$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDCB6/F077598ECC3D11EA8BC45C29C4F9AE02/_qFPI_25d6xkidIQbjXgI7KJaNw.mft File: _qFPI_25d6xkidIQbjXgI7KJaNw.mft (raw, json) Hash identifier: YQl2OeLVC3waUWkqNWUFU4H0ekiHWL90v0mjYibvebQ= Subject key identifier: 5D:41:C6:F2:AF:2D:0E:5B:57:E0:30:5A:94:9A:08:3E:D6:85:DE:DE Authority key identifier: FE:A1:4F:23:FD:B9:77:AC:64:89:D2:10:6E:35:E0:23:B2:89:68:DC Certificate issuer: /CN=A91DDCB6/serialNumber=FEA14F23FDB977AC6489D2106E35E023B28968DC Certificate serial: 0886 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_qFPI_25d6xkidIQbjXgI7KJaNw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DDCB6/F077598ECC3D11EA8BC45C29C4F9AE02/_qFPI_25d6xkidIQbjXgI7KJaNw.mft Manifest number: 086E Signing time: Thu 12 Jun 2025 20:28:05 +0000 Manifest this update: Thu 12 Jun 2025 20:28:05 +0000 Manifest next update: Thu 19 Jun 2025 20:28:05 +0000 Files and hashes: 1: _qFPI_25d6xkidIQbjXgI7KJaNw.crl (hash: 5ZYG6nYFA88BMAUODc/JDh1FfkMpUhfT7KtxEU9UaCw=) 2: 9CB5878688DD11ECAC36C11FC4F9AE02.roa (hash: AdjuOXYS3zA7izh/H5q+WmUmDKawZvVShn5CM75yFQs=) 3: 2086256888B911ECAC54E716C4F9AE02.roa (hash: /smgLTvvzRlAwFgnnrG53rcZxe+TUuxudK7zpLwd5hk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DDCB6/F077598ECC3D11EA8BC45C29C4F9AE02/_qFPI_25d6xkidIQbjXgI7KJaNw.crl rsync://rpki.apnic.net/member_repository/A91DDCB6/F077598ECC3D11EA8BC45C29C4F9AE02/_qFPI_25d6xkidIQbjXgI7KJaNw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_qFPI_25d6xkidIQbjXgI7KJaNw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 20:28:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2182 (0x886) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DDCB6, serialNumber=FEA14F23FDB977AC6489D2106E35E023B28968DC Validity Not Before: Jun 12 20:28:05 2025 GMT Not After : Jun 19 20:28:05 2025 GMT Subject: CN=684b3855-12e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:52:5f:fa:5a:b0:ff:af:9b:3f:ab:6d:72:30: 42:ab:ed:e2:f8:88:75:c3:4f:c0:e0:ca:59:a9:11: c4:38:40:73:4b:36:bd:a0:2f:5b:3b:56:73:8c:2f: cf:1f:61:79:12:55:bd:c3:d9:1d:c4:a4:21:b0:1c: 19:78:4f:0b:ea:c3:2c:6d:80:d2:69:5d:cf:12:6d: 91:66:57:cc:66:2c:04:77:a8:59:19:65:04:5b:f4: a7:02:08:cf:b8:d4:55:ba:10:95:5f:e8:67:78:32: d3:72:51:ed:d2:a3:4f:7b:e1:3a:67:e4:4b:5e:c4: 4e:49:96:39:13:d1:96:f2:80:23:93:ad:09:f1:ed: 7a:b3:e4:ef:32:97:c6:d3:90:a9:b0:87:85:0a:53: b6:73:f2:85:bd:6c:fc:ca:b4:5b:53:0c:2e:2b:4a: 93:4b:5a:f2:c8:3c:5c:a6:2b:78:c6:d7:b2:50:6b: 2d:45:47:3c:6e:4f:55:fe:da:5f:2a:8a:4f:bb:50: a8:19:9f:24:67:24:92:46:a8:b0:38:65:a6:0e:8f: ee:09:dc:95:85:ba:42:b5:25:16:8b:41:15:24:bc: c0:4d:00:bb:29:4a:f8:4e:f5:b7:2d:2b:c7:71:2b: 76:ab:29:b3:90:a1:f4:71:14:11:3e:17:68:dd:45: ca:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:41:C6:F2:AF:2D:0E:5B:57:E0:30:5A:94:9A:08:3E:D6:85:DE:DE X509v3 Authority Key Identifier: keyid:FE:A1:4F:23:FD:B9:77:AC:64:89:D2:10:6E:35:E0:23:B2:89:68:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/F077598ECC3D11EA8BC45C29C4F9AE02/_qFPI_25d6xkidIQbjXgI7KJaNw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_qFPI_25d6xkidIQbjXgI7KJaNw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/F077598ECC3D11EA8BC45C29C4F9AE02/_qFPI_25d6xkidIQbjXgI7KJaNw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:b0:60:44:58:1c:36:12:0b:ec:64:08:8c:07:d5:a6:98:4d: eb:24:26:92:9e:f0:fe:20:25:e5:8c:53:ea:2f:79:6d:cf:b3: 3f:5f:7c:0a:64:85:67:c3:a1:b4:e4:88:db:d0:e4:e1:d6:7a: 07:48:b9:d1:d2:3d:05:4f:5d:b0:5e:94:63:dc:6b:0a:f0:8e: df:c5:22:98:4d:4c:3a:77:11:49:a9:f2:50:58:45:e9:d0:26: 55:1c:15:26:13:45:a2:22:29:00:08:b5:c2:f3:8c:7d:01:b1: 66:a0:7b:e3:1f:85:4a:ba:5e:fd:7d:06:85:8b:49:c9:a6:6d: a9:21:bc:73:10:62:3a:5a:b2:d7:bf:02:24:fc:06:ed:c8:24: c9:91:5b:dc:57:5a:e4:03:e6:4a:bc:9b:14:67:b3:65:c4:15: 07:64:28:01:74:56:44:a3:0a:e2:ea:59:93:fd:67:9f:f4:4e: 12:1d:aa:8b:57:a1:1f:25:48:24:4b:0a:3d:de:9b:de:48:1d: 66:87:93:9a:0d:2b:01:0c:95:46:2b:d0:23:ea:e1:5d:57:c4: d5:fb:46:1a:68:86:42:62:b1:79:fa:bf:94:14:a5:76:94:9e: 44:c0:07:f7:6e:d7:01:69:29:25:19:cb:a9:00:61:8a:8b:42: 94:1c:88:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCIYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RERDQjYxMTAvBgNVBAUTKEZFQTE0RjIzRkRCOTc3QUM2NDg5RDIxMDZFMzVFMDIz QjI4OTY4REMwHhcNMjUwNjEyMjAyODA1WhcNMjUwNjE5MjAyODA1WjAYMRYwFAYD VQQDEw02ODRiMzg1NS0xMmU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuVJf+lqw/6+bP6ttcjBCq+3i+Ih1w0/A4MpZqRHEOEBzSza9oC9bO1ZzjC/P H2F5ElW9w9kdxKQhsBwZeE8L6sMsbYDSaV3PEm2RZlfMZiwEd6hZGWUEW/SnAgjP uNRVuhCVX+hneDLTclHt0qNPe+E6Z+RLXsROSZY5E9GW8oAjk60J8e16s+TvMpfG 05CpsIeFClO2c/KFvWz8yrRbUwwuK0qTS1ryyDxcpit4xteyUGstRUc8bk9V/tpf KopPu1CoGZ8kZySSRqiwOGWmDo/uCdyVhbpCtSUWi0EVJLzATQC7KUr4TvW3LSvH cSt2qymzkKH0cRQRPhdo3UXKxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF1BxvKv LQ5bV+AwWpSaCD7Whd7eMB8GA1UdIwQYMBaAFP6hTyP9uXesZInSEG414COyiWjc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERENCNi9GMDc3NTk4RUND M0QxMUVBOEJDNDVDMjlDNEY5QUUwMi9fcUZQSV8yNWQ2eGtpZElRYmpYZ0k3S0ph TncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19xRlBJXzI1ZDZ4a2lkSVFialhnSTdLSmFOdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RENCNi9GMDc3NTk4RUNDM0QxMUVBOEJDNDVDMjlDNEY5QUUwMi9fcUZQSV8yNWQ2 eGtpZElRYmpYZ0k3S0phTncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXsGBEWBw2EgvsZAiMB9WmmE3rJCaSnvD+ICXljFPqL3ltz7M/X3wK ZIVnw6G05Ijb0OTh1noHSLnR0j0FT12wXpRj3GsK8I7fxSKYTUw6dxFJqfJQWEXp 0CZVHBUmE0WiIikACLXC84x9AbFmoHvjH4VKul79fQaFi0nJpm2pIbxzEGI6WrLX vwIk/AbtyCTJkVvcV1rkA+ZKvJsUZ7NlxBUHZCgBdFZEowri6lmT/Wef9E4SHaqL V6EfJUgkSwo93pveSB1mh5OaDSsBDJVGK9Aj6uFdV8TV+0YaaIZCYrF5+r+UFKV2 lJ5EwAf3btcBaSklGcupAGGKi0KUHIhK -----END CERTIFICATE-----Generated at Sat Jun 14 18:52:56 2025 by rpki-client