$ rpki-client -vvf rpki.apnic.net/member_repository/A9150F66/3D981CCC3A1E11E79AA0D51CC4F9AE02/qjJWJCn4lsCly95WRDFIAzm-upc.mft File: qjJWJCn4lsCly95WRDFIAzm-upc.mft (raw, json) Hash identifier: On4me5s8lkwuR/kAvkew/rm/5jC+I2X5snpKnN4VKV8= Subject key identifier: F0:72:A4:D9:7A:4A:4E:4A:B8:C6:07:79:8D:3E:A8:D1:49:D4:8A:3D Authority key identifier: AA:32:56:24:29:F8:96:C0:A5:CB:DE:56:44:31:48:03:39:BE:BA:97 Certificate issuer: /CN=A9150F66/serialNumber=AA32562429F896C0A5CBDE564431480339BEBA97 Certificate serial: 1AA7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qjJWJCn4lsCly95WRDFIAzm-upc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150F66/3D981CCC3A1E11E79AA0D51CC4F9AE02/qjJWJCn4lsCly95WRDFIAzm-upc.mft Manifest number: 1A92 Signing time: Mon 02 Jun 2025 15:48:44 +0000 Manifest this update: Mon 02 Jun 2025 15:48:43 +0000 Manifest next update: Mon 09 Jun 2025 15:48:43 +0000 Files and hashes: 1: qjJWJCn4lsCly95WRDFIAzm-upc.crl (hash: jxkOTseZMy2C7llt5z1oicP7ZbVLqybOKNpoE5iLVqk=) 2: 753F0A48CFB611EE83724A58C4F9AE02.roa (hash: Y0zJtnbzpmd90X17sv9yMGgLuPfyz+VuYGcqduHEde8=) 3: 7A1D009C0EB611ECB5408277C4F9AE02.roa (hash: OAplGjEOMAWR+zChRVlz8SiE1O7bb/QPXcg3VkFMFkA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150F66/3D981CCC3A1E11E79AA0D51CC4F9AE02/qjJWJCn4lsCly95WRDFIAzm-upc.crl rsync://rpki.apnic.net/member_repository/A9150F66/3D981CCC3A1E11E79AA0D51CC4F9AE02/qjJWJCn4lsCly95WRDFIAzm-upc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qjJWJCn4lsCly95WRDFIAzm-upc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 05:53:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6823 (0x1aa7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150F66, serialNumber=AA32562429F896C0A5CBDE564431480339BEBA97 Validity Not Before: Jun 2 15:48:43 2025 GMT Not After : Jun 9 15:48:43 2025 GMT Subject: CN=683dc7db-5b6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:f4:78:33:09:65:10:d3:96:13:d6:01:7c:9f: 08:86:b0:6a:de:05:98:a4:52:92:6d:68:71:55:77: f9:5f:cf:6a:53:a1:46:63:38:85:15:ca:01:4b:7e: de:4b:b3:c3:b4:6c:8e:0e:6c:0a:d3:d9:04:cc:68: 65:a0:cb:f5:db:cb:16:a3:00:a0:e5:71:d9:87:e3: 38:c4:11:b6:9e:b9:5f:3b:2f:28:af:76:e8:42:0e: d7:3a:d3:48:f8:93:83:02:e2:28:06:bc:b4:0d:a3: d0:22:80:cd:17:5b:f9:d4:a4:85:f4:12:37:c6:f3: e9:b5:87:8c:cb:5b:fb:28:51:e3:61:3c:9c:46:17: 07:07:c2:36:18:ff:83:4d:ac:02:9f:25:d3:a3:0e: b1:5b:f7:f4:f7:01:74:e5:66:a3:1d:ed:49:3a:51: 82:7d:95:f9:d3:d2:8a:17:9c:e8:d1:3e:cd:28:25: 65:ae:a7:c9:27:37:e7:70:2f:65:9a:62:1f:89:51: 54:3a:b7:25:8d:b7:28:db:a0:83:89:8a:4d:cb:7b: d7:c0:55:87:be:09:76:4a:81:10:c2:ac:e1:fb:c0: 1d:cc:bc:6c:56:d1:59:58:0e:d0:88:18:df:38:33: f3:f0:75:ff:2a:1a:41:52:bf:cb:4b:00:61:4b:6d: 77:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:72:A4:D9:7A:4A:4E:4A:B8:C6:07:79:8D:3E:A8:D1:49:D4:8A:3D X509v3 Authority Key Identifier: keyid:AA:32:56:24:29:F8:96:C0:A5:CB:DE:56:44:31:48:03:39:BE:BA:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150F66/3D981CCC3A1E11E79AA0D51CC4F9AE02/qjJWJCn4lsCly95WRDFIAzm-upc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qjJWJCn4lsCly95WRDFIAzm-upc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150F66/3D981CCC3A1E11E79AA0D51CC4F9AE02/qjJWJCn4lsCly95WRDFIAzm-upc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:62:31:9d:3d:a5:28:be:3f:13:1f:d5:6f:9c:ac:1a:83:32: 73:cd:4f:cf:9d:fd:69:82:db:4f:b3:77:ee:2f:3c:a0:16:4d: 05:79:94:67:f5:48:b0:f4:20:ce:ba:b3:41:71:af:91:fc:e6: 14:1f:b7:d1:b4:4a:c5:b5:87:be:10:3b:60:9a:44:6b:43:e8: d0:82:64:3f:9e:ff:3d:c9:d8:7b:19:01:77:58:f8:7e:8a:fd: ac:72:eb:31:83:66:b9:0e:4b:36:9f:81:df:bf:94:0b:7f:4f: 7a:c7:9c:38:8b:b5:2b:2a:58:4f:0e:b3:5f:f9:44:ca:9e:19: 5c:f8:79:f6:c8:7c:8c:2e:f5:43:09:1d:bf:bf:be:9c:0a:36: 84:37:4d:7b:19:72:eb:c9:58:25:90:a2:60:9c:2b:c7:78:d0: 6b:8e:37:7b:64:7a:61:19:76:02:d4:b9:b4:10:f3:ba:68:11: e1:e8:38:6d:f7:d6:e2:fe:d6:22:2e:da:5c:9f:87:17:c7:96: a3:4d:03:96:c7:ab:b6:3f:c9:29:94:5b:05:05:3a:45:12:e6: 65:fd:7c:a6:ea:ee:ab:bb:cf:89:48:b7:fc:8a:59:42:88:02: 08:bf:15:84:a7:6b:90:4b:54:dd:e6:40:15:cb:b4:a0:d5:b6: ef:d1:65:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGqcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTBGNjYxMTAvBgNVBAUTKEFBMzI1NjI0MjlGODk2QzBBNUNCREU1NjQ0MzE0ODAz MzlCRUJBOTcwHhcNMjUwNjAyMTU0ODQzWhcNMjUwNjA5MTU0ODQzWjAYMRYwFAYD VQQDEw02ODNkYzdkYi01YjZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApfR4MwllENOWE9YBfJ8IhrBq3gWYpFKSbWhxVXf5X89qU6FGYziFFcoBS37e S7PDtGyODmwK09kEzGhloMv128sWowCg5XHZh+M4xBG2nrlfOy8or3boQg7XOtNI +JODAuIoBry0DaPQIoDNF1v51KSF9BI3xvPptYeMy1v7KFHjYTycRhcHB8I2GP+D TawCnyXTow6xW/f09wF05WajHe1JOlGCfZX509KKF5zo0T7NKCVlrqfJJzfncC9l mmIfiVFUOrcljbco26CDiYpNy3vXwFWHvgl2SoEQwqzh+8AdzLxsVtFZWA7QiBjf ODPz8HX/KhpBUr/LSwBhS213gwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPBypNl6 Sk5KuMYHeY0+qNFJ1Io9MB8GA1UdIwQYMBaAFKoyViQp+JbApcveVkQxSAM5vrqX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MEY2Ni8zRDk4MUNDQzNB MUUxMUU3OUFBMEQ1MUNDNEY5QUUwMi9xakpXSkNuNGxzQ2x5OTVXUkRGSUF6bS11 cGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3FqSldKQ240bHNDbHk5NVdSREZJQXptLXVwYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MEY2Ni8zRDk4MUNDQzNBMUUxMUU3OUFBMEQ1MUNDNEY5QUUwMi9xakpXSkNuNGxz Q2x5OTVXUkRGSUF6bS11cGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQYjGdPaUovj8TH9VvnKwagzJzzU/Pnf1pgttPs3fuLzygFk0FeZRn 9Uiw9CDOurNBca+R/OYUH7fRtErFtYe+EDtgmkRrQ+jQgmQ/nv89ydh7GQF3WPh+ iv2scusxg2a5Dks2n4Hfv5QLf096x5w4i7UrKlhPDrNf+UTKnhlc+Hn2yHyMLvVD CR2/v76cCjaEN017GXLryVglkKJgnCvHeNBrjjd7ZHphGXYC1Lm0EPO6aBHh6Dht 99bi/tYiLtpcn4cXx5ajTQOWx6u2P8kplFsFBTpFEuZl/Xym6u6ru8+JSLf8illC iAIIvxWEp2uQS1Td5kAVy7Sg1bbv0WWF -----END CERTIFICATE-----Generated at Mon Jun 2 19:19:23 2025 by rpki-client