYwFAYD VQQDEw02ODUwY2Q1ZC1kNzQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2Gkb9jHAeiCtC1bFakGBYpT5xiMlFt/aOAjkkNRiwWPY92LkBKC2LraBajyj OlwDpWK1a1xEbztjiKZCGweoueZO/Vla+KydCQ0H/2+qBsAcMdKWc7MnnxyVAuL0 p/nPAay2ItWUwYrFh1pIW05toiGfXcJSPlz4wcVYgaMJy2EJvouFsJJHbqdCzoAf CcBli5i44njbO2+f/Xr5XX9m+Dyshv9KQivE646h8UwCeCjR1JWNjwOEmKFE3tJV cw2tXC1zVCQY3pB6m4DJdSjoP65bxMWlDcfccyRh5hMedweJvw7pwCGkYP16gAOt 4MCTFRi6aJoX4utdVTDxiDljmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPLAVsco 7dI4g4S7P6EDQ++dyKHzMB8GA1UdIwQYMBaAFAql3ikmWgjielgdiURlvc23Nwm7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzAxNy8xMDVBQzhGQzkw QzMxMUVEQkExRENDMjNDNEY5QUUwMi9DcVhlS1NaYUNPSjZXQjJKUkdXOXpiYzND YnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NxWGVLU1phQ09KNldCMkpSR1c5emJjM0Nicy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzAxNy8xMDVBQzhGQzkwQzMxMUVEQkExRENDMjNDNEY5QUUwMi9DcVhlS1NaYUNP SjZXQjJKUkdXOXpiYzNDYnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJYm12cVOXrqk5+2CXdZNK86iVlDowfYylc3LQWKWqVdEzrVzjAt7l biEkJaC8kMYWwcavRnqGEPqSJenHG+gx7wF2nyIK5R2nyW/vWeGFtZqS0hc7qYuJ XITp/5Lf+IVKbyA0oAcPSK9brIaDlmhzSNJhFbTjadtOEamS/R5xG74WGxaEeRu9 5Nkrepj/0UAEx8a+My6dY1FWtPeAqE0d+KzrOT6TiuzZYL31lwOGpn63cMms4ODw tfFxKX3kpx5JkKXIcTwEaiOcYHTRV4lhdbYidgCjVodw2XRjT8ijQohUzQ5dnXDu SBLNfa88v7YG+2TXBYg43zKZgKLZn1M0 -----END CERTIFICATE-----Generated at Tue Jun 17 16:16:26 2025 by rpki-client