$ rpki-client -vvf rpki.apnic.net/member_repository/A916A703/7C83BDEA490311EB8447B26BC4F9AE02/cqGfa6-m7u5m3DsabGeCLlMwz3g.mft File: cqGfa6-m7u5m3DsabGeCLlMwz3g.mft (raw, json) Hash identifier: 4f5lJSke3z1n67QeHI0ESAdltW/jacne6Usurj8ngEw= Subject key identifier: 9C:01:E4:61:11:D3:C4:55:B0:AC:55:D5:59:6D:F7:B2:A8:80:EF:79 Authority key identifier: 72:A1:9F:6B:AF:A6:EE:EE:66:DC:3B:1A:6C:67:82:2E:53:30:CF:78 Certificate issuer: /CN=A916A703/serialNumber=72A19F6BAFA6EEEE66DC3B1A6C67822E5330CF78 Certificate serial: 06FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cqGfa6-m7u5m3DsabGeCLlMwz3g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A703/7C83BDEA490311EB8447B26BC4F9AE02/cqGfa6-m7u5m3DsabGeCLlMwz3g.mft Manifest number: 06F7 Signing time: Fri 30 May 2025 22:10:09 +0000 Manifest this update: Fri 30 May 2025 22:10:08 +0000 Manifest next update: Fri 06 Jun 2025 22:10:08 +0000 Files and hashes: 1: cqGfa6-m7u5m3DsabGeCLlMwz3g.crl (hash: t+/VcwT7IkEO1AnNTx6t0oycXjmcf/ctl9eBKVS+VHw=) 2: D3B421A2366811F0A18FF40AC4F9AE02.roa (hash: m0A4bmKYQpyQxbJtwty9jze7vG5EqP7rfA85eJFYPgg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A703/7C83BDEA490311EB8447B26BC4F9AE02/cqGfa6-m7u5m3DsabGeCLlMwz3g.crl rsync://rpki.apnic.net/member_repository/A916A703/7C83BDEA490311EB8447B26BC4F9AE02/cqGfa6-m7u5m3DsabGeCLlMwz3g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cqGfa6-m7u5m3DsabGeCLlMwz3g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 22:10:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1791 (0x6ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A703, serialNumber=72A19F6BAFA6EEEE66DC3B1A6C67822E5330CF78 Validity Not Before: May 30 22:10:08 2025 GMT Not After : Jun 6 22:10:08 2025 GMT Subject: CN=683a2cc1-a70e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:5a:a8:b6:89:03:5c:4d:81:08:23:74:0b:c5: a5:4e:18:6b:9a:1d:7c:d2:d8:24:e7:3b:ba:c1:74: 08:cf:cc:27:6b:c9:86:97:c2:fe:9e:a5:2a:4c:3c: 7f:3e:15:17:73:89:58:ec:81:3b:1b:66:a8:72:c6: 54:c2:14:86:c8:e2:37:11:e0:95:ef:90:22:49:b2: 45:57:13:01:3d:25:57:d5:c6:79:94:92:db:0c:83: 1a:b8:8d:db:b6:be:36:ec:94:c7:a3:04:5a:10:71: df:95:21:56:53:c5:27:8b:0f:86:4e:c6:cf:1b:00: 39:3b:a2:b0:c0:d0:03:82:68:3e:5e:8b:27:65:74: ce:b6:c0:af:bc:0c:cd:3e:2c:27:e9:2c:31:43:95: b7:e9:b8:08:64:d1:c6:f2:30:be:cf:04:15:5f:44: 18:c4:0b:3d:e6:f3:59:e1:52:87:df:31:81:96:bf: 37:ca:29:40:0a:d9:89:fd:bf:59:cd:14:c0:75:b2: 88:ca:f8:cb:62:92:be:e3:43:6b:22:e9:93:d9:15: 6f:ad:ab:fd:e6:72:2d:ab:08:d1:5a:de:e0:31:4b: c2:b6:c3:03:3a:4f:2f:a5:b2:9b:f4:eb:fe:16:b9: 03:a4:56:a2:fc:8b:89:b2:1e:1c:7a:4f:5c:93:78: 0a:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:01:E4:61:11:D3:C4:55:B0:AC:55:D5:59:6D:F7:B2:A8:80:EF:79 X509v3 Authority Key Identifier: keyid:72:A1:9F:6B:AF:A6:EE:EE:66:DC:3B:1A:6C:67:82:2E:53:30:CF:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A703/7C83BDEA490311EB8447B26BC4F9AE02/cqGfa6-m7u5m3DsabGeCLlMwz3g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cqGfa6-m7u5m3DsabGeCLlMwz3g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A703/7C83BDEA490311EB8447B26BC4F9AE02/cqGfa6-m7u5m3DsabGeCLlMwz3g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:8d:c2:d5:e3:05:f5:e9:c3:fd:1d:2a:f3:9f:50:42:3e:ac: 28:83:9f:12:91:87:94:ba:2c:d0:af:01:96:e1:7b:d9:e1:e9: fb:e5:1a:24:0a:a4:73:35:63:46:f6:70:e1:d3:c2:bb:83:82: 17:47:f8:66:93:24:b5:7d:4e:73:74:45:1d:1b:90:6f:38:ff: 82:2b:3c:cc:61:fe:bc:95:ab:f2:ff:cb:c0:24:ba:bb:a5:e0: be:72:ae:04:c8:6b:50:66:58:df:1a:eb:59:01:f9:67:c8:b0: 02:7d:fe:4b:34:4d:a9:f6:7f:ae:36:de:5f:68:52:7a:37:4f: c8:f8:a2:97:47:88:48:16:eb:24:a9:fe:91:3c:f5:b3:24:57: 51:ba:66:e7:e2:08:ed:73:b7:0a:d2:98:ea:87:c9:d6:86:62: 3f:f2:c0:63:72:23:2f:52:f0:0d:4e:36:3f:c4:bd:2c:b6:96: 9e:21:0b:80:a6:12:ca:13:70:57:58:26:d0:f7:94:fc:cd:73: 65:ee:7b:ea:7a:7d:b0:be:92:ef:e2:22:84:6b:8d:d8:63:93: 83:88:29:a7:47:b0:ed:ac:84:7a:3c:92:42:9d:ae:ae:de:55: 19:96:01:77:d1:c9:06:3c:b4:58:cc:c1:9b:ad:27:67:29:4a: b2:cb:f1:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBv8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkE3MDMxMTAvBgNVBAUTKDcyQTE5RjZCQUZBNkVFRUU2NkRDM0IxQTZDNjc4MjJF NTMzMENGNzgwHhcNMjUwNTMwMjIxMDA4WhcNMjUwNjA2MjIxMDA4WjAYMRYwFAYD VQQDEw02ODNhMmNjMS1hNzBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoFqotokDXE2BCCN0C8WlThhrmh180tgk5zu6wXQIz8wna8mGl8L+nqUqTDx/ PhUXc4lY7IE7G2aocsZUwhSGyOI3EeCV75AiSbJFVxMBPSVX1cZ5lJLbDIMauI3b tr427JTHowRaEHHflSFWU8Uniw+GTsbPGwA5O6KwwNADgmg+XosnZXTOtsCvvAzN Piwn6SwxQ5W36bgIZNHG8jC+zwQVX0QYxAs95vNZ4VKH3zGBlr83yilACtmJ/b9Z zRTAdbKIyvjLYpK+40NrIumT2RVvrav95nItqwjRWt7gMUvCtsMDOk8vpbKb9Ov+ FrkDpFai/IuJsh4cek9ck3gKoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJwB5GER 08RVsKxV1Vlt97KogO95MB8GA1UdIwQYMBaAFHKhn2uvpu7uZtw7Gmxngi5TMM94 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTcwMy83QzgzQkRFQTQ5 MDMxMUVCODQ0N0IyNkJDNEY5QUUwMi9jcUdmYTYtbTd1NW0zRHNhYkdlQ0xsTXd6 M2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NxR2ZhNi1tN3U1bTNEc2FiR2VDTGxNd3ozZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTcwMy83QzgzQkRFQTQ5MDMxMUVCODQ0N0IyNkJDNEY5QUUwMi9jcUdmYTYtbTd1 NW0zRHNhYkdlQ0xsTXd6M2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCljcLV4wX16cP9HSrzn1BCPqwog58SkYeUuizQrwGW4XvZ4en75Rok CqRzNWNG9nDh08K7g4IXR/hmkyS1fU5zdEUdG5BvOP+CKzzMYf68lavy/8vAJLq7 peC+cq4EyGtQZljfGutZAflnyLACff5LNE2p9n+uNt5faFJ6N0/I+KKXR4hIFusk qf6RPPWzJFdRumbn4gjtc7cK0pjqh8nWhmI/8sBjciMvUvANTjY/xL0stpaeIQuA phLKE3BXWCbQ95T8zXNl7nvqen2wvpLv4iKEa43YY5ODiCmnR7DtrIR6PJJCna6u 3lUZlgF30ckGPLRYzMGbrSdnKUqyy/Fw -----END CERTIFICATE-----Generated at Sat May 31 15:35:08 2025 by rpki-client