$ rpki-client -vvf rpki.apnic.net/member_repository/A91E237A/E882E46C5BA011EBAEBE5329C4F9AE02/qSMgEvL8BUJsBog1jP5vuRVHhrw.mft File: qSMgEvL8BUJsBog1jP5vuRVHhrw.mft (raw, json) Hash identifier: OLFxa4Ls5AoAdvv7ibRzDVJ8eTic9KTBsvrjiSFmKyY= Subject key identifier: 32:56:16:FD:4D:5B:57:F5:D8:C8:4D:C4:38:3F:61:75:10:57:2A:68 Authority key identifier: A9:23:20:12:F2:FC:05:42:6C:06:88:35:8C:FE:6F:B9:15:47:86:BC Certificate issuer: /CN=A91E237A/serialNumber=A9232012F2FC05426C0688358CFE6FB9154786BC Certificate serial: 06D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSMgEvL8BUJsBog1jP5vuRVHhrw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E237A/E882E46C5BA011EBAEBE5329C4F9AE02/qSMgEvL8BUJsBog1jP5vuRVHhrw.mft Manifest number: 06CC Signing time: Thu 12 Jun 2025 21:44:05 +0000 Manifest this update: Thu 12 Jun 2025 21:44:04 +0000 Manifest next update: Thu 19 Jun 2025 21:44:04 +0000 Files and hashes: 1: qSMgEvL8BUJsBog1jP5vuRVHhrw.crl (hash: VCN043UAESd/x0jZu8IrsUy5HQ3g25WjE9IFUdD9SI0=) 2: 5E7BBD38259A11ECB37EA938C4F9AE02.roa (hash: FRIMYZ0ymb4xNk4HDg1e5QrcA1pECIMjsb8IPP33VK0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E237A/E882E46C5BA011EBAEBE5329C4F9AE02/qSMgEvL8BUJsBog1jP5vuRVHhrw.crl rsync://rpki.apnic.net/member_repository/A91E237A/E882E46C5BA011EBAEBE5329C4F9AE02/qSMgEvL8BUJsBog1jP5vuRVHhrw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSMgEvL8BUJsBog1jP5vuRVHhrw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 21:44:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1745 (0x6d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E237A, serialNumber=A9232012F2FC05426C0688358CFE6FB9154786BC Validity Not Before: Jun 12 21:44:04 2025 GMT Not After : Jun 19 21:44:04 2025 GMT Subject: CN=684b4a25-8cbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:cc:79:01:87:0d:50:61:9d:fd:72:bc:9f:4d: 01:92:81:74:7d:6a:3a:0e:2c:3b:7c:c4:b6:9e:f4: b8:a6:81:9c:26:b7:7a:ab:cd:8e:a1:85:98:2d:8f: 95:38:c3:b6:03:b2:5b:a1:c5:db:d5:df:11:1d:56: d6:e4:8e:f3:82:88:a9:d4:cd:f1:6f:e4:49:2c:e5: f5:29:2d:85:3a:ec:e6:d3:bf:97:ee:29:f0:6e:a6: 09:84:c3:8d:af:dd:99:54:e4:76:e2:e9:32:9c:7d: f2:c1:06:33:f9:45:3d:94:89:b8:4c:00:fa:7b:3d: 94:b4:77:77:8a:33:07:37:6e:80:7a:60:02:12:3e: 89:41:a8:28:9d:47:73:b0:4d:82:b4:c1:40:e6:87: 2b:02:ed:0f:93:14:da:cc:44:bd:ce:88:3d:9d:61: 4d:c8:53:36:19:c3:8d:72:35:07:d9:b0:58:4f:1b: 17:af:94:c8:a5:68:68:0b:9d:8d:f8:d9:38:34:49: 83:40:c0:92:e4:85:5b:59:04:1e:ae:f0:55:36:43: 81:62:34:61:61:d9:d9:8f:c9:c3:cf:25:84:da:cf: b5:08:27:b9:3a:04:d2:d8:73:85:f4:8e:f1:dc:84: 06:b5:d0:e5:17:5f:d3:53:00:79:86:16:5f:99:63: a2:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:56:16:FD:4D:5B:57:F5:D8:C8:4D:C4:38:3F:61:75:10:57:2A:68 X509v3 Authority Key Identifier: keyid:A9:23:20:12:F2:FC:05:42:6C:06:88:35:8C:FE:6F:B9:15:47:86:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E237A/E882E46C5BA011EBAEBE5329C4F9AE02/qSMgEvL8BUJsBog1jP5vuRVHhrw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSMgEvL8BUJsBog1jP5vuRVHhrw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E237A/E882E46C5BA011EBAEBE5329C4F9AE02/qSMgEvL8BUJsBog1jP5vuRVHhrw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:a9:14:6c:3e:1c:e8:cc:32:b0:8f:ab:96:a1:d1:0a:0f:6e: 0d:61:aa:c4:13:c4:67:19:b6:d1:f8:ac:7c:af:e5:37:8c:f7: 52:0e:bc:fe:92:66:6b:2a:66:e4:3f:f4:4a:e7:9d:dc:57:48: 8a:87:f9:7b:80:97:7d:ac:6b:31:cb:a0:46:69:b5:5c:3f:1c: 4f:0c:92:9f:9c:5f:f2:8e:95:6c:e2:7d:43:55:a3:68:bc:61: b5:50:3a:28:3e:ad:34:65:06:73:e2:a8:ec:bc:a7:d7:4b:97: fa:f4:f7:04:85:07:4c:96:d1:7d:b9:0e:e3:95:8d:a4:00:69: cb:b9:6c:b7:11:a4:38:22:ef:9b:89:4d:49:79:ef:ec:8b:4f: 45:73:9f:98:cd:0f:9e:08:6d:64:10:8c:db:63:8a:2f:0f:41: c2:20:c8:d4:88:03:cd:41:2c:75:72:0c:c8:a8:f8:c9:26:1e: da:6a:2d:9f:20:34:ae:bc:03:ba:45:a0:76:34:64:cd:5b:91: 1d:b7:2d:1f:f7:15:c2:91:47:e4:6b:32:fb:12:f2:e1:79:fc: d2:6e:28:9e:41:2b:f6:1f:85:4b:d4:92:43:38:35:56:3e:69: 9f:c5:b4:2a:39:ac:09:fa:96:d8:c3:62:e0:78:9d:73:e1:1e: 06:eb:82:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBtEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTIzN0ExMTAvBgNVBAUTKEE5MjMyMDEyRjJGQzA1NDI2QzA2ODgzNThDRkU2RkI5 MTU0Nzg2QkMwHhcNMjUwNjEyMjE0NDA0WhcNMjUwNjE5MjE0NDA0WjAYMRYwFAYD VQQDEw02ODRiNGEyNS04Y2JjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA08x5AYcNUGGd/XK8n00BkoF0fWo6Diw7fMS2nvS4poGcJrd6q82OoYWYLY+V OMO2A7JbocXb1d8RHVbW5I7zgoip1M3xb+RJLOX1KS2FOuzm07+X7inwbqYJhMON r92ZVOR24ukynH3ywQYz+UU9lIm4TAD6ez2UtHd3ijMHN26AemACEj6JQagonUdz sE2CtMFA5ocrAu0PkxTazES9zog9nWFNyFM2GcONcjUH2bBYTxsXr5TIpWhoC52N +Nk4NEmDQMCS5IVbWQQervBVNkOBYjRhYdnZj8nDzyWE2s+1CCe5OgTS2HOF9I7x 3IQGtdDlF1/TUwB5hhZfmWOikwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDJWFv1N W1f12MhNxDg/YXUQVypoMB8GA1UdIwQYMBaAFKkjIBLy/AVCbAaINYz+b7kVR4a8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjM3QS9FODgyRTQ2QzVC QTAxMUVCQUVCRTUzMjlDNEY5QUUwMi9xU01nRXZMOEJVSnNCb2cxalA1dnVSVkho cncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FTTWdFdkw4QlVKc0JvZzFqUDV2dVJWSGhydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjM3QS9FODgyRTQ2QzVCQTAxMUVCQUVCRTUzMjlDNEY5QUUwMi9xU01nRXZMOEJV SnNCb2cxalA1dnVSVkhocncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBiqRRsPhzozDKwj6uWodEKD24NYarEE8RnGbbR+Kx8r+U3jPdSDrz+ kmZrKmbkP/RK553cV0iKh/l7gJd9rGsxy6BGabVcPxxPDJKfnF/yjpVs4n1DVaNo vGG1UDooPq00ZQZz4qjsvKfXS5f69PcEhQdMltF9uQ7jlY2kAGnLuWy3EaQ4Iu+b iU1Jee/si09Fc5+YzQ+eCG1kEIzbY4ovD0HCIMjUiAPNQSx1cgzIqPjJJh7aai2f IDSuvAO6RaB2NGTNW5Edty0f9xXCkUfkazL7EvLhefzSbiieQSv2H4VL1JJDODVW PmmfxbQqOawJ+pbYw2LgeJ1z4R4G64JX -----END CERTIFICATE-----Generated at Sat Jun 14 18:52:15 2025 by rpki-client