$ rpki-client -vvf rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/_qS5bzmD92nHM5dFbBK5D2QkbHw.mft File: _qS5bzmD92nHM5dFbBK5D2QkbHw.mft (raw, json) Hash identifier: WVrMWMxOIwd6qn5MRpEhuG3mYZp2IdU8L4y9jnyQSPo= Subject key identifier: A5:25:B4:0D:E4:6E:9A:44:9A:8B:DD:87:9D:D1:68:8E:0F:87:6A:99 Authority key identifier: FE:A4:B9:6F:39:83:F7:69:C7:33:97:45:6C:12:B9:0F:64:24:6C:7C Certificate issuer: /CN=A916D36A/serialNumber=FEA4B96F3983F769C73397456C12B90F64246C7C Certificate serial: 1863 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_qS5bzmD92nHM5dFbBK5D2QkbHw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/_qS5bzmD92nHM5dFbBK5D2QkbHw.mft Manifest number: 184C Signing time: Sun 08 Jun 2025 16:25:49 +0000 Manifest this update: Sun 08 Jun 2025 16:25:48 +0000 Manifest next update: Sun 15 Jun 2025 16:25:48 +0000 Files and hashes: 1: _qS5bzmD92nHM5dFbBK5D2QkbHw.crl (hash: vCDyOKWsjBfpTPDKys7FQP8H3IwWtzbfye2F8MfnBJw=) 2: 8C3BBD78F0D611EDAF996E15C4F9AE02.roa (hash: N7dx64GJQaTD+hfotgNWy8WEHDuKcv63Y/iKVEUUUcc=) 3: C6454260AA9A11E7B4776E52C4F9AE02.roa (hash: 0pdtzVqkZfrRuKXWFlClUIrZtwjYq09u9Tu2fAJzA2k=) 4: 7F77220A143811EE97A64D19C4F9AE02.roa (hash: ifAfuqdkBihiiYwd3cqT6s5KTTI/lvGZWL7UrWL4Qzs=) 5: 5A8744D8143411EEAB1A5D73C4F9AE02.roa (hash: x8Y3lIEpnx3SAsHPEwwS/VLgFTVHt3ABZ23zAnhnfc0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/_qS5bzmD92nHM5dFbBK5D2QkbHw.crl rsync://rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/_qS5bzmD92nHM5dFbBK5D2QkbHw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_qS5bzmD92nHM5dFbBK5D2QkbHw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Jun 2025 16:25:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6243 (0x1863) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916D36A, serialNumber=FEA4B96F3983F769C73397456C12B90F64246C7C Validity Not Before: Jun 8 16:25:48 2025 GMT Not After : Jun 15 16:25:48 2025 GMT Subject: CN=6845b98d-935a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:7f:98:6a:da:cb:56:b5:6e:8b:57:7b:0e:bd: 8a:f5:cd:c4:59:d2:8b:13:6c:bc:3f:8c:eb:d9:3f: 66:9b:e7:db:c9:9b:0a:c6:18:67:83:ac:d2:a5:1f: 6c:59:a6:36:06:a6:d7:c0:72:b1:a1:12:58:ba:8d: 97:67:84:2f:25:75:d8:26:fd:8e:3e:0d:10:80:16: ef:39:b6:20:64:56:04:63:14:4f:06:94:10:83:fc: 39:b5:fc:47:c5:be:ba:4f:7f:de:e7:3c:d4:41:a4: 08:3a:19:74:3a:4a:3f:18:13:cf:47:e1:35:c8:63: 62:68:68:5e:5c:b9:4e:62:c9:d3:89:e5:85:63:10: bb:30:e3:30:b6:85:1b:f8:a3:b8:3c:e6:02:d4:88: aa:b6:ae:73:26:49:50:72:cc:60:7b:fd:99:52:ac: 35:15:db:5a:3a:c9:3a:08:62:1e:0b:e1:31:f1:be: 21:83:dc:4b:88:e9:32:2c:22:d8:ba:a7:b8:8d:8f: 96:dc:d0:21:c8:a6:d7:c4:d4:ca:17:a0:42:34:46: d2:3f:36:a8:24:06:d7:90:b4:63:f6:fd:05:d7:5e: e1:97:8a:a0:6d:7e:10:4a:89:79:a2:ae:84:13:7d: 7e:6a:79:7e:62:df:7c:c3:b7:57:0a:cb:fe:1d:62: ac:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:25:B4:0D:E4:6E:9A:44:9A:8B:DD:87:9D:D1:68:8E:0F:87:6A:99 X509v3 Authority Key Identifier: keyid:FE:A4:B9:6F:39:83:F7:69:C7:33:97:45:6C:12:B9:0F:64:24:6C:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/_qS5bzmD92nHM5dFbBK5D2QkbHw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_qS5bzmD92nHM5dFbBK5D2QkbHw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/_qS5bzmD92nHM5dFbBK5D2QkbHw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:ce:f5:6a:d9:6d:48:d2:a1:30:7c:19:13:c6:c8:77:8a:4c: d0:0a:ae:ab:74:9c:e6:45:dc:b0:df:54:f1:bb:25:45:12:f3: d3:71:04:d6:8a:3e:87:39:26:0c:95:34:b3:b2:24:5c:29:d0: a9:9f:16:ab:0e:ba:53:8c:83:94:de:59:68:7e:17:f4:8a:f6: 12:ea:76:9c:e7:3e:ee:da:ac:0f:6f:97:ad:f1:ab:78:1b:21: 70:1d:2e:57:43:43:12:2f:d0:db:e4:6d:9c:7d:ba:df:74:ba: 12:32:74:8c:a2:72:29:af:88:2b:d5:7b:9b:2b:56:94:e6:7e: b5:81:a2:7d:47:b1:5d:d6:31:fe:20:87:b2:1e:eb:d1:92:81: b0:0d:d7:6d:55:56:a3:80:81:5a:30:0b:49:ae:50:74:89:1c: 70:99:2e:2f:b9:49:1b:29:7a:3c:a1:28:5c:d6:d5:a4:cf:c4: 42:18:e3:53:07:5f:57:e7:e1:f9:51:0f:da:9c:02:c0:67:10: 95:77:04:cd:0c:37:57:c1:b3:84:a1:ce:70:f0:39:f3:d1:01: be:b9:c6:81:6f:84:33:72:6a:7a:ae:a7:ab:0c:cc:4c:9f:e8: fa:c9:a9:fe:8c:22:02:41:c5:87:81:3f:f8:d7:8c:07:73:86: a0:74:01:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGGMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkQzNkExMTAvBgNVBAUTKEZFQTRCOTZGMzk4M0Y3NjlDNzMzOTc0NTZDMTJCOTBG NjQyNDZDN0MwHhcNMjUwNjA4MTYyNTQ4WhcNMjUwNjE1MTYyNTQ4WjAYMRYwFAYD VQQDEw02ODQ1Yjk4ZC05MzVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAun+YatrLVrVui1d7Dr2K9c3EWdKLE2y8P4zr2T9mm+fbyZsKxhhng6zSpR9s WaY2BqbXwHKxoRJYuo2XZ4QvJXXYJv2OPg0QgBbvObYgZFYEYxRPBpQQg/w5tfxH xb66T3/e5zzUQaQIOhl0Oko/GBPPR+E1yGNiaGheXLlOYsnTieWFYxC7MOMwtoUb +KO4POYC1Iiqtq5zJklQcsxge/2ZUqw1FdtaOsk6CGIeC+Ex8b4hg9xLiOkyLCLY uqe4jY+W3NAhyKbXxNTKF6BCNEbSPzaoJAbXkLRj9v0F117hl4qgbX4QSol5oq6E E31+anl+Yt98w7dXCsv+HWKs1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKUltA3k bppEmovdh53RaI4Ph2qZMB8GA1UdIwQYMBaAFP6kuW85g/dpxzOXRWwSuQ9kJGx8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDM2QS8zN0FCRDcwOEFB OUExMUU3QkFDNDEyNTJDNEY5QUUwMi9fcVM1YnptRDkybkhNNWRGYkJLNUQyUWti SHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19xUzViem1EOTJuSE01ZEZiQks1RDJRa2JIdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RDM2QS8zN0FCRDcwOEFBOUExMUU3QkFDNDEyNTJDNEY5QUUwMi9fcVM1YnptRDky bkhNNWRGYkJLNUQyUWtiSHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCzvVq2W1I0qEwfBkTxsh3ikzQCq6rdJzmRdyw31TxuyVFEvPTcQTW ij6HOSYMlTSzsiRcKdCpnxarDrpTjIOU3llofhf0ivYS6nac5z7u2qwPb5et8at4 GyFwHS5XQ0MSL9Db5G2cfbrfdLoSMnSMonIpr4gr1XubK1aU5n61gaJ9R7Fd1jH+ IIeyHuvRkoGwDddtVVajgIFaMAtJrlB0iRxwmS4vuUkbKXo8oShc1tWkz8RCGONT B19X5+H5UQ/anALAZxCVdwTNDDdXwbOEoc5w8Dnz0QG+ucaBb4Qzcmp6rqerDMxM n+j6yan+jCICQcWHgT/414wHc4agdAEL -----END CERTIFICATE-----Generated at Tue Jun 10 10:21:11 2025 by rpki-client