$ rpki-client -vvf rpki.apnic.net/member_repository/A912D306/BCBD801C1D8D11E2B429B7EB08B02CD2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.mft File: QQ8P6Xvp2e0HVs1Ndja5P48jizE.mft (raw, json) Hash identifier: WzJYvmAZOra0QnwsQzTkFmY2VXGfEtOLGFgWy/OnA00= Subject key identifier: 45:AD:55:CA:E3:5D:B6:DC:47:B7:84:49:9C:F3:BC:B9:FB:85:B7:5C Authority key identifier: 41:0F:0F:E9:7B:E9:D9:ED:07:56:CD:4D:76:36:B9:3F:8F:23:8B:31 Certificate issuer: /CN=A912D306/serialNumber=410F0FE97BE9D9ED0756CD4D7636B93F8F238B31 Certificate serial: 349F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D306/BCBD801C1D8D11E2B429B7EB08B02CD2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.mft Manifest number: 3494 Signing time: Wed 04 Jun 2025 14:39:15 +0000 Manifest this update: Wed 04 Jun 2025 14:39:14 +0000 Manifest next update: Wed 11 Jun 2025 14:39:14 +0000 Files and hashes: 1: QQ8P6Xvp2e0HVs1Ndja5P48jizE.crl (hash: Kq3z3yUxO5X5aueUAfuEGukUAJfopYGp5oio6w1yWQM=) 2: ABE8518A18DA11F08FC68386C4F9AE02.roa (hash: 1QZz1HDQ1jRfLspLePE9D1zwt8zFnYwF7eP5N5O/9vg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D306/BCBD801C1D8D11E2B429B7EB08B02CD2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.crl rsync://rpki.apnic.net/member_repository/A912D306/BCBD801C1D8D11E2B429B7EB08B02CD2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Jun 2025 14:39:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13471 (0x349f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D306, serialNumber=410F0FE97BE9D9ED0756CD4D7636B93F8F238B31 Validity Not Before: Jun 4 14:39:14 2025 GMT Not After : Jun 11 14:39:14 2025 GMT Subject: CN=68405a92-24b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:51:fd:2d:6b:7e:a4:9d:4b:93:32:52:8d:da: e8:d1:c1:cb:49:2e:6d:25:55:fc:33:f2:de:86:19: eb:cf:79:d9:55:68:98:b2:c3:3f:d0:16:50:4b:e0: b1:b2:07:24:79:ca:1f:d9:7f:74:bb:7b:56:df:ed: 09:da:bb:74:50:12:10:af:d4:41:5b:16:74:f5:37: 8c:a1:7f:65:4c:fd:b1:39:00:0c:85:a1:54:a3:f9: df:a5:a2:1e:a1:ca:b5:b7:8f:c8:d3:64:85:02:33: 54:f3:5c:1a:e5:5f:c8:29:34:08:fc:56:25:8a:a2: 03:98:5e:85:61:d6:38:63:a7:f4:c7:8a:ac:5f:0b: 69:ab:fd:b8:16:3a:b5:8f:d3:84:73:04:24:06:86: 6f:a5:a8:f2:68:45:1f:89:27:74:d1:4f:d7:dd:91: 9c:3c:53:53:be:08:61:5e:1e:ab:94:c5:4d:fa:43: c2:e8:a0:7b:29:b9:51:e1:3d:43:fb:ce:2f:dc:69: 9b:98:d4:1e:d1:10:16:46:72:73:26:f3:74:f7:86: 2e:e3:e8:e5:d4:f8:53:ae:64:a7:23:9c:da:e3:9d: 78:70:44:8a:3f:8d:5f:dc:7b:a9:92:3b:0f:6b:25: 54:46:53:28:f8:97:49:26:f3:56:26:ae:e7:21:b3: f1:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:AD:55:CA:E3:5D:B6:DC:47:B7:84:49:9C:F3:BC:B9:FB:85:B7:5C X509v3 Authority Key Identifier: keyid:41:0F:0F:E9:7B:E9:D9:ED:07:56:CD:4D:76:36:B9:3F:8F:23:8B:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D306/BCBD801C1D8D11E2B429B7EB08B02CD2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D306/BCBD801C1D8D11E2B429B7EB08B02CD2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:d4:7b:0e:60:20:1e:f4:5c:e7:0b:cc:2f:ce:80:a2:a0:74: 0f:5b:1c:e9:6d:01:65:8d:6a:f7:29:12:2b:a4:7f:98:e1:31: a0:e7:b6:26:02:db:95:d0:60:87:ca:55:7f:06:0a:f3:90:f0: c1:3f:8c:a3:f9:b3:54:a6:2b:61:ee:7d:ac:dc:5a:ec:75:97: 96:20:9f:5d:0b:1f:0f:fc:21:e4:d8:fc:eb:48:8b:cf:cc:6c: 94:d6:da:fe:20:94:4f:17:15:05:e7:54:ff:1e:0e:ac:66:1c: d3:1f:9d:df:e6:c8:5e:69:12:13:d6:ac:d5:6e:89:9d:fe:0a: 50:52:7d:e1:22:08:28:58:bb:31:4e:1f:ab:b8:18:70:f3:52: c4:33:10:75:88:f3:7f:40:a4:87:13:2c:e6:23:ee:95:db:b5: be:08:0c:e5:91:7e:34:7b:e8:d1:ee:d8:91:c3:1c:ab:da:f5: aa:d4:57:43:49:f2:c8:3f:00:7d:d4:b5:39:bb:7a:75:4a:ed: 4f:e0:3d:2a:0d:b3:15:32:4a:0f:05:fb:ae:08:34:d2:3e:33: 6d:0c:07:79:2a:ce:6c:4a:3b:b3:08:7e:2c:a5:49:7f:d1:13: a6:51:38:59:12:d4:b6:1f:bf:46:5e:3d:b6:c7:e0:27:91:e0: 0e:29:e0:cc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNJ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQzMDYxMTAvBgNVBAUTKDQxMEYwRkU5N0JFOUQ5RUQwNzU2Q0Q0RDc2MzZCOTNG OEYyMzhCMzEwHhcNMjUwNjA0MTQzOTE0WhcNMjUwNjExMTQzOTE0WjAYMRYwFAYD VQQDEw02ODQwNWE5Mi0yNGI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyVH9LWt+pJ1LkzJSjdro0cHLSS5tJVX8M/Lehhnrz3nZVWiYssM/0BZQS+Cx sgckecof2X90u3tW3+0J2rt0UBIQr9RBWxZ09TeMoX9lTP2xOQAMhaFUo/nfpaIe ocq1t4/I02SFAjNU81wa5V/IKTQI/FYliqIDmF6FYdY4Y6f0x4qsXwtpq/24Fjq1 j9OEcwQkBoZvpajyaEUfiSd00U/X3ZGcPFNTvghhXh6rlMVN+kPC6KB7KblR4T1D +84v3GmbmNQe0RAWRnJzJvN094Yu4+jl1PhTrmSnI5za4514cESKP41f3HupkjsP ayVURlMo+JdJJvNWJq7nIbPxrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEWtVcrj XbbcR7eESZzzvLn7hbdcMB8GA1UdIwQYMBaAFEEPD+l76dntB1bNTXY2uT+PI4sx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDMwNi9CQ0JEODAxQzFE OEQxMUUyQjQyOUI3RUIwOEIwMkNEMi9RUThQNlh2cDJlMEhWczFOZGphNVA0OGpp ekUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FROFA2WHZwMmUwSFZzMU5kamE1UDQ4aml6RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RDMwNi9CQ0JEODAxQzFEOEQxMUUyQjQyOUI3RUIwOEIwMkNEMi9RUThQNlh2cDJl MEhWczFOZGphNVA0OGppekUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAv1HsOYCAe9FznC8wvzoCioHQPWxzpbQFljWr3KRIrpH+Y4TGg57Ym AtuV0GCHylV/BgrzkPDBP4yj+bNUpith7n2s3FrsdZeWIJ9dCx8P/CHk2PzrSIvP zGyU1tr+IJRPFxUF51T/Hg6sZhzTH53f5sheaRIT1qzVbomd/gpQUn3hIggoWLsx Th+ruBhw81LEMxB1iPN/QKSHEyzmI+6V27W+CAzlkX40e+jR7tiRwxyr2vWq1FdD SfLIPwB91LU5u3p1Su1P4D0qDbMVMkoPBfuuCDTSPjNtDAd5Ks5sSjuzCH4spUl/ 0ROmUThZEtS2H79GXj22x+AnkeAOKeDM -----END CERTIFICATE-----Generated at Thu Jun 5 19:55:23 2025 by rpki-client