$ rpki-client -vvf rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/fqwMLLJ6MKE47kdbB_6X6Okz_co.mft File: fqwMLLJ6MKE47kdbB_6X6Okz_co.mft (raw, json) Hash identifier: zSyD7pMf8iam2AQwuBKTEcIhWSCxN8/4YR/nJ8XfUgo= Subject key identifier: 77:E5:D9:44:26:5D:60:A8:76:CE:6E:7C:97:DB:40:8A:2C:E4:04:6C Authority key identifier: 7E:AC:0C:2C:B2:7A:30:A1:38:EE:47:5B:07:FE:97:E8:E9:33:FD:CA Certificate issuer: /CN=A91F13B9/serialNumber=7EAC0C2CB27A30A138EE475B07FE97E8E933FDCA Certificate serial: 28B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fqwMLLJ6MKE47kdbB_6X6Okz_co.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/fqwMLLJ6MKE47kdbB_6X6Okz_co.mft Manifest number: 2840 Signing time: Sat 14 Jun 2025 15:35:32 +0000 Manifest this update: Sat 14 Jun 2025 15:35:32 +0000 Manifest next update: Sat 21 Jun 2025 15:35:32 +0000 Files and hashes: 1: fqwMLLJ6MKE47kdbB_6X6Okz_co.crl (hash: IGcVZmVN/qQTGM0oeOaGT8Y/DMwD8eM+MpSfmxOG/wk=) 2: BF9C655E7A4711EF9C7A0E5AC4F9AE02.roa (hash: 3b/+EfJ1p5yKcSM+K7504gjRkoUg1csZXTQnr7kAeRc=) 3: F9B7A3BEB0A911EF8706BE26C4F9AE02.roa (hash: qjrZgvPz0JrFG9Wn1XQqIINgClH8kerS1ZkagSq1RJI=) 4: 83CECDE2F37711EFB7DF5759C4F9AE02.roa (hash: 0KaVGkZL/0Y7KpNtGIJZTIpqNjGhGiAxIqFaPkT8PBU=) 5: 9FA8BF04E29311EFBB04FB48C4F9AE02.roa (hash: SqFDkcPJLuKtwmjDpMqZz6gXiK/j9MHeCZUMDCC5s+w=) 6: 46E91B3AB31211EFA6BAAF1EC4F9AE02.roa (hash: b6/17IHmfruCEiR6p/M2eZlPFy6KYLkqGlsr9DlXeXk=) 7: 69448F24901811EFAD307C71C4F9AE02.roa (hash: Hzh3xVvRRKPzv+kWPsFSNzqLMIeNZk0IRUe+axzlVNw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/fqwMLLJ6MKE47kdbB_6X6Okz_co.crl rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/fqwMLLJ6MKE47kdbB_6X6Okz_co.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fqwMLLJ6MKE47kdbB_6X6Okz_co.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10421 (0x28b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F13B9, serialNumber=7EAC0C2CB27A30A138EE475B07FE97E8E933FDCA Validity Not Before: Jun 14 15:35:32 2025 GMT Not After : Jun 21 15:35:32 2025 GMT Subject: CN=684d96c4-bf1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:ab:9f:97:3c:30:79:88:9c:11:7c:1a:78:c5: 52:57:6b:0f:ac:72:23:fa:c0:5c:49:04:3a:1b:2b: b6:b9:55:76:2e:8d:f7:6d:05:27:b3:28:d5:71:2e: 81:9b:88:cb:f1:81:48:f8:c9:cd:14:bd:8a:d6:d6: 71:fc:05:24:17:98:c2:a5:0b:0f:d3:5d:2b:ab:53: d1:22:de:18:88:62:28:90:ae:41:04:31:23:b8:de: 5f:00:a9:a8:e8:99:68:2b:a0:f6:c2:bd:d2:8d:53: b2:7f:1c:84:82:be:8e:62:e4:b8:34:38:90:d3:78: 3c:c5:eb:f7:23:48:5c:b9:2e:8b:bd:0f:63:e0:68: ed:a1:d2:07:8f:63:68:ac:ba:91:3b:32:07:22:c2: d4:2a:af:a2:a5:5a:20:9a:97:f8:0c:5d:49:c4:81: 53:40:89:60:e3:6a:06:ce:6d:3d:22:17:9c:87:3d: c7:fc:dd:ea:60:67:4b:02:39:2e:a8:fe:72:c2:49: 08:e0:4c:f0:bc:1f:fe:42:15:4e:52:8e:3e:68:92: 5d:dd:ca:ad:24:b2:38:8f:9d:01:5a:d0:a7:fb:99: 71:e7:bc:1f:1f:8e:8b:03:2c:f3:50:74:51:9e:c4: 4a:b4:bd:36:bb:ca:e6:79:2a:9e:f8:0c:d4:dc:cb: bb:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:E5:D9:44:26:5D:60:A8:76:CE:6E:7C:97:DB:40:8A:2C:E4:04:6C X509v3 Authority Key Identifier: keyid:7E:AC:0C:2C:B2:7A:30:A1:38:EE:47:5B:07:FE:97:E8:E9:33:FD:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/fqwMLLJ6MKE47kdbB_6X6Okz_co.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fqwMLLJ6MKE47kdbB_6X6Okz_co.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/fqwMLLJ6MKE47kdbB_6X6Okz_co.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:36:c9:58:f5:f3:a2:51:f7:de:3f:8b:86:f3:f8:25:e4:dc: 67:65:7e:2f:8f:87:27:43:a5:aa:88:c9:a8:94:8d:90:48:5c: 53:18:c9:13:5d:c8:ba:61:a6:2e:75:09:bc:8b:69:73:5e:0e: 65:e6:6e:f9:f3:42:45:21:93:68:17:3f:1f:e8:5c:b1:67:87: 59:a5:d3:ab:20:3d:45:72:8b:3b:d9:e6:b2:65:9b:a3:1e:19: f0:50:64:8f:e3:a5:7c:c9:96:a6:7a:e8:30:0a:0a:aa:6c:bb: b6:35:e9:27:7e:d9:99:01:69:4f:b3:c9:83:ad:98:3b:64:13: a2:b7:1d:db:3e:99:bf:6e:dd:4d:81:26:9e:6d:3d:57:66:80: ec:0d:42:2a:fe:2c:f8:76:53:fa:7c:4b:a5:4d:28:cb:68:ca: 24:09:7a:45:85:ee:cc:e8:a9:19:3a:0d:d3:33:bb:3f:2a:f0: fb:41:67:c0:8b:c2:d7:91:50:98:e0:df:ac:6c:6e:b5:24:82: 50:f2:64:78:4f:b7:74:41:6d:d8:d8:41:a8:91:d5:12:d0:e5: 2f:1e:30:84:f0:e4:24:13:f5:a7:50:b7:0f:70:0f:51:f6:64: 89:bd:ad:c6:3c:ee:ab:3f:7f:c8:0c:29:3c:d3:15:5a:f2:18: e7:61:95:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKLUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjEzQjkxMTAvBgNVBAUTKDdFQUMwQzJDQjI3QTMwQTEzOEVFNDc1QjA3RkU5N0U4 RTkzM0ZEQ0EwHhcNMjUwNjE0MTUzNTMyWhcNMjUwNjIxMTUzNTMyWjAYMRYwFAYD VQQDEw02ODRkOTZjNC1iZjFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2KuflzwweYicEXwaeMVSV2sPrHIj+sBcSQQ6Gyu2uVV2Lo33bQUnsyjVcS6B m4jL8YFI+MnNFL2K1tZx/AUkF5jCpQsP010rq1PRIt4YiGIokK5BBDEjuN5fAKmo 6JloK6D2wr3SjVOyfxyEgr6OYuS4NDiQ03g8xev3I0hcuS6LvQ9j4GjtodIHj2No rLqROzIHIsLUKq+ipVogmpf4DF1JxIFTQIlg42oGzm09Ihechz3H/N3qYGdLAjku qP5ywkkI4EzwvB/+QhVOUo4+aJJd3cqtJLI4j50BWtCn+5lx57wfH46LAyzzUHRR nsRKtL02u8rmeSqe+AzU3Mu7PQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHfl2UQm XWCods5ufJfbQIos5ARsMB8GA1UdIwQYMBaAFH6sDCyyejChOO5HWwf+l+jpM/3K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTNCOS8xODk3QjI1MjlG OUQxMUU0OTYxOTUzMkRDNEY5QUUwMi9mcXdNTExKNk1LRTQ3a2RiQl82WDZPa3pf Y28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Zxd01MTEo2TUtFNDdrZGJCXzZYNk9rel9jby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MTNCOS8xODk3QjI1MjlGOUQxMUU0OTYxOTUzMkRDNEY5QUUwMi9mcXdNTExKNk1L RTQ3a2RiQl82WDZPa3pfY28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAuNslY9fOiUffeP4uG8/gl5NxnZX4vj4cnQ6WqiMmolI2QSFxTGMkT Xci6YaYudQm8i2lzXg5l5m7580JFIZNoFz8f6FyxZ4dZpdOrID1Fcos72eayZZuj HhnwUGSP46V8yZameugwCgqqbLu2NeknftmZAWlPs8mDrZg7ZBOitx3bPpm/bt1N gSaebT1XZoDsDUIq/iz4dlP6fEulTSjLaMokCXpFhe7M6KkZOg3TM7s/KvD7QWfA i8LXkVCY4N+sbG61JIJQ8mR4T7d0QW3Y2EGokdUS0OUvHjCE8OQkE/WnULcPcA9R 9mSJva3GPO6rP3/IDCk80xVa8hjnYZVS -----END CERTIFICATE-----Generated at Mon Jun 16 16:10:04 2025 by rpki-client