$ rpki-client -vvf rpki.apnic.net/member_repository/A914EAE4/5ECC15AA257511E7AC0D172AC4F9AE02/Qp7OGTjMiSSxEQllyc9PlkhgIBg.mft File: Qp7OGTjMiSSxEQllyc9PlkhgIBg.mft (raw, json) Hash identifier: sqfkBU1Odr8fEoX4lUVqxo5yMHHupV9n190FVc08Hvo= Subject key identifier: 0C:C9:75:13:24:05:E6:14:A7:BE:7F:9C:E6:40:42:7C:10:0E:74:A5 Authority key identifier: 42:9E:CE:19:38:CC:89:24:B1:11:09:65:C9:CF:4F:96:48:60:20:18 Certificate issuer: /CN=A914EAE4/serialNumber=429ECE1938CC8924B1110965C9CF4F9648602018 Certificate serial: 1B11 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qp7OGTjMiSSxEQllyc9PlkhgIBg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914EAE4/5ECC15AA257511E7AC0D172AC4F9AE02/Qp7OGTjMiSSxEQllyc9PlkhgIBg.mft Manifest number: 1B0D Signing time: Mon 02 Jun 2025 16:29:02 +0000 Manifest this update: Mon 02 Jun 2025 16:29:01 +0000 Manifest next update: Mon 09 Jun 2025 16:29:01 +0000 Files and hashes: 1: Qp7OGTjMiSSxEQllyc9PlkhgIBg.crl (hash: cEeB7zsz2wtl3mHQtAUM/Pmhglah9NnFqtDIZmIFuMo=) 2: 7E1ADD74E00E11EDA7E1B640C4F9AE02.roa (hash: l8rbVcrxpBL4K1nr5JzCpQg12eUyxOnsIOK36gYUlKo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914EAE4/5ECC15AA257511E7AC0D172AC4F9AE02/Qp7OGTjMiSSxEQllyc9PlkhgIBg.crl rsync://rpki.apnic.net/member_repository/A914EAE4/5ECC15AA257511E7AC0D172AC4F9AE02/Qp7OGTjMiSSxEQllyc9PlkhgIBg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qp7OGTjMiSSxEQllyc9PlkhgIBg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 16:29:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6929 (0x1b11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EAE4, serialNumber=429ECE1938CC8924B1110965C9CF4F9648602018 Validity Not Before: Jun 2 16:29:01 2025 GMT Not After : Jun 9 16:29:01 2025 GMT Subject: CN=683dd14d-c3b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:59:a1:f1:fb:fa:b4:df:0b:85:91:7c:85:ea: 4d:46:d8:6a:80:a9:78:c8:a7:f8:e1:51:34:5a:9c: 35:c7:ee:bf:d8:34:c4:23:92:24:21:74:7a:2e:52: a9:74:f7:87:42:9a:4b:5f:7d:64:0e:40:a2:d3:49: 19:91:32:fb:91:66:e2:e2:4e:90:09:f1:15:42:38: 36:fb:c8:3e:cb:0d:05:bb:1f:9b:42:d6:78:ab:36: b7:ba:1d:81:03:76:fd:aa:86:02:f7:57:91:dc:a0: 3f:d9:b4:bd:96:28:35:6b:76:8b:13:76:96:aa:bc: 59:99:3e:1c:59:8c:bf:6c:dd:70:0c:e3:43:74:6f: 7f:d4:b6:22:ae:af:09:8b:be:e0:c4:3e:02:61:84: 30:64:d2:bd:39:9f:87:53:4e:38:8e:cc:36:e7:4f: 98:fe:d0:60:c8:a0:40:d8:9f:ac:0e:ce:0a:f5:22: 9a:2e:dd:0c:21:dd:58:77:b1:8b:44:87:0c:50:7a: e9:bc:1b:aa:21:85:04:60:81:76:1c:d1:1a:bc:54: de:01:da:82:db:07:fd:ea:d8:de:68:e2:2f:02:69: a5:46:b6:05:97:9e:e3:a1:8b:e8:f5:f4:4b:87:64: af:ee:ba:25:84:f4:98:8e:3c:45:a8:b6:0d:7d:55: 2c:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:C9:75:13:24:05:E6:14:A7:BE:7F:9C:E6:40:42:7C:10:0E:74:A5 X509v3 Authority Key Identifier: keyid:42:9E:CE:19:38:CC:89:24:B1:11:09:65:C9:CF:4F:96:48:60:20:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914EAE4/5ECC15AA257511E7AC0D172AC4F9AE02/Qp7OGTjMiSSxEQllyc9PlkhgIBg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qp7OGTjMiSSxEQllyc9PlkhgIBg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EAE4/5ECC15AA257511E7AC0D172AC4F9AE02/Qp7OGTjMiSSxEQllyc9PlkhgIBg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:e0:68:22:db:d0:59:37:86:9c:3f:6f:3e:f7:90:57:0a:59: a7:86:4e:53:92:4d:b0:dd:39:54:ef:ee:a3:cd:ae:41:eb:09: ed:a9:f2:c3:1b:0a:92:f9:bb:64:b0:f2:72:25:51:6b:cc:28: 19:1f:a8:44:81:9a:05:3f:c7:f0:12:95:16:f7:51:2e:2c:9b: 73:00:9c:ab:65:38:5e:4c:27:81:bf:d3:25:45:17:43:50:92: 7c:ef:5a:2d:8b:05:b7:f6:d9:0d:c1:d5:29:cc:33:12:5a:aa: 11:fd:cd:df:18:dc:d7:29:12:0f:71:6c:bb:30:bd:d9:ec:a3: d8:9e:44:71:33:9a:54:7f:d8:2f:ef:79:54:c0:a7:99:9b:1a: 49:9c:d6:2a:f7:33:d6:b1:27:3d:ab:1b:6a:90:7b:a3:75:5d: 10:5e:58:c7:b0:42:ec:7e:7c:a4:fe:99:69:49:9c:8e:0d:c5: fa:01:f8:60:fc:d1:72:38:d8:01:46:d2:79:17:ce:14:f2:5a: aa:06:9c:c8:ec:91:1c:a7:d6:8a:43:fb:a3:67:47:bc:9e:56: 80:e1:c0:c2:31:35:25:df:be:ae:45:9e:82:b5:7c:a9:af:b3: a8:b1:67:dd:4a:ed:d3:22:b1:27:ed:bf:1b:fb:6b:c5:39:e2: 5f:fb:35:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGxEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEVBRTQxMTAvBgNVBAUTKDQyOUVDRTE5MzhDQzg5MjRCMTExMDk2NUM5Q0Y0Rjk2 NDg2MDIwMTgwHhcNMjUwNjAyMTYyOTAxWhcNMjUwNjA5MTYyOTAxWjAYMRYwFAYD VQQDEw02ODNkZDE0ZC1jM2I1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA01mh8fv6tN8LhZF8hepNRthqgKl4yKf44VE0Wpw1x+6/2DTEI5IkIXR6LlKp dPeHQppLX31kDkCi00kZkTL7kWbi4k6QCfEVQjg2+8g+yw0Fux+bQtZ4qza3uh2B A3b9qoYC91eR3KA/2bS9lig1a3aLE3aWqrxZmT4cWYy/bN1wDONDdG9/1LYirq8J i77gxD4CYYQwZNK9OZ+HU044jsw250+Y/tBgyKBA2J+sDs4K9SKaLt0MId1Yd7GL RIcMUHrpvBuqIYUEYIF2HNEavFTeAdqC2wf96tjeaOIvAmmlRrYFl57joYvo9fRL h2Sv7rolhPSYjjxFqLYNfVUs5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAzJdRMk BeYUp75/nOZAQnwQDnSlMB8GA1UdIwQYMBaAFEKezhk4zIkksREJZcnPT5ZIYCAY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUFFNC81RUNDMTVBQTI1 NzUxMUU3QUMwRDE3MkFDNEY5QUUwMi9RcDdPR1RqTWlTU3hFUWxseWM5UGxraGdJ QmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1FwN09HVGpNaVNTeEVRbGx5YzlQbGtoZ0lCZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RUFFNC81RUNDMTVBQTI1NzUxMUU3QUMwRDE3MkFDNEY5QUUwMi9RcDdPR1RqTWlT U3hFUWxseWM5UGxraGdJQmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA34Ggi29BZN4acP28+95BXClmnhk5Tkk2w3TlU7+6jza5B6wntqfLD GwqS+btksPJyJVFrzCgZH6hEgZoFP8fwEpUW91EuLJtzAJyrZTheTCeBv9MlRRdD UJJ871otiwW39tkNwdUpzDMSWqoR/c3fGNzXKRIPcWy7ML3Z7KPYnkRxM5pUf9gv 73lUwKeZmxpJnNYq9zPWsSc9qxtqkHujdV0QXljHsELsfnyk/plpSZyODcX6Afhg /NFyONgBRtJ5F84U8lqqBpzI7JEcp9aKQ/ujZ0e8nlaA4cDCMTUl376uRZ6CtXyp r7OosWfdSu3TIrEn7b8b+2vFOeJf+zWm -----END CERTIFICATE-----Generated at Tue Jun 3 23:59:40 2025 by rpki-client