$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4519/0426491E8CAE11EBAA1B1F5EC4F9AE02/qadVVe1wZy9x1S9lk7kbRCC6pws.mft File: qadVVe1wZy9x1S9lk7kbRCC6pws.mft (raw, json) Hash identifier: 7DxmTq5Mmg2witp6GNdCPh0QcaxCowLRX2lL1uwdeRw= Subject key identifier: 71:F7:A8:54:19:58:1D:BC:85:63:7F:5F:EB:7B:8E:3C:85:FA:65:52 Authority key identifier: A9:A7:55:55:ED:70:67:2F:71:D5:2F:65:93:B9:1B:44:20:BA:A7:0B Certificate issuer: /CN=A91E4519/serialNumber=A9A75555ED70672F71D52F6593B91B4420BAA70B Certificate serial: 0652 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qadVVe1wZy9x1S9lk7kbRCC6pws.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4519/0426491E8CAE11EBAA1B1F5EC4F9AE02/qadVVe1wZy9x1S9lk7kbRCC6pws.mft Manifest number: 064D Signing time: Thu 12 Jun 2025 22:12:10 +0000 Manifest this update: Thu 12 Jun 2025 22:12:10 +0000 Manifest next update: Thu 19 Jun 2025 22:12:10 +0000 Files and hashes: 1: qadVVe1wZy9x1S9lk7kbRCC6pws.crl (hash: gNBmofGbWOpiVdrvYoQYSj+nknnUaVBFEp7TM9Vrilk=) 2: C2B5BE908CAF11EBBADF6F60C4F9AE02.roa (hash: Tp6yV6aNCHUMLxFxEsezUBZI5iOsrCF8OtHjSK1vpw0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4519/0426491E8CAE11EBAA1B1F5EC4F9AE02/qadVVe1wZy9x1S9lk7kbRCC6pws.crl rsync://rpki.apnic.net/member_repository/A91E4519/0426491E8CAE11EBAA1B1F5EC4F9AE02/qadVVe1wZy9x1S9lk7kbRCC6pws.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qadVVe1wZy9x1S9lk7kbRCC6pws.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 22:12:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1618 (0x652) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4519, serialNumber=A9A75555ED70672F71D52F6593B91B4420BAA70B Validity Not Before: Jun 12 22:12:10 2025 GMT Not After : Jun 19 22:12:10 2025 GMT Subject: CN=684b50ba-146d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:ca:88:01:c8:24:7b:38:6c:21:ad:e4:68:7e: 60:14:80:de:6c:ca:4a:ef:77:7e:f5:30:54:b3:4f: cc:de:ef:32:45:af:cb:d9:39:70:bd:45:f7:2a:0b: 1f:d2:5e:b4:62:95:7f:9d:ef:34:c5:79:c5:b0:4a: 8f:59:96:66:4d:46:28:0a:71:2c:75:6d:7d:33:ea: c4:79:d7:9d:46:50:ff:7d:31:17:f4:78:db:a1:a7: 2d:81:0d:6a:43:e9:a0:dc:70:77:85:b4:dc:7f:84: f3:ec:22:42:d0:5f:b2:74:d9:0d:75:9c:7a:43:cf: 06:6e:9d:e9:57:28:b4:b7:81:1a:9e:90:ff:68:e5: 47:2c:a9:21:45:51:62:27:39:08:82:bb:b9:f2:cb: 2f:ab:0d:05:3b:42:5e:1a:db:47:8e:75:61:06:c5: 9b:52:a3:c1:97:39:3b:40:e4:dd:d7:43:91:c5:a5: fb:71:e0:81:66:c2:6a:6d:7c:01:e2:79:85:a7:91: 8d:31:ef:5e:59:95:02:9e:f1:62:7b:80:01:a9:79: 76:e9:60:5e:f0:2f:39:d9:79:80:5c:8c:82:9e:03: 08:ba:8e:7a:b7:94:03:4d:9d:4f:c6:bb:37:27:ad: b5:e9:7e:1f:04:93:cb:01:9b:be:1d:da:27:d3:ca: bc:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:F7:A8:54:19:58:1D:BC:85:63:7F:5F:EB:7B:8E:3C:85:FA:65:52 X509v3 Authority Key Identifier: keyid:A9:A7:55:55:ED:70:67:2F:71:D5:2F:65:93:B9:1B:44:20:BA:A7:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4519/0426491E8CAE11EBAA1B1F5EC4F9AE02/qadVVe1wZy9x1S9lk7kbRCC6pws.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qadVVe1wZy9x1S9lk7kbRCC6pws.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4519/0426491E8CAE11EBAA1B1F5EC4F9AE02/qadVVe1wZy9x1S9lk7kbRCC6pws.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:ca:53:4a:30:7c:3c:13:93:7f:0d:7f:e1:6e:ec:a8:99:9a: 49:e8:15:c1:58:ee:b4:63:18:23:34:28:e6:48:08:57:da:b6: 56:1d:da:2e:10:08:cb:d8:30:79:79:48:81:04:d2:2f:3e:af: 60:c1:15:9e:44:9e:4b:1d:08:19:53:b2:59:64:ed:cb:d9:c3: ba:c5:16:4e:25:d4:b6:47:83:12:27:04:67:2d:86:d5:7e:d0: 51:c1:35:f4:ea:00:bb:2c:39:22:64:87:3e:3f:07:2f:45:2e: da:89:28:9c:7c:cf:26:36:1d:10:f7:c2:6c:eb:e0:9c:93:1d: 00:92:a6:5c:79:8b:e3:fc:f8:52:7b:58:a2:59:8b:71:3b:25: a0:02:f5:9e:86:85:e3:14:60:f3:e7:b3:8d:16:a6:de:93:e9: ce:e6:32:d8:f1:3d:89:22:c8:9d:d3:45:03:8d:50:48:9a:06: 19:e1:17:b6:0b:e7:96:bd:c7:e1:6d:b2:cf:a6:70:c2:40:7d: 97:46:48:7b:26:5c:c4:dc:57:08:b2:47:cc:57:d3:96:9f:f6: 04:eb:36:ec:08:dd:f9:d3:50:a5:9a:22:16:47:45:ce:9e:1f: f0:a2:15:26:c1:bf:e4:04:3a:3c:59:2f:da:2b:c8:e4:8b:73: 64:09:0a:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBlIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQ1MTkxMTAvBgNVBAUTKEE5QTc1NTU1RUQ3MDY3MkY3MUQ1MkY2NTkzQjkxQjQ0 MjBCQUE3MEIwHhcNMjUwNjEyMjIxMjEwWhcNMjUwNjE5MjIxMjEwWjAYMRYwFAYD VQQDEw02ODRiNTBiYS0xNDZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA38qIAcgkezhsIa3kaH5gFIDebMpK73d+9TBUs0/M3u8yRa/L2TlwvUX3Kgsf 0l60YpV/ne80xXnFsEqPWZZmTUYoCnEsdW19M+rEededRlD/fTEX9HjboactgQ1q Q+mg3HB3hbTcf4Tz7CJC0F+ydNkNdZx6Q88Gbp3pVyi0t4EanpD/aOVHLKkhRVFi JzkIgru58ssvqw0FO0JeGttHjnVhBsWbUqPBlzk7QOTd10ORxaX7ceCBZsJqbXwB 4nmFp5GNMe9eWZUCnvFie4ABqXl26WBe8C852XmAXIyCngMIuo56t5QDTZ1Pxrs3 J6216X4fBJPLAZu+Hdon08q8uQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHH3qFQZ WB28hWN/X+t7jjyF+mVSMB8GA1UdIwQYMBaAFKmnVVXtcGcvcdUvZZO5G0QguqcL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDUxOS8wNDI2NDkxRThD QUUxMUVCQUExQjFGNUVDNEY5QUUwMi9xYWRWVmUxd1p5OXgxUzlsazdrYlJDQzZw d3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FhZFZWZTF3Wnk5eDFTOWxrN2tiUkNDNnB3cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NDUxOS8wNDI2NDkxRThDQUUxMUVCQUExQjFGNUVDNEY5QUUwMi9xYWRWVmUxd1p5 OXgxUzlsazdrYlJDQzZwd3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUylNKMHw8E5N/DX/hbuyomZpJ6BXBWO60YxgjNCjmSAhX2rZWHdou EAjL2DB5eUiBBNIvPq9gwRWeRJ5LHQgZU7JZZO3L2cO6xRZOJdS2R4MSJwRnLYbV ftBRwTX06gC7LDkiZIc+PwcvRS7aiSicfM8mNh0Q98Js6+Cckx0AkqZceYvj/PhS e1iiWYtxOyWgAvWehoXjFGDz57ONFqbek+nO5jLY8T2JIsid00UDjVBImgYZ4Re2 C+eWvcfhbbLPpnDCQH2XRkh7JlzE3FcIskfMV9OWn/YE6zbsCN3501ClmiIWR0XO nh/wohUmwb/kBDo8WS/aK8jki3NkCQqW -----END CERTIFICATE-----Generated at Sat Jun 14 19:30:12 2025 by rpki-client