$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF18F/1683924843E811EA8AB65E35C4F9AE02/qaamgasBulFfIZosreoJRbStWZ0.mft File: qaamgasBulFfIZosreoJRbStWZ0.mft (raw, json) Hash identifier: lKTDy0l+h3sVETqW2kQWdQpeVaxr8pl5b3LYF8fVHt4= Subject key identifier: 5B:60:57:D3:18:C2:54:89:B8:18:84:85:CB:5A:36:91:2F:43:08:75 Authority key identifier: A9:A6:A6:81:AB:01:BA:51:5F:21:9A:2C:AD:EA:09:45:B4:AD:59:9D Certificate issuer: /CN=A91FF18F/serialNumber=A9A6A681AB01BA515F219A2CADEA0945B4AD599D Certificate serial: 0B06 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qaamgasBulFfIZosreoJRbStWZ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF18F/1683924843E811EA8AB65E35C4F9AE02/qaamgasBulFfIZosreoJRbStWZ0.mft Manifest number: 0B06 Signing time: Sat 14 Jun 2025 19:09:59 +0000 Manifest this update: Sat 14 Jun 2025 19:09:59 +0000 Manifest next update: Sat 21 Jun 2025 19:09:59 +0000 Files and hashes: 1: qaamgasBulFfIZosreoJRbStWZ0.crl (hash: 90rctsxIH5QERclGyDY+fJsBGj76xnyjCVhfw96a2Lg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF18F/1683924843E811EA8AB65E35C4F9AE02/qaamgasBulFfIZosreoJRbStWZ0.crl rsync://rpki.apnic.net/member_repository/A91FF18F/1683924843E811EA8AB65E35C4F9AE02/qaamgasBulFfIZosreoJRbStWZ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qaamgasBulFfIZosreoJRbStWZ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 19:09:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2822 (0xb06) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF18F, serialNumber=A9A6A681AB01BA515F219A2CADEA0945B4AD599D Validity Not Before: Jun 14 19:09:59 2025 GMT Not After : Jun 21 19:09:59 2025 GMT Subject: CN=684dc907-45f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:74:18:95:8b:e3:2f:fc:dc:e0:9a:6a:ec:3d: 91:9c:a8:b4:01:46:df:13:f6:eb:ea:9c:68:e2:9b: d1:e6:ac:71:3d:fa:25:16:88:a2:39:32:01:6a:d8: 5e:dd:66:c9:b0:25:11:73:17:32:3f:3a:28:85:52: e0:04:82:ce:ad:96:8f:ee:9d:88:b8:9b:01:09:bb: 06:2a:ca:87:80:9d:53:cb:06:a3:62:7b:bf:fb:f5: f2:e9:a2:3d:7a:8c:d7:29:27:b5:35:56:10:6f:d7: 2d:12:24:5c:ed:c9:32:7f:82:37:11:96:ac:e2:a5: dd:52:92:f0:9b:80:00:33:a0:3b:88:b7:cf:8c:7c: bb:b7:ee:d4:d4:6f:59:11:c3:cc:07:8f:30:79:25: f4:af:5c:7f:a5:e1:15:80:ce:df:2d:04:e8:48:f6: f6:98:f4:0b:1d:a1:87:52:2a:3a:2a:d8:cf:79:e0: ab:76:eb:6e:08:60:ef:19:a7:fa:60:61:e5:8d:b1: ec:95:5b:2a:67:58:49:a1:6b:ae:69:f1:84:cf:51: 0f:aa:5b:31:2a:ac:8f:32:aa:b9:5b:cf:9f:b5:f8: 57:d0:1a:29:6f:6e:9e:07:7e:bd:17:cc:e8:78:6a: f4:92:14:7e:a0:47:08:ef:f5:77:18:70:bb:16:45: d9:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:60:57:D3:18:C2:54:89:B8:18:84:85:CB:5A:36:91:2F:43:08:75 X509v3 Authority Key Identifier: keyid:A9:A6:A6:81:AB:01:BA:51:5F:21:9A:2C:AD:EA:09:45:B4:AD:59:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF18F/1683924843E811EA8AB65E35C4F9AE02/qaamgasBulFfIZosreoJRbStWZ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qaamgasBulFfIZosreoJRbStWZ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF18F/1683924843E811EA8AB65E35C4F9AE02/qaamgasBulFfIZosreoJRbStWZ0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:1f:2c:ef:ea:f7:48:a8:22:f9:dc:9e:8a:52:b2:e8:fa:d3: 9d:a5:b1:f1:b3:87:75:30:93:c1:42:38:10:a2:bf:de:cf:06: 81:fd:51:77:06:b0:4f:20:ce:b5:fc:3b:f5:0a:14:2c:8c:b3: 6b:be:69:ee:ab:49:f6:81:ec:80:48:31:af:46:50:18:41:f5: 3a:11:04:16:00:49:35:92:8a:55:20:55:ce:c1:aa:fb:f3:f0: 19:c5:c5:30:92:a3:49:c4:6e:8f:6a:52:40:e8:0c:11:07:b5: 04:3a:40:9f:b2:03:14:55:c3:6e:d8:e8:dc:4c:6d:e9:b0:dd: 91:a6:e2:e3:08:54:a2:43:1e:87:ab:46:44:36:2d:43:eb:d6: f4:89:82:7f:5b:97:e9:71:2f:89:3b:e4:0e:f5:1d:68:e1:77: b3:92:7a:0e:f8:ba:5e:13:5b:00:85:e8:b6:58:b4:f1:00:b2: 83:77:c5:55:28:1c:70:81:78:1f:5f:4d:8b:2c:34:d3:e4:94: da:1d:7d:82:aa:c9:d0:50:ef:98:6b:c1:2e:b3:ee:9a:d6:16: 4a:02:9e:57:c4:55:87:3a:0a:5c:15:18:85:0c:9c:05:86:f2: c9:44:c4:c7:93:35:ea:43:3b:1e:06:59:0d:27:21:cb:78:24: 9a:51:49:82 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCwYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkYxOEYxMTAvBgNVBAUTKEE5QTZBNjgxQUIwMUJBNTE1RjIxOUEyQ0FERUEwOTQ1 QjRBRDU5OUQwHhcNMjUwNjE0MTkwOTU5WhcNMjUwNjIxMTkwOTU5WjAYMRYwFAYD VQQDEw02ODRkYzkwNy00NWY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3XQYlYvjL/zc4Jpq7D2RnKi0AUbfE/br6pxo4pvR5qxxPfolFoiiOTIBathe 3WbJsCURcxcyPzoohVLgBILOrZaP7p2IuJsBCbsGKsqHgJ1TywajYnu/+/Xy6aI9 eozXKSe1NVYQb9ctEiRc7ckyf4I3EZas4qXdUpLwm4AAM6A7iLfPjHy7t+7U1G9Z EcPMB48weSX0r1x/peEVgM7fLQToSPb2mPQLHaGHUio6KtjPeeCrdutuCGDvGaf6 YGHljbHslVsqZ1hJoWuuafGEz1EPqlsxKqyPMqq5W8+ftfhX0Bopb26eB369F8zo eGr0khR+oEcI7/V3GHC7FkXZ/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFtgV9MY wlSJuBiEhctaNpEvQwh1MB8GA1UdIwQYMBaAFKmmpoGrAbpRXyGaLK3qCUW0rVmd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjE4Ri8xNjgzOTI0ODQz RTgxMUVBOEFCNjVFMzVDNEY5QUUwMi9xYWFtZ2FzQnVsRmZJWm9zcmVvSlJiU3RX WjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FhYW1nYXNCdWxGZklab3NyZW9KUmJTdFdaMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RjE4Ri8xNjgzOTI0ODQzRTgxMUVBOEFCNjVFMzVDNEY5QUUwMi9xYWFtZ2FzQnVs RmZJWm9zcmVvSlJiU3RXWjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJHyzv6vdIqCL53J6KUrLo+tOdpbHxs4d1MJPBQjgQor/ezwaB/VF3 BrBPIM61/Dv1ChQsjLNrvmnuq0n2geyASDGvRlAYQfU6EQQWAEk1kopVIFXOwar7 8/AZxcUwkqNJxG6PalJA6AwRB7UEOkCfsgMUVcNu2OjcTG3psN2RpuLjCFSiQx6H q0ZENi1D69b0iYJ/W5fpcS+JO+QO9R1o4XezknoO+LpeE1sAhei2WLTxALKDd8VV KBxwgXgfX02LLDTT5JTaHX2CqsnQUO+Ya8Eus+6a1hZKAp5XxFWHOgpcFRiFDJwF hvLJRMTHkzXqQzseBlkNJyHLeCSaUUmC -----END CERTIFICATE-----Generated at Mon Jun 16 14:47:02 2025 by rpki-client