$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDD4D/6E94AAFED27D11ED8E9A2580C4F9AE02/qXeTIZMxLej1k4T5CX9D3WvDF-E.mft File: qXeTIZMxLej1k4T5CX9D3WvDF-E.mft (raw, json) Hash identifier: l98FuvkG4/5PbJs73eSiKFqB0UEHHrLI/SpwiVx/AfA= Subject key identifier: 50:49:48:07:B7:03:AA:2F:72:CF:EE:80:0C:4D:1D:1E:71:41:E6:1D Authority key identifier: A9:77:93:21:93:31:2D:E8:F5:93:84:F9:09:7F:43:DD:6B:C3:17:E1 Certificate issuer: /CN=A91FDD4D/serialNumber=A977932193312DE8F59384F9097F43DD6BC317E1 Certificate serial: 01AE Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qXeTIZMxLej1k4T5CX9D3WvDF-E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDD4D/6E94AAFED27D11ED8E9A2580C4F9AE02/qXeTIZMxLej1k4T5CX9D3WvDF-E.mft Manifest number: 01AB Signing time: Fri 20 Jun 2025 15:57:48 +0000 Manifest this update: Fri 20 Jun 2025 15:57:48 +0000 Manifest next update: Fri 27 Jun 2025 15:57:48 +0000 Files and hashes: 1: qXeTIZMxLej1k4T5CX9D3WvDF-E.crl (hash: Zpp5kKCpNAA6p9RfinPcAzhsOGRWDwu16tSiNdjw5lg=) 2: 10F77754D28311EDB1655152C4F9AE02.roa (hash: F/LDXxakDpGw+3XLXdPKCVfoeyAVKMDr7JqjszcCvB0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDD4D/6E94AAFED27D11ED8E9A2580C4F9AE02/qXeTIZMxLej1k4T5CX9D3WvDF-E.crl rsync://rpki.apnic.net/member_repository/A91FDD4D/6E94AAFED27D11ED8E9A2580C4F9AE02/qXeTIZMxLej1k4T5CX9D3WvDF-E.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qXeTIZMxLej1k4T5CX9D3WvDF-E.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Jun 2025 15:57:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 430 (0x1ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDD4D, serialNumber=A977932193312DE8F59384F9097F43DD6BC317E1 Validity Not Before: Jun 20 15:57:48 2025 GMT Not After : Jun 27 15:57:48 2025 GMT Subject: CN=685584fc-5e85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:c9:3d:2d:d9:e6:19:c8:5a:61:28:dc:3c:7f: 59:ea:ad:24:9c:0a:52:21:92:7a:3b:98:03:e7:3c: 11:76:13:c9:3c:9d:7b:8f:fb:04:13:8e:1c:48:b4: 51:54:61:cd:95:21:fc:bb:b4:85:37:4b:05:e3:e1: a1:28:fb:14:0c:9f:6e:63:37:ea:64:2d:20:35:6f: c4:66:5f:9b:59:2b:5e:c2:7d:59:da:f0:d7:d1:f2: 13:2f:ad:75:dc:66:95:33:88:78:c1:55:c1:f2:66: 04:4b:c0:06:c3:a8:08:be:e0:1f:94:4d:ea:ed:81: bf:13:a0:86:e5:cb:07:83:86:05:9f:a6:60:6b:8c: 06:41:02:04:5e:59:73:b4:fb:86:b2:2f:85:b4:08: 5a:b3:0e:58:ed:d5:92:92:cb:bc:c0:ff:8f:f5:e5: 9c:7d:73:a2:b4:03:f6:4e:96:7b:99:9a:ca:19:ed: 05:31:ee:85:3a:77:12:10:2b:d6:9a:c7:dd:be:a0: 63:a4:2a:bf:15:4e:9c:6b:73:49:a1:a3:30:2a:8f: 48:b0:4c:41:7d:ca:1a:d7:87:4f:82:62:9a:2d:bd: a8:d5:e3:59:bb:c8:d1:37:65:65:f2:a3:1e:b0:0b: dd:dd:b1:cb:bf:79:ad:57:62:60:37:ee:9c:c9:3d: 01:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:49:48:07:B7:03:AA:2F:72:CF:EE:80:0C:4D:1D:1E:71:41:E6:1D X509v3 Authority Key Identifier: keyid:A9:77:93:21:93:31:2D:E8:F5:93:84:F9:09:7F:43:DD:6B:C3:17:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDD4D/6E94AAFED27D11ED8E9A2580C4F9AE02/qXeTIZMxLej1k4T5CX9D3WvDF-E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qXeTIZMxLej1k4T5CX9D3WvDF-E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDD4D/6E94AAFED27D11ED8E9A2580C4F9AE02/qXeTIZMxLej1k4T5CX9D3WvDF-E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:b2:2b:55:dd:d3:ca:dc:88:3a:8b:4c:e0:c0:5c:5c:78:29: 97:55:6c:12:fd:0f:54:eb:33:70:6c:89:34:14:a9:68:bb:9f: 10:30:21:34:56:c9:3a:10:6c:1f:18:eb:2b:ea:41:e2:8f:80: 07:31:4b:25:2c:be:84:83:b4:07:f7:29:06:c7:87:69:21:dc: fa:12:17:16:7d:00:b2:f6:4f:3e:18:95:50:29:93:03:7e:12: 86:7b:dc:56:85:e6:22:4e:e9:39:3a:d4:51:a9:e3:cf:d7:d5: 77:6f:7b:89:8b:24:69:3d:8e:9d:b2:02:6a:f4:19:64:42:23: b0:6c:51:94:6e:95:c1:d8:be:ae:83:ea:cf:de:a7:48:e2:b0: 94:a4:b2:77:67:8c:ad:88:d9:25:12:72:9c:6e:c4:f3:6e:6e: bb:ef:b3:e1:ba:c2:af:2b:41:9e:6d:ab:7e:25:58:39:dd:85: d2:5c:33:1f:d5:6e:3e:94:ce:cf:df:18:ef:8a:be:37:24:5f: 77:08:4b:62:eb:c0:1a:1f:0d:8e:da:e6:5c:a4:86:f1:d9:5e: ec:e9:2c:1d:12:cf:81:41:a0:e2:70:94:54:24:f8:3d:0f:92: 7e:9e:9a:e7:24:8c:c6:87:db:40:ff:82:f0:85:6d:4a:f2:12: 6d:9a:c1:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAa4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRENEQxMTAvBgNVBAUTKEE5Nzc5MzIxOTMzMTJERThGNTkzODRGOTA5N0Y0M0RE NkJDMzE3RTEwHhcNMjUwNjIwMTU1NzQ4WhcNMjUwNjI3MTU1NzQ4WjAYMRYwFAYD VQQDEw02ODU1ODRmYy01ZTg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAk8k9LdnmGchaYSjcPH9Z6q0knApSIZJ6O5gD5zwRdhPJPJ17j/sEE44cSLRR VGHNlSH8u7SFN0sF4+GhKPsUDJ9uYzfqZC0gNW/EZl+bWStewn1Z2vDX0fITL611 3GaVM4h4wVXB8mYES8AGw6gIvuAflE3q7YG/E6CG5csHg4YFn6Zga4wGQQIEXllz tPuGsi+FtAhasw5Y7dWSksu8wP+P9eWcfXOitAP2TpZ7mZrKGe0FMe6FOncSECvW msfdvqBjpCq/FU6ca3NJoaMwKo9IsExBfcoa14dPgmKaLb2o1eNZu8jRN2Vl8qMe sAvd3bHLv3mtV2JgN+6cyT0BTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFBJSAe3 A6ovcs/ugAxNHR5xQeYdMB8GA1UdIwQYMBaAFKl3kyGTMS3o9ZOE+Ql/Q91rwxfh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREQ0RC82RTk0QUFGRUQy N0QxMUVEOEU5QTI1ODBDNEY5QUUwMi9xWGVUSVpNeExlajFrNFQ1Q1g5RDNXdkRG LUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3FYZVRJWk14TGVqMWs0VDVDWDlEM1d2REYtRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG REQ0RC82RTk0QUFGRUQyN0QxMUVEOEU5QTI1ODBDNEY5QUUwMi9xWGVUSVpNeExl ajFrNFQ1Q1g5RDNXdkRGLUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDsitV3dPK3Ig6i0zgwFxceCmXVWwS/Q9U6zNwbIk0FKlou58QMCE0 Vsk6EGwfGOsr6kHij4AHMUslLL6Eg7QH9ykGx4dpIdz6EhcWfQCy9k8+GJVQKZMD fhKGe9xWheYiTuk5OtRRqePP19V3b3uJiyRpPY6dsgJq9BlkQiOwbFGUbpXB2L6u g+rP3qdI4rCUpLJ3Z4ytiNklEnKcbsTzbm6777PhusKvK0Gebat+JVg53YXSXDMf 1W4+lM7P3xjvir43JF93CEti68AaHw2O2uZcpIbx2V7s6SwdEs+BQaDicJRUJPg9 D5J+nprnJIzGh9tA/4LwhW1K8hJtmsFI -----END CERTIFICATE-----Generated at Sat Jun 21 15:43:30 2025 by rpki-client