$ rpki-client -vvf rpki.apnic.net/member_repository/A9164164/A68E264EA18211EF8F4E1623C4F9AE02/qHNyAfpMZPoAVkAi2wb2Dn7izQ0.mft File: qHNyAfpMZPoAVkAi2wb2Dn7izQ0.mft (raw, json) Hash identifier: 1inNDaTOjKA59LcU93UDehLF6ZE0pYZP5OoSTsyvjmE= Subject key identifier: BA:12:25:4F:89:10:86:97:A1:30:B5:14:D2:6D:66:85:48:45:A3:94 Authority key identifier: A8:73:72:01:FA:4C:64:FA:00:56:40:22:DB:06:F6:0E:7E:E2:CD:0D Certificate issuer: /CN=A9164164/serialNumber=A8737201FA4C64FA00564022DB06F60E7EE2CD0D Certificate serial: 69 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qHNyAfpMZPoAVkAi2wb2Dn7izQ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9164164/A68E264EA18211EF8F4E1623C4F9AE02/qHNyAfpMZPoAVkAi2wb2Dn7izQ0.mft Manifest number: 68 Signing time: Tue 03 Jun 2025 06:44:33 +0000 Manifest this update: Tue 03 Jun 2025 06:44:33 +0000 Manifest next update: Tue 10 Jun 2025 06:44:33 +0000 Files and hashes: 1: qHNyAfpMZPoAVkAi2wb2Dn7izQ0.crl (hash: jcnlX1gwXmhWec5UZoeAH0RjFQTsAL+4EifwSAkEn+k=) 2: F1487C2AA18211EFA2B7E923C4F9AE02.roa (hash: ow0JlSSKtHwrzhAKotnC4Hb7SPL+BmK/kbudjjYhQGA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9164164/A68E264EA18211EF8F4E1623C4F9AE02/qHNyAfpMZPoAVkAi2wb2Dn7izQ0.crl rsync://rpki.apnic.net/member_repository/A9164164/A68E264EA18211EF8F4E1623C4F9AE02/qHNyAfpMZPoAVkAi2wb2Dn7izQ0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qHNyAfpMZPoAVkAi2wb2Dn7izQ0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 06:44:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 105 (0x69) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9164164, serialNumber=A8737201FA4C64FA00564022DB06F60E7EE2CD0D Validity Not Before: Jun 3 06:44:33 2025 GMT Not After : Jun 10 06:44:33 2025 GMT Subject: CN=683e99d1-0a33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:3b:67:5a:0e:3e:a7:1c:d3:8e:97:22:b9:df: 70:23:53:04:0a:3c:e5:df:95:7d:c1:08:61:8f:5e: 84:68:9b:29:64:90:66:12:6c:bf:9c:5f:0a:de:30: 7b:f0:e1:9c:ba:7b:37:30:bf:e0:db:cd:f3:eb:b0: 85:09:26:68:7e:23:c2:82:fd:d1:a0:90:de:d9:3c: bc:ab:6c:74:ef:c8:0f:00:13:49:bf:a0:2d:d8:3e: 9f:19:48:3b:33:02:40:f0:39:45:c5:8f:81:92:9b: cb:0d:cc:db:81:ec:bb:d3:76:e5:8b:41:5f:7e:21: c5:de:48:c5:b1:18:44:5c:c6:f5:0c:78:06:23:89: 18:6c:fd:45:be:37:12:d8:4c:eb:df:c2:73:80:37: 3f:cf:bd:d1:9f:02:b4:19:e9:3a:d8:99:87:ff:80: b2:ea:21:1f:df:94:0b:3b:a4:4d:88:33:44:1f:2c: d4:5b:71:91:e5:1b:1d:c4:9a:b8:25:e3:a7:f1:9f: c7:8a:6e:6b:12:26:4a:9f:4b:13:0c:fb:e2:72:3e: 86:0d:ef:1c:b6:9a:a2:c4:ef:1a:62:ca:c8:7f:b8: 3f:93:33:63:9b:07:7a:4f:88:64:82:8b:9d:85:8c: 43:6b:b5:d4:6a:a0:a0:de:2e:2e:d6:ec:9e:1e:e6: 2d:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:12:25:4F:89:10:86:97:A1:30:B5:14:D2:6D:66:85:48:45:A3:94 X509v3 Authority Key Identifier: keyid:A8:73:72:01:FA:4C:64:FA:00:56:40:22:DB:06:F6:0E:7E:E2:CD:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9164164/A68E264EA18211EF8F4E1623C4F9AE02/qHNyAfpMZPoAVkAi2wb2Dn7izQ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qHNyAfpMZPoAVkAi2wb2Dn7izQ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164164/A68E264EA18211EF8F4E1623C4F9AE02/qHNyAfpMZPoAVkAi2wb2Dn7izQ0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:af:ed:da:3f:b7:c9:bb:6d:b9:a3:86:ae:66:ef:c7:bf:b2: 7a:36:e7:1f:0b:08:5d:fb:50:f3:0e:3f:ba:20:57:2e:20:78: c9:65:96:de:b3:59:8c:6e:65:ef:f6:69:6e:c7:04:56:93:43: e4:53:74:01:6f:74:5c:60:39:ff:7d:a9:30:01:a9:b8:cc:32: 31:4a:16:96:6e:5d:dd:51:ec:52:54:de:99:39:d1:e4:88:40: a6:0b:a8:2e:3a:05:10:aa:9e:02:65:6a:bd:e3:9a:2a:68:9b: 04:79:c3:d9:ab:93:ab:6c:75:ab:d0:e2:26:3d:f2:76:9b:e9: ef:bd:20:10:eb:6e:85:a7:48:2a:c4:4a:06:c0:27:ac:ef:e3: 2e:8a:41:43:e9:36:70:9d:56:6d:e9:7c:c8:b4:0e:b2:1a:0b: c8:dc:16:26:74:0b:69:01:23:6c:0d:91:57:8d:79:3d:d0:57: 29:27:f3:35:b9:9d:19:ee:40:77:46:dd:59:9b:ad:00:fb:5f: 50:87:82:6e:5a:fb:2a:a3:07:26:3d:e2:ca:d0:32:26:46:19: 29:6b:30:36:67:f2:e9:d6:2e:49:04:93:16:0f:38:67:42:96: 88:85:25:01:48:22:38:69:f2:14:36:b8:c6:a5:6e:94:41:ab: 34:6d:28:2e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBaTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 NDE2NDExMC8GA1UEBRMoQTg3MzcyMDFGQTRDNjRGQTAwNTY0MDIyREIwNkY2MEU3 RUUyQ0QwRDAeFw0yNTA2MDMwNjQ0MzNaFw0yNTA2MTAwNjQ0MzNaMBgxFjAUBgNV BAMTDTY4M2U5OWQxLTBhMzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDQO2daDj6nHNOOlyK533AjUwQKPOXflX3BCGGPXoRomylkkGYSbL+cXwreMHvw 4Zy6ezcwv+DbzfPrsIUJJmh+I8KC/dGgkN7ZPLyrbHTvyA8AE0m/oC3YPp8ZSDsz AkDwOUXFj4GSm8sNzNuB7LvTduWLQV9+IcXeSMWxGERcxvUMeAYjiRhs/UW+NxLY TOvfwnOANz/PvdGfArQZ6TrYmYf/gLLqIR/flAs7pE2IM0QfLNRbcZHlGx3Emrgl 46fxn8eKbmsSJkqfSxMM++JyPoYN7xy2mqLE7xpiysh/uD+TM2ObB3pPiGSCi52F jENrtdRqoKDeLi7W7J4e5i3jAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUuhIlT4kQ hpehMLUU0m1mhUhFo5QwHwYDVR0jBBgwFoAUqHNyAfpMZPoAVkAi2wb2Dn7izQ0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY0MTY0L0E2OEUyNjRFQTE4 MjExRUY4RjRFMTYyM0M0RjlBRTAyL3FITnlBZnBNWlBvQVZrQWkyd2IyRG43aXpR MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvcUhOeUFmcE1aUG9BVmtBaTJ3YjJEbjdpelEwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY0 MTY0L0E2OEUyNjRFQTE4MjExRUY4RjRFMTYyM0M0RjlBRTAyL3FITnlBZnBNWlBv QVZrQWkyd2IyRG43aXpRMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAC6v7do/t8m7bbmjhq5m78e/sno25x8LCF37UPMOP7ogVy4geMlllt6z WYxuZe/2aW7HBFaTQ+RTdAFvdFxgOf99qTABqbjMMjFKFpZuXd1R7FJU3pk50eSI QKYLqC46BRCqngJlar3jmipomwR5w9mrk6tsdavQ4iY98nab6e+9IBDrboWnSCrE SgbAJ6zv4y6KQUPpNnCdVm3pfMi0DrIaC8jcFiZ0C2kBI2wNkVeNeT3QVykn8zW5 nRnuQHdG3VmbrQD7X1CHgm5a+yqjByY94srQMiZGGSlrMDZn8unWLkkEkxYPOGdC loiFJQFIIjhp8hQ2uMalbpRBqzRtKC4= -----END CERTIFICATE-----Generated at Wed Jun 4 00:03:53 2025 by rpki-client