$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.mft File: qrDiti9jQ4lXMMBUiOf8TibFGmw.mft (raw, json) Hash identifier: bVe1ihGpIIZTvsx1lve3aQgbN+cpttfhCuYdfzx2UMI= Subject key identifier: F1:22:6F:1F:37:B4:64:40:62:03:F9:0D:E7:C5:E6:C0:73:20:A5:17 Authority key identifier: AA:B0:E2:B6:2F:63:43:89:57:30:C0:54:88:E7:FC:4E:26:C5:1A:6C Certificate issuer: /CN=A91DCAE8/serialNumber=AAB0E2B62F6343895730C05488E7FC4E26C51A6C Certificate serial: 34DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrDiti9jQ4lXMMBUiOf8TibFGmw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.mft Manifest number: 34BA Signing time: Sat 14 Jun 2025 14:45:17 +0000 Manifest this update: Sat 14 Jun 2025 14:45:17 +0000 Manifest next update: Sat 21 Jun 2025 14:45:17 +0000 Files and hashes: 1: qrDiti9jQ4lXMMBUiOf8TibFGmw.crl (hash: NTqo0x4OJQIdNqrJpVV+3A/aKHwa8ZFsiioqOMmb8rA=) 2: 006CE5442FBA11ECA05BB46EC4F9AE02.roa (hash: apmElx5HYADo3Em3FsRyatuvuOLQ9ijUTXsLu3KjKZY=) 3: 56F533B4A63011EEA6054D52C4F9AE02.roa (hash: 6oWZaqd4YEA2LX4UVdAVOpmAruJNhp7dksiMD1n7i0s=) 4: 2D89110A9A5311EE9CB13140C4F9AE02.roa (hash: 51Xns0oB8DIUPAAqRrljxkibyJY0Qjy6OKFbsk2hMYw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.crl rsync://rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrDiti9jQ4lXMMBUiOf8TibFGmw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 14:45:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13535 (0x34df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DCAE8, serialNumber=AAB0E2B62F6343895730C05488E7FC4E26C51A6C Validity Not Before: Jun 14 14:45:17 2025 GMT Not After : Jun 21 14:45:17 2025 GMT Subject: CN=684d8afd-99e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:ef:24:36:3a:4a:94:03:7c:f9:ce:30:2b:53: 64:2e:d8:6d:f1:fd:41:e0:d6:27:62:58:b4:13:b5: 85:c3:7f:9b:93:b7:bc:c8:1e:70:60:b4:d4:40:a5: b1:06:0d:07:d1:c5:9c:e6:42:d1:08:cc:8b:09:00: 80:13:c6:c2:c1:28:85:ab:95:f0:b2:78:a1:81:5b: 80:8f:b9:2c:c5:ac:76:f8:70:ed:49:3d:57:7f:49: c8:7a:c7:57:fb:77:ed:84:27:d5:46:71:a6:ce:be: c7:ba:ae:9a:5b:7a:30:c7:7d:51:02:b2:3a:4e:c7: 93:df:a9:51:9a:32:f6:48:a5:b8:43:d2:d8:8c:00: 5e:13:9c:0b:21:82:e1:81:3f:89:cb:2f:6c:03:c3: 1a:bb:17:71:52:29:e7:a8:46:24:71:95:d7:0d:35: 08:e7:10:3a:40:3d:12:5f:7e:4c:62:57:27:e3:be: c5:a9:f1:3d:fd:e7:16:57:6d:9d:30:ab:78:ec:20: ee:98:1b:f8:06:4f:00:c5:1f:bd:46:81:13:73:79: 9a:9b:26:a9:3e:a2:5c:6e:18:27:47:97:9b:1d:c0: 15:05:0f:95:23:13:f4:42:c5:67:ca:bb:0e:56:cf: 46:89:44:d0:90:6d:d0:20:f7:d9:b2:ab:53:32:22: 87:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:22:6F:1F:37:B4:64:40:62:03:F9:0D:E7:C5:E6:C0:73:20:A5:17 X509v3 Authority Key Identifier: keyid:AA:B0:E2:B6:2F:63:43:89:57:30:C0:54:88:E7:FC:4E:26:C5:1A:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrDiti9jQ4lXMMBUiOf8TibFGmw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:5d:1d:52:93:04:98:39:0b:21:88:0c:ee:5f:3d:41:7e:3f: 4c:cd:5d:a4:0b:c1:14:af:45:1d:20:d8:9e:ea:48:c6:35:71: c1:5e:85:ae:fe:cf:d6:ae:87:dc:94:18:a6:93:a3:ad:5d:60: 76:1f:ee:ec:46:7c:83:68:23:95:c0:fb:e1:83:e6:6e:65:b9: 79:aa:4c:cd:5e:68:22:9d:bd:1f:60:77:ac:7a:9d:c6:ad:9c: 85:78:48:90:89:70:79:c5:d1:55:f3:30:9f:c4:ed:9b:77:ae: 02:bd:d3:e4:f2:3c:57:2d:4d:5d:80:5b:6a:5c:ae:d9:69:7c: 2d:53:15:13:f3:1d:b3:0e:21:99:f8:0e:a1:ea:5d:6b:69:ac: 87:69:3e:98:90:93:88:58:18:cd:ec:0f:5d:b4:3b:5a:16:d0: 8d:16:d2:4e:2a:4a:72:d7:1c:d4:6b:b8:06:93:88:a7:1f:f9: 6f:bd:dd:8f:1e:ed:4e:34:7f:b5:1f:52:bd:68:11:c2:52:15: 5d:34:4b:70:bd:88:6b:45:f8:98:3d:9d:5a:c5:47:81:dd:19: c8:ae:f1:9a:94:87:fd:d6:10:bc:2d:6e:4d:99:77:01:e7:b6: dd:a7:49:44:fe:13:b9:45:33:98:2a:24:16:b1:32:ab:32:0e: 4e:10:e9:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNN8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RENBRTgxMTAvBgNVBAUTKEFBQjBFMkI2MkY2MzQzODk1NzMwQzA1NDg4RTdGQzRF MjZDNTFBNkMwHhcNMjUwNjE0MTQ0NTE3WhcNMjUwNjIxMTQ0NTE3WjAYMRYwFAYD VQQDEw02ODRkOGFmZC05OWU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2u8kNjpKlAN8+c4wK1NkLtht8f1B4NYnYli0E7WFw3+bk7e8yB5wYLTUQKWx Bg0H0cWc5kLRCMyLCQCAE8bCwSiFq5XwsnihgVuAj7ksxax2+HDtST1Xf0nIesdX +3fthCfVRnGmzr7Huq6aW3owx31RArI6TseT36lRmjL2SKW4Q9LYjABeE5wLIYLh gT+Jyy9sA8MauxdxUinnqEYkcZXXDTUI5xA6QD0SX35MYlcn477FqfE9/ecWV22d MKt47CDumBv4Bk8AxR+9RoETc3mamyapPqJcbhgnR5ebHcAVBQ+VIxP0QsVnyrsO Vs9GiUTQkG3QIPfZsqtTMiKHewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPEibx83 tGRAYgP5DefF5sBzIKUXMB8GA1UdIwQYMBaAFKqw4rYvY0OJVzDAVIjn/E4mxRps MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQ0FFOC84QjZBREUxNDFE OTMxMUUyOTJDQjIzRjcwOEIwMkNEMi9xckRpdGk5alE0bFhNTUJVaU9mOFRpYkZH bXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FyRGl0aTlqUTRsWE1NQlVpT2Y4VGliRkdtdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Q0FFOC84QjZBREUxNDFEOTMxMUUyOTJDQjIzRjcwOEIwMkNEMi9xckRpdGk5alE0 bFhNTUJVaU9mOFRpYkZHbXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAaXR1SkwSYOQshiAzuXz1Bfj9MzV2kC8EUr0UdINie6kjGNXHBXoWu /s/WrofclBimk6OtXWB2H+7sRnyDaCOVwPvhg+ZuZbl5qkzNXmginb0fYHesep3G rZyFeEiQiXB5xdFV8zCfxO2bd64CvdPk8jxXLU1dgFtqXK7ZaXwtUxUT8x2zDiGZ +A6h6l1raayHaT6YkJOIWBjN7A9dtDtaFtCNFtJOKkpy1xzUa7gGk4inH/lvvd2P Hu1ONH+1H1K9aBHCUhVdNEtwvYhrRfiYPZ1axUeB3RnIrvGalIf91hC8LW5NmXcB 57bdp0lE/hO5RTOYKiQWsTKrMg5OEOmE -----END CERTIFICATE-----Generated at Sun Jun 15 19:17:26 2025 by rpki-client