$ rpki-client -vvf rpki.apnic.net/member_repository/A9136CB3/A5FD84F2571B11EEB418AB3EC4F9AE02/q0Xb_DVXfyfJn89Ao5s4azI1Cto.mft File: q0Xb_DVXfyfJn89Ao5s4azI1Cto.mft (raw, json) Hash identifier: nI9/O/ryO4wkl1QFXoeJ686NVNo34MEJ3LzXQJ8rYo4= Subject key identifier: 88:73:10:27:B2:31:96:38:C6:A6:40:C4:32:98:B5:3D:27:91:D0:DB Authority key identifier: AB:45:DB:FC:35:57:7F:27:C9:9F:CF:40:A3:9B:38:6B:32:35:0A:DA Certificate issuer: /CN=A9136CB3/serialNumber=AB45DBFC35577F27C99FCF40A39B386B32350ADA Certificate serial: 014E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q0Xb_DVXfyfJn89Ao5s4azI1Cto.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136CB3/A5FD84F2571B11EEB418AB3EC4F9AE02/q0Xb_DVXfyfJn89Ao5s4azI1Cto.mft Manifest number: 0146 Signing time: Thu 05 Jun 2025 03:41:45 +0000 Manifest this update: Thu 05 Jun 2025 03:41:44 +0000 Manifest next update: Thu 12 Jun 2025 03:41:44 +0000 Files and hashes: 1: q0Xb_DVXfyfJn89Ao5s4azI1Cto.crl (hash: FUuo+1w4Oaw5i4E3oFRQLFsS0oE9QzJvFPhXbPUf1mg=) 2: B210BF28D1BF11EF95281B83C4F9AE02.roa (hash: ZnF+YTP2pRwfo0eUOGSGb1Y71fB7TRDK5QfyiO+cZbM=) 3: 20DA8B7E571D11EEAA430244C4F9AE02.roa (hash: dRKaSZEwPfTmZ9fnNDPlpvp0Ujh9QZMuM+RN8ZLvFSw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136CB3/A5FD84F2571B11EEB418AB3EC4F9AE02/q0Xb_DVXfyfJn89Ao5s4azI1Cto.crl rsync://rpki.apnic.net/member_repository/A9136CB3/A5FD84F2571B11EEB418AB3EC4F9AE02/q0Xb_DVXfyfJn89Ao5s4azI1Cto.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q0Xb_DVXfyfJn89Ao5s4azI1Cto.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Jun 2025 03:41:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 334 (0x14e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136CB3, serialNumber=AB45DBFC35577F27C99FCF40A39B386B32350ADA Validity Not Before: Jun 5 03:41:44 2025 GMT Not After : Jun 12 03:41:44 2025 GMT Subject: CN=684111f9-d19e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:4e:8e:0d:7d:2d:c0:bb:ce:a2:ce:5d:44:51: 1a:1d:c4:16:af:e3:9e:c2:a7:e3:06:2a:72:2e:76: 41:3f:70:00:42:83:80:fa:55:d0:b4:63:ad:c8:7e: 42:c2:9a:5c:24:96:c5:94:38:13:1a:80:e7:c0:7f: 69:1b:28:1c:d9:ae:be:28:d5:97:89:b0:cc:f5:c2: f8:15:1f:ba:3f:57:35:63:5a:30:5e:f5:e1:9c:2a: 40:70:fd:5b:5d:77:7a:32:a3:bd:b0:9f:2c:a3:82: 8e:6c:f7:0a:22:9c:86:73:e9:d1:b5:88:6f:ed:58: b9:27:3a:53:f9:93:b0:c9:c0:d1:08:78:c3:d0:9c: 50:6d:d5:1e:1f:0c:2e:d4:6c:41:6a:a0:f4:30:5b: 2b:8c:2e:4a:e4:3f:69:df:0c:44:14:64:4a:07:bd: d5:b5:0f:04:c6:c5:4c:ac:d3:3a:22:64:0f:9c:1b: bf:e2:ea:b7:15:5f:40:f6:8a:4c:f4:87:49:fe:16: 58:cd:7b:9d:04:bb:46:35:7c:04:3f:ff:78:2e:97: 02:6a:2f:4c:49:bf:c3:27:53:02:de:b9:20:77:d6: d9:7e:24:33:3f:77:27:be:dc:98:07:6c:47:9e:53: 84:79:80:b2:cf:2b:e8:37:aa:fd:1f:06:7c:13:c3: 29:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:73:10:27:B2:31:96:38:C6:A6:40:C4:32:98:B5:3D:27:91:D0:DB X509v3 Authority Key Identifier: keyid:AB:45:DB:FC:35:57:7F:27:C9:9F:CF:40:A3:9B:38:6B:32:35:0A:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136CB3/A5FD84F2571B11EEB418AB3EC4F9AE02/q0Xb_DVXfyfJn89Ao5s4azI1Cto.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q0Xb_DVXfyfJn89Ao5s4azI1Cto.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136CB3/A5FD84F2571B11EEB418AB3EC4F9AE02/q0Xb_DVXfyfJn89Ao5s4azI1Cto.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:19:75:d0:dc:a9:42:32:9f:fb:b5:79:37:98:75:23:a9:e4: 10:21:8f:d4:95:e6:00:8d:c5:cd:a1:07:81:f9:43:8c:4f:e7: b1:24:b9:85:55:2c:99:eb:7b:ce:eb:b9:b0:91:aa:8f:be:69: d7:79:71:0f:39:9a:01:37:3a:7f:25:16:e1:2e:f8:96:1f:43: 5f:b9:cc:f2:ac:b3:a4:f6:44:2a:74:59:e8:15:23:38:ad:c5: 2f:86:2b:96:bd:ce:31:89:b9:4a:4f:43:f9:f8:db:68:cd:65: e1:92:c0:57:73:cb:61:66:7c:af:8f:a9:9b:ce:30:cf:b0:21: 5b:7c:be:26:dd:9c:ea:90:19:da:86:e1:12:25:42:6c:3d:f6: f5:89:3c:d3:03:bf:98:62:18:a7:88:7b:22:39:2e:9c:60:29: ed:61:96:9c:c8:67:6b:15:22:69:17:fc:b6:2e:51:f0:0a:fe: 0a:6e:37:0e:e1:5a:73:bd:b9:8f:48:8d:85:72:40:e7:aa:fa: 7c:47:d5:d5:ae:f1:9c:7c:50:db:5b:51:fb:60:48:5d:c4:c2: 25:97:ff:e0:a7:cc:f6:c1:d8:2f:33:1d:89:ec:06:df:9b:03: 44:d2:4c:12:7a:de:a2:9c:af:31:0e:30:7c:4a:b7:29:87:01: a7:c9:64:5e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAU4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzZDQjMxMTAvBgNVBAUTKEFCNDVEQkZDMzU1NzdGMjdDOTlGQ0Y0MEEzOUIzODZC MzIzNTBBREEwHhcNMjUwNjA1MDM0MTQ0WhcNMjUwNjEyMDM0MTQ0WjAYMRYwFAYD VQQDEw02ODQxMTFmOS1kMTllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4U6ODX0twLvOos5dRFEaHcQWr+OewqfjBipyLnZBP3AAQoOA+lXQtGOtyH5C wppcJJbFlDgTGoDnwH9pGygc2a6+KNWXibDM9cL4FR+6P1c1Y1owXvXhnCpAcP1b XXd6MqO9sJ8so4KObPcKIpyGc+nRtYhv7Vi5JzpT+ZOwycDRCHjD0JxQbdUeHwwu 1GxBaqD0MFsrjC5K5D9p3wxEFGRKB73VtQ8ExsVMrNM6ImQPnBu/4uq3FV9A9opM 9IdJ/hZYzXudBLtGNXwEP/94LpcCai9MSb/DJ1MC3rkgd9bZfiQzP3cnvtyYB2xH nlOEeYCyzyvoN6r9HwZ8E8MpfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIhzECey MZY4xqZAxDKYtT0nkdDbMB8GA1UdIwQYMBaAFKtF2/w1V38nyZ/PQKObOGsyNQra MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkNCMy9BNUZEODRGMjU3 MUIxMUVFQjQxOEFCM0VDNEY5QUUwMi9xMFhiX0RWWGZ5ZkpuODlBbzVzNGF6STFD dG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3EwWGJfRFZYZnlmSm44OUFvNXM0YXpJMUN0by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NkNCMy9BNUZEODRGMjU3MUIxMUVFQjQxOEFCM0VDNEY5QUUwMi9xMFhiX0RWWGZ5 ZkpuODlBbzVzNGF6STFDdG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsGXXQ3KlCMp/7tXk3mHUjqeQQIY/UleYAjcXNoQeB+UOMT+exJLmF VSyZ63vO67mwkaqPvmnXeXEPOZoBNzp/JRbhLviWH0NfuczyrLOk9kQqdFnoFSM4 rcUvhiuWvc4xiblKT0P5+NtozWXhksBXc8thZnyvj6mbzjDPsCFbfL4m3ZzqkBna huESJUJsPfb1iTzTA7+YYhiniHsiOS6cYCntYZacyGdrFSJpF/y2LlHwCv4KbjcO 4VpzvbmPSI2FckDnqvp8R9XVrvGcfFDbW1H7YEhdxMIll//gp8z2wdgvMx2J7Abf mwNE0kwSet6inK8xDjB8SrcphwGnyWRe -----END CERTIFICATE-----Generated at Sat Jun 7 05:31:14 2025 by rpki-client