$ rpki-client -vvf rpki.apnic.net/member_repository/A912C8AF/EE0AEECA3E8111EB9ABD920FC4F9AE02/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.mft File: Qk4KOEPz-h9Etq8u8-4RgVxLUgk.mft (raw, json) Hash identifier: mGhSekxhSvctRxjvFUt2Pdi8MwVqOMvjYFCO8FjIzk8= Subject key identifier: A6:5B:5C:D9:42:C9:59:F4:FF:9B:C3:0B:E9:15:7D:D9:48:7F:5B:32 Authority key identifier: 42:4E:0A:38:43:F3:FA:1F:44:B6:AF:2E:F3:EE:11:81:5C:4B:52:09 Certificate issuer: /CN=A912C8AF/serialNumber=424E0A3843F3FA1F44B6AF2EF3EE11815C4B5209 Certificate serial: 072B Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C8AF/EE0AEECA3E8111EB9ABD920FC4F9AE02/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.mft Manifest number: 0721 Signing time: Wed 04 Jun 2025 19:32:16 +0000 Manifest this update: Wed 04 Jun 2025 19:32:16 +0000 Manifest next update: Wed 11 Jun 2025 19:32:16 +0000 Files and hashes: 1: Qk4KOEPz-h9Etq8u8-4RgVxLUgk.crl (hash: fJ7F90yEKZdgGGdL3zhmrJXjOxkKvkVNYeKuDEgwvd4=) 2: 510308503E8211EBA910FF57C4F9AE02.roa (hash: PjHH406K/ka7XNZ7a0h9GqbdKh0e4+H0cJO6YTJYTgA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C8AF/EE0AEECA3E8111EB9ABD920FC4F9AE02/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.crl rsync://rpki.apnic.net/member_repository/A912C8AF/EE0AEECA3E8111EB9ABD920FC4F9AE02/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Jun 2025 19:32:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1835 (0x72b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C8AF, serialNumber=424E0A3843F3FA1F44B6AF2EF3EE11815C4B5209 Validity Not Before: Jun 4 19:32:16 2025 GMT Not After : Jun 11 19:32:16 2025 GMT Subject: CN=68409f40-6efc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:be:b8:07:40:51:b9:b4:6a:5f:cd:9e:8b:66: d1:eb:fd:57:c5:be:02:37:84:e3:6f:db:9e:7c:a9: 39:9e:03:50:04:fa:f7:cf:d1:47:25:f0:cd:1b:0f: 9b:c2:ba:22:e4:39:b8:53:4e:b9:2d:20:f0:21:ab: 79:11:8a:b8:66:2b:eb:94:5e:58:ee:f2:5c:06:72: 72:f5:d0:78:41:20:78:48:9a:53:00:b4:f0:8f:69: fa:b8:8b:50:65:c3:41:13:53:dc:a9:e8:c9:50:84: 3f:31:d3:df:55:eb:a3:47:b7:6e:f1:f5:69:7f:d2: ca:b1:12:9d:33:9e:53:cf:6b:df:ed:03:1a:8b:bc: 7a:01:cf:f5:66:81:76:0c:1d:e7:5a:02:a0:5d:02: 0f:9e:74:3c:2f:5f:c9:c1:aa:22:b0:09:da:5e:59: 9e:08:c3:17:7d:0a:04:7a:8a:90:06:19:75:12:3b: 09:18:12:27:26:8a:c0:40:21:48:4a:8b:a3:c5:ce: 4e:a3:63:81:38:89:10:37:66:ba:3b:c6:2f:59:70: b6:06:33:53:c5:6f:e7:d4:c3:73:6a:c3:b7:9d:5b: f5:8a:ba:7b:bc:b5:e6:49:a9:0f:ac:65:98:78:42: 1b:4c:38:09:3e:c0:70:b4:a3:8f:5a:f3:ee:61:9e: d0:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:5B:5C:D9:42:C9:59:F4:FF:9B:C3:0B:E9:15:7D:D9:48:7F:5B:32 X509v3 Authority Key Identifier: keyid:42:4E:0A:38:43:F3:FA:1F:44:B6:AF:2E:F3:EE:11:81:5C:4B:52:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C8AF/EE0AEECA3E8111EB9ABD920FC4F9AE02/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C8AF/EE0AEECA3E8111EB9ABD920FC4F9AE02/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:21:62:98:63:71:17:a5:71:3f:cf:0e:7c:7c:e9:f0:15:51: 49:fb:ed:3a:4e:09:10:99:e5:3f:ed:1d:85:b5:8d:83:62:7a: a2:8d:80:36:9a:c0:a3:a4:62:37:4b:f3:09:6c:3b:c0:9a:41: ea:75:96:cd:0a:9c:cc:bd:77:6e:d5:c3:57:4f:fa:9b:83:c5: 8f:08:a0:74:b4:49:9d:f2:54:63:79:3e:f7:36:62:35:3b:36: df:a0:1f:80:b3:d5:96:60:81:81:83:7a:5f:20:57:bf:c8:a7: be:16:9e:75:1e:d3:c7:af:f1:c3:c0:65:ba:bc:dd:6a:ef:4d: fa:a0:74:c5:ab:3d:1d:ac:b8:af:7c:d1:ad:1b:04:83:0c:9b: ce:44:ff:43:50:ba:f0:94:1d:c2:0e:1c:19:1b:f4:37:5b:ae: a5:0d:87:be:b6:bb:3e:db:c6:fd:aa:c8:79:a5:26:d2:7d:ce: d4:b0:e3:b3:e4:69:52:a1:1d:33:dd:02:a0:cd:b0:e7:5c:e4: 5e:5c:1f:18:24:6c:f0:7d:c2:ee:b7:df:62:bc:51:26:da:29: cc:2a:50:59:a4:38:a7:60:a7:c9:7b:c2:4a:58:68:ca:62:c9: dc:98:a0:46:83:48:6d:96:2b:1c:e6:c6:3f:a3:75:f7:86:96: c0:5e:cf:41 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICByswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkM4QUYxMTAvBgNVBAUTKDQyNEUwQTM4NDNGM0ZBMUY0NEI2QUYyRUYzRUUxMTgx NUM0QjUyMDkwHhcNMjUwNjA0MTkzMjE2WhcNMjUwNjExMTkzMjE2WjAYMRYwFAYD VQQDEw02ODQwOWY0MC02ZWZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3764B0BRubRqX82ei2bR6/1Xxb4CN4Tjb9uefKk5ngNQBPr3z9FHJfDNGw+b wroi5Dm4U065LSDwIat5EYq4ZivrlF5Y7vJcBnJy9dB4QSB4SJpTALTwj2n6uItQ ZcNBE1PcqejJUIQ/MdPfVeujR7du8fVpf9LKsRKdM55Tz2vf7QMai7x6Ac/1ZoF2 DB3nWgKgXQIPnnQ8L1/JwaoisAnaXlmeCMMXfQoEeoqQBhl1EjsJGBInJorAQCFI Soujxc5Oo2OBOIkQN2a6O8YvWXC2BjNTxW/n1MNzasO3nVv1irp7vLXmSakPrGWY eEIbTDgJPsBwtKOPWvPuYZ7QwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKZbXNlC yVn0/5vDC+kVfdlIf1syMB8GA1UdIwQYMBaAFEJOCjhD8/ofRLavLvPuEYFcS1IJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzhBRi9FRTBBRUVDQTNF ODExMUVCOUFCRDkyMEZDNEY5QUUwMi9RazRLT0VQei1oOUV0cTh1OC00UmdWeExV Z2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL1FrNEtPRVB6LWg5RXRxOHU4LTRSZ1Z4TFVnay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QzhBRi9FRTBBRUVDQTNFODExMUVCOUFCRDkyMEZDNEY5QUUwMi9RazRLT0VQei1o OUV0cTh1OC00UmdWeExVZ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCTIWKYY3EXpXE/zw58fOnwFVFJ++06TgkQmeU/7R2FtY2DYnqijYA2 msCjpGI3S/MJbDvAmkHqdZbNCpzMvXdu1cNXT/qbg8WPCKB0tEmd8lRjeT73NmI1 OzbfoB+As9WWYIGBg3pfIFe/yKe+Fp51HtPHr/HDwGW6vN1q7036oHTFqz0drLiv fNGtGwSDDJvORP9DULrwlB3CDhwZG/Q3W66lDYe+trs+28b9qsh5pSbSfc7UsOOz 5GlSoR0z3QKgzbDnXOReXB8YJGzwfcLut99ivFEm2inMKlBZpDinYKfJe8JKWGjK YsncmKBGg0htlisc5sY/o3X3hpbAXs9B -----END CERTIFICATE-----Generated at Thu Jun 5 19:13:18 2025 by rpki-client