$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF66D/511A892E71A811EEB437F181C4F9AE02/qpoNy1ExOS1xlqhEGKioRkVTH5c.mft File: qpoNy1ExOS1xlqhEGKioRkVTH5c.mft (raw, json) Hash identifier: hqUF29Q/Xh0msrRbahBiykUFFNKGbppih8kJecgylN4= Subject key identifier: C1:34:15:55:DE:CC:71:76:76:FB:60:58:76:12:82:D2:D1:DC:E4:96 Authority key identifier: AA:9A:0D:CB:51:31:39:2D:71:96:A8:44:18:A8:A8:46:45:53:1F:97 Certificate issuer: /CN=A91EF66D/serialNumber=AA9A0DCB5131392D7196A84418A8A84645531F97 Certificate serial: 013E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qpoNy1ExOS1xlqhEGKioRkVTH5c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF66D/511A892E71A811EEB437F181C4F9AE02/qpoNy1ExOS1xlqhEGKioRkVTH5c.mft Manifest number: 0138 Signing time: Sun 15 Jun 2025 03:41:02 +0000 Manifest this update: Sun 15 Jun 2025 03:41:02 +0000 Manifest next update: Sun 22 Jun 2025 03:41:02 +0000 Files and hashes: 1: qpoNy1ExOS1xlqhEGKioRkVTH5c.crl (hash: LHEWHn5479OMXa8oiefPWajpWvrzrk9MmDBMHBZoGtE=) 2: C2D66F8271A911EEAEEE351CC4F9AE02.roa (hash: 182Ac4fyaiVrniCYLGV61RP5qpWrfJewUwg3lX5zumg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF66D/511A892E71A811EEB437F181C4F9AE02/qpoNy1ExOS1xlqhEGKioRkVTH5c.crl rsync://rpki.apnic.net/member_repository/A91EF66D/511A892E71A811EEB437F181C4F9AE02/qpoNy1ExOS1xlqhEGKioRkVTH5c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qpoNy1ExOS1xlqhEGKioRkVTH5c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 03:41:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 318 (0x13e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF66D, serialNumber=AA9A0DCB5131392D7196A84418A8A84645531F97 Validity Not Before: Jun 15 03:41:02 2025 GMT Not After : Jun 22 03:41:02 2025 GMT Subject: CN=684e40ce-ed25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:2d:43:8c:6c:3a:7c:0b:e6:b4:c8:4d:37:a2: cc:d4:fd:a7:fa:0b:c3:81:e5:36:78:11:4a:82:2f: f7:5a:f4:f0:bd:fd:ae:18:77:27:16:b2:fb:61:85: ea:de:95:b8:8f:fe:03:8b:8d:ff:fc:60:8e:60:c1: 8f:26:81:c5:3f:33:7b:5a:c3:9d:7a:04:e2:44:91: 3f:53:95:b2:e4:72:52:92:55:aa:6e:36:80:a3:72: 50:04:f6:96:98:ea:fd:ca:0c:51:c5:fc:10:67:1c: ed:02:1d:9c:4a:af:13:61:0c:a8:d9:c0:28:b7:c2: 66:c1:79:b2:6d:8a:66:ba:60:68:e6:b3:04:cd:ac: 04:90:8d:a6:53:7d:b1:46:50:9a:8d:8d:57:86:3b: 45:bb:bd:c0:d5:a9:03:0c:76:23:70:ec:99:9a:1c: 77:6d:ca:61:40:c9:5d:c7:42:b0:fb:36:cb:0d:2a: 6d:8b:dd:aa:a1:c7:06:53:23:4d:16:a4:09:86:36: 9f:52:40:0d:ab:3e:92:b1:92:0b:d6:ef:47:96:bd: f4:ff:62:77:a1:c7:66:90:18:71:5e:73:dc:b5:31: 12:e2:5e:6b:18:a7:c4:ff:e0:e2:39:14:8b:80:7f: 2e:2e:8f:8c:97:8d:10:04:15:87:4e:be:a1:c2:a9: 11:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:34:15:55:DE:CC:71:76:76:FB:60:58:76:12:82:D2:D1:DC:E4:96 X509v3 Authority Key Identifier: keyid:AA:9A:0D:CB:51:31:39:2D:71:96:A8:44:18:A8:A8:46:45:53:1F:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF66D/511A892E71A811EEB437F181C4F9AE02/qpoNy1ExOS1xlqhEGKioRkVTH5c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qpoNy1ExOS1xlqhEGKioRkVTH5c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF66D/511A892E71A811EEB437F181C4F9AE02/qpoNy1ExOS1xlqhEGKioRkVTH5c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:aa:22:77:e7:16:06:fb:2d:0d:37:fd:f2:00:61:46:e4:27: e4:7e:c7:dc:bb:c1:d1:8d:ce:e9:a2:70:2d:b8:41:34:c9:ec: 12:73:35:1b:6a:8a:13:b6:1d:f9:19:14:ed:dc:4b:8b:cb:28: 5a:bd:0e:3b:ce:41:b1:71:53:e5:d3:89:19:39:4d:a7:8f:80: d2:48:8a:c2:75:13:a0:38:e4:fe:76:a7:21:4b:ae:8c:c5:d9: fe:37:65:b4:63:7e:be:fc:f6:6b:be:f7:2e:96:89:6a:8a:7a: 14:ac:94:4f:19:49:96:c6:46:fa:9e:33:c3:a4:e1:c3:50:2c: 31:75:a6:64:d9:5d:f8:b1:ad:b4:95:58:42:76:1d:0e:20:50: cf:63:31:dd:a8:81:3c:e9:96:ac:1c:da:0a:25:db:96:e7:4f: 57:f4:57:74:77:69:3d:5a:fb:7e:c0:1d:e8:8e:d4:65:25:c2: e5:79:4b:fe:28:35:24:59:ad:d8:cc:0d:0b:8a:e5:ac:41:f1: 33:62:a2:cf:95:62:ef:77:47:34:86:eb:4b:8f:28:e8:dd:1f: ba:9c:80:bf:9c:cb:75:5f:48:d4:07:fd:b3:f0:84:85:f1:0b: de:62:0a:2a:74:07:af:65:32:df:e9:aa:6f:a8:38:3f:9b:67: 68:61:d7:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAT4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUY2NkQxMTAvBgNVBAUTKEFBOUEwRENCNTEzMTM5MkQ3MTk2QTg0NDE4QThBODQ2 NDU1MzFGOTcwHhcNMjUwNjE1MDM0MTAyWhcNMjUwNjIyMDM0MTAyWjAYMRYwFAYD VQQDEw02ODRlNDBjZS1lZDI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2C1DjGw6fAvmtMhNN6LM1P2n+gvDgeU2eBFKgi/3WvTwvf2uGHcnFrL7YYXq 3pW4j/4Di43//GCOYMGPJoHFPzN7WsOdegTiRJE/U5Wy5HJSklWqbjaAo3JQBPaW mOr9ygxRxfwQZxztAh2cSq8TYQyo2cAot8JmwXmybYpmumBo5rMEzawEkI2mU32x RlCajY1XhjtFu73A1akDDHYjcOyZmhx3bcphQMldx0Kw+zbLDSpti92qoccGUyNN FqQJhjafUkANqz6SsZIL1u9Hlr30/2J3ocdmkBhxXnPctTES4l5rGKfE/+DiORSL gH8uLo+Ml40QBBWHTr6hwqkRPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFME0FVXe zHF2dvtgWHYSgtLR3OSWMB8GA1UdIwQYMBaAFKqaDctRMTktcZaoRBioqEZFUx+X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjY2RC81MTFBODkyRTcx QTgxMUVFQjQzN0YxODFDNEY5QUUwMi9xcG9OeTFFeE9TMXhscWhFR0tpb1JrVlRI NWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Fwb055MUV4T1MxeGxxaEVHS2lvUmtWVEg1Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjY2RC81MTFBODkyRTcxQTgxMUVFQjQzN0YxODFDNEY5QUUwMi9xcG9OeTFFeE9T MXhscWhFR0tpb1JrVlRINWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASqiJ35xYG+y0NN/3yAGFG5Cfkfsfcu8HRjc7ponAtuEE0yewSczUb aooTth35GRTt3EuLyyhavQ47zkGxcVPl04kZOU2nj4DSSIrCdROgOOT+dqchS66M xdn+N2W0Y36+/PZrvvculolqinoUrJRPGUmWxkb6njPDpOHDUCwxdaZk2V34sa20 lVhCdh0OIFDPYzHdqIE86ZasHNoKJduW509X9Fd0d2k9Wvt+wB3ojtRlJcLleUv+ KDUkWa3YzA0LiuWsQfEzYqLPlWLvd0c0hutLjyjo3R+6nIC/nMt1X0jUB/2z8ISF 8QveYgoqdAevZTLf6apvqDg/m2doYddQ -----END CERTIFICATE-----Generated at Tue Jun 17 01:36:03 2025 by rpki-client