$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDEFE/1164CAE0A51611EF890ECD3EC4F9AE02/qCkvYgTIIT15H6bMqvV4UZTvgaA.mft File: qCkvYgTIIT15H6bMqvV4UZTvgaA.mft (raw, json) Hash identifier: 8Xgh1rQ3ExFHn5JBMKQIbeeKBM252VfZEG+d/XsiovY= Subject key identifier: C3:44:E5:DA:63:51:83:93:34:C5:0A:0E:D8:9D:AA:D5:50:DC:29:11 Authority key identifier: A8:29:2F:62:04:C8:21:3D:79:1F:A6:CC:AA:F5:78:51:94:EF:81:A0 Certificate issuer: /CN=A91FDEFE/serialNumber=A8292F6204C8213D791FA6CCAAF5785194EF81A0 Certificate serial: 70 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qCkvYgTIIT15H6bMqvV4UZTvgaA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDEFE/1164CAE0A51611EF890ECD3EC4F9AE02/qCkvYgTIIT15H6bMqvV4UZTvgaA.mft Manifest number: 6F Signing time: Thu 19 Jun 2025 06:16:08 +0000 Manifest this update: Thu 19 Jun 2025 06:16:07 +0000 Manifest next update: Thu 26 Jun 2025 06:16:07 +0000 Files and hashes: 1: qCkvYgTIIT15H6bMqvV4UZTvgaA.crl (hash: 1r68XiqQ26dtoZ+/IxaiGWTotXCAtEpabV4yc/t3gQ8=) 2: E7695EC6A53411EFB98AFE51C4F9AE02.roa (hash: Lu7YmWMIdl1OwrJtUhBGFe6+OAHwy7pjCKEXO1Xq/dY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDEFE/1164CAE0A51611EF890ECD3EC4F9AE02/qCkvYgTIIT15H6bMqvV4UZTvgaA.crl rsync://rpki.apnic.net/member_repository/A91FDEFE/1164CAE0A51611EF890ECD3EC4F9AE02/qCkvYgTIIT15H6bMqvV4UZTvgaA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qCkvYgTIIT15H6bMqvV4UZTvgaA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 02:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 112 (0x70) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDEFE, serialNumber=A8292F6204C8213D791FA6CCAAF5785194EF81A0 Validity Not Before: Jun 19 06:16:07 2025 GMT Not After : Jun 26 06:16:07 2025 GMT Subject: CN=6853ab28-33f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:87:33:31:5d:36:c7:1d:36:4c:d5:97:3c:eb: f0:51:d5:a9:07:f6:c0:fd:10:ee:50:a5:fc:aa:06: ea:06:c8:9d:15:7c:21:93:be:8d:65:9c:2f:ae:1b: ba:8a:1d:dd:17:77:2a:66:64:78:57:8b:7f:cc:82: fe:13:ca:4a:a6:b5:9b:1b:8b:06:89:bd:be:4c:f3: 51:a9:be:ea:8d:27:19:17:f3:06:0e:a1:7a:07:4d: 6f:40:7a:5e:06:03:8d:eb:a9:9e:1b:a0:26:b6:5e: f0:57:2c:30:b3:7d:3e:03:56:11:38:84:88:f0:f7: 11:46:16:7b:ae:4c:83:be:d6:10:38:ef:f7:21:eb: a5:9c:60:cf:85:bb:2e:f2:14:53:f1:14:d3:ac:eb: f7:23:fd:8a:4e:0c:d8:e1:0e:86:ce:3f:69:31:9f: b7:28:b3:c2:f4:c1:c5:f5:a5:a7:e3:80:a5:f2:8f: d9:cd:4a:96:fb:c4:17:ec:e2:e3:51:0a:53:86:97: 1a:9e:3f:b3:b5:34:07:41:3c:09:ba:2c:ac:a3:4d: 36:88:c2:21:a9:b7:ba:62:9d:9f:6b:d4:7b:58:90: 66:3c:a4:d6:1f:2a:ec:53:47:a1:c5:b0:4d:f5:a3: 56:a7:78:f3:5c:b7:98:c5:26:71:fa:f4:e6:02:d1: 51:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:44:E5:DA:63:51:83:93:34:C5:0A:0E:D8:9D:AA:D5:50:DC:29:11 X509v3 Authority Key Identifier: keyid:A8:29:2F:62:04:C8:21:3D:79:1F:A6:CC:AA:F5:78:51:94:EF:81:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDEFE/1164CAE0A51611EF890ECD3EC4F9AE02/qCkvYgTIIT15H6bMqvV4UZTvgaA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qCkvYgTIIT15H6bMqvV4UZTvgaA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDEFE/1164CAE0A51611EF890ECD3EC4F9AE02/qCkvYgTIIT15H6bMqvV4UZTvgaA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:c7:92:84:b3:87:20:66:3f:0f:d5:7c:2e:00:e4:be:48:28: b8:03:e2:38:4a:f3:31:7a:a2:ee:dd:e1:49:d6:b7:4c:21:e2: 64:48:39:e8:f8:b2:87:ce:39:09:32:a0:61:ac:56:f4:68:4d: 6a:6f:c7:ae:09:19:20:45:71:75:dd:db:65:90:ce:0b:07:89: 30:e2:15:b2:d1:3d:cd:fa:02:5a:55:c9:1e:31:fc:ac:58:28: 9d:02:13:0a:e5:8b:af:09:c0:f3:5f:03:96:4a:40:07:fe:ae: 02:65:53:ba:45:76:de:79:00:42:1c:d3:98:d9:6b:b8:c5:c9: 42:d9:45:50:ae:85:52:7f:98:c7:4d:89:81:c0:73:8f:78:e7: 08:8e:29:5d:4f:e6:c1:4c:85:4d:14:88:82:d0:4e:32:a4:39: cf:87:75:8b:4c:fc:4e:29:4a:a8:68:46:c0:c2:be:24:46:00: 9a:6d:f5:1f:87:50:c8:e2:95:f5:77:a2:92:db:59:0d:b4:ac: ac:e9:c7:8b:e5:c8:b3:e6:e6:5a:42:ea:64:3e:5b:77:b5:31: af:e3:49:cc:22:af:c5:9e:3c:39:cc:9c:26:bd:54:c2:81:24: 3c:5a:71:02:67:47:da:34:8e:ee:4e:5e:3b:1e:dd:be:fa:78: 3d:81:93:e2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBcDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG REVGRTExMC8GA1UEBRMoQTgyOTJGNjIwNEM4MjEzRDc5MUZBNkNDQUFGNTc4NTE5 NEVGODFBMDAeFw0yNTA2MTkwNjE2MDdaFw0yNTA2MjYwNjE2MDdaMBgxFjAUBgNV BAMTDTY4NTNhYjI4LTMzZjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCzhzMxXTbHHTZM1Zc86/BR1akH9sD9EO5QpfyqBuoGyJ0VfCGTvo1lnC+uG7qK Hd0XdypmZHhXi3/Mgv4TykqmtZsbiwaJvb5M81GpvuqNJxkX8wYOoXoHTW9Ael4G A43rqZ4boCa2XvBXLDCzfT4DVhE4hIjw9xFGFnuuTIO+1hA47/ch66WcYM+Fuy7y FFPxFNOs6/cj/YpODNjhDobOP2kxn7cos8L0wcX1pafjgKXyj9nNSpb7xBfs4uNR ClOGlxqeP7O1NAdBPAm6LKyjTTaIwiGpt7pinZ9r1HtYkGY8pNYfKuxTR6HFsE31 o1anePNct5jFJnH69OYC0VF7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUw0Tl2mNR g5M0xQoO2J2q1VDcKREwHwYDVR0jBBgwFoAUqCkvYgTIIT15H6bMqvV4UZTvgaAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZERUZFLzExNjRDQUUwQTUx NjExRUY4OTBFQ0QzRUM0RjlBRTAyL3FDa3ZZZ1RJSVQxNUg2Yk1xdlY0VVpUdmdh QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvcUNrdllnVElJVDE1SDZiTXF2VjRVWlR2Z2FBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZE RUZFLzExNjRDQUUwQTUxNjExRUY4OTBFQ0QzRUM0RjlBRTAyL3FDa3ZZZ1RJSVQx NUg2Yk1xdlY0VVpUdmdhQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFjHkoSzhyBmPw/VfC4A5L5IKLgD4jhK8zF6ou7d4UnWt0wh4mRIOej4 sofOOQkyoGGsVvRoTWpvx64JGSBFcXXd22WQzgsHiTDiFbLRPc36AlpVyR4x/KxY KJ0CEwrli68JwPNfA5ZKQAf+rgJlU7pFdt55AEIc05jZa7jFyULZRVCuhVJ/mMdN iYHAc4945wiOKV1P5sFMhU0UiILQTjKkOc+HdYtM/E4pSqhoRsDCviRGAJpt9R+H UMjilfV3opLbWQ20rKzpx4vlyLPm5lpC6mQ+W3e1Ma/jScwir8WePDnMnCa9VMKB JDxacQJnR9o0ju5OXjse3b76eD2Bk+I= -----END CERTIFICATE-----Generated at Thu Jun 19 08:43:22 2025 by rpki-client