$ rpki-client -vvf rpki.apnic.net/member_repository/A9135B24/3BA691A8F83D11E8B0EC3448C4F9AE02/qrLSCRHmfiw6NccByHZaaFtQDsc.mft File: qrLSCRHmfiw6NccByHZaaFtQDsc.mft (raw, json) Hash identifier: bPjnAyyqic/ZhX1hu0E8uVSBtSQ0qyOdPDjHEZanuOY= Subject key identifier: 1C:3C:12:89:CB:B5:B2:36:54:1C:D3:B4:CC:A8:18:A9:AA:1E:1E:3C Authority key identifier: AA:B2:D2:09:11:E6:7E:2C:3A:35:C7:01:C8:76:5A:68:5B:50:0E:C7 Certificate issuer: /CN=A9135B24/serialNumber=AAB2D20911E67E2C3A35C701C8765A685B500EC7 Certificate serial: 11A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrLSCRHmfiw6NccByHZaaFtQDsc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135B24/3BA691A8F83D11E8B0EC3448C4F9AE02/qrLSCRHmfiw6NccByHZaaFtQDsc.mft Manifest number: 119B Signing time: Sun 08 Jun 2025 17:05:57 +0000 Manifest this update: Sun 08 Jun 2025 17:05:57 +0000 Manifest next update: Sun 15 Jun 2025 17:05:57 +0000 Files and hashes: 1: qrLSCRHmfiw6NccByHZaaFtQDsc.crl (hash: JIP0fQSaUn2ByTmLt/4ekmKFide+JVi5byAYfkcn27o=) 2: 5AC7F986F83E11E8B1FA8F4AC4F9AE02.roa (hash: iW6YjMpstfMKbZY59Tg1WeEsakFUmD2BPmWINCFK44U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135B24/3BA691A8F83D11E8B0EC3448C4F9AE02/qrLSCRHmfiw6NccByHZaaFtQDsc.crl rsync://rpki.apnic.net/member_repository/A9135B24/3BA691A8F83D11E8B0EC3448C4F9AE02/qrLSCRHmfiw6NccByHZaaFtQDsc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrLSCRHmfiw6NccByHZaaFtQDsc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Jun 2025 17:05:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4514 (0x11a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135B24, serialNumber=AAB2D20911E67E2C3A35C701C8765A685B500EC7 Validity Not Before: Jun 8 17:05:57 2025 GMT Not After : Jun 15 17:05:57 2025 GMT Subject: CN=6845c2f5-2c6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:71:bc:a8:e0:f2:3f:a8:63:1d:71:34:c3:a5: 1d:f9:b8:bb:62:ad:90:b8:2f:be:8b:12:fc:96:e2: df:fd:24:18:cf:4e:40:a7:8c:9a:81:c0:5d:00:56: 3a:2e:cb:a2:f7:ee:63:3b:77:16:b6:e8:8f:e8:94: ab:e2:8f:3f:0b:3c:f7:72:b7:29:cf:a7:e4:d8:47: d1:c6:2f:92:87:5c:3d:9a:57:41:51:62:58:8d:79: b8:28:82:cc:2f:1c:9f:1e:7b:89:96:3e:b9:06:19: 59:73:b5:d7:6d:fc:5c:3d:ea:13:3d:da:78:35:47: f1:82:01:c5:f0:32:92:bb:80:96:e5:66:2c:89:a7: c4:bb:33:e6:f8:bb:3d:08:93:66:ae:2c:53:66:1a: 6c:65:f6:b0:96:a2:1b:e5:dc:24:a3:92:62:31:e5: 59:d7:f2:98:59:97:a5:92:7e:4a:79:0b:fe:51:42: e4:67:3c:20:73:7f:89:ae:18:76:1b:57:34:45:49: 75:70:29:8e:85:11:61:fa:7a:d1:67:46:7d:72:a2: b8:a4:81:0c:0d:fc:bf:04:22:1e:ba:86:8a:7b:8b: d1:2e:62:cb:4b:0c:dd:a9:9a:ec:0b:c3:1b:0b:a4: cf:a1:4f:d5:3d:c1:9a:47:ae:8c:cf:59:ac:6e:04: 17:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:3C:12:89:CB:B5:B2:36:54:1C:D3:B4:CC:A8:18:A9:AA:1E:1E:3C X509v3 Authority Key Identifier: keyid:AA:B2:D2:09:11:E6:7E:2C:3A:35:C7:01:C8:76:5A:68:5B:50:0E:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135B24/3BA691A8F83D11E8B0EC3448C4F9AE02/qrLSCRHmfiw6NccByHZaaFtQDsc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrLSCRHmfiw6NccByHZaaFtQDsc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135B24/3BA691A8F83D11E8B0EC3448C4F9AE02/qrLSCRHmfiw6NccByHZaaFtQDsc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:a0:53:88:44:66:e0:e7:7b:35:b8:26:0d:b1:b4:5c:62:bb: 43:a8:b8:9d:b7:8b:db:7c:ed:eb:2d:fd:4c:25:77:40:03:ab: 66:70:b5:8c:09:8f:e4:be:eb:95:1c:c7:98:35:ff:50:61:ba: 61:fb:ed:be:ae:32:51:2e:09:b4:7a:c8:80:2f:39:2c:18:72: 04:c3:56:d7:48:5c:e2:01:ac:d3:05:9f:1b:57:c4:fe:36:66: 8f:0b:0d:7c:de:f1:47:c7:2c:c3:b9:df:6d:1f:c1:bb:91:88: 72:c1:60:33:35:52:d8:75:9f:0b:77:b3:78:a6:f6:30:ee:a0: 79:7a:8f:6b:4d:62:42:34:1b:86:fb:8b:c4:68:10:b4:69:02: f2:81:c5:c2:c1:18:2e:78:de:f0:9d:6c:cc:fa:a6:49:0f:20: 77:eb:95:03:b3:bf:1a:9f:2f:eb:ae:6e:bf:40:23:a9:6e:5c: dc:cb:1e:8a:bd:16:45:b9:5b:43:1e:b9:b7:f6:f1:ee:31:49: 31:5b:5c:dd:f6:30:62:ec:82:00:cd:58:b2:f0:04:a9:9b:d3: c6:61:e3:cd:30:18:43:f0:00:d0:81:2a:1c:1b:8e:d2:f4:b2: 47:d4:42:9a:13:6f:dc:ad:5b:e9:cb:03:01:6f:7f:66:a8:65: 20:12:f1:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEaIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzVCMjQxMTAvBgNVBAUTKEFBQjJEMjA5MTFFNjdFMkMzQTM1QzcwMUM4NzY1QTY4 NUI1MDBFQzcwHhcNMjUwNjA4MTcwNTU3WhcNMjUwNjE1MTcwNTU3WjAYMRYwFAYD VQQDEw02ODQ1YzJmNS0yYzZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlXG8qODyP6hjHXE0w6Ud+bi7Yq2QuC++ixL8luLf/SQYz05Ap4yagcBdAFY6 Lsui9+5jO3cWtuiP6JSr4o8/Czz3crcpz6fk2EfRxi+Sh1w9mldBUWJYjXm4KILM LxyfHnuJlj65BhlZc7XXbfxcPeoTPdp4NUfxggHF8DKSu4CW5WYsiafEuzPm+Ls9 CJNmrixTZhpsZfawlqIb5dwko5JiMeVZ1/KYWZelkn5KeQv+UULkZzwgc3+Jrhh2 G1c0RUl1cCmOhRFh+nrRZ0Z9cqK4pIEMDfy/BCIeuoaKe4vRLmLLSwzdqZrsC8Mb C6TPoU/VPcGaR66Mz1msbgQXvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBw8EonL tbI2VBzTtMyoGKmqHh48MB8GA1UdIwQYMBaAFKqy0gkR5n4sOjXHAch2WmhbUA7H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNUIyNC8zQkE2OTFBOEY4 M0QxMUU4QjBFQzM0NDhDNEY5QUUwMi9xckxTQ1JIbWZpdzZOY2NCeUhaYWFGdFFE c2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FyTFNDUkhtZml3Nk5jY0J5SFphYUZ0UURzYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NUIyNC8zQkE2OTFBOEY4M0QxMUU4QjBFQzM0NDhDNEY5QUUwMi9xckxTQ1JIbWZp dzZOY2NCeUhaYWFGdFFEc2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLoFOIRGbg53s1uCYNsbRcYrtDqLidt4vbfO3rLf1MJXdAA6tmcLWM CY/kvuuVHMeYNf9QYbph++2+rjJRLgm0esiALzksGHIEw1bXSFziAazTBZ8bV8T+ NmaPCw183vFHxyzDud9tH8G7kYhywWAzNVLYdZ8Ld7N4pvYw7qB5eo9rTWJCNBuG +4vEaBC0aQLygcXCwRgueN7wnWzM+qZJDyB365UDs78any/rrm6/QCOpblzcyx6K vRZFuVtDHrm39vHuMUkxW1zd9jBi7IIAzViy8ASpm9PGYePNMBhD8ADQgSocG47S 9LJH1EKaE2/crVvpywMBb39mqGUgEvGp -----END CERTIFICATE-----Generated at Mon Jun 9 02:08:24 2025 by rpki-client