$ rpki-client -vvf rpki.apnic.net/member_repository/A913075E/D708AB1A316E11F0BB327E30C4F9AE02/bqxBZeyCmYqJiq391RHMKgRv7qc.mft File: bqxBZeyCmYqJiq391RHMKgRv7qc.mft (raw, json) Hash identifier: fg59mlAhTcTioF4wvmmkhCOnzmWBkEoalmz4ZOXFZoA= Subject key identifier: 93:FC:AA:A7:C3:3B:5A:6E:E5:DB:98:85:8E:49:7D:6D:E1:01:10:92 Authority key identifier: 6E:AC:41:65:EC:82:99:8A:89:8A:AD:FD:D5:11:CC:2A:04:6F:EE:A7 Certificate issuer: /CN=A913075E/serialNumber=6EAC4165EC82998A898AADFDD511CC2A046FEEA7 Certificate serial: 14 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bqxBZeyCmYqJiq391RHMKgRv7qc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913075E/D708AB1A316E11F0BB327E30C4F9AE02/bqxBZeyCmYqJiq391RHMKgRv7qc.mft Manifest number: 11 Signing time: Thu 05 Jun 2025 07:30:37 +0000 Manifest this update: Thu 05 Jun 2025 07:30:37 +0000 Manifest next update: Thu 12 Jun 2025 07:30:37 +0000 Files and hashes: 1: bqxBZeyCmYqJiq391RHMKgRv7qc.crl (hash: yuLHdGP0YEB8WiHr73/tBoqUW8qA+VmAmAWyu746GvE=) 2: E9331F863B2911F084C93028C4F9AE02.roa (hash: Pnz5aFAbJ5Bkp2gyQ97UceAHI3FhcCchW1EhmLkhr+s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913075E/D708AB1A316E11F0BB327E30C4F9AE02/bqxBZeyCmYqJiq391RHMKgRv7qc.crl rsync://rpki.apnic.net/member_repository/A913075E/D708AB1A316E11F0BB327E30C4F9AE02/bqxBZeyCmYqJiq391RHMKgRv7qc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bqxBZeyCmYqJiq391RHMKgRv7qc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Jun 2025 07:30:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20 (0x14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913075E, serialNumber=6EAC4165EC82998A898AADFDD511CC2A046FEEA7 Validity Not Before: Jun 5 07:30:37 2025 GMT Not After : Jun 12 07:30:37 2025 GMT Subject: CN=6841479d-9631 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:dd:0d:f7:10:a5:29:14:16:9c:04:6f:7a:36: 08:8c:22:56:80:c3:e4:95:0a:0b:56:0b:e7:22:29: 9b:40:e7:6b:76:11:96:f9:d9:bb:11:e9:29:41:01: 3e:fd:1a:f8:f2:66:3b:3a:e7:95:fb:6f:49:f7:d4: 8d:d3:c8:f9:e6:aa:67:19:d3:0b:ea:51:bc:4f:e0: b5:2c:aa:bc:77:e1:3a:d4:67:cf:07:72:7c:dc:ab: 19:c8:a7:54:87:06:0e:f7:7c:29:a2:4c:25:f0:40: eb:63:45:77:07:2c:14:dc:97:ee:37:9e:4c:ae:25: b9:b2:c7:68:d4:7d:9e:da:f2:94:2a:d4:a2:d8:9d: 15:97:b9:32:90:22:68:ab:c9:e8:39:ae:a4:d3:0f: e5:25:2f:26:44:cf:36:79:de:0b:7f:c7:af:1e:59: b5:81:72:e8:64:71:78:3a:96:a5:af:0a:b0:c6:d1: 06:ab:00:de:c8:9d:79:66:bf:f3:fe:b7:4a:24:e5: e3:eb:c3:ef:d1:50:bc:e5:cb:cc:72:b8:f7:f1:4c: ae:c9:e5:69:3d:64:a6:db:f8:c0:0f:2c:de:aa:64: ec:a4:57:a9:9a:3a:6e:5b:d8:ee:ee:35:7d:4a:60: f8:1f:26:a3:78:a7:35:13:0e:d6:02:01:3f:8e:46: 52:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:FC:AA:A7:C3:3B:5A:6E:E5:DB:98:85:8E:49:7D:6D:E1:01:10:92 X509v3 Authority Key Identifier: keyid:6E:AC:41:65:EC:82:99:8A:89:8A:AD:FD:D5:11:CC:2A:04:6F:EE:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913075E/D708AB1A316E11F0BB327E30C4F9AE02/bqxBZeyCmYqJiq391RHMKgRv7qc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bqxBZeyCmYqJiq391RHMKgRv7qc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913075E/D708AB1A316E11F0BB327E30C4F9AE02/bqxBZeyCmYqJiq391RHMKgRv7qc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:d3:f5:8a:fc:83:7b:bd:d9:09:af:33:bf:91:b1:26:0c:9d: 55:3b:da:74:0e:71:9d:8b:cf:1e:7b:6f:e0:db:eb:42:08:a8: 73:f3:65:45:65:c1:a6:09:71:ed:a5:85:72:cf:e5:0c:eb:1f: bf:84:31:28:97:a7:27:2a:f0:29:3b:6d:1e:ea:f2:00:7b:0e: 4e:ed:b3:27:84:2c:fd:bc:21:58:0c:f2:d1:72:78:91:4a:25: 04:b6:30:9f:9b:fd:5c:29:0d:14:a0:b7:94:71:2a:39:f6:51: 6a:0f:b4:7d:d8:fc:82:fc:a7:3a:16:7a:34:0a:81:c5:39:3e: 50:5c:0a:f9:c9:31:64:ea:0a:93:d8:a7:42:a8:ac:1b:cf:24: 9b:12:82:d5:ea:41:b2:f8:6f:56:98:96:b9:55:69:78:c4:12: 88:41:22:0b:e0:3f:52:2b:17:83:a3:9c:d4:89:cd:86:e1:16: 1a:4f:d3:59:40:b1:c1:c3:d3:0b:14:1d:47:08:16:fb:3c:21: b2:87:43:06:7a:71:30:d3:60:8d:a3:ed:85:20:04:ed:d1:8e: be:cf:89:9a:8c:36:de:2a:30:f5:49:1f:a7:02:6f:b0:f6:6c: ea:56:39:30:eb:49:b6:97:ed:43:6c:7a:7c:b5:bc:ab:f6:20: b1:8c:41:fa -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz MDc1RTExMC8GA1UEBRMoNkVBQzQxNjVFQzgyOTk4QTg5OEFBREZERDUxMUNDMkEw NDZGRUVBNzAeFw0yNTA2MDUwNzMwMzdaFw0yNTA2MTIwNzMwMzdaMBgxFjAUBgNV BAMTDTY4NDE0NzlkLTk2MzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDi3Q33EKUpFBacBG96NgiMIlaAw+SVCgtWC+ciKZtA52t2EZb52bsR6SlBAT79 GvjyZjs655X7b0n31I3TyPnmqmcZ0wvqUbxP4LUsqrx34TrUZ88HcnzcqxnIp1SH Bg73fCmiTCXwQOtjRXcHLBTcl+43nkyuJbmyx2jUfZ7a8pQq1KLYnRWXuTKQImir yeg5rqTTD+UlLyZEzzZ53gt/x68eWbWBcuhkcXg6lqWvCrDG0QarAN7InXlmv/P+ t0ok5ePrw+/RULzly8xyuPfxTK7J5Wk9ZKbb+MAPLN6qZOykV6maOm5b2O7uNX1K YPgfJqN4pzUTDtYCAT+ORlJTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUk/yqp8M7 Wm7l25iFjkl9beEBEJIwHwYDVR0jBBgwFoAUbqxBZeyCmYqJiq391RHMKgRv7qcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMwNzVFL0Q3MDhBQjFBMzE2 RTExRjBCQjMyN0UzMEM0RjlBRTAyL2JxeEJaZXlDbVlxSmlxMzkxUkhNS2dSdjdx Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvYnF4QlpleUNtWXFKaXEzOTFSSE1LZ1J2N3FjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMw NzVFL0Q3MDhBQjFBMzE2RTExRjBCQjMyN0UzMEM0RjlBRTAyL2JxeEJaZXlDbVlx SmlxMzkxUkhNS2dSdjdxYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHrT9Yr8g3u92QmvM7+RsSYMnVU72nQOcZ2Lzx57b+Db60IIqHPzZUVl waYJce2lhXLP5QzrH7+EMSiXpycq8Ck7bR7q8gB7Dk7tsyeELP28IVgM8tFyeJFK JQS2MJ+b/VwpDRSgt5RxKjn2UWoPtH3Y/IL8pzoWejQKgcU5PlBcCvnJMWTqCpPY p0KorBvPJJsSgtXqQbL4b1aYlrlVaXjEEohBIgvgP1IrF4OjnNSJzYbhFhpP01lA scHD0wsUHUcIFvs8IbKHQwZ6cTDTYI2j7YUgBO3Rjr7PiZqMNt4qMPVJH6cCb7D2 bOpWOTDrSbaX7UNseny1vKv2ILGMQfo= -----END CERTIFICATE-----Generated at Thu Jun 5 20:06:14 2025 by rpki-client