$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA582/974FCAA0A11911EC8C4FFA83C4F9AE02/qkjQtX4IXNlA26F5HapYc8wZx_4.mft File: qkjQtX4IXNlA26F5HapYc8wZx_4.mft (raw, json) Hash identifier: z5aV/SlPqACSoBerm2A6OI7+IIDS8UyNGvdiLwtOtIk= Subject key identifier: 62:62:CD:9E:A6:6C:1D:9F:7E:B5:22:16:14:1C:F3:83:95:94:82:B1 Authority key identifier: AA:48:D0:B5:7E:08:5C:D9:40:DB:A1:79:1D:AA:58:73:CC:19:C7:FE Certificate issuer: /CN=A91EA582/serialNumber=AA48D0B57E085CD940DBA1791DAA5873CC19C7FE Certificate serial: 039A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkjQtX4IXNlA26F5HapYc8wZx_4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA582/974FCAA0A11911EC8C4FFA83C4F9AE02/qkjQtX4IXNlA26F5HapYc8wZx_4.mft Manifest number: 0394 Signing time: Sun 15 Jun 2025 00:32:53 +0000 Manifest this update: Sun 15 Jun 2025 00:32:52 +0000 Manifest next update: Sun 22 Jun 2025 00:32:52 +0000 Files and hashes: 1: qkjQtX4IXNlA26F5HapYc8wZx_4.crl (hash: rKhR5uA4KLgmR/cPly0jsHMeYQ703aNmXOUVWGkqktM=) 2: 9924B750A1AF11EC9A73D814C4F9AE02.roa (hash: H07H0KC74DRAPdC4SUe3j+pKIkb6uyeJtaN+ueDEin0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA582/974FCAA0A11911EC8C4FFA83C4F9AE02/qkjQtX4IXNlA26F5HapYc8wZx_4.crl rsync://rpki.apnic.net/member_repository/A91EA582/974FCAA0A11911EC8C4FFA83C4F9AE02/qkjQtX4IXNlA26F5HapYc8wZx_4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkjQtX4IXNlA26F5HapYc8wZx_4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 00:32:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 922 (0x39a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA582, serialNumber=AA48D0B57E085CD940DBA1791DAA5873CC19C7FE Validity Not Before: Jun 15 00:32:52 2025 GMT Not After : Jun 22 00:32:52 2025 GMT Subject: CN=684e14b5-510b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:d6:30:c6:4f:fc:55:f5:96:d4:68:7f:0e:93: b2:3e:bb:ca:b7:09:53:a1:49:2a:cd:bb:83:9f:17: 2d:1c:bf:89:1d:9d:17:66:bd:44:75:76:c8:0c:3b: 1e:fb:76:f0:21:cc:4e:7a:c5:b3:fa:8b:22:e1:6e: 61:3a:b9:10:81:21:aa:ce:a6:8e:d2:46:d5:b9:d7: fb:58:53:1f:b3:c4:17:aa:f3:84:9f:90:91:03:44: f5:35:cb:fe:b3:5d:db:0b:0b:31:f7:d2:e4:4b:c7: f8:ea:87:9f:19:ce:f2:bf:c1:21:4f:12:be:9e:72: 22:dc:74:f4:95:01:7a:47:87:b0:c0:f7:ac:5b:b7: 95:a6:bc:a3:13:f9:fc:ba:e8:b9:ac:48:05:12:45: e5:b3:1d:39:ec:b6:26:ae:60:2e:ba:ad:95:03:79: bc:71:fe:af:94:46:21:e7:d4:0c:e4:fd:a7:54:1c: 57:4a:ac:82:db:7d:13:8e:ba:1b:7a:93:01:09:f8: bf:6a:58:83:f6:6b:60:d8:ad:2d:c3:b7:a5:76:f3: c0:60:f0:e9:91:ef:71:fb:0a:47:09:11:3d:67:8e: ae:7f:68:c4:66:f6:ff:30:bc:a2:b9:bc:42:ca:b9: a8:74:9c:e7:5f:c5:cc:5a:7f:29:45:50:bc:e9:2d: 16:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:62:CD:9E:A6:6C:1D:9F:7E:B5:22:16:14:1C:F3:83:95:94:82:B1 X509v3 Authority Key Identifier: keyid:AA:48:D0:B5:7E:08:5C:D9:40:DB:A1:79:1D:AA:58:73:CC:19:C7:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA582/974FCAA0A11911EC8C4FFA83C4F9AE02/qkjQtX4IXNlA26F5HapYc8wZx_4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkjQtX4IXNlA26F5HapYc8wZx_4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA582/974FCAA0A11911EC8C4FFA83C4F9AE02/qkjQtX4IXNlA26F5HapYc8wZx_4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:0f:62:1c:a7:8b:d3:72:72:1f:15:c9:30:cc:91:6f:d6:10: 87:73:52:ae:f3:87:b7:f3:9b:65:2a:09:b4:21:66:fc:2e:76: 46:49:69:94:d7:29:3e:38:0e:f7:92:41:38:00:e6:08:96:ed: 3c:69:a3:9b:64:4b:2f:f9:ec:e6:cf:a9:c0:ea:d1:f3:30:ca: 06:f2:48:65:f6:37:f9:b1:e8:01:40:93:11:f3:0e:d9:87:85: c4:e8:f8:08:04:61:fb:c3:0d:94:60:78:2a:1c:ef:3f:3e:7b: b2:bb:13:c7:d8:e8:ff:ab:ef:9a:00:57:48:62:e2:06:68:ea: 0f:11:98:b4:c0:16:38:8a:1d:f7:9e:0d:bb:31:b2:02:82:e7: e0:1d:e1:75:0a:db:1e:fc:fc:c7:01:0a:54:a6:ce:4d:60:83: eb:1f:1b:0e:d5:97:71:d7:3f:02:4e:0a:9a:39:e7:68:81:43: 53:98:77:10:e5:34:a7:2a:61:f2:76:a5:a0:11:4b:e0:7b:ca: bb:d5:56:a4:1e:2a:5b:ff:da:7f:0d:d4:f4:7b:c8:6e:eb:83: 0a:c9:9f:3f:27:04:85:4f:38:0e:8c:43:17:ef:78:0f:b0:62: c5:52:f2:21:51:5e:e4:fb:c8:2e:4f:d8:e2:a0:71:a5:c4:72: 07:25:af:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA5owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE1ODIxMTAvBgNVBAUTKEFBNDhEMEI1N0UwODVDRDk0MERCQTE3OTFEQUE1ODcz Q0MxOUM3RkUwHhcNMjUwNjE1MDAzMjUyWhcNMjUwNjIyMDAzMjUyWjAYMRYwFAYD VQQDEw02ODRlMTRiNS01MTBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqdYwxk/8VfWW1Gh/DpOyPrvKtwlToUkqzbuDnxctHL+JHZ0XZr1EdXbIDDse +3bwIcxOesWz+osi4W5hOrkQgSGqzqaO0kbVudf7WFMfs8QXqvOEn5CRA0T1Ncv+ s13bCwsx99LkS8f46oefGc7yv8EhTxK+nnIi3HT0lQF6R4ewwPesW7eVpryjE/n8 uui5rEgFEkXlsx057LYmrmAuuq2VA3m8cf6vlEYh59QM5P2nVBxXSqyC230Tjrob epMBCfi/aliD9mtg2K0tw7eldvPAYPDpke9x+wpHCRE9Z46uf2jEZvb/MLyiubxC yrmodJznX8XMWn8pRVC86S0W0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGJizZ6m bB2ffrUiFhQc84OVlIKxMB8GA1UdIwQYMBaAFKpI0LV+CFzZQNuheR2qWHPMGcf+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTU4Mi85NzRGQ0FBMEEx MTkxMUVDOEM0RkZBODNDNEY5QUUwMi9xa2pRdFg0SVhObEEyNkY1SGFwWWM4d1p4 XzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FralF0WDRJWE5sQTI2RjVIYXBZYzh3WnhfNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTU4Mi85NzRGQ0FBMEExMTkxMUVDOEM0RkZBODNDNEY5QUUwMi9xa2pRdFg0SVhO bEEyNkY1SGFwWWM4d1p4XzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOD2Icp4vTcnIfFckwzJFv1hCHc1Ku84e385tlKgm0IWb8LnZGSWmU 1yk+OA73kkE4AOYIlu08aaObZEsv+ezmz6nA6tHzMMoG8khl9jf5segBQJMR8w7Z h4XE6PgIBGH7ww2UYHgqHO8/PnuyuxPH2Oj/q++aAFdIYuIGaOoPEZi0wBY4ih33 ng27MbICgufgHeF1Ctse/PzHAQpUps5NYIPrHxsO1Zdx1z8CTgqaOedogUNTmHcQ 5TSnKmHydqWgEUvge8q71VakHipb/9p/DdT0e8hu64MKyZ8/JwSFTzgOjEMX73gP sGLFUvIhUV7k+8guT9jioHGlxHIHJa8m -----END CERTIFICATE-----Generated at Sun Jun 15 09:40:41 2025 by rpki-client