$ rpki-client -vvf rpki.apnic.net/member_repository/A914845D/547515C6949711EB9CF8832AC4F9AE02/q6bAxGzoh6Y50N4HEzrh_8wNLZE.mft File: q6bAxGzoh6Y50N4HEzrh_8wNLZE.mft (raw, json) Hash identifier: XG+em2OlN1Z6adtNfSWtPzdrseUc6V6t2mtL5O311qU= Subject key identifier: 4F:A9:E2:B8:FB:27:6F:7D:BB:F7:3E:BB:C8:03:43:C0:2B:3D:99:0F Authority key identifier: AB:A6:C0:C4:6C:E8:87:A6:39:D0:DE:07:13:3A:E1:FF:CC:0D:2D:91 Certificate issuer: /CN=A914845D/serialNumber=ABA6C0C46CE887A639D0DE07133AE1FFCC0D2D91 Certificate serial: 0637 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q6bAxGzoh6Y50N4HEzrh_8wNLZE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914845D/547515C6949711EB9CF8832AC4F9AE02/q6bAxGzoh6Y50N4HEzrh_8wNLZE.mft Manifest number: 0632 Signing time: Fri 30 May 2025 22:53:46 +0000 Manifest this update: Fri 30 May 2025 22:53:45 +0000 Manifest next update: Fri 06 Jun 2025 22:53:45 +0000 Files and hashes: 1: q6bAxGzoh6Y50N4HEzrh_8wNLZE.crl (hash: lxh1akWDfmBZhCWMaBkyM0xbkQx+xKg2U+m/jW9n1uc=) 2: 96A61404AAA911EBA223275EC4F9AE02.roa (hash: E9czvgeh6YRFhRYFfzW1p9Rsfnmm6YmfPInujvKlVu4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914845D/547515C6949711EB9CF8832AC4F9AE02/q6bAxGzoh6Y50N4HEzrh_8wNLZE.crl rsync://rpki.apnic.net/member_repository/A914845D/547515C6949711EB9CF8832AC4F9AE02/q6bAxGzoh6Y50N4HEzrh_8wNLZE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q6bAxGzoh6Y50N4HEzrh_8wNLZE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 22:53:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1591 (0x637) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914845D, serialNumber=ABA6C0C46CE887A639D0DE07133AE1FFCC0D2D91 Validity Not Before: May 30 22:53:45 2025 GMT Not After : Jun 6 22:53:45 2025 GMT Subject: CN=683a36fa-c609 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f3:f2:6a:02:f5:6f:66:fb:bf:8f:35:b7:1e: dd:e3:bc:76:1b:50:ce:5e:f0:8a:4c:19:bb:d6:0a: f4:b9:72:bf:6e:16:49:63:83:6a:72:98:94:61:62: 5d:c7:c2:ed:6c:8e:56:04:bc:11:7b:f9:1f:31:4f: 34:b0:6e:d0:1b:44:18:6f:78:45:1b:70:23:f4:de: 2d:4d:c0:89:36:21:f7:75:2f:25:69:3f:85:e8:02: 43:88:e6:4c:90:39:a4:73:87:a9:b5:0a:51:d1:9b: db:84:4f:c0:7b:2e:47:c6:3d:fe:55:96:41:cb:08: 17:5f:d6:78:2f:f3:cc:00:99:ac:09:e0:51:f1:b8: 58:7b:2e:fa:f7:6a:49:bf:b7:00:b7:a9:fd:37:5d: e5:1e:35:e0:23:5a:aa:68:a4:98:37:bd:b0:58:f1: 8c:cb:fb:9a:cf:45:4f:d5:f3:c6:14:d0:9a:e4:67: 7a:46:a8:b5:ac:65:7e:ef:d9:c0:4c:79:de:87:09: 0e:13:b5:f8:08:2f:0f:e2:41:75:ed:a1:96:17:52: 8a:96:fa:e5:d3:70:22:30:15:b2:3a:a8:f6:73:2d: fd:89:99:97:e7:a0:61:50:ba:42:6d:05:ee:0b:03: ce:0b:1c:45:12:0b:a5:c6:6a:59:b5:ce:6e:0a:ed: 2a:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:A9:E2:B8:FB:27:6F:7D:BB:F7:3E:BB:C8:03:43:C0:2B:3D:99:0F X509v3 Authority Key Identifier: keyid:AB:A6:C0:C4:6C:E8:87:A6:39:D0:DE:07:13:3A:E1:FF:CC:0D:2D:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914845D/547515C6949711EB9CF8832AC4F9AE02/q6bAxGzoh6Y50N4HEzrh_8wNLZE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q6bAxGzoh6Y50N4HEzrh_8wNLZE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914845D/547515C6949711EB9CF8832AC4F9AE02/q6bAxGzoh6Y50N4HEzrh_8wNLZE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:53:55:cb:ef:93:c2:7d:c5:43:3a:60:bd:e3:ea:87:0a:7d: 1b:76:0b:06:19:bb:2c:79:0f:a9:6a:58:e6:00:d5:92:ef:3d: 24:04:fc:19:50:b4:25:13:4e:5e:6b:da:cd:04:7a:53:2d:82: 65:83:04:41:98:fe:52:d4:0d:b4:6d:d0:20:8b:c1:4f:e2:42: c3:9d:e9:eb:3a:b9:ab:8f:6e:2a:cf:03:e6:45:6e:0f:9e:75: e4:f4:21:64:81:3b:6e:cf:f5:ed:cd:26:2b:17:e0:52:cd:35: a1:e3:5f:54:57:ad:72:db:f3:53:ac:a3:5b:19:09:4f:d1:35: f6:e3:3f:2f:fe:29:4b:bb:a4:fa:e9:ab:68:90:0d:ad:b4:a2: a0:27:bf:7d:90:0f:b3:cb:2a:53:02:cd:1c:7b:eb:58:bb:a7: a4:7a:20:a3:31:cd:c8:16:7d:35:91:8e:ce:89:f5:17:fd:bc: 4c:fe:b5:01:2c:f4:b0:ea:6b:02:9c:5e:db:6f:4c:96:49:c1: 10:9a:24:dc:29:27:6e:3b:05:be:0b:a8:7a:27:17:8c:d8:de: 35:f6:92:ca:a8:e9:19:e8:fc:3e:91:52:fa:73:16:72:b1:69: 82:ef:4c:de:ba:cc:92:9a:22:e1:43:18:da:a1:10:64:ff:8e: e3:d2:2a:92 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBjcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDg0NUQxMTAvBgNVBAUTKEFCQTZDMEM0NkNFODg3QTYzOUQwREUwNzEzM0FFMUZG Q0MwRDJEOTEwHhcNMjUwNTMwMjI1MzQ1WhcNMjUwNjA2MjI1MzQ1WjAYMRYwFAYD VQQDEw02ODNhMzZmYS1jNjA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwfPyagL1b2b7v481tx7d47x2G1DOXvCKTBm71gr0uXK/bhZJY4NqcpiUYWJd x8LtbI5WBLwRe/kfMU80sG7QG0QYb3hFG3Aj9N4tTcCJNiH3dS8laT+F6AJDiOZM kDmkc4eptQpR0ZvbhE/Aey5Hxj3+VZZBywgXX9Z4L/PMAJmsCeBR8bhYey7692pJ v7cAt6n9N13lHjXgI1qqaKSYN72wWPGMy/uaz0VP1fPGFNCa5Gd6Rqi1rGV+79nA THnehwkOE7X4CC8P4kF17aGWF1KKlvrl03AiMBWyOqj2cy39iZmX56BhULpCbQXu CwPOCxxFEgulxmpZtc5uCu0qawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE+p4rj7 J299u/c+u8gDQ8ArPZkPMB8GA1UdIwQYMBaAFKumwMRs6IemOdDeBxM64f/MDS2R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0ODQ1RC81NDc1MTVDNjk0 OTcxMUVCOUNGODgzMkFDNEY5QUUwMi9xNmJBeEd6b2g2WTUwTjRIRXpyaF84d05M WkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3E2YkF4R3pvaDZZNTBONEhFenJoXzh3TkxaRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 ODQ1RC81NDc1MTVDNjk0OTcxMUVCOUNGODgzMkFDNEY5QUUwMi9xNmJBeEd6b2g2 WTUwTjRIRXpyaF84d05MWkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKU1XL75PCfcVDOmC94+qHCn0bdgsGGbsseQ+paljmANWS7z0kBPwZ ULQlE05ea9rNBHpTLYJlgwRBmP5S1A20bdAgi8FP4kLDnenrOrmrj24qzwPmRW4P nnXk9CFkgTtuz/XtzSYrF+BSzTWh419UV61y2/NTrKNbGQlP0TX24z8v/ilLu6T6 6atokA2ttKKgJ799kA+zyypTAs0ce+tYu6ekeiCjMc3IFn01kY7OifUX/bxM/rUB LPSw6msCnF7bb0yWScEQmiTcKSduOwW+C6h6JxeM2N419pLKqOkZ6Pw+kVL6cxZy sWmC70zeusySmiLhQxjaoRBk/47j0iqS -----END CERTIFICATE-----Generated at Sat May 31 15:31:49 2025 by rpki-client