$ rpki-client -vvf rpki.apnic.net/member_repository/A91E711B/505C9738F5DB11EC9D06777BC4F9AE02/Qi87B4JkeC6YeHPYanROKGHypQM.mft File: Qi87B4JkeC6YeHPYanROKGHypQM.mft (raw, json) Hash identifier: R61cBuOcrHggjHwQBvK0f8SEWBLRRmOULgm0ckthCqM= Subject key identifier: D5:CF:61:10:CE:24:89:01:AE:03:C2:17:59:CA:65:E9:04:02:3D:27 Authority key identifier: 42:2F:3B:07:82:64:78:2E:98:78:73:D8:6A:74:4E:28:61:F2:A5:03 Certificate issuer: /CN=A91E711B/serialNumber=422F3B078264782E987873D86A744E2861F2A503 Certificate serial: 02C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qi87B4JkeC6YeHPYanROKGHypQM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E711B/505C9738F5DB11EC9D06777BC4F9AE02/Qi87B4JkeC6YeHPYanROKGHypQM.mft Manifest number: 02BF Signing time: Tue 17 Jun 2025 01:00:07 +0000 Manifest this update: Tue 17 Jun 2025 01:00:06 +0000 Manifest next update: Tue 24 Jun 2025 01:00:06 +0000 Files and hashes: 1: Qi87B4JkeC6YeHPYanROKGHypQM.crl (hash: SW1FqO1UaNkhfMxUW5Ur6fU+3eHFZMdRChiTqqdYDuk=) 2: 819F3DD6F5E111EC9754EB85C4F9AE02.roa (hash: hbDMnvq+3uPhy+l00wQh92gtO222M2b23uJyUw6S38s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E711B/505C9738F5DB11EC9D06777BC4F9AE02/Qi87B4JkeC6YeHPYanROKGHypQM.crl rsync://rpki.apnic.net/member_repository/A91E711B/505C9738F5DB11EC9D06777BC4F9AE02/Qi87B4JkeC6YeHPYanROKGHypQM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qi87B4JkeC6YeHPYanROKGHypQM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 01:00:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 708 (0x2c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E711B, serialNumber=422F3B078264782E987873D86A744E2861F2A503 Validity Not Before: Jun 17 01:00:06 2025 GMT Not After : Jun 24 01:00:06 2025 GMT Subject: CN=6850be17-4d80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e5:07:32:c4:ab:3f:25:1d:04:6f:3e:30:68: 32:6d:d1:91:f0:cd:11:da:fc:8e:dc:3e:d2:3c:ec: 1c:2e:28:84:f6:1f:29:6b:0a:7c:39:cb:a4:01:73: 92:3f:e7:91:b6:95:1d:f9:59:4c:13:1f:cc:19:74: fe:1c:d3:dc:a5:5e:fc:13:da:bc:6d:d7:14:f3:cf: b1:ea:96:a5:c6:15:d9:03:db:46:70:b7:6a:3d:3d: 09:ad:bd:da:ac:d5:c1:0f:d9:2b:d7:67:6f:a0:e9: 96:c1:52:e9:29:49:60:3c:d7:71:3b:73:29:c6:2b: b0:6d:62:6b:97:5d:bf:71:7a:0a:23:9e:79:b7:7d: de:fe:fa:4f:b4:d6:b1:85:0c:bd:c3:fa:65:b3:65: 8a:ab:14:d2:f6:19:a2:fa:44:05:a7:38:0d:2a:69: cc:c9:a0:60:b4:d1:8d:4c:d2:25:82:22:b6:53:67: e6:0d:7f:37:bd:99:26:9d:16:be:34:6c:33:e7:63: 9b:d5:6f:27:d5:4f:80:4a:d3:48:b3:82:de:f0:73: 3c:e3:8d:c4:08:e4:93:06:f2:50:32:9f:6e:2d:5c: 39:82:45:8e:95:83:7c:b6:d3:28:3c:d3:47:97:8b: bc:a6:4d:4e:ec:39:83:3b:3c:3f:0e:06:42:90:87: 24:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:CF:61:10:CE:24:89:01:AE:03:C2:17:59:CA:65:E9:04:02:3D:27 X509v3 Authority Key Identifier: keyid:42:2F:3B:07:82:64:78:2E:98:78:73:D8:6A:74:4E:28:61:F2:A5:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E711B/505C9738F5DB11EC9D06777BC4F9AE02/Qi87B4JkeC6YeHPYanROKGHypQM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qi87B4JkeC6YeHPYanROKGHypQM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E711B/505C9738F5DB11EC9D06777BC4F9AE02/Qi87B4JkeC6YeHPYanROKGHypQM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:4b:4d:99:70:f7:af:ac:e1:c4:bc:2a:80:97:a1:f6:ca:ac: 48:36:c4:73:17:14:22:cd:1f:da:3f:69:45:e2:35:e7:18:53: 22:40:f8:2e:94:8e:b3:42:2a:60:bf:cf:f3:ef:49:94:cb:13: 8e:c9:e6:e1:dd:d8:b1:07:df:3e:bd:16:10:9e:11:4e:63:6e: 15:8b:89:cd:c5:bf:00:19:43:ae:49:9a:4f:92:e9:22:92:77: c6:08:2a:9b:ed:45:24:a6:48:79:cc:d5:b0:b5:f5:16:d8:bf: 98:ab:55:3e:84:ad:14:5e:d9:4f:a6:65:17:f0:81:98:99:ad: 54:01:3a:f1:f2:04:c0:68:4c:0d:66:5d:74:19:4b:7b:31:d4: 45:eb:4a:9f:f5:7f:ff:51:c2:f6:5e:e5:82:8f:8d:6b:4f:2b: cd:ae:7a:50:a9:c2:02:07:46:d2:9d:5a:57:88:96:c8:9a:a5: 3a:df:4c:7a:ce:81:29:23:09:c2:8a:b6:e8:60:5b:ad:3f:25: 86:d2:32:6f:f5:65:03:d0:bc:17:25:5b:b8:42:c1:01:02:ba: 5a:4f:38:11:9d:d9:b5:c6:86:0a:e1:7c:2c:61:99:03:97:00: c6:ae:d8:0c:5c:19:c0:f7:aa:f0:a6:ed:8c:40:cf:09:05:ed: fb:3a:84:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAsQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTcxMUIxMTAvBgNVBAUTKDQyMkYzQjA3ODI2NDc4MkU5ODc4NzNEODZBNzQ0RTI4 NjFGMkE1MDMwHhcNMjUwNjE3MDEwMDA2WhcNMjUwNjI0MDEwMDA2WjAYMRYwFAYD VQQDEw02ODUwYmUxNy00ZDgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAueUHMsSrPyUdBG8+MGgybdGR8M0R2vyO3D7SPOwcLiiE9h8pawp8OcukAXOS P+eRtpUd+VlMEx/MGXT+HNPcpV78E9q8bdcU88+x6palxhXZA9tGcLdqPT0Jrb3a rNXBD9kr12dvoOmWwVLpKUlgPNdxO3MpxiuwbWJrl12/cXoKI555t33e/vpPtNax hQy9w/pls2WKqxTS9hmi+kQFpzgNKmnMyaBgtNGNTNIlgiK2U2fmDX83vZkmnRa+ NGwz52Ob1W8n1U+AStNIs4Le8HM8443ECOSTBvJQMp9uLVw5gkWOlYN8ttMoPNNH l4u8pk1O7DmDOzw/DgZCkIckcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNXPYRDO JIkBrgPCF1nKZekEAj0nMB8GA1UdIwQYMBaAFEIvOweCZHgumHhz2Gp0Tihh8qUD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzExQi81MDVDOTczOEY1 REIxMUVDOUQwNjc3N0JDNEY5QUUwMi9RaTg3QjRKa2VDNlllSFBZYW5ST0tHSHlw UU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FpODdCNEprZUM2WWVIUFlhblJPS0dIeXBRTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzExQi81MDVDOTczOEY1REIxMUVDOUQwNjc3N0JDNEY5QUUwMi9RaTg3QjRKa2VD NlllSFBZYW5ST0tHSHlwUU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2S02ZcPevrOHEvCqAl6H2yqxINsRzFxQizR/aP2lF4jXnGFMiQPgu lI6zQipgv8/z70mUyxOOyebh3dixB98+vRYQnhFOY24Vi4nNxb8AGUOuSZpPkuki knfGCCqb7UUkpkh5zNWwtfUW2L+Yq1U+hK0UXtlPpmUX8IGYma1UATrx8gTAaEwN Zl10GUt7MdRF60qf9X//UcL2XuWCj41rTyvNrnpQqcICB0bSnVpXiJbImqU630x6 zoEpIwnCirboYFutPyWG0jJv9WUD0LwXJVu4QsEBArpaTzgRndm1xoYK4XwsYZkD lwDGrtgMXBnA96rwpu2MQM8JBe37OoRw -----END CERTIFICATE-----Generated at Wed Jun 18 06:00:50 2025 by rpki-client