$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDD4D/660E0588D27D11ED8E9A2580C4F9AE02/1QwpV9-oQKlDD7nuJdTc-hcSnBg.mft File: 1QwpV9-oQKlDD7nuJdTc-hcSnBg.mft (raw, json) Hash identifier: EmgKbm2tk8BW1DYirgVcYHbv/a9zLCPw2/AoJM4A2Z0= Subject key identifier: F8:B8:45:8A:8D:1F:94:AF:D8:B3:F9:7E:30:7D:3E:21:6B:CF:F8:A6 Authority key identifier: D5:0C:29:57:DF:A8:40:A9:43:0F:B9:EE:25:D4:DC:FA:17:12:9C:18 Certificate issuer: /CN=A91FDD4D/serialNumber=D50C2957DFA840A9430FB9EE25D4DCFA17129C18 Certificate serial: 01AE Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/1QwpV9-oQKlDD7nuJdTc-hcSnBg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDD4D/660E0588D27D11ED8E9A2580C4F9AE02/1QwpV9-oQKlDD7nuJdTc-hcSnBg.mft Manifest number: 01AB Signing time: Fri 20 Jun 2025 15:57:44 +0000 Manifest this update: Fri 20 Jun 2025 15:57:43 +0000 Manifest next update: Fri 27 Jun 2025 15:57:43 +0000 Files and hashes: 1: 1QwpV9-oQKlDD7nuJdTc-hcSnBg.crl (hash: l/0Ve1nyOyO4ttUWIpot89qeuh0AusCYoZFnQMVmlI4=) 2: 1046CB98D28311EDB1655152C4F9AE02.roa (hash: Kqt9mEj0giKftuB2DBO692CGsOF5kZIoQznyePkJFyk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDD4D/660E0588D27D11ED8E9A2580C4F9AE02/1QwpV9-oQKlDD7nuJdTc-hcSnBg.crl rsync://rpki.apnic.net/member_repository/A91FDD4D/660E0588D27D11ED8E9A2580C4F9AE02/1QwpV9-oQKlDD7nuJdTc-hcSnBg.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/1QwpV9-oQKlDD7nuJdTc-hcSnBg.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Jun 2025 15:57:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 430 (0x1ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDD4D, serialNumber=D50C2957DFA840A9430FB9EE25D4DCFA17129C18 Validity Not Before: Jun 20 15:57:43 2025 GMT Not After : Jun 27 15:57:43 2025 GMT Subject: CN=685584f8-8c22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:fa:c7:78:a4:36:62:ef:9f:91:f0:59:55:2f: b1:34:13:28:f4:76:17:e5:53:94:c6:7f:ca:34:0e: 19:15:0f:11:15:80:8d:0a:4c:86:7b:e2:65:8c:5d: a2:37:af:87:fa:c5:59:22:31:e3:07:56:4c:c5:c6: 8d:3c:04:7f:de:3c:0b:41:4d:fc:61:4d:3a:c7:bf: 23:14:17:2c:ce:27:f3:2d:50:cc:aa:97:db:b8:45: 77:45:6e:0e:17:79:06:46:4c:32:11:d0:79:8a:f1: 40:4b:e4:83:12:2e:62:fb:9d:88:6a:42:41:dd:f8: af:e4:27:8d:ac:18:d0:fe:a0:90:9e:ac:f8:94:02: 51:d2:b0:6a:7f:a8:2f:e7:5c:c1:39:13:60:04:3f: 8e:29:df:96:30:b8:b0:37:a1:c1:90:36:88:54:3f: 24:e4:19:3e:d3:1c:b3:56:4c:a4:21:26:a2:86:3b: dc:0a:64:a5:02:1b:f2:e0:9c:6c:f0:59:5e:67:2c: bc:ac:b7:0b:9a:87:51:14:b0:21:4f:7f:dd:4f:96: 5c:e2:0a:b8:de:aa:51:1a:9b:ce:1f:7d:67:f0:0e: cc:5b:49:07:a3:44:de:7f:c3:fe:09:d9:84:99:fd: 72:ce:0c:b2:4c:9f:83:ab:17:fc:70:4a:47:f7:0d: 79:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:B8:45:8A:8D:1F:94:AF:D8:B3:F9:7E:30:7D:3E:21:6B:CF:F8:A6 X509v3 Authority Key Identifier: keyid:D5:0C:29:57:DF:A8:40:A9:43:0F:B9:EE:25:D4:DC:FA:17:12:9C:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDD4D/660E0588D27D11ED8E9A2580C4F9AE02/1QwpV9-oQKlDD7nuJdTc-hcSnBg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/1QwpV9-oQKlDD7nuJdTc-hcSnBg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDD4D/660E0588D27D11ED8E9A2580C4F9AE02/1QwpV9-oQKlDD7nuJdTc-hcSnBg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:a1:b8:df:91:a2:44:c3:ee:4b:79:95:29:af:a5:fb:58:cb: eb:95:9c:22:73:1a:52:7b:11:63:64:ce:1e:6b:c4:68:6a:75: 02:b7:61:ec:8b:d8:48:67:f9:d5:c5:fc:a6:cc:b3:5f:16:03: 64:b6:64:56:f6:77:e1:b8:8e:f6:f5:ba:be:15:a0:36:5c:85: 56:13:07:12:55:03:77:ed:a0:f1:35:87:3b:6a:d3:c7:e9:41: 07:74:25:bf:83:cc:45:ee:5b:ec:9d:5c:e5:bc:5c:03:49:8c: 42:88:6c:4b:f9:9a:7e:6c:2b:28:d3:e8:bb:01:cb:cf:86:0e: 98:a9:de:dc:d8:16:3f:c6:7c:47:b7:4d:5e:7d:6f:62:16:37: dd:97:01:60:78:86:5c:f2:b6:43:7d:8e:9d:eb:21:8a:2b:51: 51:e5:4b:be:2c:5a:34:30:1a:4a:6d:ce:6e:09:f0:1a:b0:00: c2:06:7e:39:31:1e:f1:35:c0:7c:06:39:5c:41:57:ff:b8:06: 4f:3d:1f:9c:cf:d3:aa:2e:8c:e2:81:ea:01:62:b1:52:15:67: 80:5a:09:c3:67:98:83:4b:1d:5e:85:17:f5:2d:5f:80:5c:37: 91:b0:b1:36:64:ec:50:83:51:8e:4b:5b:9f:d6:f4:26:38:85: 14:c8:50:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAa4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRENEQxMTAvBgNVBAUTKEQ1MEMyOTU3REZBODQwQTk0MzBGQjlFRTI1RDREQ0ZB MTcxMjlDMTgwHhcNMjUwNjIwMTU1NzQzWhcNMjUwNjI3MTU1NzQzWjAYMRYwFAYD VQQDEw02ODU1ODRmOC04YzIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqPrHeKQ2Yu+fkfBZVS+xNBMo9HYX5VOUxn/KNA4ZFQ8RFYCNCkyGe+JljF2i N6+H+sVZIjHjB1ZMxcaNPAR/3jwLQU38YU06x78jFBcszifzLVDMqpfbuEV3RW4O F3kGRkwyEdB5ivFAS+SDEi5i+52IakJB3fiv5CeNrBjQ/qCQnqz4lAJR0rBqf6gv 51zBORNgBD+OKd+WMLiwN6HBkDaIVD8k5Bk+0xyzVkykISaihjvcCmSlAhvy4Jxs 8FleZyy8rLcLmodRFLAhT3/dT5Zc4gq43qpRGpvOH31n8A7MW0kHo0Tef8P+CdmE mf1yzgyyTJ+Dqxf8cEpH9w158QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPi4RYqN H5Sv2LP5fjB9PiFrz/imMB8GA1UdIwQYMBaAFNUMKVffqECpQw+57iXU3PoXEpwY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREQ0RC82NjBFMDU4OEQy N0QxMUVEOEU5QTI1ODBDNEY5QUUwMi8xUXdwVjktb1FLbEREN251SmRUYy1oY1Nu QmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyLzFRd3BWOS1vUUtsREQ3bnVKZFRjLWhjU25CZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG REQ0RC82NjBFMDU4OEQyN0QxMUVEOEU5QTI1ODBDNEY5QUUwMi8xUXdwVjktb1FL bEREN251SmRUYy1oY1NuQmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBdobjfkaJEw+5LeZUpr6X7WMvrlZwicxpSexFjZM4ea8RoanUCt2Hs i9hIZ/nVxfymzLNfFgNktmRW9nfhuI729bq+FaA2XIVWEwcSVQN37aDxNYc7atPH 6UEHdCW/g8xF7lvsnVzlvFwDSYxCiGxL+Zp+bCso0+i7AcvPhg6Yqd7c2BY/xnxH t01efW9iFjfdlwFgeIZc8rZDfY6d6yGKK1FR5Uu+LFo0MBpKbc5uCfAasADCBn45 MR7xNcB8BjlcQVf/uAZPPR+cz9OqLozigeoBYrFSFWeAWgnDZ5iDSx1ehRf1LV+A XDeRsLE2ZOxQg1GOS1uf1vQmOIUUyFAS -----END CERTIFICATE-----Generated at Sun Jun 22 12:56:20 2025 by rpki-client