$ rpki-client -vvf rpki.apnic.net/member_repository/A91814CB/ADEC543A1D7811EA8D301744C4F9AE02/mqU9J74bthSVPDedOeC7xfHBJKc.mft File: mqU9J74bthSVPDedOeC7xfHBJKc.mft (raw, json) Hash identifier: eG9cAwRz8QmrN/pGfkQVcLysTIx8WY5pyaWgmhh1wVM= Subject key identifier: 7F:5A:A2:4F:DB:FB:7A:07:7C:C9:2B:FB:98:34:EB:05:07:CB:13:62 Authority key identifier: 9A:A5:3D:27:BE:1B:B6:14:95:3C:37:9D:39:E0:BB:C5:F1:C1:24:A7 Certificate issuer: /CN=A91814CB/serialNumber=9AA53D27BE1BB614953C379D39E0BBC5F1C124A7 Certificate serial: 0BE2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mqU9J74bthSVPDedOeC7xfHBJKc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91814CB/ADEC543A1D7811EA8D301744C4F9AE02/mqU9J74bthSVPDedOeC7xfHBJKc.mft Manifest number: 0BD6 Signing time: Fri 06 Jun 2025 18:55:30 +0000 Manifest this update: Fri 06 Jun 2025 18:55:30 +0000 Manifest next update: Fri 13 Jun 2025 18:55:30 +0000 Files and hashes: 1: mqU9J74bthSVPDedOeC7xfHBJKc.crl (hash: 17kS6P/mKs4H1/nKDygQazmvBtvMWfs80tJQI2WjV7Q=) 2: F4F827D6BB6C11EF80151572C4F9AE02.roa (hash: 25pluhiPmnAm9YwUWup9o5G24MQf1uEQRknQIFNX3KA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91814CB/ADEC543A1D7811EA8D301744C4F9AE02/mqU9J74bthSVPDedOeC7xfHBJKc.crl rsync://rpki.apnic.net/member_repository/A91814CB/ADEC543A1D7811EA8D301744C4F9AE02/mqU9J74bthSVPDedOeC7xfHBJKc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mqU9J74bthSVPDedOeC7xfHBJKc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Jun 2025 18:55:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3042 (0xbe2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91814CB, serialNumber=9AA53D27BE1BB614953C379D39E0BBC5F1C124A7 Validity Not Before: Jun 6 18:55:30 2025 GMT Not After : Jun 13 18:55:30 2025 GMT Subject: CN=684339a2-83d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ea:ea:f6:d0:cf:9c:50:38:a1:0c:41:24:42: 73:f6:45:ae:7f:e2:8e:9b:c1:0d:e3:ac:b4:52:61: b8:81:7b:27:57:a8:91:60:80:7c:32:1a:3f:6a:b3: 70:55:5f:84:5f:8c:ec:db:a4:3a:f0:43:b1:ed:c2: fc:a6:d0:15:76:8c:e4:9c:cb:6b:d6:4e:cd:d4:ce: 05:9c:ba:c5:c8:a0:44:2f:dd:03:8a:36:05:01:d1: 4c:eb:73:f6:47:ac:35:0f:fc:04:69:e6:a3:40:94: a0:b7:c0:a2:c1:bb:e5:94:33:97:00:94:43:54:84: 10:ce:33:00:ee:9c:2d:d0:94:ec:02:e0:72:94:47: 5b:8c:33:9f:b6:87:b9:05:f8:d3:d5:28:79:38:10: 7d:ce:c0:ff:06:a3:28:ce:2a:c2:6c:a5:57:20:a2: 6f:6a:07:9d:38:1b:0e:7b:55:a0:e7:54:1a:dc:63: be:16:45:4a:9d:3c:19:59:17:1e:96:b8:93:de:58: 1e:dd:7b:bd:9f:d7:1f:4d:46:5f:d7:fd:61:fa:1c: 4b:5a:85:57:6c:8b:c1:f9:a3:71:ee:67:d7:21:99: a1:12:8a:58:82:a3:96:b7:72:e3:8c:c2:82:f0:16: 7a:2c:75:b6:e9:b0:f3:4f:b5:a3:b6:1e:de:d2:f0: c0:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:5A:A2:4F:DB:FB:7A:07:7C:C9:2B:FB:98:34:EB:05:07:CB:13:62 X509v3 Authority Key Identifier: keyid:9A:A5:3D:27:BE:1B:B6:14:95:3C:37:9D:39:E0:BB:C5:F1:C1:24:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91814CB/ADEC543A1D7811EA8D301744C4F9AE02/mqU9J74bthSVPDedOeC7xfHBJKc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mqU9J74bthSVPDedOeC7xfHBJKc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91814CB/ADEC543A1D7811EA8D301744C4F9AE02/mqU9J74bthSVPDedOeC7xfHBJKc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:24:18:ed:a7:e3:8e:b2:d5:59:ac:ad:f4:fd:19:a3:38:c7: 76:24:a4:50:16:1c:c4:29:1d:d1:eb:dc:0f:95:6f:07:3e:f0: f5:fa:0d:d1:b6:0f:04:3b:94:03:4d:3e:0d:98:be:0d:55:50: ad:93:08:1d:3d:89:bc:1a:d1:34:52:88:f5:22:ea:7b:23:2e: 6c:5b:11:1d:45:fd:e2:37:ae:b0:a2:19:b5:b5:6a:83:30:a6: ca:41:9e:a3:87:eb:4e:4f:1b:74:53:0a:09:0c:3f:08:1c:34: b5:98:11:2b:77:b4:15:18:67:c3:0d:35:75:12:cc:4c:4c:07: cc:ac:ab:88:08:e9:98:1c:72:43:00:22:98:4e:96:39:f4:e7: 7c:4a:2d:97:91:73:4d:43:0b:59:51:a8:a9:74:e3:dd:cf:16: 34:ff:67:68:3d:cd:09:f5:a5:25:d0:85:d7:d5:c5:51:50:83: 38:5e:4c:0f:7d:1f:99:8f:e8:b9:1e:06:34:14:a8:93:33:11: 7f:d1:90:03:7f:e9:98:70:66:9a:e3:00:41:9a:0d:e4:6b:f5: 94:b6:ff:ae:ea:f7:ac:b3:d9:4d:53:6c:1b:de:89:34:e5:31: 6c:16:e4:a8:46:8d:2a:d3:85:9e:d2:13:21:1a:c0:c0:1a:38: 7d:07:e4:a5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC+IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODE0Q0IxMTAvBgNVBAUTKDlBQTUzRDI3QkUxQkI2MTQ5NTNDMzc5RDM5RTBCQkM1 RjFDMTI0QTcwHhcNMjUwNjA2MTg1NTMwWhcNMjUwNjEzMTg1NTMwWjAYMRYwFAYD VQQDEw02ODQzMzlhMi04M2QyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy+rq9tDPnFA4oQxBJEJz9kWuf+KOm8EN46y0UmG4gXsnV6iRYIB8Mho/arNw VV+EX4zs26Q68EOx7cL8ptAVdozknMtr1k7N1M4FnLrFyKBEL90DijYFAdFM63P2 R6w1D/wEaeajQJSgt8CiwbvllDOXAJRDVIQQzjMA7pwt0JTsAuBylEdbjDOftoe5 BfjT1Sh5OBB9zsD/BqMozirCbKVXIKJvagedOBsOe1Wg51Qa3GO+FkVKnTwZWRce lriT3lge3Xu9n9cfTUZf1/1h+hxLWoVXbIvB+aNx7mfXIZmhEopYgqOWt3LjjMKC 8BZ6LHW26bDzT7Wjth7e0vDAtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH9aok/b +3oHfMkr+5g06wUHyxNiMB8GA1UdIwQYMBaAFJqlPSe+G7YUlTw3nTngu8XxwSSn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MTRDQi9BREVDNTQzQTFE NzgxMUVBOEQzMDE3NDRDNEY5QUUwMi9tcVU5Sjc0YnRoU1ZQRGVkT2VDN3hmSEJK S2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21xVTlKNzRidGhTVlBEZWRPZUM3eGZIQkpLYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MTRDQi9BREVDNTQzQTFENzgxMUVBOEQzMDE3NDRDNEY5QUUwMi9tcVU5Sjc0YnRo U1ZQRGVkT2VDN3hmSEJKS2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChJBjtp+OOstVZrK30/RmjOMd2JKRQFhzEKR3R69wPlW8HPvD1+g3R tg8EO5QDTT4NmL4NVVCtkwgdPYm8GtE0Uoj1Iup7Iy5sWxEdRf3iN66wohm1tWqD MKbKQZ6jh+tOTxt0UwoJDD8IHDS1mBErd7QVGGfDDTV1EsxMTAfMrKuICOmYHHJD ACKYTpY59Od8Si2XkXNNQwtZUaipdOPdzxY0/2doPc0J9aUl0IXX1cVRUIM4XkwP fR+Zj+i5HgY0FKiTMxF/0ZADf+mYcGaa4wBBmg3ka/WUtv+u6vess9lNU2wb3ok0 5TFsFuSoRo0q04We0hMhGsDAGjh9B+Sl -----END CERTIFICATE-----Generated at Sun Jun 8 17:26:43 2025 by rpki-client