$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED6B5/EF469BFC594411ECAF575A6CC4F9AE02/QRfXbD7AS2IRM0hQpc1uowVTUFw.mft File: QRfXbD7AS2IRM0hQpc1uowVTUFw.mft (raw, json) Hash identifier: ITYWjee5fAX43pMHbsEB6mlHSv28TGxF54FVp+a1FbE= Subject key identifier: 6D:48:BD:30:86:D1:4B:7A:8B:BD:27:C6:67:0F:45:A8:58:FC:4A:F4 Authority key identifier: 41:17:D7:6C:3E:C0:4B:62:11:33:48:50:A5:CD:6E:A3:05:53:50:5C Certificate issuer: /CN=A91ED6B5/serialNumber=4117D76C3EC04B6211334850A5CD6EA30553505C Certificate serial: 044D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRfXbD7AS2IRM0hQpc1uowVTUFw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ED6B5/EF469BFC594411ECAF575A6CC4F9AE02/QRfXbD7AS2IRM0hQpc1uowVTUFw.mft Manifest number: 0449 Signing time: Thu 12 Jun 2025 23:49:20 +0000 Manifest this update: Thu 12 Jun 2025 23:49:20 +0000 Manifest next update: Thu 19 Jun 2025 23:49:20 +0000 Files and hashes: 1: QRfXbD7AS2IRM0hQpc1uowVTUFw.crl (hash: VEZBhZ4bWWjnqSiJDr0YtXYjwsjxpG74g+snmNimbAM=) 2: 06A899FECCF311EC86719729C4F9AE02.roa (hash: aXuFAPx3sTT3XGxZkToSNXJ/vwo2rNiJs7Ikunvy7v4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ED6B5/EF469BFC594411ECAF575A6CC4F9AE02/QRfXbD7AS2IRM0hQpc1uowVTUFw.crl rsync://rpki.apnic.net/member_repository/A91ED6B5/EF469BFC594411ECAF575A6CC4F9AE02/QRfXbD7AS2IRM0hQpc1uowVTUFw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRfXbD7AS2IRM0hQpc1uowVTUFw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 23:49:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1101 (0x44d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ED6B5, serialNumber=4117D76C3EC04B6211334850A5CD6EA30553505C Validity Not Before: Jun 12 23:49:20 2025 GMT Not After : Jun 19 23:49:20 2025 GMT Subject: CN=684b6780-5796 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:6a:16:1a:15:e8:15:7d:9b:3c:a9:63:45:47: 47:7d:a3:9a:27:10:f0:2b:fc:19:34:ec:24:06:42: 02:fa:b0:d8:b5:95:27:5f:8f:67:76:fe:1d:30:c3: 15:11:19:ad:24:31:86:17:67:ec:75:c5:5e:8f:37: 93:07:eb:eb:05:e7:dd:3d:03:2b:2a:67:1c:5b:6d: 74:09:f9:7a:59:fe:d4:b8:47:50:d7:f8:cb:f6:f9: 5c:34:1b:9b:65:cc:17:2e:4b:6a:29:05:17:1b:b8: f5:6e:ab:1c:d8:28:38:e9:1b:ac:c8:41:52:11:e8: 81:29:fe:cb:14:0b:0c:68:5c:96:87:64:15:91:d0: e6:87:d2:eb:79:61:f8:cc:11:42:48:31:4c:2e:89: 92:6e:a4:c8:7a:3a:c6:a2:2f:66:18:bb:5e:73:cc: 0c:9a:34:83:20:15:9b:b4:58:77:e9:f9:4c:84:c9: c7:79:8d:0c:a1:18:a7:fb:a8:b4:a3:f2:23:fc:ab: 5d:e4:26:45:7b:54:92:60:d9:4c:f6:ed:17:95:29: 48:fc:70:19:fa:fb:ce:03:a4:17:13:9a:9b:0a:74: be:0d:49:c7:94:55:87:96:9b:8e:c4:43:94:89:2e: 65:d2:18:6e:ad:4c:ae:38:3b:77:53:78:f9:a4:d7: e3:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:48:BD:30:86:D1:4B:7A:8B:BD:27:C6:67:0F:45:A8:58:FC:4A:F4 X509v3 Authority Key Identifier: keyid:41:17:D7:6C:3E:C0:4B:62:11:33:48:50:A5:CD:6E:A3:05:53:50:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ED6B5/EF469BFC594411ECAF575A6CC4F9AE02/QRfXbD7AS2IRM0hQpc1uowVTUFw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRfXbD7AS2IRM0hQpc1uowVTUFw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED6B5/EF469BFC594411ECAF575A6CC4F9AE02/QRfXbD7AS2IRM0hQpc1uowVTUFw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:04:8c:42:3e:1b:dc:8f:2b:07:0c:de:ef:f3:91:d8:50:0b: 42:1a:ea:79:01:f2:1f:1b:8e:36:af:1d:79:47:35:98:6c:19: ee:cf:a7:3b:b8:b7:63:a6:b2:da:35:9b:55:83:68:ee:f3:e5: 63:53:26:ca:31:bf:1c:a9:1a:31:de:dd:eb:45:d2:60:dd:b2: 0d:e7:0e:17:4a:91:f7:f3:2e:30:45:29:a2:00:ea:c7:b2:01: 84:24:57:a1:07:35:5e:6c:e6:89:89:9d:9c:54:1a:29:8e:c8: b3:62:89:d5:de:eb:1a:43:93:28:f6:da:ad:f4:ce:28:52:fa: 9d:f0:48:10:17:4a:2e:e4:82:79:b5:60:d3:98:ba:db:df:75: 01:60:af:e7:86:a2:2e:d6:42:c0:60:91:2f:97:90:d3:ef:d2: bc:6b:22:b6:84:61:d3:59:1e:2a:35:39:66:cb:88:e3:fb:e9: e0:33:49:15:df:6f:a0:2f:ec:da:19:93:57:b4:2e:0a:26:71: 41:57:37:09:cf:7a:63:3c:a4:2f:24:dc:22:4a:a8:83:71:d3: 91:1c:e5:c2:0f:82:43:7f:9d:c8:83:ca:7c:c4:36:af:5c:a7: c6:0c:2e:27:2a:5b:ec:ce:21:01:53:4f:9e:72:71:da:c1:3e: af:14:d4:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBE0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUQ2QjUxMTAvBgNVBAUTKDQxMTdENzZDM0VDMDRCNjIxMTMzNDg1MEE1Q0Q2RUEz MDU1MzUwNUMwHhcNMjUwNjEyMjM0OTIwWhcNMjUwNjE5MjM0OTIwWjAYMRYwFAYD VQQDEw02ODRiNjc4MC01Nzk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzmoWGhXoFX2bPKljRUdHfaOaJxDwK/wZNOwkBkIC+rDYtZUnX49ndv4dMMMV ERmtJDGGF2fsdcVejzeTB+vrBefdPQMrKmccW210Cfl6Wf7UuEdQ1/jL9vlcNBub ZcwXLktqKQUXG7j1bqsc2Cg46RusyEFSEeiBKf7LFAsMaFyWh2QVkdDmh9LreWH4 zBFCSDFMLomSbqTIejrGoi9mGLtec8wMmjSDIBWbtFh36flMhMnHeY0MoRin+6i0 o/Ij/Ktd5CZFe1SSYNlM9u0XlSlI/HAZ+vvOA6QXE5qbCnS+DUnHlFWHlpuOxEOU iS5l0hhurUyuODt3U3j5pNfjyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG1IvTCG 0Ut6i70nxmcPRahY/Er0MB8GA1UdIwQYMBaAFEEX12w+wEtiETNIUKXNbqMFU1Bc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRDZCNS9FRjQ2OUJGQzU5 NDQxMUVDQUY1NzVBNkNDNEY5QUUwMi9RUmZYYkQ3QVMySVJNMGhRcGMxdW93VlRV RncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FSZlhiRDdBUzJJUk0waFFwYzF1b3dWVFVGdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RDZCNS9FRjQ2OUJGQzU5NDQxMUVDQUY1NzVBNkNDNEY5QUUwMi9RUmZYYkQ3QVMy SVJNMGhRcGMxdW93VlRVRncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBdBIxCPhvcjysHDN7v85HYUAtCGup5AfIfG442rx15RzWYbBnuz6c7 uLdjprLaNZtVg2ju8+VjUybKMb8cqRox3t3rRdJg3bIN5w4XSpH38y4wRSmiAOrH sgGEJFehBzVebOaJiZ2cVBopjsizYonV3usaQ5Mo9tqt9M4oUvqd8EgQF0ou5IJ5 tWDTmLrb33UBYK/nhqIu1kLAYJEvl5DT79K8ayK2hGHTWR4qNTlmy4jj++ngM0kV 32+gL+zaGZNXtC4KJnFBVzcJz3pjPKQvJNwiSqiDcdORHOXCD4JDf53Ig8p8xDav XKfGDC4nKlvsziEBU0+ecnHawT6vFNSR -----END CERTIFICATE-----Generated at Sat Jun 14 18:57:23 2025 by rpki-client