$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDD3F/C1A47FD895AF11E6B7854371C4F9AE02/p-QTTZsR3qt1sReR1V450XROC_E.mft File: p-QTTZsR3qt1sReR1V450XROC_E.mft (raw, json) Hash identifier: L2IrzZVejNvfJBNfXgJos7ADJ706tyxxDGRiF9pX2R8= Subject key identifier: 34:82:1F:4C:05:A2:82:4A:C7:40:95:9D:EA:6A:BB:A4:A0:6D:4B:B5 Authority key identifier: A7:E4:13:4D:9B:11:DE:AB:75:B1:17:91:D5:5E:39:D1:74:4E:0B:F1 Certificate issuer: /CN=A91DDD3F/serialNumber=A7E4134D9B11DEAB75B11791D55E39D1744E0BF1 Certificate serial: 1DD2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-QTTZsR3qt1sReR1V450XROC_E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DDD3F/C1A47FD895AF11E6B7854371C4F9AE02/p-QTTZsR3qt1sReR1V450XROC_E.mft Manifest number: 1DC9 Signing time: Sat 14 Jun 2025 16:04:38 +0000 Manifest this update: Sat 14 Jun 2025 16:04:38 +0000 Manifest next update: Sat 21 Jun 2025 16:04:38 +0000 Files and hashes: 1: p-QTTZsR3qt1sReR1V450XROC_E.crl (hash: +goTEZ2figa40RQw04FYxOZXE9FjnZCc0xIVXk9YMu4=) 2: AE58A24695B011E696EFE472C4F9AE02.roa (hash: iaqQr5dNZ60TDLIhN3MftiKcnJuy69N4C5+umHfRLFA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DDD3F/C1A47FD895AF11E6B7854371C4F9AE02/p-QTTZsR3qt1sReR1V450XROC_E.crl rsync://rpki.apnic.net/member_repository/A91DDD3F/C1A47FD895AF11E6B7854371C4F9AE02/p-QTTZsR3qt1sReR1V450XROC_E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-QTTZsR3qt1sReR1V450XROC_E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 16:04:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7634 (0x1dd2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DDD3F, serialNumber=A7E4134D9B11DEAB75B11791D55E39D1744E0BF1 Validity Not Before: Jun 14 16:04:38 2025 GMT Not After : Jun 21 16:04:38 2025 GMT Subject: CN=684d9d96-9b94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:9d:d7:68:77:ea:ad:a8:cf:34:a6:66:ec:5b: e9:d0:3c:9a:41:29:f2:5b:4b:71:03:df:52:4d:a9: 90:bb:d7:a7:0b:02:3d:1c:27:4c:6f:f7:e7:55:5d: 65:54:31:3f:fa:25:04:94:fc:02:52:b7:c5:c9:df: c8:fc:12:59:95:05:72:f9:f8:60:63:85:72:da:1a: 17:6a:80:c9:95:c2:ab:13:1a:40:c4:90:f3:6e:a3: 66:ba:63:48:b1:95:94:3b:29:9f:48:4c:d6:a1:a0: 85:8a:66:b4:bb:3d:cf:96:6b:f6:c5:a2:56:d1:e4: ac:47:1a:ba:9a:53:6e:ee:f2:cc:01:0e:78:da:f3: a7:67:83:0e:56:0d:19:63:22:5d:e8:f7:8b:44:1a: 54:3a:d8:0f:31:d4:0c:75:aa:15:3d:cd:40:c3:bc: b6:03:0e:fd:f7:47:ea:58:50:7f:97:99:66:e2:92: 27:fc:94:4e:71:81:1d:24:f4:27:33:b1:d1:7d:4b: 13:46:da:2e:e6:c7:1f:aa:74:8a:1f:63:32:58:71: ad:c7:e1:b4:86:89:1e:4f:59:82:ef:62:2c:2e:d6: f2:9b:a2:9c:73:54:9c:78:ab:6b:bf:f8:57:16:d5: 34:d0:7c:76:c0:ca:eb:24:db:c6:02:88:3d:e9:fa: 4f:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:82:1F:4C:05:A2:82:4A:C7:40:95:9D:EA:6A:BB:A4:A0:6D:4B:B5 X509v3 Authority Key Identifier: keyid:A7:E4:13:4D:9B:11:DE:AB:75:B1:17:91:D5:5E:39:D1:74:4E:0B:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DDD3F/C1A47FD895AF11E6B7854371C4F9AE02/p-QTTZsR3qt1sReR1V450XROC_E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-QTTZsR3qt1sReR1V450XROC_E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDD3F/C1A47FD895AF11E6B7854371C4F9AE02/p-QTTZsR3qt1sReR1V450XROC_E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:79:b4:85:8d:30:f4:b9:33:d0:4c:49:a6:1c:ed:07:56:90: 3e:91:f3:56:c1:3b:4e:fa:d8:df:d3:3d:47:86:99:4c:c1:b5: 79:fa:b0:57:65:a2:ca:99:0f:0c:3a:45:38:28:b4:0c:5e:fc: 9e:dc:c4:de:f2:90:9d:54:79:48:f3:6f:0b:e2:d7:67:2c:54: 31:dd:9b:83:5f:31:89:fb:8e:1a:c9:d3:2d:66:c1:b9:50:e7: 6f:de:9f:e7:a0:53:a9:5c:e6:e4:f3:3e:cb:79:4f:6a:5e:9d: 6b:4a:99:a2:4d:84:2b:b0:c5:16:58:c2:93:e9:d9:ca:88:6b: 85:62:15:93:b6:23:02:bb:96:1c:a4:cc:49:f6:f9:08:82:e1: 05:fa:77:1d:27:46:33:a7:5f:2f:38:8a:2c:55:a3:d3:78:84: cf:7b:ec:ed:42:ea:09:8d:9c:29:55:85:05:81:97:79:3d:ff: 07:d9:2c:00:24:24:4c:4b:f9:77:24:62:c2:21:ec:3d:c1:10: f6:d4:e5:15:25:46:17:17:06:6b:dd:cf:8e:95:16:11:90:5f: ae:e6:92:c1:40:e6:95:4c:1c:c0:41:10:b7:04:cd:f8:78:71: f0:38:f4:13:5e:37:09:71:bc:6f:7f:eb:4b:29:fb:4a:eb:37: 11:d5:3a:8a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHdIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REREM0YxMTAvBgNVBAUTKEE3RTQxMzREOUIxMURFQUI3NUIxMTc5MUQ1NUUzOUQx NzQ0RTBCRjEwHhcNMjUwNjE0MTYwNDM4WhcNMjUwNjIxMTYwNDM4WjAYMRYwFAYD VQQDEw02ODRkOWQ5Ni05Yjk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtZ3XaHfqrajPNKZm7Fvp0DyaQSnyW0txA99STamQu9enCwI9HCdMb/fnVV1l VDE/+iUElPwCUrfFyd/I/BJZlQVy+fhgY4Vy2hoXaoDJlcKrExpAxJDzbqNmumNI sZWUOymfSEzWoaCFima0uz3Plmv2xaJW0eSsRxq6mlNu7vLMAQ542vOnZ4MOVg0Z YyJd6PeLRBpUOtgPMdQMdaoVPc1Aw7y2Aw7990fqWFB/l5lm4pIn/JROcYEdJPQn M7HRfUsTRtou5scfqnSKH2MyWHGtx+G0hokeT1mC72IsLtbym6Kcc1SceKtrv/hX FtU00Hx2wMrrJNvGAog96fpPzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDSCH0wF ooJKx0CVnepqu6SgbUu1MB8GA1UdIwQYMBaAFKfkE02bEd6rdbEXkdVeOdF0Tgvx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEREQzRi9DMUE0N0ZEODk1 QUYxMUU2Qjc4NTQzNzFDNEY5QUUwMi9wLVFUVFpzUjNxdDFzUmVSMVY0NTBYUk9D X0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3AtUVRUWnNSM3F0MXNSZVIxVjQ1MFhST0NfRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE REQzRi9DMUE0N0ZEODk1QUYxMUU2Qjc4NTQzNzFDNEY5QUUwMi9wLVFUVFpzUjNx dDFzUmVSMVY0NTBYUk9DX0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8ebSFjTD0uTPQTEmmHO0HVpA+kfNWwTtO+tjf0z1HhplMwbV5+rBX ZaLKmQ8MOkU4KLQMXvye3MTe8pCdVHlI828L4tdnLFQx3ZuDXzGJ+44aydMtZsG5 UOdv3p/noFOpXObk8z7LeU9qXp1rSpmiTYQrsMUWWMKT6dnKiGuFYhWTtiMCu5Yc pMxJ9vkIguEF+ncdJ0Yzp18vOIosVaPTeITPe+ztQuoJjZwpVYUFgZd5Pf8H2SwA JCRMS/l3JGLCIew9wRD21OUVJUYXFwZr3c+OlRYRkF+u5pLBQOaVTBzAQRC3BM34 eHHwOPQTXjcJcbxvf+tLKftK6zcR1TqK -----END CERTIFICATE-----Generated at Mon Jun 16 04:16:39 2025 by rpki-client