$ rpki-client -vvf rpki.apnic.net/member_repository/A9126C60/BF6323E6894B11E387C49E675911EA32/Q59amkDhmWeae8Cb4gf9H2CgSFc.mft File: Q59amkDhmWeae8Cb4gf9H2CgSFc.mft (raw, json) Hash identifier: Uatx/HN2aO+1OTuGv4jOjYTchdxNVD6zV1kfMet+AIE= Subject key identifier: 84:96:BD:39:40:E4:E9:28:AE:87:31:D0:A6:F1:64:B3:FF:24:B8:A7 Authority key identifier: 43:9F:5A:9A:40:E1:99:67:9A:7B:C0:9B:E2:07:FD:1F:60:A0:48:57 Certificate issuer: /CN=A9126C60/serialNumber=439F5A9A40E199679A7BC09BE207FD1F60A04857 Certificate serial: 2D82 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q59amkDhmWeae8Cb4gf9H2CgSFc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9126C60/BF6323E6894B11E387C49E675911EA32/Q59amkDhmWeae8Cb4gf9H2CgSFc.mft Manifest number: 2D66 Signing time: Sat 31 May 2025 15:29:06 +0000 Manifest this update: Sat 31 May 2025 15:29:06 +0000 Manifest next update: Sat 07 Jun 2025 15:29:06 +0000 Files and hashes: 1: Q59amkDhmWeae8Cb4gf9H2CgSFc.crl (hash: L82bDdk8tVnIC3o1vV3uXKTvSgwryM3Q0QMOXZ04ki4=) 2: 7726182828DD11ED8EA0FC4FC4F9AE02.roa (hash: B6weuy2U7VjqemndD9JlkjRjdvpM++iJ2EL75fmO3yk=) 3: 4A66F4B0C52F11E59EE2C868C4F9AE02.roa (hash: H0Aul5FoePWmdJ4ws06EeBfgwjOLxYt9oVPG8uQPMlc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9126C60/BF6323E6894B11E387C49E675911EA32/Q59amkDhmWeae8Cb4gf9H2CgSFc.crl rsync://rpki.apnic.net/member_repository/A9126C60/BF6323E6894B11E387C49E675911EA32/Q59amkDhmWeae8Cb4gf9H2CgSFc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q59amkDhmWeae8Cb4gf9H2CgSFc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 15:29:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11650 (0x2d82) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9126C60, serialNumber=439F5A9A40E199679A7BC09BE207FD1F60A04857 Validity Not Before: May 31 15:29:06 2025 GMT Not After : Jun 7 15:29:06 2025 GMT Subject: CN=683b2042-80e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:fd:d3:41:00:52:a4:f4:8b:cf:d0:38:f6:60: c9:be:de:15:03:5f:9d:b5:6c:7b:c0:6d:ad:1a:cf: 62:27:d7:95:2e:25:b9:b1:b0:d5:a9:73:13:de:77: 4f:15:f1:51:e1:87:2a:e9:56:50:c1:66:9f:4c:00: 8e:e9:ee:04:8d:8f:aa:52:5d:5c:c3:78:3b:27:08: 9a:0f:fc:72:1e:d2:d7:46:24:1b:ae:19:77:55:a8: 74:b1:fc:2a:23:ca:e5:d1:a6:1c:26:e3:79:b6:c4: e1:24:c9:5c:28:65:a0:c3:5d:5c:83:10:2e:84:94: 3b:05:7e:63:2e:d8:9c:4a:ca:4a:f0:a2:b8:48:d2: 3c:d5:6d:f0:1d:06:73:91:ed:33:fa:8b:76:3c:c8: 8e:eb:de:08:e5:25:8a:c7:98:ab:30:21:c7:df:de: 13:e7:f8:60:88:89:3f:08:72:65:45:0f:df:0e:4b: df:fa:32:bf:3f:3b:36:40:2a:ee:2f:b4:e6:12:90: 07:8b:40:63:ac:91:38:be:54:e7:97:5d:3f:65:e7: ce:9b:77:78:df:f2:a8:f5:f9:b6:b0:38:7a:28:7a: 80:16:39:5c:41:ff:47:ba:cd:d3:01:39:0d:9d:4a: 90:58:8c:0c:00:3f:32:d6:8a:db:ca:9e:89:58:55: 75:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:96:BD:39:40:E4:E9:28:AE:87:31:D0:A6:F1:64:B3:FF:24:B8:A7 X509v3 Authority Key Identifier: keyid:43:9F:5A:9A:40:E1:99:67:9A:7B:C0:9B:E2:07:FD:1F:60:A0:48:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9126C60/BF6323E6894B11E387C49E675911EA32/Q59amkDhmWeae8Cb4gf9H2CgSFc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q59amkDhmWeae8Cb4gf9H2CgSFc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126C60/BF6323E6894B11E387C49E675911EA32/Q59amkDhmWeae8Cb4gf9H2CgSFc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:7a:1f:00:ec:ad:8c:b1:ed:e7:a6:a5:05:1c:5e:da:61:fb: 01:4d:d0:57:10:f6:72:0c:bf:2f:dd:45:25:65:5f:e9:5d:b3: 9d:dd:0b:e7:4b:61:26:5f:ae:90:3a:6b:07:e2:8b:63:7a:9e: 85:5a:62:05:40:87:64:ce:e6:5d:12:a9:9b:b5:84:29:7a:3c: 0b:56:c5:d2:20:30:81:07:f4:93:ca:d5:3c:a5:17:ee:7e:58: 4e:bc:fe:a6:79:fb:31:0b:11:7b:5c:b6:0e:8f:25:92:70:d2: 62:cb:6c:aa:e7:9c:45:df:0a:d4:da:30:84:54:70:9d:9e:d2: e2:ac:dc:11:ce:26:73:dc:3e:ba:f9:31:1e:29:04:8c:91:4e: e4:d2:d6:c1:7e:43:21:2d:2c:de:77:64:5b:45:3b:7d:49:4e: de:4f:8e:ba:a7:28:70:3c:43:6a:1d:cf:8d:2c:5c:e9:b4:b1: 56:cc:62:6c:ed:39:a3:61:35:60:c8:96:bd:0a:b2:48:2a:e4: a8:ba:5d:94:9b:ee:f5:08:ff:24:19:6e:70:60:6f:6e:fa:3d: 81:2f:d5:79:21:fc:46:ca:02:ed:4a:4b:02:8a:cc:02:e1:6e: ef:2b:b2:78:cb:7f:47:50:5c:12:f0:7e:44:4f:3a:76:2f:33: de:7e:d2:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICLYIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjZDNjAxMTAvBgNVBAUTKDQzOUY1QTlBNDBFMTk5Njc5QTdCQzA5QkUyMDdGRDFG NjBBMDQ4NTcwHhcNMjUwNTMxMTUyOTA2WhcNMjUwNjA3MTUyOTA2WjAYMRYwFAYD VQQDEw02ODNiMjA0Mi04MGUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3/3TQQBSpPSLz9A49mDJvt4VA1+dtWx7wG2tGs9iJ9eVLiW5sbDVqXMT3ndP FfFR4Ycq6VZQwWafTACO6e4EjY+qUl1cw3g7JwiaD/xyHtLXRiQbrhl3Vah0sfwq I8rl0aYcJuN5tsThJMlcKGWgw11cgxAuhJQ7BX5jLticSspK8KK4SNI81W3wHQZz ke0z+ot2PMiO694I5SWKx5irMCHH394T5/hgiIk/CHJlRQ/fDkvf+jK/Pzs2QCru L7TmEpAHi0BjrJE4vlTnl10/ZefOm3d43/Ko9fm2sDh6KHqAFjlcQf9Hus3TATkN nUqQWIwMAD8y1orbyp6JWFV1bwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFISWvTlA 5Okorocx0KbxZLP/JLinMB8GA1UdIwQYMBaAFEOfWppA4ZlnmnvAm+IH/R9goEhX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNkM2MC9CRjYzMjNFNjg5 NEIxMUUzODdDNDlFNjc1OTExRUEzMi9RNTlhbWtEaG1XZWFlOENiNGdmOUgyQ2dT RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1E1OWFta0RobVdlYWU4Q2I0Z2Y5SDJDZ1NGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NkM2MC9CRjYzMjNFNjg5NEIxMUUzODdDNDlFNjc1OTExRUEzMi9RNTlhbWtEaG1X ZWFlOENiNGdmOUgyQ2dTRmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCeh8A7K2Mse3npqUFHF7aYfsBTdBXEPZyDL8v3UUlZV/pXbOd3Qvn S2EmX66QOmsH4otjep6FWmIFQIdkzuZdEqmbtYQpejwLVsXSIDCBB/STytU8pRfu flhOvP6mefsxCxF7XLYOjyWScNJiy2yq55xF3wrU2jCEVHCdntLirNwRziZz3D66 +TEeKQSMkU7k0tbBfkMhLSzed2RbRTt9SU7eT466pyhwPENqHc+NLFzptLFWzGJs 7TmjYTVgyJa9CrJIKuSoul2Um+71CP8kGW5wYG9u+j2BL9V5IfxGygLtSksCiswC 4W7vK7J4y39HUFwS8H5ETzp2LzPeftJ4 -----END CERTIFICATE-----Generated at Sat May 31 17:51:40 2025 by rpki-client