$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF1D9/E37F13822A6C11EC95EB263FC4F9AE02/Q-SoHdWUZzBR6Mfgsa29McSDtlM.mft File: Q-SoHdWUZzBR6Mfgsa29McSDtlM.mft (raw, json) Hash identifier: UPio0AaGmbTpWOTxPLjKwRBc6Nz/Kb6Ltw4WN9yP4x0= Subject key identifier: E9:FC:53:18:EA:0A:E2:B0:5F:1B:EB:39:4E:26:D8:EE:E2:0B:FE:A5 Authority key identifier: 43:E4:A8:1D:D5:94:67:30:51:E8:C7:E0:B1:AD:BD:31:C4:83:B6:53 Certificate issuer: /CN=A91DF1D9/serialNumber=43E4A81DD594673051E8C7E0B1ADBD31C483B653 Certificate serial: 04CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-SoHdWUZzBR6Mfgsa29McSDtlM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF1D9/E37F13822A6C11EC95EB263FC4F9AE02/Q-SoHdWUZzBR6Mfgsa29McSDtlM.mft Manifest number: 04C5 Signing time: Mon 16 Jun 2025 23:27:01 +0000 Manifest this update: Mon 16 Jun 2025 23:27:01 +0000 Manifest next update: Mon 23 Jun 2025 23:27:01 +0000 Files and hashes: 1: Q-SoHdWUZzBR6Mfgsa29McSDtlM.crl (hash: 9IooveUC4ql/sANa686Gf6+iC1i6Qj/WsRMqQSZOyYs=) 2: 083000C22A6F11EC9AD38840C4F9AE02.roa (hash: vTlreixIyByEZB7kEISmHGr1RyT4p8lVkdEoUi0bgqY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF1D9/E37F13822A6C11EC95EB263FC4F9AE02/Q-SoHdWUZzBR6Mfgsa29McSDtlM.crl rsync://rpki.apnic.net/member_repository/A91DF1D9/E37F13822A6C11EC95EB263FC4F9AE02/Q-SoHdWUZzBR6Mfgsa29McSDtlM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-SoHdWUZzBR6Mfgsa29McSDtlM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 23:27:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1226 (0x4ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF1D9, serialNumber=43E4A81DD594673051E8C7E0B1ADBD31C483B653 Validity Not Before: Jun 16 23:27:01 2025 GMT Not After : Jun 23 23:27:01 2025 GMT Subject: CN=6850a845-63b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:af:89:fe:b3:d7:4d:0a:29:17:7c:d5:cb:7b: e1:42:86:fb:d1:b0:45:5b:19:65:ef:a7:cb:a3:ff: 0a:cf:e4:e1:69:22:af:ca:dc:01:fa:84:da:ab:4b: 67:a0:d8:72:e6:28:ba:0c:3a:3c:21:a6:33:a3:0f: c5:98:f8:a8:67:2b:ba:31:e5:e1:15:d3:b7:2e:e4: 4f:6f:2a:c8:ac:58:84:fe:48:72:ea:e2:c9:40:99: 8c:3c:f1:d3:2e:d9:a4:01:61:c7:5c:4e:9b:61:06: 46:d8:77:6d:0b:d8:08:4f:1f:45:cc:a1:e2:20:57: 3b:c8:54:f7:02:00:2f:47:c4:e2:07:f3:87:17:13: d9:17:26:52:ff:80:70:44:85:b1:2d:03:f5:04:55: cd:5d:9e:06:d0:02:c7:09:d0:a6:50:53:13:bf:f3: 85:2b:1a:1f:3e:e9:2b:02:a9:64:40:a7:8d:2d:d1: 4d:40:20:78:47:fa:e0:9f:66:0e:23:a1:89:d1:43: 20:7d:b8:0a:2a:94:d2:b9:7a:05:60:ba:77:87:7a: d2:41:02:26:d2:88:40:f6:5c:43:0d:03:9c:46:bb: cd:26:a9:5a:98:30:e8:87:91:ee:76:d4:b7:04:bb: b6:ec:53:08:af:91:d8:98:c4:dc:31:59:fc:5b:ad: f0:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:FC:53:18:EA:0A:E2:B0:5F:1B:EB:39:4E:26:D8:EE:E2:0B:FE:A5 X509v3 Authority Key Identifier: keyid:43:E4:A8:1D:D5:94:67:30:51:E8:C7:E0:B1:AD:BD:31:C4:83:B6:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF1D9/E37F13822A6C11EC95EB263FC4F9AE02/Q-SoHdWUZzBR6Mfgsa29McSDtlM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-SoHdWUZzBR6Mfgsa29McSDtlM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF1D9/E37F13822A6C11EC95EB263FC4F9AE02/Q-SoHdWUZzBR6Mfgsa29McSDtlM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:d3:3b:9b:fc:e9:5c:7c:29:e1:ab:99:6f:d3:fd:33:54:6c: 67:6f:97:e2:77:e4:61:00:de:44:71:35:9d:dd:b0:3d:17:b2: 4a:95:16:bf:06:a7:87:53:dc:2d:ad:75:ac:65:e5:10:9f:23: 23:f5:f6:94:46:47:38:1f:a7:57:dd:99:8d:ca:74:3d:be:52: 09:61:92:9d:9b:f1:78:66:10:78:7f:fa:8f:02:89:b8:87:c5: bd:4c:8e:0b:6d:3e:4f:b1:90:89:04:47:a0:80:b9:cf:12:5f: 7f:29:21:23:b5:a9:40:bf:5e:44:50:98:aa:cf:a8:24:a1:13: 64:7a:22:c6:d8:8f:91:ce:c1:e2:63:00:2c:47:6c:5c:f9:9f: ec:44:d1:9c:c0:df:f3:07:94:46:43:c8:ac:61:bb:81:88:db: 1d:26:b8:1d:55:ac:36:ef:92:c0:48:22:7a:0b:91:b8:52:53: 1a:aa:de:53:28:63:30:c4:02:f6:4f:13:d4:fd:4a:5f:66:ff: 74:a4:03:96:c8:38:94:85:ee:d6:a1:61:e3:cc:f5:9d:06:e7: 2c:49:6e:c5:85:7a:d9:57:58:ac:d7:26:89:87:1a:01:e8:e3: db:eb:73:ce:2c:d5:5c:2d:1e:c6:e7:f2:03:d6:bd:fa:5f:be: 1f:40:79:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBMowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REYxRDkxMTAvBgNVBAUTKDQzRTRBODFERDU5NDY3MzA1MUU4QzdFMEIxQURCRDMx QzQ4M0I2NTMwHhcNMjUwNjE2MjMyNzAxWhcNMjUwNjIzMjMyNzAxWjAYMRYwFAYD VQQDEw02ODUwYTg0NS02M2IwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqa+J/rPXTQopF3zVy3vhQob70bBFWxll76fLo/8Kz+ThaSKvytwB+oTaq0tn oNhy5ii6DDo8IaYzow/FmPioZyu6MeXhFdO3LuRPbyrIrFiE/khy6uLJQJmMPPHT LtmkAWHHXE6bYQZG2HdtC9gITx9FzKHiIFc7yFT3AgAvR8TiB/OHFxPZFyZS/4Bw RIWxLQP1BFXNXZ4G0ALHCdCmUFMTv/OFKxofPukrAqlkQKeNLdFNQCB4R/rgn2YO I6GJ0UMgfbgKKpTSuXoFYLp3h3rSQQIm0ohA9lxDDQOcRrvNJqlamDDoh5HudtS3 BLu27FMIr5HYmMTcMVn8W63wRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOn8Uxjq CuKwXxvrOU4m2O7iC/6lMB8GA1UdIwQYMBaAFEPkqB3VlGcwUejH4LGtvTHEg7ZT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjFEOS9FMzdGMTM4MjJB NkMxMUVDOTVFQjI2M0ZDNEY5QUUwMi9RLVNvSGRXVVp6QlI2TWZnc2EyOU1jU0R0 bE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1EtU29IZFdVWnpCUjZNZmdzYTI5TWNTRHRsTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RjFEOS9FMzdGMTM4MjJBNkMxMUVDOTVFQjI2M0ZDNEY5QUUwMi9RLVNvSGRXVVp6 QlI2TWZnc2EyOU1jU0R0bE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBx0zub/OlcfCnhq5lv0/0zVGxnb5fid+RhAN5EcTWd3bA9F7JKlRa/ BqeHU9wtrXWsZeUQnyMj9faURkc4H6dX3ZmNynQ9vlIJYZKdm/F4ZhB4f/qPAom4 h8W9TI4LbT5PsZCJBEeggLnPEl9/KSEjtalAv15EUJiqz6gkoRNkeiLG2I+RzsHi YwAsR2xc+Z/sRNGcwN/zB5RGQ8isYbuBiNsdJrgdVaw275LASCJ6C5G4UlMaqt5T KGMwxAL2TxPU/UpfZv90pAOWyDiUhe7WoWHjzPWdBucsSW7FhXrZV1is1yaJhxoB 6OPb63POLNVcLR7G5/ID1r36X74fQHlF -----END CERTIFICATE-----Generated at Wed Jun 18 06:35:37 2025 by rpki-client