$ rpki-client -vvf rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.mft File: QAHwzRnduZQstaOVZ-w2k74lxqA.mft (raw, json) Hash identifier: uHz8q26RcGS1jjLRPCwUc0wDrDckdi9PCNMza0QtM9Y= Subject key identifier: 15:C0:7F:CF:F8:F4:AA:67:75:85:EE:9C:27:1B:43:2B:0E:AB:CA:45 Authority key identifier: 40:01:F0:CD:19:DD:B9:94:2C:B5:A3:95:67:EC:36:93:BE:25:C6:A0 Certificate issuer: /CN=A91F96DB/serialNumber=4001F0CD19DDB9942CB5A39567EC3693BE25C6A0 Certificate serial: 03CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QAHwzRnduZQstaOVZ-w2k74lxqA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.mft Manifest number: 03C4 Signing time: Sun 15 Jun 2025 00:21:28 +0000 Manifest this update: Sun 15 Jun 2025 00:21:28 +0000 Manifest next update: Sun 22 Jun 2025 00:21:28 +0000 Files and hashes: 1: QAHwzRnduZQstaOVZ-w2k74lxqA.crl (hash: 6v4bktwy0zbvIzVBjGEjRyQ//ci2lvwC8BQ/Fdp3Jtg=) 2: F91B41A40C5811EFB9F63337C4F9AE02.roa (hash: qOMt8gV+qKOqfr/cX53ygmFqRFWIxLXDn07p9oOee54=) 3: 0ECA16060C5911EFA8601E42C4F9AE02.roa (hash: vlEni3UTKg6N69bA/qO6bko6oc0V7Y603/5krA0YD5s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.crl rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QAHwzRnduZQstaOVZ-w2k74lxqA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 00:21:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 972 (0x3cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F96DB, serialNumber=4001F0CD19DDB9942CB5A39567EC3693BE25C6A0 Validity Not Before: Jun 15 00:21:28 2025 GMT Not After : Jun 22 00:21:28 2025 GMT Subject: CN=684e1208-44a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:e2:b3:b7:46:9e:d6:33:e9:af:30:86:a5:61: 62:45:b8:da:b1:2d:0e:16:cf:a4:1f:67:af:f1:eb: ae:65:04:fb:7c:c8:66:e5:ca:fb:03:47:74:1e:27: 58:c1:89:77:8d:0a:bd:b1:29:3d:95:29:06:13:97: 49:e7:81:3b:e5:8d:30:00:0e:8d:6d:ee:74:37:08: e7:18:5b:f5:f1:23:96:84:86:6e:e4:b3:ba:7d:74: 3f:c7:52:cd:e8:7c:e5:75:67:b1:e9:f2:06:95:33: 34:7e:c3:c9:ed:70:9a:d1:9b:2a:bd:0c:00:e5:c6: 30:2e:57:4c:14:3b:66:43:c5:4d:e8:56:e0:ef:a7: cc:f0:45:45:0c:c0:95:43:6e:df:9e:33:0c:ee:a0: 2d:bd:d5:90:29:58:31:79:36:53:fc:5e:56:81:e6: f0:e9:58:56:36:1e:a7:46:71:81:c2:b0:82:ca:80: 31:af:b0:89:e5:90:69:04:2b:2e:ac:55:71:bf:ac: 37:1c:2e:d7:0f:d7:dc:87:45:f6:da:fc:86:66:91: e9:4a:02:a1:bc:5d:2a:39:6c:d2:41:88:c4:7a:6b: 5c:dc:a9:ae:28:50:47:dd:87:f6:90:13:cc:a9:ab: a7:0d:16:90:09:6b:25:9a:37:6d:99:8e:8d:63:af: d1:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:C0:7F:CF:F8:F4:AA:67:75:85:EE:9C:27:1B:43:2B:0E:AB:CA:45 X509v3 Authority Key Identifier: keyid:40:01:F0:CD:19:DD:B9:94:2C:B5:A3:95:67:EC:36:93:BE:25:C6:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QAHwzRnduZQstaOVZ-w2k74lxqA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d7:b9:20:38:e3:0e:7b:1c:a2:58:4c:a3:d6:6e:22:c2:82:0f: f8:cc:8a:50:5d:24:c3:f0:05:4a:4d:9e:9c:9c:38:b6:31:4f: 29:ba:ce:d5:9f:9b:fb:fa:0e:21:a9:f3:3a:b7:fb:4c:af:bd: 66:0c:3e:2b:c4:93:58:46:67:6d:43:27:35:aa:19:2a:75:a4: 16:c5:0b:5d:91:16:89:1e:d4:17:9b:98:1c:a4:b0:10:c9:d6: 53:a0:cc:b6:3f:a7:43:95:47:ce:2e:43:fe:46:c8:e9:11:f3: 4f:44:1e:7f:80:e5:77:10:5e:84:21:31:e0:b9:0f:bd:a7:a5: f3:8c:be:75:26:0c:8a:ce:31:c0:18:29:e9:b6:47:8c:dc:2a: c1:a6:67:eb:06:10:e2:ed:10:d4:a1:77:29:49:10:e8:71:ec: 62:6f:17:31:92:cf:1e:2a:70:51:b6:84:08:75:e6:60:9a:44: c4:50:dc:6d:83:e9:a4:de:44:eb:24:7b:93:a1:62:0d:ee:fa: 5e:31:71:ea:bb:b8:76:d8:44:7e:36:b8:40:29:e4:58:ae:25: 59:7b:e8:7f:28:c1:b1:47:09:1b:a4:11:13:dd:2d:31:87:87: 7e:42:d9:6a:d1:54:38:21:eb:0b:61:97:24:11:5c:41:fe:7f: e8:97:02:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA8wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjk2REIxMTAvBgNVBAUTKDQwMDFGMENEMTlEREI5OTQyQ0I1QTM5NTY3RUMzNjkz QkUyNUM2QTAwHhcNMjUwNjE1MDAyMTI4WhcNMjUwNjIyMDAyMTI4WjAYMRYwFAYD VQQDEw02ODRlMTIwOC00NGE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzuKzt0ae1jPprzCGpWFiRbjasS0OFs+kH2ev8euuZQT7fMhm5cr7A0d0HidY wYl3jQq9sSk9lSkGE5dJ54E75Y0wAA6Nbe50NwjnGFv18SOWhIZu5LO6fXQ/x1LN 6HzldWex6fIGlTM0fsPJ7XCa0ZsqvQwA5cYwLldMFDtmQ8VN6Fbg76fM8EVFDMCV Q27fnjMM7qAtvdWQKVgxeTZT/F5Wgebw6VhWNh6nRnGBwrCCyoAxr7CJ5ZBpBCsu rFVxv6w3HC7XD9fch0X22vyGZpHpSgKhvF0qOWzSQYjEemtc3KmuKFBH3Yf2kBPM qaunDRaQCWslmjdtmY6NY6/RgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBXAf8/4 9KpndYXunCcbQysOq8pFMB8GA1UdIwQYMBaAFEAB8M0Z3bmULLWjlWfsNpO+Jcag MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOTZEQi9BODY0RDBFQThF M0QxMUVDQTg3QUJGMTZDNEY5QUUwMi9RQUh3elJuZHVaUXN0YU9WWi13Mms3NGx4 cUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FBSHd6Um5kdVpRc3RhT1ZaLXcyazc0bHhxQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OTZEQi9BODY0RDBFQThFM0QxMUVDQTg3QUJGMTZDNEY5QUUwMi9RQUh3elJuZHVa UXN0YU9WWi13Mms3NGx4cUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDXuSA44w57HKJYTKPWbiLCgg/4zIpQXSTD8AVKTZ6cnDi2MU8pus7V n5v7+g4hqfM6t/tMr71mDD4rxJNYRmdtQyc1qhkqdaQWxQtdkRaJHtQXm5gcpLAQ ydZToMy2P6dDlUfOLkP+RsjpEfNPRB5/gOV3EF6EITHguQ+9p6XzjL51JgyKzjHA GCnptkeM3CrBpmfrBhDi7RDUoXcpSRDocexibxcxks8eKnBRtoQIdeZgmkTEUNxt g+mk3kTrJHuToWIN7vpeMXHqu7h22ER+NrhAKeRYriVZe+h/KMGxRwkbpBET3S0x h4d+Qtlq0VQ4IesLYZckEVxB/n/olwLO -----END CERTIFICATE-----Generated at Sun Jun 15 06:04:00 2025 by rpki-client