$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1AD0/86EF4BDE66CA11EBAC642735C4F9AE02/QwISXvsUnkUVYMdJW31DzZ6az_c.mft File: QwISXvsUnkUVYMdJW31DzZ6az_c.mft (raw, json) Hash identifier: rcDdFrwXLPnYGU07n7UXN72ePcUsETOS61nuKgtrNv0= Subject key identifier: E4:C0:2C:5C:48:EA:2D:57:32:80:F0:84:3E:80:5C:52:C6:2A:93:D7 Authority key identifier: 43:02:12:5E:FB:14:9E:45:15:60:C7:49:5B:7D:43:CD:9E:9A:CF:F7 Certificate issuer: /CN=A91F1AD0/serialNumber=4302125EFB149E451560C7495B7D43CD9E9ACFF7 Certificate serial: 06BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QwISXvsUnkUVYMdJW31DzZ6az_c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F1AD0/86EF4BDE66CA11EBAC642735C4F9AE02/QwISXvsUnkUVYMdJW31DzZ6az_c.mft Manifest number: 06B4 Signing time: Mon 16 Jun 2025 21:51:28 +0000 Manifest this update: Mon 16 Jun 2025 21:51:27 +0000 Manifest next update: Mon 23 Jun 2025 21:51:27 +0000 Files and hashes: 1: QwISXvsUnkUVYMdJW31DzZ6az_c.crl (hash: 9fmFG3QwZnNNfaMbO0QBPqNTPh2rMRQgrzaMYsbVxzs=) 2: 9507A58E66CC11EB8CD9533AC4F9AE02.roa (hash: mw0tfPfPL7FKi2Yof+LC4zjkegn0Gmah4wfaxap8CoE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F1AD0/86EF4BDE66CA11EBAC642735C4F9AE02/QwISXvsUnkUVYMdJW31DzZ6az_c.crl rsync://rpki.apnic.net/member_repository/A91F1AD0/86EF4BDE66CA11EBAC642735C4F9AE02/QwISXvsUnkUVYMdJW31DzZ6az_c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QwISXvsUnkUVYMdJW31DzZ6az_c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 21:51:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1723 (0x6bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F1AD0, serialNumber=4302125EFB149E451560C7495B7D43CD9E9ACFF7 Validity Not Before: Jun 16 21:51:27 2025 GMT Not After : Jun 23 21:51:27 2025 GMT Subject: CN=685091df-04ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:31:5c:5a:c7:6a:a3:f2:16:02:c6:86:4f:d2: 59:28:ff:93:f0:9b:ed:ec:aa:66:a8:f5:23:0b:dd: 07:4f:d0:ca:ee:38:45:75:33:f0:0d:89:ea:0c:16: 5e:40:54:15:bb:0e:e7:7c:4e:5f:dd:86:77:e9:72: 3d:49:bc:2f:a9:97:df:0e:89:db:4b:3e:51:58:30: b5:be:2a:65:9e:d3:9b:c6:15:a7:09:81:3d:c2:e8: 50:2a:3a:c9:b5:cc:72:86:fd:f3:79:59:91:05:62: e7:8f:86:37:b0:29:44:28:f1:32:ec:88:79:9d:33: 63:fd:48:68:28:8b:48:c6:a5:e5:50:2b:5d:f5:f5: cc:7d:6b:78:2c:bf:7d:3c:e4:74:d9:e3:28:d7:51: 2d:0f:97:4c:37:da:f0:55:73:47:46:a8:ef:b0:17: 94:76:0a:52:fe:6c:08:16:a2:58:38:d0:ac:b9:d4: 0a:0d:5b:a4:91:ce:48:4a:c8:8c:4c:d8:e3:a9:39: 6e:13:34:d9:6e:d3:b5:9c:8d:ee:fb:41:6e:08:0e: 72:16:48:4f:7e:94:cd:4c:61:3e:9b:5e:b5:5a:40: c0:d4:2c:d6:8b:95:10:9c:1b:da:74:30:6d:b5:b6: 8a:e7:df:e4:ab:29:4f:95:99:14:81:27:d0:a9:9b: ce:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:C0:2C:5C:48:EA:2D:57:32:80:F0:84:3E:80:5C:52:C6:2A:93:D7 X509v3 Authority Key Identifier: keyid:43:02:12:5E:FB:14:9E:45:15:60:C7:49:5B:7D:43:CD:9E:9A:CF:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F1AD0/86EF4BDE66CA11EBAC642735C4F9AE02/QwISXvsUnkUVYMdJW31DzZ6az_c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QwISXvsUnkUVYMdJW31DzZ6az_c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1AD0/86EF4BDE66CA11EBAC642735C4F9AE02/QwISXvsUnkUVYMdJW31DzZ6az_c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:84:ef:0f:33:8a:e2:63:f6:98:68:3c:0b:1f:53:bc:c7:87: 23:88:7c:a0:e2:26:93:0c:22:b1:0a:2c:e3:1d:81:7a:a9:16: 84:c2:d9:81:3d:07:9e:79:7f:66:e2:6b:8b:4b:5d:d1:46:0e: ed:65:0c:c5:d6:f5:81:e5:64:e9:14:70:61:0f:02:74:e0:5e: 1a:19:5f:a2:f5:23:8d:4f:25:fe:18:be:b6:f2:53:56:3f:60: 11:c0:ef:1e:b8:05:89:44:60:e9:61:1d:63:e8:f6:16:be:60: 11:98:e1:55:ad:3d:da:0a:19:2f:a3:9d:ce:84:30:a3:db:e8: 6c:12:e2:c5:da:3c:88:bc:81:d6:96:43:50:9c:95:d5:c5:b8: 3b:63:2a:5d:e1:d3:58:7e:96:ad:59:e6:51:15:1c:a3:ad:a7: 13:d9:4a:e3:48:de:c8:09:b8:82:b4:57:f8:49:50:4d:48:b7: b9:7c:53:48:60:34:d1:bb:38:bc:10:05:55:f3:7f:91:f9:92: c0:6c:19:ad:b1:cc:66:93:62:98:fb:a8:16:2b:61:45:cd:ba: 48:ea:ee:7a:31:a2:67:b2:92:8c:4d:45:c0:5d:95:d3:e7:7b: 6e:0b:8f:cb:22:6d:be:39:d6:d9:d8:bf:d6:20:f3:ba:5a:a6: dd:7a:cb:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBrswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjFBRDAxMTAvBgNVBAUTKDQzMDIxMjVFRkIxNDlFNDUxNTYwQzc0OTVCN0Q0M0NE OUU5QUNGRjcwHhcNMjUwNjE2MjE1MTI3WhcNMjUwNjIzMjE1MTI3WjAYMRYwFAYD VQQDEw02ODUwOTFkZi0wNGZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2zFcWsdqo/IWAsaGT9JZKP+T8Jvt7KpmqPUjC90HT9DK7jhFdTPwDYnqDBZe QFQVuw7nfE5f3YZ36XI9SbwvqZffDonbSz5RWDC1viplntObxhWnCYE9wuhQKjrJ tcxyhv3zeVmRBWLnj4Y3sClEKPEy7Ih5nTNj/UhoKItIxqXlUCtd9fXMfWt4LL99 POR02eMo11EtD5dMN9rwVXNHRqjvsBeUdgpS/mwIFqJYONCsudQKDVukkc5ISsiM TNjjqTluEzTZbtO1nI3u+0FuCA5yFkhPfpTNTGE+m161WkDA1CzWi5UQnBvadDBt tbaK59/kqylPlZkUgSfQqZvORQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOTALFxI 6i1XMoDwhD6AXFLGKpPXMB8GA1UdIwQYMBaAFEMCEl77FJ5FFWDHSVt9Q82ems/3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMUFEMC84NkVGNEJERTY2 Q0ExMUVCQUM2NDI3MzVDNEY5QUUwMi9Rd0lTWHZzVW5rVVZZTWRKVzMxRHpaNmF6 X2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1F3SVNYdnNVbmtVVllNZEpXMzFEelo2YXpfYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MUFEMC84NkVGNEJERTY2Q0ExMUVCQUM2NDI3MzVDNEY5QUUwMi9Rd0lTWHZzVW5r VVZZTWRKVzMxRHpaNmF6X2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfhO8PM4riY/aYaDwLH1O8x4cjiHyg4iaTDCKxCizjHYF6qRaEwtmB PQeeeX9m4muLS13RRg7tZQzF1vWB5WTpFHBhDwJ04F4aGV+i9SONTyX+GL628lNW P2ARwO8euAWJRGDpYR1j6PYWvmARmOFVrT3aChkvo53OhDCj2+hsEuLF2jyIvIHW lkNQnJXVxbg7Yypd4dNYfpatWeZRFRyjracT2UrjSN7ICbiCtFf4SVBNSLe5fFNI YDTRuzi8EAVV83+R+ZLAbBmtscxmk2KY+6gWK2FFzbpI6u56MaJnspKMTUXAXZXT 53tuC4/LIm2+OdbZ2L/WIPO6Wqbdesu5 -----END CERTIFICATE-----Generated at Wed Jun 18 16:34:25 2025 by rpki-client