$ rpki-client -vvf rpki.apnic.net/member_repository/A91E80FB/628D520C8FB611EC92BD2510C4F9AE02/QIWuE0tjOKEnZXKD67wWwS8guGI.mft File: QIWuE0tjOKEnZXKD67wWwS8guGI.mft (raw, json) Hash identifier: NNwJgWQhv5J3XrFQ4JWriwJ8qIqO13WWWIQCs4k4C8I= Subject key identifier: D8:93:BE:D6:A6:75:DD:41:FA:F1:70:BF:96:A4:7A:A7:D6:43:05:8C Authority key identifier: 40:85:AE:13:4B:63:38:A1:27:65:72:83:EB:BC:16:C1:2F:20:B8:62 Certificate issuer: /CN=A91E80FB/serialNumber=4085AE134B6338A127657283EBBC16C12F20B862 Certificate serial: 03D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QIWuE0tjOKEnZXKD67wWwS8guGI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E80FB/628D520C8FB611EC92BD2510C4F9AE02/QIWuE0tjOKEnZXKD67wWwS8guGI.mft Manifest number: 03CC Signing time: Thu 19 Jun 2025 00:29:23 +0000 Manifest this update: Thu 19 Jun 2025 00:29:22 +0000 Manifest next update: Thu 26 Jun 2025 00:29:22 +0000 Files and hashes: 1: QIWuE0tjOKEnZXKD67wWwS8guGI.crl (hash: rx+jh59ShYaukgdZ7MExNZw+PD+vc0ko8RNvt7ufth8=) 2: 9FBFD358C0F911EFA63F3E64C4F9AE02.roa (hash: yc1nPimI0kUiUPjKIX7+rUbHKCs59csyBzZSSe87J8M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E80FB/628D520C8FB611EC92BD2510C4F9AE02/QIWuE0tjOKEnZXKD67wWwS8guGI.crl rsync://rpki.apnic.net/member_repository/A91E80FB/628D520C8FB611EC92BD2510C4F9AE02/QIWuE0tjOKEnZXKD67wWwS8guGI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QIWuE0tjOKEnZXKD67wWwS8guGI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 00:29:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 983 (0x3d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E80FB, serialNumber=4085AE134B6338A127657283EBBC16C12F20B862 Validity Not Before: Jun 19 00:29:22 2025 GMT Not After : Jun 26 00:29:22 2025 GMT Subject: CN=685359e3-ff43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:90:bb:f0:2c:27:8e:43:1d:49:c0:90:6a:cd: 62:91:a4:67:79:7b:5b:d5:e5:16:51:61:6b:5b:b0: 34:46:c6:74:b3:6e:1b:a1:8b:9e:ac:51:fb:89:b7: be:72:27:4a:93:95:0d:79:5e:d3:55:ca:36:d8:c1: b2:d2:b4:4c:c0:77:c1:d7:a5:61:02:b6:4e:43:a8: 8d:9e:09:f0:be:69:44:94:8a:eb:b2:51:8e:09:02: 6f:80:01:8a:b6:59:47:9d:f4:4a:95:80:b6:54:b4: c6:e7:8e:11:69:00:34:64:02:2c:d5:b0:24:80:92: 21:c1:5f:92:78:3f:b3:f9:13:88:24:10:36:94:2f: 95:ed:cf:bf:95:73:7c:1b:ef:a1:ba:37:6d:6f:dc: 5f:b3:cf:46:8c:f3:44:13:eb:cc:0c:30:70:6e:98: 4d:c3:c3:96:e7:65:8a:d3:58:46:b9:aa:cf:c2:e3: bc:d9:3b:e3:09:64:02:ba:18:2f:92:06:4a:e4:79: b6:f4:91:5f:56:bf:3a:dd:2c:f6:73:d0:6d:ce:64: 21:a2:e4:69:a0:b4:42:70:b4:dc:4c:91:0e:da:03: f2:bb:bc:69:3a:9d:2b:35:05:62:c1:f4:fb:9e:40: 32:85:00:86:58:55:a2:58:bf:50:cc:fa:70:48:70: 8c:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:93:BE:D6:A6:75:DD:41:FA:F1:70:BF:96:A4:7A:A7:D6:43:05:8C X509v3 Authority Key Identifier: keyid:40:85:AE:13:4B:63:38:A1:27:65:72:83:EB:BC:16:C1:2F:20:B8:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E80FB/628D520C8FB611EC92BD2510C4F9AE02/QIWuE0tjOKEnZXKD67wWwS8guGI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QIWuE0tjOKEnZXKD67wWwS8guGI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E80FB/628D520C8FB611EC92BD2510C4F9AE02/QIWuE0tjOKEnZXKD67wWwS8guGI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:04:e5:76:56:ec:d2:7d:27:43:ce:8b:d4:7f:12:aa:7b:5e: 47:1d:b8:94:cf:c7:4a:79:1f:db:bf:65:a7:c7:b7:82:51:94: 4a:a3:aa:6a:ae:5c:a8:64:1d:fe:ed:63:57:9c:bd:47:24:7a: 73:b4:2d:d0:d1:96:d7:e7:bd:4f:38:65:fd:cf:52:98:d7:3a: d1:2c:43:0c:77:f3:06:ce:04:7e:ce:4d:20:09:8c:4e:61:16: 70:3d:c2:97:06:10:67:8c:fc:e7:7c:f1:fe:cd:40:a0:ec:07: 37:cd:5a:b1:3c:9c:95:a6:1c:42:9f:55:3e:2f:61:53:ad:a4: d0:93:f9:14:1e:4a:df:39:01:64:ee:8c:5b:23:fb:58:9b:83: 84:b3:a3:9e:2b:f9:43:83:c6:94:3f:05:57:51:ce:ca:ed:3e: 8a:ee:ae:e0:b0:90:a7:d8:e0:1f:ae:ef:48:8d:b7:2a:2b:1a: 0d:7e:ab:88:9b:93:0a:b0:65:56:f7:8e:ee:95:df:af:81:1a: 6c:29:ec:13:58:b4:fc:33:43:60:be:74:da:60:15:2e:df:02: 33:f0:fc:6c:7d:a3:10:b3:1b:18:44:d6:13:44:89:76:48:af: 79:35:56:a9:9a:d5:34:6e:60:2d:37:20:cb:10:76:fc:fa:1f: fb:3b:11:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA9cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTgwRkIxMTAvBgNVBAUTKDQwODVBRTEzNEI2MzM4QTEyNzY1NzI4M0VCQkMxNkMx MkYyMEI4NjIwHhcNMjUwNjE5MDAyOTIyWhcNMjUwNjI2MDAyOTIyWjAYMRYwFAYD VQQDEw02ODUzNTllMy1mZjQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2JC78CwnjkMdScCQas1ikaRneXtb1eUWUWFrW7A0RsZ0s24boYuerFH7ibe+ cidKk5UNeV7TVco22MGy0rRMwHfB16VhArZOQ6iNngnwvmlElIrrslGOCQJvgAGK tllHnfRKlYC2VLTG544RaQA0ZAIs1bAkgJIhwV+SeD+z+ROIJBA2lC+V7c+/lXN8 G++hujdtb9xfs89GjPNEE+vMDDBwbphNw8OW52WK01hGuarPwuO82TvjCWQCuhgv kgZK5Hm29JFfVr863Sz2c9BtzmQhouRpoLRCcLTcTJEO2gPyu7xpOp0rNQViwfT7 nkAyhQCGWFWiWL9QzPpwSHCMKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNiTvtam dd1B+vFwv5akeqfWQwWMMB8GA1UdIwQYMBaAFECFrhNLYzihJ2Vyg+u8FsEvILhi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODBGQi82MjhENTIwQzhG QjYxMUVDOTJCRDI1MTBDNEY5QUUwMi9RSVd1RTB0ak9LRW5aWEtENjd3V3dTOGd1 R0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FJV3VFMHRqT0tFblpYS0Q2N3dXd1M4Z3VHSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODBGQi82MjhENTIwQzhGQjYxMUVDOTJCRDI1MTBDNEY5QUUwMi9RSVd1RTB0ak9L RW5aWEtENjd3V3dTOGd1R0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHBOV2VuzSfSdDzovUfxKqe15HHbiUz8dKeR/bv2Wnx7eCUZRKo6pq rlyoZB3+7WNXnL1HJHpztC3Q0ZbX571POGX9z1KY1zrRLEMMd/MGzgR+zk0gCYxO YRZwPcKXBhBnjPznfPH+zUCg7Ac3zVqxPJyVphxCn1U+L2FTraTQk/kUHkrfOQFk 7oxbI/tYm4OEs6OeK/lDg8aUPwVXUc7K7T6K7q7gsJCn2OAfru9IjbcqKxoNfquI m5MKsGVW947uld+vgRpsKewTWLT8M0NgvnTaYBUu3wIz8PxsfaMQsxsYRNYTRIl2 SK95NVapmtU0bmAtNyDLEHb8+h/7OxGB -----END CERTIFICATE-----Generated at Fri Jun 20 01:11:16 2025 by rpki-client