$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5216/5CD5E7306E0811EDBEED6284C4F9AE02/qEG9xa-p6aCpW4hUYRPKdF7pY7U.mft File: qEG9xa-p6aCpW4hUYRPKdF7pY7U.mft (raw, json) Hash identifier: aFa5Q2b6hoyN/qKGrUEON1KDhSpd4v0O5zmHebZ175s= Subject key identifier: CA:AA:B6:97:5F:1D:46:84:C1:12:88:71:D7:3D:00:A7:4F:E5:6F:53 Authority key identifier: A8:41:BD:C5:AF:A9:E9:A0:A9:5B:88:54:61:13:CA:74:5E:E9:63:B5 Certificate issuer: /CN=A91F5216/serialNumber=A841BDC5AFA9E9A0A95B88546113CA745EE963B5 Certificate serial: 01E8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qEG9xa-p6aCpW4hUYRPKdF7pY7U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F5216/5CD5E7306E0811EDBEED6284C4F9AE02/qEG9xa-p6aCpW4hUYRPKdF7pY7U.mft Manifest number: 01E2 Signing time: Sun 15 Jun 2025 01:59:26 +0000 Manifest this update: Sun 15 Jun 2025 01:59:26 +0000 Manifest next update: Sun 22 Jun 2025 01:59:26 +0000 Files and hashes: 1: qEG9xa-p6aCpW4hUYRPKdF7pY7U.crl (hash: 0JAvNk0XCfLgG+PxJtqZgN5P+LVCHjJwXp4wWeVdxIM=) 2: CDA9BB546E0C11ED8BF41547C4F9AE02.roa (hash: 5xUQVljU0BWWuc6LYolHHzG3Hqi8KmssX696YCKuce8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F5216/5CD5E7306E0811EDBEED6284C4F9AE02/qEG9xa-p6aCpW4hUYRPKdF7pY7U.crl rsync://rpki.apnic.net/member_repository/A91F5216/5CD5E7306E0811EDBEED6284C4F9AE02/qEG9xa-p6aCpW4hUYRPKdF7pY7U.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qEG9xa-p6aCpW4hUYRPKdF7pY7U.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 01:59:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 488 (0x1e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F5216, serialNumber=A841BDC5AFA9E9A0A95B88546113CA745EE963B5 Validity Not Before: Jun 15 01:59:26 2025 GMT Not After : Jun 22 01:59:26 2025 GMT Subject: CN=684e28fe-c126 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:7f:ff:37:8d:56:75:9b:e9:37:5f:5a:06:87: 36:32:10:b2:0b:8e:5c:41:e1:d3:8b:d8:80:b2:78: 3f:02:37:e6:c5:75:7c:a5:dd:37:8b:de:ed:17:64: 46:73:d6:de:d4:5d:66:89:fd:fe:12:2b:36:92:5e: 57:7b:94:00:e8:80:1c:81:aa:a4:80:9a:e5:29:21: fc:dc:2b:02:1d:ed:4c:22:1e:17:fc:d4:bd:ed:1c: 11:08:d4:fc:1e:d9:bb:8a:94:a2:18:4b:0f:21:52: d5:f5:0a:d2:e9:d1:90:9e:5b:f2:fb:1a:7c:44:2f: 34:30:6a:bb:03:f4:5d:33:48:a7:53:e6:ce:59:58: 23:05:68:88:e6:c6:f4:ec:9d:d4:14:be:55:37:a2: 8e:0a:a1:34:9d:0a:c3:08:5c:c2:2e:6b:aa:3d:a4: 9e:0e:0c:e2:7b:bb:56:81:dc:a5:d0:00:06:dc:ed: 5c:d9:28:71:bc:c7:1d:46:3e:85:0c:83:d0:1c:cb: a4:ad:16:cd:79:06:fc:ba:c2:f3:17:46:2c:b3:b2: 4d:bf:b9:de:f4:b1:59:30:e0:7f:ce:21:9e:20:e2: a1:bc:ec:6c:37:bb:16:1a:77:fc:0a:7d:d2:73:1d: b2:59:d0:a8:8a:86:3c:f7:11:68:fc:3a:62:15:d1: 96:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:AA:B6:97:5F:1D:46:84:C1:12:88:71:D7:3D:00:A7:4F:E5:6F:53 X509v3 Authority Key Identifier: keyid:A8:41:BD:C5:AF:A9:E9:A0:A9:5B:88:54:61:13:CA:74:5E:E9:63:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F5216/5CD5E7306E0811EDBEED6284C4F9AE02/qEG9xa-p6aCpW4hUYRPKdF7pY7U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qEG9xa-p6aCpW4hUYRPKdF7pY7U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5216/5CD5E7306E0811EDBEED6284C4F9AE02/qEG9xa-p6aCpW4hUYRPKdF7pY7U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:a5:a8:d7:3b:22:d0:01:d2:56:67:99:16:4b:cf:c4:82:dc: fc:fb:5c:36:2b:39:a9:e2:4e:0c:75:4e:98:6b:23:ed:20:f4: d3:35:b7:2e:a6:e4:c9:bc:ee:da:f9:37:e8:0c:3d:74:68:ca: a0:6b:9c:0e:7b:b6:df:cd:3d:5d:c7:8b:91:98:eb:68:72:d0: bc:bf:c9:8b:c4:a7:44:88:9d:d3:84:cb:6b:52:7b:26:95:47: 16:c0:1d:f6:6b:04:cf:c6:ff:0d:35:85:65:2d:5d:b1:3f:f3: b6:1a:5f:8e:17:01:73:b9:eb:85:b6:ac:3f:3f:59:81:45:87: 39:22:7c:b5:f7:01:dd:f0:23:cc:45:d9:09:64:a2:5b:d0:1b: 31:19:23:96:07:9a:fa:82:be:18:80:1b:77:26:4e:7d:6c:61: cc:ad:a7:1d:11:83:45:71:b8:f6:42:ba:ff:4f:d4:91:7b:3e: 6a:21:15:5d:b6:4e:89:e2:08:77:f7:c6:b2:61:5b:a1:9d:8c: e9:c4:d6:c1:96:e5:27:8c:1e:4d:35:62:fe:74:7a:89:ee:2d: 2a:27:13:63:02:27:5b:ab:46:55:d2:3d:18:24:40:1e:5f:68: 0c:58:24:56:b6:07:15:2e:e1:e9:4b:31:a8:65:dc:e1:77:bb: ac:1c:d4:d6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAegwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjUyMTYxMTAvBgNVBAUTKEE4NDFCREM1QUZBOUU5QTBBOTVCODg1NDYxMTNDQTc0 NUVFOTYzQjUwHhcNMjUwNjE1MDE1OTI2WhcNMjUwNjIyMDE1OTI2WjAYMRYwFAYD VQQDEw02ODRlMjhmZS1jMTI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyH//N41WdZvpN19aBoc2MhCyC45cQeHTi9iAsng/AjfmxXV8pd03i97tF2RG c9be1F1mif3+Eis2kl5Xe5QA6IAcgaqkgJrlKSH83CsCHe1MIh4X/NS97RwRCNT8 Htm7ipSiGEsPIVLV9QrS6dGQnlvy+xp8RC80MGq7A/RdM0inU+bOWVgjBWiI5sb0 7J3UFL5VN6KOCqE0nQrDCFzCLmuqPaSeDgzie7tWgdyl0AAG3O1c2ShxvMcdRj6F DIPQHMukrRbNeQb8usLzF0Yss7JNv7ne9LFZMOB/ziGeIOKhvOxsN7sWGnf8Cn3S cx2yWdCoioY89xFo/DpiFdGWeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMqqtpdf HUaEwRKIcdc9AKdP5W9TMB8GA1UdIwQYMBaAFKhBvcWvqemgqVuIVGETynRe6WO1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTIxNi81Q0Q1RTczMDZF MDgxMUVEQkVFRDYyODRDNEY5QUUwMi9xRUc5eGEtcDZhQ3BXNGhVWVJQS2RGN3BZ N1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3FFRzl4YS1wNmFDcFc0aFVZUlBLZEY3cFk3VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTIxNi81Q0Q1RTczMDZFMDgxMUVEQkVFRDYyODRDNEY5QUUwMi9xRUc5eGEtcDZh Q3BXNGhVWVJQS2RGN3BZN1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjpajXOyLQAdJWZ5kWS8/Egtz8+1w2Kzmp4k4MdU6YayPtIPTTNbcu puTJvO7a+TfoDD10aMqga5wOe7bfzT1dx4uRmOtoctC8v8mLxKdEiJ3ThMtrUnsm lUcWwB32awTPxv8NNYVlLV2xP/O2Gl+OFwFzueuFtqw/P1mBRYc5Iny19wHd8CPM RdkJZKJb0BsxGSOWB5r6gr4YgBt3Jk59bGHMracdEYNFcbj2Qrr/T9SRez5qIRVd tk6J4gh398ayYVuhnYzpxNbBluUnjB5NNWL+dHqJ7i0qJxNjAidbq0ZV0j0YJEAe X2gMWCRWtgcVLuHpSzGoZdzhd7usHNTW -----END CERTIFICATE-----Generated at Mon Jun 16 00:46:34 2025 by rpki-client