$ rpki-client -vvf rpki.apnic.net/member_repository/A914C002/C8FE0808A92511EEAC4BDB57C4F9AE02/qUOt-S08RCBEEEWA1VuTUv3h1ok.mft File: qUOt-S08RCBEEEWA1VuTUv3h1ok.mft (raw, json) Hash identifier: M8ZcMr9zx7/zCwL99rQA7PrjIAPgKrRBK6eLI9/wA+M= Subject key identifier: 5E:E2:86:1D:7E:ED:8F:85:F2:0D:04:3F:3C:7A:00:EB:F5:BE:ED:54 Authority key identifier: A9:43:AD:F9:2D:3C:44:20:44:10:45:80:D5:5B:93:52:FD:E1:D6:89 Certificate issuer: /CN=A914C002/serialNumber=A943ADF92D3C442044104580D55B9352FDE1D689 Certificate serial: 0109 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qUOt-S08RCBEEEWA1VuTUv3h1ok.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C002/C8FE0808A92511EEAC4BDB57C4F9AE02/qUOt-S08RCBEEEWA1VuTUv3h1ok.mft Manifest number: 0109 Signing time: Sat 31 May 2025 04:36:51 +0000 Manifest this update: Sat 31 May 2025 04:36:50 +0000 Manifest next update: Sat 07 Jun 2025 04:36:50 +0000 Files and hashes: 1: qUOt-S08RCBEEEWA1VuTUv3h1ok.crl (hash: si3IPnLe4aIMDs7KGj24r6tqzTWV1mxaTEgl2/P5PMw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C002/C8FE0808A92511EEAC4BDB57C4F9AE02/qUOt-S08RCBEEEWA1VuTUv3h1ok.crl rsync://rpki.apnic.net/member_repository/A914C002/C8FE0808A92511EEAC4BDB57C4F9AE02/qUOt-S08RCBEEEWA1VuTUv3h1ok.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qUOt-S08RCBEEEWA1VuTUv3h1ok.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:36:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 265 (0x109) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C002, serialNumber=A943ADF92D3C442044104580D55B9352FDE1D689 Validity Not Before: May 31 04:36:50 2025 GMT Not After : Jun 7 04:36:50 2025 GMT Subject: CN=683a8762-5b7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:37:95:da:3b:b6:34:e0:79:85:46:f2:79:8f: 22:a0:0d:0a:2f:ab:6b:52:3f:84:1a:07:bd:dc:db: c8:53:7e:d3:82:8d:9d:ea:16:e1:ff:50:ad:e2:89: 44:ff:3d:17:9f:d2:fc:2c:51:c8:31:f7:59:0a:cb: 30:2d:73:8f:fc:dc:d7:55:46:96:52:79:b9:0d:19: 85:c8:3c:cd:13:fc:c4:77:e8:41:b6:31:06:fa:21: 16:26:9b:86:d8:86:a6:3c:7e:20:57:7a:95:3e:56: 6c:f4:21:8b:1d:d3:cd:4a:4e:01:39:51:2a:62:94: d8:43:32:4c:ce:d4:a3:13:de:42:30:52:1e:54:6c: df:d7:4c:65:d1:70:a8:e5:e3:b5:af:3a:83:13:53: 0e:2e:15:4c:d4:cd:12:8c:8d:d6:48:ee:2c:a8:07: ae:ad:2e:a1:02:98:7d:e0:cd:87:11:bc:97:77:97: aa:ae:4a:9a:44:62:6c:7b:86:98:f5:eb:8e:dd:aa: f8:a1:14:6d:ce:1c:38:51:4d:9d:4c:f5:f1:e8:96: 9f:6a:58:f9:43:fe:62:b4:32:b6:b8:e8:21:7e:95: 79:4b:b3:c9:73:f7:78:0f:01:01:ee:6c:0d:08:5c: 4d:79:6d:4a:dc:44:b1:a6:08:ec:06:e6:84:23:c4: 1b:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:E2:86:1D:7E:ED:8F:85:F2:0D:04:3F:3C:7A:00:EB:F5:BE:ED:54 X509v3 Authority Key Identifier: keyid:A9:43:AD:F9:2D:3C:44:20:44:10:45:80:D5:5B:93:52:FD:E1:D6:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C002/C8FE0808A92511EEAC4BDB57C4F9AE02/qUOt-S08RCBEEEWA1VuTUv3h1ok.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qUOt-S08RCBEEEWA1VuTUv3h1ok.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C002/C8FE0808A92511EEAC4BDB57C4F9AE02/qUOt-S08RCBEEEWA1VuTUv3h1ok.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:29:7b:c1:da:64:77:61:18:54:a7:e2:0f:f7:dc:5e:a5:62: 8b:26:df:9c:ef:81:ad:a6:6e:9b:d2:ef:c3:35:d1:9a:4c:5b: 0d:0e:53:81:39:bf:78:c9:fa:5b:85:b6:d5:8c:ce:e7:87:e1: 3f:d4:84:f3:d1:1e:57:f2:5b:c0:df:52:bd:d4:12:6b:23:b3: 3c:33:fd:68:4f:79:27:e0:eb:c9:1e:41:b9:03:f5:6d:ed:93: ae:2e:a1:61:ba:39:e9:27:37:ac:95:0e:8e:cf:24:67:3e:ba: bf:ef:50:65:6a:0d:b7:0e:df:44:36:ab:c2:9b:ce:cc:00:cc: 20:91:b9:1a:68:f2:57:3c:8b:62:fa:7b:3d:46:97:91:d0:4c: e8:33:92:66:70:84:ce:33:91:bf:fa:eb:8e:bb:dc:31:40:c8: 07:1b:90:24:b0:d3:3d:36:57:d9:3c:ef:fb:11:da:1a:27:e2: 08:94:ca:8e:0b:6c:a1:06:13:2e:8a:d8:42:6d:49:c6:24:8c: 8e:f5:7d:b2:d1:8f:70:8e:39:63:ad:07:a2:bf:d9:80:c4:df: 5b:96:51:9e:f6:8c:cf:eb:f7:38:4f:f1:2f:67:87:0b:d1:d3: 91:f6:2f:b3:38:c7:8e:08:91:50:b0:c0:d4:de:6b:d6:51:0e: fa:bd:42:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEMwMDIxMTAvBgNVBAUTKEE5NDNBREY5MkQzQzQ0MjA0NDEwNDU4MEQ1NUI5MzUy RkRFMUQ2ODkwHhcNMjUwNTMxMDQzNjUwWhcNMjUwNjA3MDQzNjUwWjAYMRYwFAYD VQQDEw02ODNhODc2Mi01YjdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzjeV2ju2NOB5hUbyeY8ioA0KL6trUj+EGge93NvIU37Tgo2d6hbh/1Ct4olE /z0Xn9L8LFHIMfdZCsswLXOP/NzXVUaWUnm5DRmFyDzNE/zEd+hBtjEG+iEWJpuG 2IamPH4gV3qVPlZs9CGLHdPNSk4BOVEqYpTYQzJMztSjE95CMFIeVGzf10xl0XCo 5eO1rzqDE1MOLhVM1M0SjI3WSO4sqAeurS6hAph94M2HEbyXd5eqrkqaRGJse4aY 9euO3ar4oRRtzhw4UU2dTPXx6Jafalj5Q/5itDK2uOghfpV5S7PJc/d4DwEB7mwN CFxNeW1K3ESxpgjsBuaEI8QbVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF7ihh1+ 7Y+F8g0EPzx6AOv1vu1UMB8GA1UdIwQYMBaAFKlDrfktPEQgRBBFgNVbk1L94daJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzAwMi9DOEZFMDgwOEE5 MjUxMUVFQUM0QkRCNTdDNEY5QUUwMi9xVU90LVMwOFJDQkVFRVdBMVZ1VFV2M2gx b2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FVT3QtUzA4UkNCRUVFV0ExVnVUVXYzaDFvay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzAwMi9DOEZFMDgwOEE5MjUxMUVFQUM0QkRCNTdDNEY5QUUwMi9xVU90LVMwOFJD QkVFRVdBMVZ1VFV2M2gxb2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAeKXvB2mR3YRhUp+IP99xepWKLJt+c74Gtpm6b0u/DNdGaTFsNDlOB Ob94yfpbhbbVjM7nh+E/1ITz0R5X8lvA31K91BJrI7M8M/1oT3kn4OvJHkG5A/Vt 7ZOuLqFhujnpJzeslQ6OzyRnPrq/71Blag23Dt9ENqvCm87MAMwgkbkaaPJXPIti +ns9RpeR0EzoM5JmcITOM5G/+uuOu9wxQMgHG5AksNM9NlfZPO/7EdoaJ+IIlMqO C2yhBhMuithCbUnGJIyO9X2y0Y9wjjljrQeiv9mAxN9bllGe9ozP6/c4T/EvZ4cL 0dOR9i+zOMeOCJFQsMDU3mvWUQ76vULu -----END CERTIFICATE-----Generated at Sat May 31 16:33:57 2025 by rpki-client