$ rpki-client -vvf rpki.apnic.net/member_repository/A91127A2/D1CD5458B1CE11EB8FF1C067C4F9AE02/qSHPiNjIngus1O4YU4wzsnipWSw.mft File: qSHPiNjIngus1O4YU4wzsnipWSw.mft (raw, json) Hash identifier: P/sdimHNlBh4ZaEcV/GtIwPhSm5IjBIk/nIPI4B7GLA= Subject key identifier: 91:4A:79:60:1E:C4:CA:CC:00:70:BA:0D:F6:14:31:93:28:6C:D4:4B Authority key identifier: A9:21:CF:88:D8:C8:9E:0B:AC:D4:EE:18:53:8C:33:B2:78:A9:59:2C Certificate issuer: /CN=A91127A2/serialNumber=A921CF88D8C89E0BACD4EE18538C33B278A9592C Certificate serial: 05F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSHPiNjIngus1O4YU4wzsnipWSw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91127A2/D1CD5458B1CE11EB8FF1C067C4F9AE02/qSHPiNjIngus1O4YU4wzsnipWSw.mft Manifest number: 05EC Signing time: Wed 04 Jun 2025 22:47:41 +0000 Manifest this update: Wed 04 Jun 2025 22:47:41 +0000 Manifest next update: Wed 11 Jun 2025 22:47:41 +0000 Files and hashes: 1: qSHPiNjIngus1O4YU4wzsnipWSw.crl (hash: JnoDUulkorhAOi6Hg5QMnbX3p3UG4f7IG0Pfwh6ta30=) 2: 07332486B1D111EBA956F96AC4F9AE02.roa (hash: QK+G6fNVeQvRNDArbOTnNoOHNeXa2RP5xEy26aJHwS0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91127A2/D1CD5458B1CE11EB8FF1C067C4F9AE02/qSHPiNjIngus1O4YU4wzsnipWSw.crl rsync://rpki.apnic.net/member_repository/A91127A2/D1CD5458B1CE11EB8FF1C067C4F9AE02/qSHPiNjIngus1O4YU4wzsnipWSw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSHPiNjIngus1O4YU4wzsnipWSw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Jun 2025 22:47:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1521 (0x5f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91127A2, serialNumber=A921CF88D8C89E0BACD4EE18538C33B278A9592C Validity Not Before: Jun 4 22:47:41 2025 GMT Not After : Jun 11 22:47:41 2025 GMT Subject: CN=6840cd0d-acc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:dc:7b:15:10:e2:de:12:02:58:64:9d:ed:f0: 0c:50:36:b3:87:a5:d6:25:ab:50:3f:79:7a:47:22: 38:bf:31:99:2b:ff:82:45:d9:97:50:ef:fe:da:03: be:97:e2:6f:30:84:b5:b3:d0:d1:47:41:f7:78:94: 8f:e2:c9:1b:de:2a:7b:9e:72:7d:cf:7f:0f:00:e2: 5b:f6:cd:1a:df:5c:f0:de:39:93:26:6a:ab:e9:f2: 15:c8:c2:3f:95:84:36:f6:a7:64:f9:e3:45:5f:76: 5a:76:4a:72:4e:c6:bf:12:e2:3c:8e:10:3d:b0:48: 31:27:78:ba:7c:ab:a5:f8:45:2a:20:58:2a:d1:d7: 40:ab:c1:3c:2d:27:67:06:19:a6:f6:d0:7f:2e:7e: fe:4c:62:29:76:1f:31:45:86:c0:96:f5:23:cc:2b: e7:37:cb:19:ee:83:78:35:9f:c3:01:1f:5a:f7:f6: 32:9d:57:36:c4:78:31:62:21:a7:7c:7b:4c:eb:43: f8:2d:e1:72:39:ee:4f:f4:0a:4a:b7:d4:64:f6:08: 18:d8:fb:82:7d:e8:6d:79:f9:17:7d:65:f1:e8:da: a6:eb:de:e3:a2:c6:29:72:d7:2e:d1:ea:b2:f5:75: f9:93:99:09:1c:9b:a7:20:69:d3:08:92:85:78:84: 37:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:4A:79:60:1E:C4:CA:CC:00:70:BA:0D:F6:14:31:93:28:6C:D4:4B X509v3 Authority Key Identifier: keyid:A9:21:CF:88:D8:C8:9E:0B:AC:D4:EE:18:53:8C:33:B2:78:A9:59:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91127A2/D1CD5458B1CE11EB8FF1C067C4F9AE02/qSHPiNjIngus1O4YU4wzsnipWSw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSHPiNjIngus1O4YU4wzsnipWSw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91127A2/D1CD5458B1CE11EB8FF1C067C4F9AE02/qSHPiNjIngus1O4YU4wzsnipWSw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:76:1a:d7:66:e8:0e:b2:83:cc:0b:db:25:ee:2a:79:33:0f: 67:af:c0:3d:43:f3:57:87:98:17:82:ea:0d:91:ee:8c:0a:a6: 03:c3:99:1f:6b:01:bb:b8:2f:3f:99:1b:0f:0e:f5:b3:e8:59: 97:6a:17:30:0d:7d:c5:0d:cd:10:c3:2b:0e:0d:65:b6:99:b1: 8d:87:dc:9d:80:f5:d2:87:87:2d:6d:a6:59:36:11:4d:98:b6: 04:9c:2e:56:e6:f8:85:b5:f4:1d:e8:7a:f3:c9:8b:20:02:b7: 9e:dc:33:06:e1:6e:72:32:7a:23:a8:11:1c:94:42:51:3a:cc: 8b:f1:e7:ed:10:22:58:c2:cb:31:95:79:d3:bf:a3:4e:7e:59: 45:94:f3:a7:1f:49:5b:5f:66:69:22:0d:29:6e:0c:b8:fe:6d: d5:eb:f7:1a:0f:05:f1:e7:44:99:5f:d6:51:26:21:d8:39:b4: 64:18:c5:98:d4:4d:94:f4:a4:3f:55:d8:08:1a:93:86:08:5a: b7:e3:d6:05:07:00:fa:89:f9:97:67:03:18:1f:1b:62:ff:c6: 39:11:5b:96:5f:b6:3c:75:29:1f:b0:46:45:48:0e:f6:f8:22: 2c:8e:be:c0:52:91:9f:4e:98:5e:de:46:19:91:98:05:5f:e9: 01:8f:d4:43 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBfEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI3QTIxMTAvBgNVBAUTKEE5MjFDRjg4RDhDODlFMEJBQ0Q0RUUxODUzOEMzM0Iy NzhBOTU5MkMwHhcNMjUwNjA0MjI0NzQxWhcNMjUwNjExMjI0NzQxWjAYMRYwFAYD VQQDEw02ODQwY2QwZC1hY2MyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA59x7FRDi3hICWGSd7fAMUDazh6XWJatQP3l6RyI4vzGZK/+CRdmXUO/+2gO+ l+JvMIS1s9DRR0H3eJSP4skb3ip7nnJ9z38PAOJb9s0a31zw3jmTJmqr6fIVyMI/ lYQ29qdk+eNFX3ZadkpyTsa/EuI8jhA9sEgxJ3i6fKul+EUqIFgq0ddAq8E8LSdn Bhmm9tB/Ln7+TGIpdh8xRYbAlvUjzCvnN8sZ7oN4NZ/DAR9a9/YynVc2xHgxYiGn fHtM60P4LeFyOe5P9ApKt9Rk9ggY2PuCfehtefkXfWXx6Nqm697josYpctcu0eqy 9XX5k5kJHJunIGnTCJKFeIQ3JQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJFKeWAe xMrMAHC6DfYUMZMobNRLMB8GA1UdIwQYMBaAFKkhz4jYyJ4LrNTuGFOMM7J4qVks MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjdBMi9EMUNENTQ1OEIx Q0UxMUVCOEZGMUMwNjdDNEY5QUUwMi9xU0hQaU5qSW5ndXMxTzRZVTR3enNuaXBX U3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FTSFBpTmpJbmd1czFPNFlVNHd6c25pcFdTdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjdBMi9EMUNENTQ1OEIxQ0UxMUVCOEZGMUMwNjdDNEY5QUUwMi9xU0hQaU5qSW5n dXMxTzRZVTR3enNuaXBXU3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCgdhrXZugOsoPMC9sl7ip5Mw9nr8A9Q/NXh5gXguoNke6MCqYDw5kf awG7uC8/mRsPDvWz6FmXahcwDX3FDc0QwysODWW2mbGNh9ydgPXSh4ctbaZZNhFN mLYEnC5W5viFtfQd6HrzyYsgAree3DMG4W5yMnojqBEclEJROsyL8eftECJYwssx lXnTv6NOfllFlPOnH0lbX2ZpIg0pbgy4/m3V6/caDwXx50SZX9ZRJiHYObRkGMWY 1E2U9KQ/VdgIGpOGCFq349YFBwD6ifmXZwMYHxti/8Y5EVuWX7Y8dSkfsEZFSA72 +CIsjr7AUpGfTphe3kYZkZgFX+kBj9RD -----END CERTIFICATE-----Generated at Thu Jun 5 18:19:48 2025 by rpki-client