$ rpki-client -vvf rpki.apnic.net/member_repository/A91894BE/0B4D029C13C511ED9F5AF26AC4F9AE02/q-SlyJP0_Kxy2WRGir563z5vyP4.mft File: q-SlyJP0_Kxy2WRGir563z5vyP4.mft (raw, json) Hash identifier: o34nYg9yglXx0woc8//OBmrt4nzUvZP06WQHMhL54lU= Subject key identifier: 29:88:33:21:31:39:EA:DE:A2:CF:38:30:9B:8F:5A:EE:BA:C0:DC:3A Authority key identifier: AB:E4:A5:C8:93:F4:FC:AC:72:D9:64:46:8A:BE:7A:DF:3E:6F:C8:FE Certificate issuer: /CN=A91894BE/serialNumber=ABE4A5C893F4FCAC72D964468ABE7ADF3E6FC8FE Certificate serial: 026E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q-SlyJP0_Kxy2WRGir563z5vyP4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91894BE/0B4D029C13C511ED9F5AF26AC4F9AE02/q-SlyJP0_Kxy2WRGir563z5vyP4.mft Manifest number: 026A Signing time: Thu 05 Jun 2025 01:35:29 +0000 Manifest this update: Thu 05 Jun 2025 01:35:28 +0000 Manifest next update: Thu 12 Jun 2025 01:35:28 +0000 Files and hashes: 1: q-SlyJP0_Kxy2WRGir563z5vyP4.crl (hash: /GP3QZ8yvL09HXLDdmX8lsAt8CvGddWVBILFrRFSGwE=) 2: 942BF3C013CA11ED983E350EC4F9AE02.roa (hash: 7RgKIXJ+YIFOFiYNofYamgA+0eKHAOepqg8p2i4RVOc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91894BE/0B4D029C13C511ED9F5AF26AC4F9AE02/q-SlyJP0_Kxy2WRGir563z5vyP4.crl rsync://rpki.apnic.net/member_repository/A91894BE/0B4D029C13C511ED9F5AF26AC4F9AE02/q-SlyJP0_Kxy2WRGir563z5vyP4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q-SlyJP0_Kxy2WRGir563z5vyP4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Jun 2025 01:35:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 622 (0x26e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91894BE, serialNumber=ABE4A5C893F4FCAC72D964468ABE7ADF3E6FC8FE Validity Not Before: Jun 5 01:35:28 2025 GMT Not After : Jun 12 01:35:28 2025 GMT Subject: CN=6840f460-b6d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:bb:ed:96:d0:a6:01:76:58:e9:47:22:eb:7c: 88:2e:15:2a:1a:09:68:b1:31:ec:c7:f7:5c:54:3f: 08:15:48:29:95:a8:59:5e:c3:66:9a:66:54:af:17: 0b:06:c8:0c:75:c9:03:26:63:8f:f5:b8:2f:61:87: ed:b3:aa:70:41:5c:0f:4d:73:3a:31:ab:4f:24:15: 2f:81:29:58:e5:46:31:71:fe:e1:09:f8:cf:bf:06: ae:a8:27:f4:ca:9a:e4:dd:0c:10:90:71:43:9d:66: 7d:bc:12:a3:01:6c:49:ec:90:be:36:d6:9b:5a:8a: 80:e2:1b:ee:b0:a6:44:5a:6e:4b:9a:60:47:e0:eb: e0:ff:3e:98:c6:34:b4:50:19:a9:9f:ea:54:b0:92: 34:82:a3:eb:66:94:1d:11:ab:aa:8c:19:d0:18:74: 46:fb:95:9e:fa:67:b8:60:6f:ff:62:31:01:6b:a5: 87:55:29:76:a1:f7:4f:b5:85:ca:73:1f:8f:08:19: 3e:90:09:93:b4:e0:8d:aa:38:a9:b7:b9:7b:47:8c: cb:14:c5:32:28:55:12:39:f8:f0:00:46:2e:a7:3a: bf:60:77:c7:db:7e:c3:bd:f4:e8:ad:5e:b8:b8:bb: 6d:1f:99:45:c5:ff:ea:49:2d:8e:3a:f0:e6:64:1e: fb:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:88:33:21:31:39:EA:DE:A2:CF:38:30:9B:8F:5A:EE:BA:C0:DC:3A X509v3 Authority Key Identifier: keyid:AB:E4:A5:C8:93:F4:FC:AC:72:D9:64:46:8A:BE:7A:DF:3E:6F:C8:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91894BE/0B4D029C13C511ED9F5AF26AC4F9AE02/q-SlyJP0_Kxy2WRGir563z5vyP4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q-SlyJP0_Kxy2WRGir563z5vyP4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91894BE/0B4D029C13C511ED9F5AF26AC4F9AE02/q-SlyJP0_Kxy2WRGir563z5vyP4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:21:f6:5c:d6:38:2c:bc:95:00:d3:72:de:51:14:4a:67:c2: b7:48:b8:45:c9:69:93:6e:ae:7a:03:fa:bb:4a:6a:ef:59:3c: 6c:98:51:f0:f8:50:cf:aa:8d:54:91:e5:04:fb:c1:0b:ae:cc: 2c:8a:30:c2:30:06:05:aa:66:4b:47:58:26:f2:a4:cd:f8:04: 91:60:47:a9:55:fa:59:d5:d7:6c:37:e8:21:e9:0b:28:42:d6: 83:83:8d:e6:c0:df:57:66:62:20:35:4c:06:c4:0d:d0:25:8c: d4:57:02:86:08:29:8b:ec:97:8e:ad:b1:5f:28:8d:08:05:8a: 7a:ed:3f:b9:03:9e:4f:a3:21:2e:3d:98:24:d9:72:27:c3:7f: 66:63:60:64:b6:e3:6a:88:f8:53:30:1e:42:13:74:a1:93:b2: 73:d0:31:fb:25:b0:0d:3a:b6:3c:e3:7d:60:e5:16:c7:6f:c6: da:42:d0:7e:8a:58:e4:4e:47:05:17:91:83:05:63:5f:dc:af: 04:98:0b:b3:d3:9b:b3:fc:8b:26:bf:9f:83:c6:1f:a5:2a:1d: f4:81:af:50:d0:71:0b:39:48:01:6e:95:e7:4c:0c:ab:e4:2f: 25:ea:54:55:c5:d7:e5:e8:d2:42:ca:ee:b9:06:15:6f:01:9f: 1f:f0:95:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAm4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODk0QkUxMTAvBgNVBAUTKEFCRTRBNUM4OTNGNEZDQUM3MkQ5NjQ0NjhBQkU3QURG M0U2RkM4RkUwHhcNMjUwNjA1MDEzNTI4WhcNMjUwNjEyMDEzNTI4WjAYMRYwFAYD VQQDEw02ODQwZjQ2MC1iNmQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA47vtltCmAXZY6Uci63yILhUqGglosTHsx/dcVD8IFUgplahZXsNmmmZUrxcL BsgMdckDJmOP9bgvYYfts6pwQVwPTXM6MatPJBUvgSlY5UYxcf7hCfjPvwauqCf0 yprk3QwQkHFDnWZ9vBKjAWxJ7JC+NtabWoqA4hvusKZEWm5LmmBH4Ovg/z6YxjS0 UBmpn+pUsJI0gqPrZpQdEauqjBnQGHRG+5We+me4YG//YjEBa6WHVSl2ofdPtYXK cx+PCBk+kAmTtOCNqjipt7l7R4zLFMUyKFUSOfjwAEYupzq/YHfH237DvfTorV64 uLttH5lFxf/qSS2OOvDmZB77eQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCmIMyEx Oereos84MJuPWu66wNw6MB8GA1UdIwQYMBaAFKvkpciT9PysctlkRoq+et8+b8j+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTRCRS8wQjREMDI5QzEz QzUxMUVEOUY1QUYyNkFDNEY5QUUwMi9xLVNseUpQMF9LeHkyV1JHaXI1NjN6NXZ5 UDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3EtU2x5SlAwX0t4eTJXUkdpcjU2M3o1dnlQNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OTRCRS8wQjREMDI5QzEzQzUxMUVEOUY1QUYyNkFDNEY5QUUwMi9xLVNseUpQMF9L eHkyV1JHaXI1NjN6NXZ5UDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1IfZc1jgsvJUA03LeURRKZ8K3SLhFyWmTbq56A/q7SmrvWTxsmFHw +FDPqo1UkeUE+8ELrswsijDCMAYFqmZLR1gm8qTN+ASRYEepVfpZ1ddsN+gh6Qso QtaDg43mwN9XZmIgNUwGxA3QJYzUVwKGCCmL7JeOrbFfKI0IBYp67T+5A55PoyEu PZgk2XInw39mY2BktuNqiPhTMB5CE3Shk7Jz0DH7JbANOrY8431g5RbHb8baQtB+ iljkTkcFF5GDBWNf3K8EmAuz05uz/Ismv5+Dxh+lKh30ga9Q0HELOUgBbpXnTAyr 5C8l6lRVxdfl6NJCyu65BhVvAZ8f8JWJ -----END CERTIFICATE-----Generated at Fri Jun 6 17:31:02 2025 by rpki-client