$ rpki-client -vvf rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.mft File: qE54NmnC-ZeE80T80yP8-ZHMQPs.mft (raw, json) Hash identifier: 0XJFLRJPiXj4yuDk10tSSnn8bT8Q6BIVSjRIX3toeUY= Subject key identifier: FD:9E:AB:32:5F:04:01:6E:8A:BE:4F:E1:91:5A:71:45:25:3C:E9:68 Authority key identifier: A8:4E:78:36:69:C2:F9:97:84:F3:44:FC:D3:23:FC:F9:91:CC:40:FB Certificate issuer: /CN=A91604AC/serialNumber=A84E783669C2F99784F344FCD323FCF991CC40FB Certificate serial: 0202 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/qE54NmnC-ZeE80T80yP8-ZHMQPs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.mft Manifest number: 01F9 Signing time: Mon 02 Jun 2025 22:42:38 +0000 Manifest this update: Mon 02 Jun 2025 22:42:38 +0000 Manifest next update: Mon 09 Jun 2025 22:42:38 +0000 Files and hashes: 1: qE54NmnC-ZeE80T80yP8-ZHMQPs.crl (hash: pqvEcyE9Dyc8A+s4iGdfvFlZZmjQP3t68GbgBmfIZaw=) 2: 348854286B8F11ED9B07DD15C4F9AE02.roa (hash: xsRGj9an13o+ozRk8T0R12ysRESN2vJXv8XQcYafKCU=) 3: 11DD43BA80E411ED993FD824C4F9AE02.roa (hash: 0ZDkLkZaaQfnmuzBjz0ljr58b+EeHu6qJ0K1k0tRYzo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.crl rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/qE54NmnC-ZeE80T80yP8-ZHMQPs.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 22:42:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 514 (0x202) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91604AC, serialNumber=A84E783669C2F99784F344FCD323FCF991CC40FB Validity Not Before: Jun 2 22:42:38 2025 GMT Not After : Jun 9 22:42:38 2025 GMT Subject: CN=683e28de-ef7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:4c:ae:21:9e:40:26:7f:39:a5:d7:53:6b:41: 10:e2:14:6d:c2:4f:82:a4:43:36:11:91:6a:fd:ce: 63:ea:be:1c:00:f0:a1:10:56:fd:1d:58:7b:b2:59: c1:45:eb:9e:bc:8b:34:52:8b:4e:50:06:80:a0:11: ff:ae:ce:cc:62:49:85:51:3f:e7:c9:ba:6c:ff:44: 65:2d:69:61:e1:96:aa:63:14:07:67:47:f5:7f:e0: bd:32:3c:93:e1:56:5b:17:af:05:c6:a4:9e:4c:aa: 8d:aa:a4:bc:ef:65:e2:b1:12:0a:23:15:57:ba:15: 54:7b:c7:3e:f4:b8:67:9a:50:5e:bb:72:42:44:d3: 17:52:f3:3c:fe:92:2d:75:46:b6:05:53:56:6f:f7: 60:91:7a:b9:2c:70:e3:45:35:89:4d:bd:db:c3:48: 1a:4e:ab:f4:87:c9:f1:0a:0f:33:41:8f:13:aa:b9: c6:4a:5c:e3:cf:68:2f:7c:1e:2f:b0:70:be:02:f1: 40:ca:f9:af:c8:97:55:f2:57:63:4e:1b:ef:44:79: c9:3f:c4:61:26:be:7d:41:cf:cb:d7:fe:30:59:4e: 29:74:5b:8b:ca:38:59:40:4d:b5:71:62:6d:f3:0b: 3e:04:3f:99:6a:99:0e:e7:d0:f1:c4:c7:b8:bf:e5: 92:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:9E:AB:32:5F:04:01:6E:8A:BE:4F:E1:91:5A:71:45:25:3C:E9:68 X509v3 Authority Key Identifier: keyid:A8:4E:78:36:69:C2:F9:97:84:F3:44:FC:D3:23:FC:F9:91:CC:40:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/qE54NmnC-ZeE80T80yP8-ZHMQPs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:1a:87:71:ad:ce:1a:74:c4:4e:d4:39:e1:a5:73:72:92:8e: 9c:5d:28:04:89:e8:80:b1:98:42:b6:8c:07:0f:d3:31:de:0f: a6:24:b3:a8:5a:3b:af:7f:33:04:21:99:0d:15:1f:a6:1b:c8: 88:ef:de:9a:8c:0b:b5:9a:5e:28:4b:65:34:74:af:37:e0:23: 2e:9f:64:92:93:ba:c0:08:a3:00:f9:58:2f:c8:ef:43:8a:39: 71:e8:9f:8a:24:05:fa:24:f1:1c:9a:b0:13:e8:18:87:c9:0e: 15:59:d2:9d:a5:90:82:a4:75:77:23:2b:ee:d6:d3:bb:b6:45: ec:f6:f0:85:2d:fe:81:f2:27:10:68:29:cb:13:46:55:28:92: cb:da:d1:b0:63:28:3b:c5:6f:71:2e:a7:8a:c9:86:cf:6d:36: 7a:93:60:29:6c:8f:97:7d:1e:3f:cc:7a:ae:8b:22:c8:92:c8: 19:05:9e:27:8d:c6:54:a7:df:8c:1f:b6:ca:f7:cc:f9:83:2b: 17:89:a0:b0:f4:f5:59:86:5a:a5:55:56:a7:b1:df:c4:ba:9a: 02:ee:32:85:98:06:b0:3b:eb:61:27:db:f5:19:48:af:f3:81: 5f:c2:78:b7:46:ad:9c:5f:2b:10:c3:59:84:d2:b4:0d:a5:1b: 05:81:56:74 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjA0QUMxMTAvBgNVBAUTKEE4NEU3ODM2NjlDMkY5OTc4NEYzNDRGQ0QzMjNGQ0Y5 OTFDQzQwRkIwHhcNMjUwNjAyMjI0MjM4WhcNMjUwNjA5MjI0MjM4WjAYMRYwFAYD VQQDEw02ODNlMjhkZS1lZjdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtkyuIZ5AJn85pddTa0EQ4hRtwk+CpEM2EZFq/c5j6r4cAPChEFb9HVh7slnB ReuevIs0UotOUAaAoBH/rs7MYkmFUT/nybps/0RlLWlh4ZaqYxQHZ0f1f+C9MjyT 4VZbF68FxqSeTKqNqqS872XisRIKIxVXuhVUe8c+9LhnmlBeu3JCRNMXUvM8/pIt dUa2BVNWb/dgkXq5LHDjRTWJTb3bw0gaTqv0h8nxCg8zQY8TqrnGSlzjz2gvfB4v sHC+AvFAyvmvyJdV8ldjThvvRHnJP8RhJr59Qc/L1/4wWU4pdFuLyjhZQE21cWJt 8ws+BD+ZapkO59DxxMe4v+WS4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP2eqzJf BAFuir5P4ZFacUUlPOloMB8GA1UdIwQYMBaAFKhOeDZpwvmXhPNE/NMj/PmRzED7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDRBQy8zNEJFQzVGNDQ0 NEMxMUVEQkRBOTEyN0NDNEY5QUUwMi9xRTU0Tm1uQy1aZUU4MFQ4MHlQOC1aSE1R UHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL3FFNTRObW5DLVplRTgwVDgweVA4LVpITVFQcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MDRBQy8zNEJFQzVGNDQ0NEMxMUVEQkRBOTEyN0NDNEY5QUUwMi9xRTU0Tm1uQy1a ZUU4MFQ4MHlQOC1aSE1RUHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXGodxrc4adMRO1DnhpXNyko6cXSgEieiAsZhCtowHD9Mx3g+mJLOo WjuvfzMEIZkNFR+mG8iI796ajAu1ml4oS2U0dK834CMun2SSk7rACKMA+VgvyO9D ijlx6J+KJAX6JPEcmrAT6BiHyQ4VWdKdpZCCpHV3Iyvu1tO7tkXs9vCFLf6B8icQ aCnLE0ZVKJLL2tGwYyg7xW9xLqeKyYbPbTZ6k2ApbI+XfR4/zHquiyLIksgZBZ4n jcZUp9+MH7bK98z5gysXiaCw9PVZhlqlVVansd/EupoC7jKFmAawO+thJ9v1GUiv 84Ffwni3Rq2cXysQw1mE0rQNpRsFgVZ0 -----END CERTIFICATE-----Generated at Tue Jun 3 23:36:48 2025 by rpki-client