$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4EF7/C46FD7741B8F11E7AC4C7229C4F9AE02/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.mft File: qrUk5ZWlMOEsE6ohHC7ya2ndnJs.mft (raw, json) Hash identifier: BKsH8GjngpgAOa0V6b2GKKa5SUlqdQPDTMa0qyd3JFs= Subject key identifier: EF:42:82:E9:38:3D:58:A6:17:B9:73:77:C1:3B:9E:8B:93:CC:A9:EF Authority key identifier: AA:B5:24:E5:95:A5:30:E1:2C:13:AA:21:1C:2E:F2:6B:69:DD:9C:9B Certificate issuer: /CN=A91E4EF7/serialNumber=AAB524E595A530E12C13AA211C2EF26B69DD9C9B Certificate serial: 1B2B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4EF7/C46FD7741B8F11E7AC4C7229C4F9AE02/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.mft Manifest number: 1B20 Signing time: Sat 14 Jun 2025 16:15:09 +0000 Manifest this update: Sat 14 Jun 2025 16:15:08 +0000 Manifest next update: Sat 21 Jun 2025 16:15:08 +0000 Files and hashes: 1: qrUk5ZWlMOEsE6ohHC7ya2ndnJs.crl (hash: R5w6QZH4/+RJpTxBMWAgX4aZl6pS+Z8/HY+OQkUdSmY=) 2: E24736EC9D9011EC89314083C4F9AE02.roa (hash: MQLW+ckG9k/91Edmhff4+dci4t4G4rJfBHrG+oHBPHU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4EF7/C46FD7741B8F11E7AC4C7229C4F9AE02/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.crl rsync://rpki.apnic.net/member_repository/A91E4EF7/C46FD7741B8F11E7AC4C7229C4F9AE02/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 16:13:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6955 (0x1b2b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4EF7, serialNumber=AAB524E595A530E12C13AA211C2EF26B69DD9C9B Validity Not Before: Jun 14 16:15:08 2025 GMT Not After : Jun 21 16:15:08 2025 GMT Subject: CN=684da00d-ea5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:24:96:63:5d:97:00:87:de:d6:c1:1d:dd:b2: a7:f2:23:e9:d3:85:0d:dc:d2:84:9d:e8:fe:fb:c5: fb:66:87:02:60:cb:cc:8a:a5:34:b5:f8:00:8a:29: 0b:e5:17:13:86:fb:cb:9d:92:da:18:e1:31:64:a8: b6:fb:32:06:26:2a:da:cd:fd:c6:aa:6a:25:b7:af: 7f:10:b6:02:43:61:ec:17:63:cd:57:ad:cc:2c:88: 04:8d:78:bd:b0:27:3a:66:6a:f1:3b:51:b7:41:5f: 6a:3a:78:71:b3:4e:b5:7b:e4:40:23:7b:a5:98:02: 45:76:e3:50:38:68:61:a1:40:22:00:39:96:8f:7e: 31:43:06:3c:3a:63:cf:0b:2b:f1:05:06:a4:b9:39: 71:6a:3f:f0:b6:9c:bc:af:cf:9d:8a:77:97:e9:f7: 2e:ff:d8:97:91:b3:a7:c3:43:39:ea:0f:f9:bd:4f: 77:8d:ff:c7:15:43:5b:91:37:84:4a:35:6c:f3:52: f5:ff:b6:be:9c:3d:90:a6:ec:cb:68:77:16:e8:d0: b7:79:a3:bc:22:b4:43:71:fe:1e:f6:9a:1c:ca:95: 13:3c:53:d1:e0:5e:68:10:dd:06:73:5b:6e:40:84: 51:29:cc:d4:ac:7a:49:0a:17:e1:56:28:e5:04:be: 3d:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:42:82:E9:38:3D:58:A6:17:B9:73:77:C1:3B:9E:8B:93:CC:A9:EF X509v3 Authority Key Identifier: keyid:AA:B5:24:E5:95:A5:30:E1:2C:13:AA:21:1C:2E:F2:6B:69:DD:9C:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4EF7/C46FD7741B8F11E7AC4C7229C4F9AE02/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4EF7/C46FD7741B8F11E7AC4C7229C4F9AE02/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c4:2a:e5:81:71:d2:e7:b9:50:14:db:52:0f:65:6d:58:93:ae: 4e:92:8f:00:ea:e9:dd:b8:24:79:42:75:93:44:bd:81:c6:42: 74:9a:25:7b:cd:a6:9e:7d:b1:e7:7f:d6:b9:a1:2a:fd:7f:2e: 24:92:e5:3f:86:a4:bd:8a:f0:07:cb:e3:7f:3c:c6:10:1f:a0: 53:ba:98:ee:c4:30:c9:cf:ce:83:61:09:8d:36:3b:bd:8c:08: 4a:26:9e:94:14:37:b3:2a:89:a2:c0:d5:a1:35:96:f2:0c:8e: dc:44:66:cf:14:1f:6b:2d:3e:ef:3a:89:30:75:07:98:49:4a: 39:71:67:72:bd:92:1f:08:75:28:41:80:5f:c5:ae:de:9e:71: 75:5b:2a:5e:c7:02:65:8d:c4:89:62:f5:04:65:a4:3e:c3:d9: 55:55:5d:a2:9d:3a:1a:6d:ed:fd:4d:e2:1c:d1:12:7d:97:bc: 07:a5:d1:05:8b:86:41:21:cc:51:91:65:f2:ba:20:9b:4c:61: 38:d1:a1:96:c3:c8:71:aa:63:03:fc:a3:fe:61:40:80:22:25: 05:e8:22:0f:b6:d0:6a:b9:62:3e:87:f7:49:09:ec:ac:d6:38: 9d:f2:d2:c6:9d:09:b7:81:36:1e:bb:7f:02:90:02:d6:7f:c4: 2e:ae:f5:56 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGyswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTRFRjcxMTAvBgNVBAUTKEFBQjUyNEU1OTVBNTMwRTEyQzEzQUEyMTFDMkVGMjZC NjlERDlDOUIwHhcNMjUwNjE0MTYxNTA4WhcNMjUwNjIxMTYxNTA4WjAYMRYwFAYD VQQDEw02ODRkYTAwZC1lYTVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyySWY12XAIfe1sEd3bKn8iPp04UN3NKEnej++8X7ZocCYMvMiqU0tfgAiikL 5RcThvvLnZLaGOExZKi2+zIGJirazf3Gqmolt69/ELYCQ2HsF2PNV63MLIgEjXi9 sCc6ZmrxO1G3QV9qOnhxs061e+RAI3ulmAJFduNQOGhhoUAiADmWj34xQwY8OmPP CyvxBQakuTlxaj/wtpy8r8+dineX6fcu/9iXkbOnw0M56g/5vU93jf/HFUNbkTeE SjVs81L1/7a+nD2QpuzLaHcW6NC3eaO8IrRDcf4e9pocypUTPFPR4F5oEN0Gc1tu QIRRKczUrHpJChfhVijlBL49jQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO9Cguk4 PVimF7lzd8E7nouTzKnvMB8GA1UdIwQYMBaAFKq1JOWVpTDhLBOqIRwu8mtp3Zyb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNEVGNy9DNDZGRDc3NDFC OEYxMUU3QUM0QzcyMjlDNEY5QUUwMi9xclVrNVpXbE1PRXNFNm9oSEM3eWEybmRu SnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FyVWs1WldsTU9Fc0U2b2hIQzd5YTJuZG5Kcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NEVGNy9DNDZGRDc3NDFCOEYxMUU3QUM0QzcyMjlDNEY5QUUwMi9xclVrNVpXbE1P RXNFNm9oSEM3eWEybmRuSnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDEKuWBcdLnuVAU21IPZW1Yk65Oko8A6unduCR5QnWTRL2BxkJ0miV7 zaaefbHnf9a5oSr9fy4kkuU/hqS9ivAHy+N/PMYQH6BTupjuxDDJz86DYQmNNju9 jAhKJp6UFDezKomiwNWhNZbyDI7cRGbPFB9rLT7vOokwdQeYSUo5cWdyvZIfCHUo QYBfxa7ennF1WypexwJljcSJYvUEZaQ+w9lVVV2inToabe39TeIc0RJ9l7wHpdEF i4ZBIcxRkWXyuiCbTGE40aGWw8hxqmMD/KP+YUCAIiUF6CIPttBquWI+h/dJCeys 1jid8tLGnQm3gTYeu38CkALWf8QurvVW -----END CERTIFICATE-----Generated at Sat Jun 14 18:45:10 2025 by rpki-client