$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/QmfPXQMASo_v3yE5XQ_oJFSLE8E.mft File: QmfPXQMASo_v3yE5XQ_oJFSLE8E.mft (raw, json) Hash identifier: F/OK5itA4Vg8vHbQh9mM5q8mtZWvP1JKfZIHKszH2pk= Subject key identifier: D9:AF:76:97:2D:7A:13:72:71:5F:F9:63:DB:5F:C0:11:74:CA:72:C6 Authority key identifier: 42:67:CF:5D:03:00:4A:8F:EF:DF:21:39:5D:0F:E8:24:54:8B:13:C1 Certificate issuer: /CN=A91FCEB1/serialNumber=4267CF5D03004A8FEFDF21395D0FE824548B13C1 Certificate serial: 2092 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QmfPXQMASo_v3yE5XQ_oJFSLE8E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/QmfPXQMASo_v3yE5XQ_oJFSLE8E.mft Manifest number: 279B Signing time: Sat 14 Jun 2025 15:55:54 +0000 Manifest this update: Sat 14 Jun 2025 15:55:53 +0000 Manifest next update: Sat 21 Jun 2025 15:55:53 +0000 Files and hashes: 1: QmfPXQMASo_v3yE5XQ_oJFSLE8E.crl (hash: 8ZZypzSpuEWQBPiOGdYftENTVrWuw/qeUq02zMnuaJQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/QmfPXQMASo_v3yE5XQ_oJFSLE8E.crl rsync://rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/QmfPXQMASo_v3yE5XQ_oJFSLE8E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QmfPXQMASo_v3yE5XQ_oJFSLE8E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 15:55:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8338 (0x2092) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FCEB1, serialNumber=4267CF5D03004A8FEFDF21395D0FE824548B13C1 Validity Not Before: Jun 14 15:55:53 2025 GMT Not After : Jun 21 15:55:53 2025 GMT Subject: CN=684d9b89-63d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:94:e7:39:22:d5:96:02:ca:33:a4:41:b4:f5: 9b:1d:a5:e4:04:f9:e6:95:47:81:b7:58:17:76:d1: 17:7d:25:72:5a:9a:d2:62:36:ba:f9:f8:d4:e1:3a: b7:28:8c:be:20:f0:21:81:f9:8d:b9:a3:80:d5:de: 35:ad:bd:46:46:d8:4f:4a:30:95:b8:8b:67:20:ba: ec:a5:95:30:42:52:0f:13:18:db:45:4c:9b:3f:ad: 3c:a1:be:3d:31:08:08:12:ac:d2:72:0d:25:d9:4c: 64:f1:8a:5f:be:26:d7:3d:42:53:c9:89:a4:b8:da: 55:4f:e6:49:24:ec:58:bd:8d:08:37:b0:93:15:7e: 20:ca:7a:1e:bb:6c:1e:92:64:2a:45:1d:d4:e6:92: 88:4d:df:95:96:fe:1e:7a:66:4a:c2:18:db:9a:60: f5:f6:b2:87:fb:4b:a0:35:cb:07:86:57:e4:87:1a: 57:53:24:84:da:3b:23:71:b0:c8:02:b3:76:13:3e: d9:9c:8a:0f:be:eb:d0:52:2a:02:76:6c:d3:74:eb: b9:32:47:30:53:39:e3:f9:b8:f7:3a:09:c0:9a:26: c2:0b:0d:9a:f6:f6:73:8e:48:a4:11:29:71:94:9e: ca:d8:24:e3:05:91:c5:a4:1e:dc:3b:74:40:9c:fb: 17:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:AF:76:97:2D:7A:13:72:71:5F:F9:63:DB:5F:C0:11:74:CA:72:C6 X509v3 Authority Key Identifier: keyid:42:67:CF:5D:03:00:4A:8F:EF:DF:21:39:5D:0F:E8:24:54:8B:13:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/QmfPXQMASo_v3yE5XQ_oJFSLE8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QmfPXQMASo_v3yE5XQ_oJFSLE8E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/QmfPXQMASo_v3yE5XQ_oJFSLE8E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:51:aa:52:e7:66:da:24:be:65:40:2f:89:e8:d5:8a:c5:bf: 56:6f:b3:89:8a:c6:b4:25:de:b6:b0:be:6f:e1:54:23:c2:94: a0:b2:5b:e9:86:75:5c:b0:d1:18:8b:d8:2e:f7:a4:ec:67:68: e3:55:2b:43:5b:95:56:d2:3f:66:a5:e2:a9:2d:57:b6:b5:96: c2:ce:e0:10:ae:07:26:26:6f:40:41:a7:35:ba:49:61:cf:40: f9:c3:65:09:d1:8a:c5:b6:cb:50:55:d4:33:8c:e4:e0:8a:72: ed:3b:3f:07:2c:c4:1f:42:d9:c3:be:b1:d0:c6:34:76:78:43: a7:19:f0:79:b5:c1:8b:bd:b0:49:a9:c1:4e:ab:3a:00:0f:95: 9b:7c:7d:dc:95:61:86:6c:75:0f:a3:8b:9f:22:9a:cb:d6:eb: 42:67:78:13:f5:b8:c3:7c:3c:9d:63:90:60:7d:54:b0:e7:4d: f7:95:8d:ad:4c:d2:20:18:63:82:74:af:36:86:a8:73:2c:27: 7c:9f:90:2d:4a:93:dd:c6:0d:57:be:15:f6:80:ae:f0:b5:18: 25:51:a8:2a:86:e6:af:21:1d:bc:8c:51:68:99:7f:08:4f:ff: 5b:e3:72:5c:48:a4:a7:af:33:9f:d8:d6:5c:21:68:a0:e9:4f: b1:4d:d5:ab -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIJIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkNFQjExMTAvBgNVBAUTKDQyNjdDRjVEMDMwMDRBOEZFRkRGMjEzOTVEMEZFODI0 NTQ4QjEzQzEwHhcNMjUwNjE0MTU1NTUzWhcNMjUwNjIxMTU1NTUzWjAYMRYwFAYD VQQDEw02ODRkOWI4OS02M2Q4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnpTnOSLVlgLKM6RBtPWbHaXkBPnmlUeBt1gXdtEXfSVyWprSYja6+fjU4Tq3 KIy+IPAhgfmNuaOA1d41rb1GRthPSjCVuItnILrspZUwQlIPExjbRUybP608ob49 MQgIEqzScg0l2Uxk8YpfvibXPUJTyYmkuNpVT+ZJJOxYvY0IN7CTFX4gynoeu2we kmQqRR3U5pKITd+Vlv4eemZKwhjbmmD19rKH+0ugNcsHhlfkhxpXUySE2jsjcbDI ArN2Ez7ZnIoPvuvQUioCdmzTdOu5MkcwUznj+bj3OgnAmibCCw2a9vZzjkikESlx lJ7K2CTjBZHFpB7cO3RAnPsX3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNmvdpct ehNycV/5Y9tfwBF0ynLGMB8GA1UdIwQYMBaAFEJnz10DAEqP798hOV0P6CRUixPB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQ0VCMS9FRkI4NzVDODA4 QzkxMUU2OEM3Nzg4NzhDNEY5QUUwMi9RbWZQWFFNQVNvX3YzeUU1WFFfb0pGU0xF OEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FtZlBYUU1BU29fdjN5RTVYUV9vSkZTTEU4RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Q0VCMS9FRkI4NzVDODA4QzkxMUU2OEM3Nzg4NzhDNEY5QUUwMi9RbWZQWFFNQVNv X3YzeUU1WFFfb0pGU0xFOEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAoUapS52baJL5lQC+J6NWKxb9Wb7OJisa0Jd62sL5v4VQjwpSgslvp hnVcsNEYi9gu96TsZ2jjVStDW5VW0j9mpeKpLVe2tZbCzuAQrgcmJm9AQac1uklh z0D5w2UJ0YrFtstQVdQzjOTginLtOz8HLMQfQtnDvrHQxjR2eEOnGfB5tcGLvbBJ qcFOqzoAD5WbfH3clWGGbHUPo4ufIprL1utCZ3gT9bjDfDydY5BgfVSw5033lY2t TNIgGGOCdK82hqhzLCd8n5AtSpPdxg1XvhX2gK7wtRglUagqhuavIR28jFFomX8I T/9b43JcSKSnrzOf2NZcIWig6U+xTdWr -----END CERTIFICATE-----Generated at Sun Jun 15 23:14:23 2025 by rpki-client