$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC068/781E7DC4D51611EEB35E6A60C4F9AE02/qjbeqgtIjXQ9MJajdNPOwwNOado.mft File: qjbeqgtIjXQ9MJajdNPOwwNOado.mft (raw, json) Hash identifier: ubje1k61qHenSNQOni3AFvkXmFIVDmFABQPz7Zau7uk= Subject key identifier: 57:86:A8:5C:EA:A9:CD:4E:08:E3:C8:5A:AC:9C:6A:1D:5F:EF:60:62 Authority key identifier: AA:36:DE:AA:0B:48:8D:74:3D:30:96:A3:74:D3:CE:C3:03:4E:69:DA Certificate issuer: /CN=A91DC068/serialNumber=AA36DEAA0B488D743D3096A374D3CEC3034E69DA Certificate serial: FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qjbeqgtIjXQ9MJajdNPOwwNOado.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC068/781E7DC4D51611EEB35E6A60C4F9AE02/qjbeqgtIjXQ9MJajdNPOwwNOado.mft Manifest number: F9 Signing time: Tue 17 Jun 2025 04:15:13 +0000 Manifest this update: Tue 17 Jun 2025 04:15:13 +0000 Manifest next update: Tue 24 Jun 2025 04:15:13 +0000 Files and hashes: 1: qjbeqgtIjXQ9MJajdNPOwwNOado.crl (hash: GMe8gUSAuhJ2FvO7YMtpp9tmyHDMXt9xE3EXQDl66y4=) 2: 4C798C5AD5DD11EEA5B1C711C4F9AE02.roa (hash: UehIW4ne9/pa7E+bJ7b7vlEagKFtkPy1RDy9gQNG8w4=) 3: 4CFFF0A6D5DD11EEA5B1C711C4F9AE02.roa (hash: 39NjyNN95zMryV/4gipoP40hgOhWq2OieGFrOUrcjx8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC068/781E7DC4D51611EEB35E6A60C4F9AE02/qjbeqgtIjXQ9MJajdNPOwwNOado.crl rsync://rpki.apnic.net/member_repository/A91DC068/781E7DC4D51611EEB35E6A60C4F9AE02/qjbeqgtIjXQ9MJajdNPOwwNOado.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qjbeqgtIjXQ9MJajdNPOwwNOado.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 04:15:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 253 (0xfd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC068, serialNumber=AA36DEAA0B488D743D3096A374D3CEC3034E69DA Validity Not Before: Jun 17 04:15:13 2025 GMT Not After : Jun 24 04:15:13 2025 GMT Subject: CN=6850ebd1-2445 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:74:8e:f0:34:88:b0:12:16:a4:45:f4:9d:92: 17:9d:cc:e7:55:f0:84:da:9d:e8:54:c6:dd:97:a3: d0:30:ca:26:75:a0:8c:0c:28:7b:3e:29:63:ad:38: e6:02:dc:ee:1d:8e:b0:b5:bc:92:f3:e6:22:5a:34: 7a:67:95:85:f4:f6:ff:a9:86:58:81:72:8b:da:b0: 95:7a:c5:38:a4:0c:4a:5f:92:30:b8:05:53:c8:4a: 54:ee:04:a6:59:af:cf:18:bc:d3:5f:16:49:a1:2c: 27:57:a7:3a:15:5e:5c:f8:a5:8d:18:68:fb:3f:22: e4:f5:ac:5f:d9:d3:82:78:43:0a:9f:42:5e:92:22: ac:2e:07:cc:40:a5:51:0a:4a:6b:d9:ba:ae:86:b5: 20:55:82:30:01:ec:61:b9:f9:2f:95:9d:79:cb:dd: fb:b4:bd:81:bf:59:f0:c9:4c:63:e3:61:22:23:bb: 8d:84:93:8f:51:7b:ca:69:2e:cd:66:a1:38:81:80: 3b:59:27:59:72:33:31:6f:e5:f7:ae:cc:7c:6b:db: 2b:b1:1e:3d:a4:e9:27:c1:05:44:f9:09:79:8e:5d: ea:64:52:2a:7f:a0:dc:7a:ab:68:fb:c7:30:87:cf: 26:3b:ea:06:6b:14:5c:4e:02:eb:63:68:18:aa:89: 18:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:86:A8:5C:EA:A9:CD:4E:08:E3:C8:5A:AC:9C:6A:1D:5F:EF:60:62 X509v3 Authority Key Identifier: keyid:AA:36:DE:AA:0B:48:8D:74:3D:30:96:A3:74:D3:CE:C3:03:4E:69:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC068/781E7DC4D51611EEB35E6A60C4F9AE02/qjbeqgtIjXQ9MJajdNPOwwNOado.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qjbeqgtIjXQ9MJajdNPOwwNOado.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC068/781E7DC4D51611EEB35E6A60C4F9AE02/qjbeqgtIjXQ9MJajdNPOwwNOado.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:16:a2:25:52:34:3c:59:12:65:c3:41:58:27:28:81:e4:f1: 2a:e7:2b:21:8a:2c:95:8f:13:e8:f2:a4:50:19:90:d7:da:c1: 3a:09:2f:ea:91:bb:6d:54:dd:18:09:72:91:8d:f5:b5:42:f6: 0b:59:72:f1:cc:b2:97:e6:dc:8e:96:c8:f2:58:33:65:e3:4e: e8:45:1b:d2:47:c7:82:a2:27:eb:e5:60:ad:e8:86:c0:7a:de: b9:79:ce:a5:6b:ea:53:24:80:7d:b7:22:e7:9b:f9:4a:b4:34: 12:cb:3b:11:87:92:3a:b9:3a:fc:90:49:54:c6:a4:cb:ec:c9: b6:0f:42:f1:15:34:a8:5c:11:15:ec:e6:67:31:3c:03:bc:82: a3:74:db:ee:2e:e5:83:f1:08:3c:3b:bb:43:0b:68:b6:1c:39: 4c:aa:d4:ff:d5:b2:f3:25:9e:1d:16:e4:f6:48:a1:92:5d:3b: 7d:69:e0:ce:3a:ad:88:0a:ae:55:b4:61:37:ab:d7:88:5a:e0: cf:1c:82:1a:3e:40:74:61:97:eb:22:75:36:e1:58:67:cb:c3: 85:04:ba:2b:57:9f:85:50:d4:46:6f:97:0c:39:fe:29:b1:41: b7:15:7b:0a:c2:02:ee:19:22:04:c1:b1:94:e0:0f:d4:19:fd: cc:89:9a:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAP0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REMwNjgxMTAvBgNVBAUTKEFBMzZERUFBMEI0ODhENzQzRDMwOTZBMzc0RDNDRUMz MDM0RTY5REEwHhcNMjUwNjE3MDQxNTEzWhcNMjUwNjI0MDQxNTEzWjAYMRYwFAYD VQQDEw02ODUwZWJkMS0yNDQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvXSO8DSIsBIWpEX0nZIXncznVfCE2p3oVMbdl6PQMMomdaCMDCh7PiljrTjm AtzuHY6wtbyS8+YiWjR6Z5WF9Pb/qYZYgXKL2rCVesU4pAxKX5IwuAVTyEpU7gSm Wa/PGLzTXxZJoSwnV6c6FV5c+KWNGGj7PyLk9axf2dOCeEMKn0JekiKsLgfMQKVR Ckpr2bquhrUgVYIwAexhufkvlZ15y937tL2Bv1nwyUxj42EiI7uNhJOPUXvKaS7N ZqE4gYA7WSdZcjMxb+X3rsx8a9srsR49pOknwQVE+Ql5jl3qZFIqf6Dceqto+8cw h88mO+oGaxRcTgLrY2gYqokYAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFeGqFzq qc1OCOPIWqycah1f72BiMB8GA1UdIwQYMBaAFKo23qoLSI10PTCWo3TTzsMDTmna MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzA2OC83ODFFN0RDNEQ1 MTYxMUVFQjM1RTZBNjBDNEY5QUUwMi9xamJlcWd0SWpYUTlNSmFqZE5QT3d3Tk9h ZG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FqYmVxZ3RJalhROU1KYWpkTlBPd3dOT2Fkby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzA2OC83ODFFN0RDNEQ1MTYxMUVFQjM1RTZBNjBDNEY5QUUwMi9xamJlcWd0SWpY UTlNSmFqZE5QT3d3Tk9hZG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAsFqIlUjQ8WRJlw0FYJyiB5PEq5yshiiyVjxPo8qRQGZDX2sE6CS/q kbttVN0YCXKRjfW1QvYLWXLxzLKX5tyOlsjyWDNl407oRRvSR8eCoifr5WCt6IbA et65ec6la+pTJIB9tyLnm/lKtDQSyzsRh5I6uTr8kElUxqTL7Mm2D0LxFTSoXBEV 7OZnMTwDvIKjdNvuLuWD8Qg8O7tDC2i2HDlMqtT/1bLzJZ4dFuT2SKGSXTt9aeDO Oq2ICq5VtGE3q9eIWuDPHIIaPkB0YZfrInU24Vhny8OFBLorV5+FUNRGb5cMOf4p sUG3FXsKwgLuGSIEwbGU4A/UGf3MiZr7 -----END CERTIFICATE-----Generated at Wed Jun 18 13:58:35 2025 by rpki-client