$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6B73/EA809FF26ED211ECAE2EB829C4F9AE02/2qqxLpL6DuBDwg7q8r5GlqLDeHc.mft File: 2qqxLpL6DuBDwg7q8r5GlqLDeHc.mft (raw, json) Hash identifier: 4duBwyAQkgvn96CygmjvDJ+dE3J7swUiI89dHPk+Tvs= Subject key identifier: 50:79:7A:B9:0B:B1:02:FB:BC:59:8B:09:83:52:EE:58:53:3C:9D:57 Authority key identifier: DA:AA:B1:2E:92:FA:0E:E0:43:C2:0E:EA:F2:BE:46:96:A2:C3:78:77 Certificate issuer: /CN=A91E6B73/serialNumber=DAAAB12E92FA0EE043C20EEAF2BE4696A2C37877 Certificate serial: 041C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2qqxLpL6DuBDwg7q8r5GlqLDeHc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6B73/EA809FF26ED211ECAE2EB829C4F9AE02/2qqxLpL6DuBDwg7q8r5GlqLDeHc.mft Manifest number: 0415 Signing time: Thu 12 Jun 2025 23:58:26 +0000 Manifest this update: Thu 12 Jun 2025 23:58:26 +0000 Manifest next update: Thu 19 Jun 2025 23:58:26 +0000 Files and hashes: 1: 2qqxLpL6DuBDwg7q8r5GlqLDeHc.crl (hash: vIJPUnjUad0fSfyB1jFTBeFQUCndF8JprLMCvucHiyo=) 2: 4F12B4886EEB11EC8699607FC4F9AE02.roa (hash: oZqrtJQlT3Kbcps4JCliN7dRzvuckdjDLLEfBNjz0jM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6B73/EA809FF26ED211ECAE2EB829C4F9AE02/2qqxLpL6DuBDwg7q8r5GlqLDeHc.crl rsync://rpki.apnic.net/member_repository/A91E6B73/EA809FF26ED211ECAE2EB829C4F9AE02/2qqxLpL6DuBDwg7q8r5GlqLDeHc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2qqxLpL6DuBDwg7q8r5GlqLDeHc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 23:58:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1052 (0x41c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6B73, serialNumber=DAAAB12E92FA0EE043C20EEAF2BE4696A2C37877 Validity Not Before: Jun 12 23:58:26 2025 GMT Not After : Jun 19 23:58:26 2025 GMT Subject: CN=684b69a2-e1ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:74:83:94:7a:91:9e:48:5d:db:d3:79:22:0d: 42:dc:b9:b4:e9:9c:8c:31:23:2d:c3:a1:93:77:08: b7:32:8b:6b:70:97:b2:ba:c2:59:68:9d:d2:2b:10: 32:2d:76:73:7c:1d:75:ef:46:28:c7:fd:dc:6b:85: 9c:20:53:ad:9a:ea:0e:6a:6e:10:f0:ae:be:eb:b4: 70:20:f9:ef:7a:be:94:c0:40:d5:33:45:53:d9:92: 31:bb:7e:32:b4:21:3d:94:ef:9d:6c:97:6c:e0:13: 53:9f:cf:c4:51:98:62:8d:4f:d7:08:05:58:df:7c: 85:e0:91:6d:a6:af:e9:21:00:fb:ef:2d:f9:ae:e6: 82:87:da:4b:72:aa:00:fa:c9:e2:bc:4e:86:d0:55: c9:6f:d3:1c:85:df:72:3e:56:c7:f9:58:29:b0:b1: 23:27:3a:a1:45:c0:4c:60:18:0e:ed:4a:7e:39:e4: 8d:d8:bc:8b:15:3d:35:73:bd:da:f5:b4:0e:08:ce: 79:25:8f:2c:4a:89:8a:02:e6:f9:0c:e6:42:dd:82: 00:6d:2b:fd:9a:80:af:21:1d:86:16:64:7b:6a:84: e7:ba:a3:24:1e:32:b5:d6:50:e7:41:a1:51:9d:25: 2a:05:01:2a:3a:e8:1e:66:5e:ec:20:f6:fd:ea:c1: 7c:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:79:7A:B9:0B:B1:02:FB:BC:59:8B:09:83:52:EE:58:53:3C:9D:57 X509v3 Authority Key Identifier: keyid:DA:AA:B1:2E:92:FA:0E:E0:43:C2:0E:EA:F2:BE:46:96:A2:C3:78:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6B73/EA809FF26ED211ECAE2EB829C4F9AE02/2qqxLpL6DuBDwg7q8r5GlqLDeHc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2qqxLpL6DuBDwg7q8r5GlqLDeHc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6B73/EA809FF26ED211ECAE2EB829C4F9AE02/2qqxLpL6DuBDwg7q8r5GlqLDeHc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:9f:64:cd:70:37:7f:83:5e:d6:49:3c:3d:3f:25:09:dd:50: 33:c0:84:27:6c:91:5c:ad:5f:5b:f3:56:02:b4:37:54:6e:db: f3:2c:37:13:c8:e0:20:f9:7d:f5:08:b7:29:e5:f1:a0:e3:0a: a6:32:50:e3:67:02:4e:4c:ca:9d:8a:76:be:bc:50:63:27:c2: 39:4e:92:be:a7:9e:02:4c:1a:ea:a5:22:b3:b6:9b:67:aa:50: 40:e9:9b:a2:e7:07:db:f2:2b:48:c0:e9:20:61:72:b9:07:69: dc:05:7e:a3:48:ba:7c:20:f7:2f:04:d1:ec:cb:97:37:8c:c6: 99:13:2b:1e:76:23:7b:c3:26:d5:4e:93:7f:7d:f4:2d:55:f0: ae:11:91:57:97:66:8f:c9:5b:e5:c9:52:cb:51:a8:e8:3d:c9: 22:88:bd:7a:f5:65:33:24:68:aa:cc:0b:33:01:ca:3f:a9:94: a0:bc:56:ab:90:3a:f6:cb:0f:64:bf:16:66:ce:41:1e:9c:2d: ac:31:a5:a5:f1:c1:06:55:08:c4:40:b8:96:5b:5e:8c:e8:88: 86:48:0b:f9:ad:98:b4:5c:50:ce:a8:3d:9f:3b:d5:d0:33:a4: 85:c6:6d:5f:40:51:43:c2:10:9f:d6:5d:71:87:37:22:aa:68: 5b:99:51:c7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBBwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZCNzMxMTAvBgNVBAUTKERBQUFCMTJFOTJGQTBFRTA0M0MyMEVFQUYyQkU0Njk2 QTJDMzc4NzcwHhcNMjUwNjEyMjM1ODI2WhcNMjUwNjE5MjM1ODI2WjAYMRYwFAYD VQQDEw02ODRiNjlhMi1lMWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA13SDlHqRnkhd29N5Ig1C3Lm06ZyMMSMtw6GTdwi3MotrcJeyusJZaJ3SKxAy LXZzfB1170Yox/3ca4WcIFOtmuoOam4Q8K6+67RwIPnver6UwEDVM0VT2ZIxu34y tCE9lO+dbJds4BNTn8/EUZhijU/XCAVY33yF4JFtpq/pIQD77y35ruaCh9pLcqoA +snivE6G0FXJb9Mchd9yPlbH+VgpsLEjJzqhRcBMYBgO7Up+OeSN2LyLFT01c73a 9bQOCM55JY8sSomKAub5DOZC3YIAbSv9moCvIR2GFmR7aoTnuqMkHjK11lDnQaFR nSUqBQEqOugeZl7sIPb96sF8mwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFB5erkL sQL7vFmLCYNS7lhTPJ1XMB8GA1UdIwQYMBaAFNqqsS6S+g7gQ8IO6vK+Rpaiw3h3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkI3My9FQTgwOUZGMjZF RDIxMUVDQUUyRUI4MjlDNEY5QUUwMi8ycXF4THBMNkR1QkR3ZzdxOHI1R2xxTERl SGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJxcXhMcEw2RHVCRHdnN3E4cjVHbHFMRGVIYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NkI3My9FQTgwOUZGMjZFRDIxMUVDQUUyRUI4MjlDNEY5QUUwMi8ycXF4THBMNkR1 QkR3ZzdxOHI1R2xxTERlSGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDAn2TNcDd/g17WSTw9PyUJ3VAzwIQnbJFcrV9b81YCtDdUbtvzLDcT yOAg+X31CLcp5fGg4wqmMlDjZwJOTMqdina+vFBjJ8I5TpK+p54CTBrqpSKztptn qlBA6Zui5wfb8itIwOkgYXK5B2ncBX6jSLp8IPcvBNHsy5c3jMaZEysediN7wybV TpN/ffQtVfCuEZFXl2aPyVvlyVLLUajoPckiiL169WUzJGiqzAszAco/qZSgvFar kDr2yw9kvxZmzkEenC2sMaWl8cEGVQjEQLiWW16M6IiGSAv5rZi0XFDOqD2fO9XQ M6SFxm1fQFFDwhCf1l1xhzciqmhbmVHH -----END CERTIFICATE-----Generated at Sat Jun 14 19:21:55 2025 by rpki-client