$ rpki-client -vvf rpki.apnic.net/member_repository/A919F55C/9F19F96E370F11ECBEB72A42C4F9AE02/rQbbzFM0xtdRNy-xeVT0qq3cnD8.mft File: rQbbzFM0xtdRNy-xeVT0qq3cnD8.mft (raw, json) Hash identifier: brMlZImxox91OI1MHMv4jG+r5EESyNO3GvTpOOnLGp4= Subject key identifier: 06:F3:4D:52:BA:D1:7C:DA:D5:BE:AF:89:18:53:3A:88:B2:D8:45:AE Authority key identifier: AD:06:DB:CC:53:34:C6:D7:51:37:2F:B1:79:54:F4:AA:AD:DC:9C:3F Certificate issuer: /CN=A919F55C/serialNumber=AD06DBCC5334C6D751372FB17954F4AAADDC9C3F Certificate serial: 04A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQbbzFM0xtdRNy-xeVT0qq3cnD8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919F55C/9F19F96E370F11ECBEB72A42C4F9AE02/rQbbzFM0xtdRNy-xeVT0qq3cnD8.mft Manifest number: 04A0 Signing time: Wed 04 Jun 2025 23:49:34 +0000 Manifest this update: Wed 04 Jun 2025 23:49:33 +0000 Manifest next update: Wed 11 Jun 2025 23:49:33 +0000 Files and hashes: 1: rQbbzFM0xtdRNy-xeVT0qq3cnD8.crl (hash: DcL80hw+aeY1wwcLPvuE8vGjd5ewqQz5bMML3zPpNyY=) 2: 0EC6A7E0372D11ECA616091EC4F9AE02.roa (hash: xRvy8+EZ4EWMUGqE/C33LsDCdW9x6WHrip13g/dJz5k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919F55C/9F19F96E370F11ECBEB72A42C4F9AE02/rQbbzFM0xtdRNy-xeVT0qq3cnD8.crl rsync://rpki.apnic.net/member_repository/A919F55C/9F19F96E370F11ECBEB72A42C4F9AE02/rQbbzFM0xtdRNy-xeVT0qq3cnD8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQbbzFM0xtdRNy-xeVT0qq3cnD8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Jun 2025 23:49:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1189 (0x4a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919F55C, serialNumber=AD06DBCC5334C6D751372FB17954F4AAADDC9C3F Validity Not Before: Jun 4 23:49:33 2025 GMT Not After : Jun 11 23:49:33 2025 GMT Subject: CN=6840db8d-3483 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:77:ce:66:b9:0d:21:a0:c5:81:86:d8:61:21: 18:6e:15:4d:93:30:75:18:db:ec:a1:d4:a9:25:ce: a3:33:ab:ee:09:5f:7b:b7:97:22:cc:9b:4e:9a:c0: 6d:e2:72:a4:08:c1:0b:88:cc:38:a9:d1:66:40:13: 73:0a:57:53:2b:3e:ec:e4:23:b9:30:80:ac:a4:59: e5:e6:2d:e1:8b:9c:c9:6a:94:a1:2f:18:83:72:f7: f6:02:b7:20:21:c6:96:3a:fb:22:56:ab:4f:4e:72: 31:fe:cc:b5:53:7c:0c:ad:b6:0f:b0:aa:a0:b2:52: 00:1d:e6:7e:8f:c6:90:aa:7b:f0:22:20:25:59:70: 67:54:3a:47:4b:da:bb:da:31:78:a6:9a:0d:95:9d: ec:5e:05:f7:eb:2a:08:14:54:00:02:2a:82:89:1a: ff:84:8e:98:b1:60:eb:be:40:6e:55:0a:cf:09:59: 45:c7:b7:cc:07:e6:d0:7b:cd:97:f4:ff:fa:42:e8: 5c:08:d4:17:eb:a0:01:d6:0e:7d:01:f0:29:80:57: 75:ec:5e:d7:43:9f:25:c8:02:a2:8d:90:5e:76:9c: c5:ef:b1:1f:98:79:ce:29:08:ca:67:ee:0d:15:7c: 96:cf:c0:b1:03:71:b5:ff:a6:d0:9c:9a:96:5e:4e: 24:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:F3:4D:52:BA:D1:7C:DA:D5:BE:AF:89:18:53:3A:88:B2:D8:45:AE X509v3 Authority Key Identifier: keyid:AD:06:DB:CC:53:34:C6:D7:51:37:2F:B1:79:54:F4:AA:AD:DC:9C:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919F55C/9F19F96E370F11ECBEB72A42C4F9AE02/rQbbzFM0xtdRNy-xeVT0qq3cnD8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQbbzFM0xtdRNy-xeVT0qq3cnD8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F55C/9F19F96E370F11ECBEB72A42C4F9AE02/rQbbzFM0xtdRNy-xeVT0qq3cnD8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d2:d4:46:db:67:d7:91:73:1a:79:a7:ef:a5:47:0d:65:68:a9: 3f:e1:44:73:fe:84:d5:ad:7d:d5:24:9a:37:f2:ed:7d:cb:a2: 41:3d:50:bc:c5:1f:c9:66:3b:7c:db:af:84:56:76:58:65:8c: 68:9a:ac:85:9b:d6:25:49:ff:95:20:bf:54:69:bb:a9:e2:01: d0:cb:bd:82:fe:33:ad:ea:de:83:3d:8c:3d:b6:6e:1f:8b:09: d2:ea:2e:0e:10:bb:c6:3c:73:d5:39:27:1f:70:3f:e1:b0:bb: 62:69:d1:7c:97:90:ad:43:bc:b7:96:f4:b4:5c:e0:49:4d:2c: 82:f5:bb:88:3d:b7:03:f4:51:28:b9:e2:b2:ac:0b:f1:6d:ec: 1a:59:2f:f2:ac:56:c1:d9:52:83:1f:03:5b:85:c7:05:ec:62: 6b:82:2b:bb:d7:80:6b:cf:10:f6:36:5f:1f:ff:cf:c9:5a:52: b3:24:34:c6:47:bf:23:3b:59:a2:40:67:df:a8:3a:d3:1c:41: 13:5c:70:1b:80:79:96:67:1c:ea:f6:f0:bd:44:fd:ec:ba:29: 90:d3:1b:2f:66:51:d0:b3:6a:31:4c:7f:0b:bb:1a:7b:ff:8b: a3:ef:13:81:8b:d6:bc:ff:63:5d:87:38:19:5b:9d:21:7e:91: 31:60:91:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBKUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUY1NUMxMTAvBgNVBAUTKEFEMDZEQkNDNTMzNEM2RDc1MTM3MkZCMTc5NTRGNEFB QUREQzlDM0YwHhcNMjUwNjA0MjM0OTMzWhcNMjUwNjExMjM0OTMzWjAYMRYwFAYD VQQDEw02ODQwZGI4ZC0zNDgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn3fOZrkNIaDFgYbYYSEYbhVNkzB1GNvsodSpJc6jM6vuCV97t5cizJtOmsBt 4nKkCMELiMw4qdFmQBNzCldTKz7s5CO5MICspFnl5i3hi5zJapShLxiDcvf2Arcg IcaWOvsiVqtPTnIx/sy1U3wMrbYPsKqgslIAHeZ+j8aQqnvwIiAlWXBnVDpHS9q7 2jF4ppoNlZ3sXgX36yoIFFQAAiqCiRr/hI6YsWDrvkBuVQrPCVlFx7fMB+bQe82X 9P/6QuhcCNQX66AB1g59AfApgFd17F7XQ58lyAKijZBedpzF77EfmHnOKQjKZ+4N FXyWz8CxA3G1/6bQnJqWXk4kiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAbzTVK6 0Xza1b6viRhTOoiy2EWuMB8GA1UdIwQYMBaAFK0G28xTNMbXUTcvsXlU9Kqt3Jw/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjU1Qy85RjE5Rjk2RTM3 MEYxMUVDQkVCNzJBNDJDNEY5QUUwMi9yUWJiekZNMHh0ZFJOeS14ZVZUMHFxM2Nu RDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JRYmJ6Rk0weHRkUk55LXhlVlQwcXEzY25EOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RjU1Qy85RjE5Rjk2RTM3MEYxMUVDQkVCNzJBNDJDNEY5QUUwMi9yUWJiekZNMHh0 ZFJOeS14ZVZUMHFxM2NuRDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDS1EbbZ9eRcxp5p++lRw1laKk/4URz/oTVrX3VJJo38u19y6JBPVC8 xR/JZjt826+EVnZYZYxomqyFm9YlSf+VIL9Uabup4gHQy72C/jOt6t6DPYw9tm4f iwnS6i4OELvGPHPVOScfcD/hsLtiadF8l5CtQ7y3lvS0XOBJTSyC9buIPbcD9FEo ueKyrAvxbewaWS/yrFbB2VKDHwNbhccF7GJrgiu714BrzxD2Nl8f/8/JWlKzJDTG R78jO1miQGffqDrTHEETXHAbgHmWZxzq9vC9RP3suimQ0xsvZlHQs2oxTH8Luxp7 /4uj7xOBi9a8/2NdhzgZW50hfpExYJGB -----END CERTIFICATE-----Generated at Thu Jun 5 19:45:20 2025 by rpki-client