$ rpki-client -vvf rpki.apnic.net/member_repository/A914B45F/8CA20A1CAAD211EF9AA0EF80C4F9AE02/QRUiNGCj3frIOoL8YbK-nsYmwgw.mft File: QRUiNGCj3frIOoL8YbK-nsYmwgw.mft (raw, json) Hash identifier: 624OmkZ++EuB1zUkxTrMxUTD0gv77vIXHHky8O+WAVs= Subject key identifier: 8E:7D:4F:A9:79:3E:98:B4:81:B8:8C:12:3A:44:FE:5D:BA:74:9D:B7 Authority key identifier: 41:15:22:34:60:A3:DD:FA:C8:3A:82:FC:61:B2:BE:9E:C6:26:C2:0C Certificate issuer: /CN=A914B45F/serialNumber=4115223460A3DDFAC83A82FC61B2BE9EC626C20C Certificate serial: 68 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QRUiNGCj3frIOoL8YbK-nsYmwgw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B45F/8CA20A1CAAD211EF9AA0EF80C4F9AE02/QRUiNGCj3frIOoL8YbK-nsYmwgw.mft Manifest number: 67 Signing time: Mon 09 Jun 2025 03:04:45 +0000 Manifest this update: Mon 09 Jun 2025 03:04:45 +0000 Manifest next update: Mon 16 Jun 2025 03:04:45 +0000 Files and hashes: 1: QRUiNGCj3frIOoL8YbK-nsYmwgw.crl (hash: tqB7M5FTKkHqAIav/kz3qD8M0m9uDpLFPDMSZfHNLcQ=) 2: 2017BFC2B07211EF83629B37C4F9AE02.roa (hash: mN3+2+qtTy+oq/2mSPD3LwNlHAef4eKWai8tbwHg/2k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B45F/8CA20A1CAAD211EF9AA0EF80C4F9AE02/QRUiNGCj3frIOoL8YbK-nsYmwgw.crl rsync://rpki.apnic.net/member_repository/A914B45F/8CA20A1CAAD211EF9AA0EF80C4F9AE02/QRUiNGCj3frIOoL8YbK-nsYmwgw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QRUiNGCj3frIOoL8YbK-nsYmwgw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Jun 2025 03:04:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 104 (0x68) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B45F, serialNumber=4115223460A3DDFAC83A82FC61B2BE9EC626C20C Validity Not Before: Jun 9 03:04:45 2025 GMT Not After : Jun 16 03:04:45 2025 GMT Subject: CN=68464f4d-b1d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d8:8d:c3:31:3e:d4:70:53:6d:ee:ec:75:e2: 71:a4:5c:0f:0a:51:c5:fc:51:25:66:67:08:8c:0c: 6e:ab:af:71:42:8c:92:87:30:8d:fd:ba:9b:49:b6: 4e:d4:cb:0b:a3:2b:bf:25:8c:d5:c1:06:98:4f:df: 75:2e:09:03:34:1b:7d:dd:f8:92:d1:91:1a:a0:46: 4f:fd:57:f6:8f:c8:0a:5f:da:13:e3:8f:b4:8b:54: 89:25:35:c3:be:ed:fd:8a:15:91:62:27:0d:69:da: fc:c9:a5:2b:c1:35:e7:f1:0f:ff:0c:dc:a6:1e:7d: 95:0e:8a:29:83:a1:29:b8:28:a2:e4:8f:34:b1:19: 3c:b3:9e:cc:6a:1a:7d:26:57:83:81:24:25:cb:28: 4c:4f:37:08:a5:32:b2:d4:24:f3:9c:d7:e9:ab:c1: c2:ca:8d:1b:d2:94:c9:da:25:67:12:69:05:34:8c: e0:37:c6:34:21:fe:2e:d5:da:b5:d1:40:0f:a9:5a: 44:45:d3:66:79:0b:a6:7d:f6:47:ba:bd:d0:42:1e: 2d:48:7d:15:2a:a7:c9:aa:df:50:7c:4a:49:d7:d1: 94:e1:16:a3:4e:e2:d3:27:44:5b:dd:5d:15:a0:81: 15:1f:53:96:90:2f:6a:28:b0:ec:2c:0f:a9:dd:36: 80:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:7D:4F:A9:79:3E:98:B4:81:B8:8C:12:3A:44:FE:5D:BA:74:9D:B7 X509v3 Authority Key Identifier: keyid:41:15:22:34:60:A3:DD:FA:C8:3A:82:FC:61:B2:BE:9E:C6:26:C2:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B45F/8CA20A1CAAD211EF9AA0EF80C4F9AE02/QRUiNGCj3frIOoL8YbK-nsYmwgw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QRUiNGCj3frIOoL8YbK-nsYmwgw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B45F/8CA20A1CAAD211EF9AA0EF80C4F9AE02/QRUiNGCj3frIOoL8YbK-nsYmwgw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:61:20:cf:b5:aa:bb:9a:8d:8a:37:10:c7:1d:5a:a1:67:f0: 1d:dc:9e:ef:19:36:5e:70:13:21:55:4d:b5:07:b9:01:76:08: 96:d7:c9:53:52:87:12:49:0b:18:9f:50:34:52:ca:34:b8:4f: ae:0a:1b:d4:93:08:21:5b:f8:fd:b9:8a:f4:78:83:66:49:52: eb:14:8d:41:5d:04:90:ee:9d:ff:06:1a:91:60:47:3b:42:d2: e1:20:31:34:c7:69:b0:71:6b:87:c7:b6:db:07:64:c6:4a:e4: 94:d7:8d:2e:3a:cf:01:a1:44:71:98:7c:7d:76:48:15:6a:51: 8a:dd:80:89:b2:3e:45:26:66:75:f9:f5:28:eb:f4:1c:36:bf: d9:2a:6d:e2:45:c9:ae:21:2e:73:db:da:29:28:87:a8:bc:74: f2:8a:b2:70:4c:38:3e:96:81:a6:d9:80:0e:8f:c5:44:4c:db: 0b:92:0a:14:73:28:8b:c4:b2:59:58:20:34:9a:b4:6c:2c:3b: 01:4a:23:78:f2:f9:72:5b:d0:f0:f4:42:7e:f3:8c:97:37:e0: 39:0c:d6:b9:a6:c0:bf:b9:2a:74:0f:8b:c1:88:89:c2:30:e0: 54:8a:e0:5a:ce:7f:97:6f:44:9c:18:15:2e:83:57:6d:f5:0e: de:29:d3:a3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBaDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 QjQ1RjExMC8GA1UEBRMoNDExNTIyMzQ2MEEzRERGQUM4M0E4MkZDNjFCMkJFOUVD NjI2QzIwQzAeFw0yNTA2MDkwMzA0NDVaFw0yNTA2MTYwMzA0NDVaMBgxFjAUBgNV BAMTDTY4NDY0ZjRkLWIxZDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDA2I3DMT7UcFNt7ux14nGkXA8KUcX8USVmZwiMDG6rr3FCjJKHMI39uptJtk7U ywujK78ljNXBBphP33UuCQM0G33d+JLRkRqgRk/9V/aPyApf2hPjj7SLVIklNcO+ 7f2KFZFiJw1p2vzJpSvBNefxD/8M3KYefZUOiimDoSm4KKLkjzSxGTyznsxqGn0m V4OBJCXLKExPNwilMrLUJPOc1+mrwcLKjRvSlMnaJWcSaQU0jOA3xjQh/i7V2rXR QA+pWkRF02Z5C6Z99ke6vdBCHi1IfRUqp8mq31B8SknX0ZThFqNO4tMnRFvdXRWg gRUfU5aQL2oosOwsD6ndNoC1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUjn1PqXk+ mLSBuIwSOkT+Xbp0nbcwHwYDVR0jBBgwFoAUQRUiNGCj3frIOoL8YbK+nsYmwgww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRCNDVGLzhDQTIwQTFDQUFE MjExRUY5QUEwRUY4MEM0RjlBRTAyL1FSVWlOR0NqM2ZySU9vTDhZYkstbnNZbXdn dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvUVJVaU5HQ2ozZnJJT29MOFliSy1uc1ltd2d3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRC NDVGLzhDQTIwQTFDQUFEMjExRUY5QUEwRUY4MEM0RjlBRTAyL1FSVWlOR0NqM2Zy SU9vTDhZYkstbnNZbXdndy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAE9hIM+1qruajYo3EMcdWqFn8B3cnu8ZNl5wEyFVTbUHuQF2CJbXyVNS hxJJCxifUDRSyjS4T64KG9STCCFb+P25ivR4g2ZJUusUjUFdBJDunf8GGpFgRztC 0uEgMTTHabBxa4fHttsHZMZK5JTXjS46zwGhRHGYfH12SBVqUYrdgImyPkUmZnX5 9Sjr9Bw2v9kqbeJFya4hLnPb2ikoh6i8dPKKsnBMOD6WgabZgA6PxURM2wuSChRz KIvEsllYIDSatGwsOwFKI3jy+XJb0PD0Qn7zjJc34DkM1rmmwL+5KnQPi8GIicIw 4FSK4FrOf5dvRJwYFS6DV231Dt4p06M= -----END CERTIFICATE-----Generated at Mon Jun 9 07:58:50 2025 by rpki-client