$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB4AF/CC7B255ADCA911EC94E3E029C4F9AE02/qX6qTW8VW40nxAro4yfZulLDS0I.mft File: qX6qTW8VW40nxAro4yfZulLDS0I.mft (raw, json) Hash identifier: wQ9cjSNkrz949i4q3mAkldL6jbMs4yOqwr3WeI+RXNM= Subject key identifier: 81:B5:7A:6B:91:6E:BF:05:F1:40:81:17:8D:6B:BB:1F:D9:06:A7:A0 Authority key identifier: A9:7E:AA:4D:6F:15:5B:8D:27:C4:0A:E8:E3:27:D9:BA:52:C3:4B:42 Certificate issuer: /CN=A91EB4AF/serialNumber=A97EAA4D6F155B8D27C40AE8E327D9BA52C34B42 Certificate serial: 031B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qX6qTW8VW40nxAro4yfZulLDS0I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB4AF/CC7B255ADCA911EC94E3E029C4F9AE02/qX6qTW8VW40nxAro4yfZulLDS0I.mft Manifest number: 030C Signing time: Sun 15 Jun 2025 00:58:01 +0000 Manifest this update: Sun 15 Jun 2025 00:58:00 +0000 Manifest next update: Sun 22 Jun 2025 00:58:00 +0000 Files and hashes: 1: qX6qTW8VW40nxAro4yfZulLDS0I.crl (hash: 2Rv8RkwIfTbyYnIgiclWl/EWGuPN7df1hOpsVx1BJgI=) 2: 595774341B6211F0B9733473C4F9AE02.roa (hash: +tz3y5WKplkKwmkAAAjt/2fkFlX3E3AyLeSQygFyWM8=) 3: DCE70C6EF9B911ED8314C10EC4F9AE02.roa (hash: Tn8STgUoF8I50uE/0Z1qBgI407z6TwGOKBDeoEbq/9M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB4AF/CC7B255ADCA911EC94E3E029C4F9AE02/qX6qTW8VW40nxAro4yfZulLDS0I.crl rsync://rpki.apnic.net/member_repository/A91EB4AF/CC7B255ADCA911EC94E3E029C4F9AE02/qX6qTW8VW40nxAro4yfZulLDS0I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qX6qTW8VW40nxAro4yfZulLDS0I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 00:58:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 795 (0x31b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB4AF, serialNumber=A97EAA4D6F155B8D27C40AE8E327D9BA52C34B42 Validity Not Before: Jun 15 00:58:00 2025 GMT Not After : Jun 22 00:58:00 2025 GMT Subject: CN=684e1a99-a39c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:53:32:66:1a:ce:d3:53:50:de:14:c3:8c:81: f3:99:a6:8b:97:b7:3d:7f:59:f3:e8:df:ed:63:68: 25:ce:c3:ce:49:76:2c:a3:43:08:73:55:37:b5:74: 02:fb:da:9e:4b:de:99:9f:43:d3:db:9c:d4:58:32: e1:d2:a6:aa:bc:6c:b0:5f:c8:c8:86:2a:e0:64:b6: f7:a7:df:fa:33:b9:83:fe:e0:ef:57:d5:25:e2:16: 01:60:b6:1b:e4:98:7b:19:2f:25:f0:2b:5c:b2:0f: c5:86:28:ee:24:d3:31:e3:a0:7d:b5:70:ec:b3:2f: 00:71:88:71:32:f9:30:f8:0a:8b:65:6e:41:c5:0d: 37:65:d3:d9:18:31:ae:38:9e:1b:80:c7:75:f6:ae: 2d:0e:fc:d5:e8:40:85:d1:b0:75:ed:86:31:bb:2f: 5a:ff:9c:aa:f2:01:17:14:47:63:90:c9:99:21:d7: 6b:09:2c:45:22:9a:24:19:52:6a:05:a4:d4:6c:71: a4:c2:11:d1:75:a8:0c:f4:9c:2c:78:3c:e9:94:4e: 45:ce:8e:a2:68:75:65:d8:7b:92:3d:d4:89:a8:7d: e7:ec:28:2a:31:ea:d8:5a:41:2c:30:eb:5f:00:27: 3d:80:23:47:6e:fb:ca:05:54:42:13:41:a2:ab:c7: 07:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:B5:7A:6B:91:6E:BF:05:F1:40:81:17:8D:6B:BB:1F:D9:06:A7:A0 X509v3 Authority Key Identifier: keyid:A9:7E:AA:4D:6F:15:5B:8D:27:C4:0A:E8:E3:27:D9:BA:52:C3:4B:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB4AF/CC7B255ADCA911EC94E3E029C4F9AE02/qX6qTW8VW40nxAro4yfZulLDS0I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qX6qTW8VW40nxAro4yfZulLDS0I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB4AF/CC7B255ADCA911EC94E3E029C4F9AE02/qX6qTW8VW40nxAro4yfZulLDS0I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:2e:96:cb:5a:01:cd:69:e3:cd:27:f4:bd:34:a0:6a:81:1f: 48:63:a2:6a:92:96:2d:b4:60:6e:0b:a5:eb:c2:d2:a1:53:84: 91:c2:93:7b:0c:d5:5d:e2:e7:f2:15:d4:7c:3d:b5:ce:df:2f: 8a:ce:6e:1d:6c:a7:65:e5:16:90:0c:ef:03:69:2b:f9:5a:f9: cf:e2:b6:cf:33:11:9f:14:e7:d4:cc:7a:69:6b:df:ae:0b:7e: 39:d7:52:1f:e7:52:e9:5f:3f:16:de:04:f4:3a:fc:bb:bf:17: a6:94:95:c8:18:74:0d:19:8b:a4:60:69:43:8f:7f:92:8e:15: 04:0e:8a:d5:7b:45:7f:7f:a2:a8:3f:65:0d:2b:6c:8c:f6:19: 2d:bf:40:88:b3:57:13:ad:d8:fc:f6:f3:21:e2:73:15:96:a1: b6:f6:3a:ad:3f:83:e6:25:bf:32:6e:5a:65:55:b9:74:3a:ff: 86:d3:bd:2d:92:ce:e0:fa:49:4d:cd:9c:8b:53:16:2a:e0:fc: 33:b0:c7:4c:2b:dd:31:ba:09:53:5f:a0:a0:9b:01:e8:f0:1f: 90:4b:cb:fd:a8:d0:e6:f0:55:42:b7:d8:8d:68:20:16:ce:7d: 0a:df:74:4e:24:76:8e:d5:63:44:83:8f:80:2a:e8:5a:c0:d0: b0:2c:11:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAxswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUI0QUYxMTAvBgNVBAUTKEE5N0VBQTRENkYxNTVCOEQyN0M0MEFFOEUzMjdEOUJB NTJDMzRCNDIwHhcNMjUwNjE1MDA1ODAwWhcNMjUwNjIyMDA1ODAwWjAYMRYwFAYD VQQDEw02ODRlMWE5OS1hMzljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuVMyZhrO01NQ3hTDjIHzmaaLl7c9f1nz6N/tY2glzsPOSXYso0MIc1U3tXQC +9qeS96Zn0PT25zUWDLh0qaqvGywX8jIhirgZLb3p9/6M7mD/uDvV9Ul4hYBYLYb 5Jh7GS8l8Ctcsg/FhijuJNMx46B9tXDssy8AcYhxMvkw+AqLZW5BxQ03ZdPZGDGu OJ4bgMd19q4tDvzV6ECF0bB17YYxuy9a/5yq8gEXFEdjkMmZIddrCSxFIpokGVJq BaTUbHGkwhHRdagM9JwseDzplE5Fzo6iaHVl2HuSPdSJqH3n7CgqMerYWkEsMOtf ACc9gCNHbvvKBVRCE0Giq8cHgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIG1emuR br8F8UCBF41rux/ZBqegMB8GA1UdIwQYMBaAFKl+qk1vFVuNJ8QK6OMn2bpSw0tC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjRBRi9DQzdCMjU1QURD QTkxMUVDOTRFM0UwMjlDNEY5QUUwMi9xWDZxVFc4Vlc0MG54QXJvNHlmWnVsTERT MEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FYNnFUVzhWVzQwbnhBcm80eWZadWxMRFMwSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QjRBRi9DQzdCMjU1QURDQTkxMUVDOTRFM0UwMjlDNEY5QUUwMi9xWDZxVFc4Vlc0 MG54QXJvNHlmWnVsTERTMEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAeLpbLWgHNaePNJ/S9NKBqgR9IY6JqkpYttGBuC6XrwtKhU4SRwpN7 DNVd4ufyFdR8PbXO3y+Kzm4dbKdl5RaQDO8DaSv5WvnP4rbPMxGfFOfUzHppa9+u C34511If51LpXz8W3gT0Ovy7vxemlJXIGHQNGYukYGlDj3+SjhUEDorVe0V/f6Ko P2UNK2yM9hktv0CIs1cTrdj89vMh4nMVlqG29jqtP4PmJb8yblplVbl0Ov+G070t ks7g+klNzZyLUxYq4PwzsMdMK90xuglTX6CgmwHo8B+QS8v9qNDm8FVCt9iNaCAW zn0K33ROJHaO1WNEg4+AKuhawNCwLBFC -----END CERTIFICATE-----Generated at Sun Jun 15 04:56:18 2025 by rpki-client