$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7273/F3D22C2CE77111EF9DFBDD50C4F9AE02/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.mft File: CQZ4gs3AIDSRYeCTvzRzGz-CK9c.mft (raw, json) Hash identifier: C6XfCTCy+Llm8PsfBBP0Rr/q71CHOfoX9kR2hhkBJ2E= Subject key identifier: AA:B2:D5:74:BD:85:68:39:58:C6:ED:87:C0:69:0C:58:0F:B9:00:ED Authority key identifier: 09:06:78:82:CD:C0:20:34:91:61:E0:93:BF:34:73:1B:3F:82:2B:D7 Certificate issuer: /CN=A91A7273/serialNumber=09067882CDC020349161E093BF34731B3F822BD7 Certificate serial: 3C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7273/F3D22C2CE77111EF9DFBDD50C4F9AE02/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.mft Manifest number: 3B Signing time: Tue 03 Jun 2025 07:23:18 +0000 Manifest this update: Tue 03 Jun 2025 07:23:17 +0000 Manifest next update: Tue 10 Jun 2025 07:23:17 +0000 Files and hashes: 1: CQZ4gs3AIDSRYeCTvzRzGz-CK9c.crl (hash: MfNUIfZXcS7Da3k0xVKrtEjIQQrxGM0N9GfHTosU7ns=) 2: 31471C24E77311EFA0F80E53C4F9AE02.roa (hash: ZmMACpx0tXblh0b0hKepgV++JlkkfQUXi26fcUJQ2dU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7273/F3D22C2CE77111EF9DFBDD50C4F9AE02/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.crl rsync://rpki.apnic.net/member_repository/A91A7273/F3D22C2CE77111EF9DFBDD50C4F9AE02/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 07:23:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60 (0x3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7273, serialNumber=09067882CDC020349161E093BF34731B3F822BD7 Validity Not Before: Jun 3 07:23:17 2025 GMT Not After : Jun 10 07:23:17 2025 GMT Subject: CN=683ea2e5-4ee5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:84:c1:04:01:79:f1:76:4d:67:93:42:c9:0e: cf:56:63:2b:19:c1:d9:1d:45:44:1c:6d:5c:e0:28: 03:ca:44:c9:13:f5:c6:4f:0a:0b:1a:0e:5f:79:cf: c4:32:e4:ee:d3:55:5d:4a:80:b0:38:15:39:b8:a9: e1:4e:27:d8:79:8c:b7:b9:b6:c4:65:0e:48:85:dc: 10:22:d0:ef:c9:0d:1c:1a:7b:3d:be:6f:5c:2f:8b: bb:7f:bf:11:e6:71:f5:85:3c:5d:20:ad:44:e4:3b: eb:9a:c6:ff:00:bf:73:31:08:51:e1:ea:0f:15:33: 79:31:b6:8b:af:9c:d2:ea:80:fd:de:80:af:51:80: e3:11:d2:fb:29:1c:3b:78:68:32:98:9f:0a:95:3f: d3:d9:c8:b8:38:b2:8a:9d:d8:83:54:66:25:ea:7a: e5:2b:16:bb:3f:15:28:67:15:15:e4:63:e3:22:a8: 57:a7:d4:ab:5d:02:39:1e:64:c5:b2:80:91:2f:65: ea:88:55:5b:28:f4:20:90:6f:e5:a2:13:73:69:22: 04:86:e7:f7:0b:d0:93:98:dd:bc:36:b3:a6:81:15: e3:0d:be:7a:df:ba:b8:8e:f0:57:e2:b6:5d:b6:ab: 6d:2d:66:d6:55:1e:d2:f6:6d:47:ba:b7:78:07:02: 8f:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:B2:D5:74:BD:85:68:39:58:C6:ED:87:C0:69:0C:58:0F:B9:00:ED X509v3 Authority Key Identifier: keyid:09:06:78:82:CD:C0:20:34:91:61:E0:93:BF:34:73:1B:3F:82:2B:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7273/F3D22C2CE77111EF9DFBDD50C4F9AE02/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7273/F3D22C2CE77111EF9DFBDD50C4F9AE02/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:96:23:7c:4f:2e:64:86:9c:e5:4c:5f:76:60:73:f3:e2:92: ff:6f:45:42:a6:cf:5d:19:20:05:45:68:2a:61:5b:30:88:81: ee:19:46:4b:1e:ce:20:a3:05:e2:f6:42:e3:83:5d:10:d2:e5: 7e:58:7a:68:49:15:fb:55:9e:0c:ec:9a:83:f2:d6:55:2f:cb: 79:93:a2:3f:01:c7:2a:ba:fd:d7:7f:39:80:37:5d:2f:35:d4: aa:26:6c:a0:37:1a:ad:ca:c4:c5:11:1e:20:34:07:f3:90:6e: 3a:5a:36:0a:8f:db:35:e5:c4:8a:ab:cd:0b:1f:2e:1e:34:c4: 30:28:bc:70:09:4d:39:ce:5e:e4:26:df:be:1e:f3:0e:dd:ee: 23:42:54:18:32:d1:c5:0c:89:f0:7a:2d:7c:d9:1f:c4:3e:f1: d8:e7:ea:4e:89:40:f8:01:5c:b2:30:15:11:61:8e:a4:15:7c: 7b:8b:8a:c6:27:23:b7:65:01:30:ae:75:29:c8:80:39:4f:74: a5:82:87:cb:4c:49:93:4b:b8:c5:69:df:a5:d4:41:ac:51:58: 18:ab:02:91:56:05:40:99:42:86:5e:50:83:fd:9e:01:cd:76: 36:f0:d0:de:62:e3:b7:07:49:0f:d1:b8:59:22:49:0d:ea:0b: a4:47:e8:da -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NzI3MzExMC8GA1UEBRMoMDkwNjc4ODJDREMwMjAzNDkxNjFFMDkzQkYzNDczMUIz RjgyMkJENzAeFw0yNTA2MDMwNzIzMTdaFw0yNTA2MTAwNzIzMTdaMBgxFjAUBgNV BAMTDTY4M2VhMmU1LTRlZTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDMhMEEAXnxdk1nk0LJDs9WYysZwdkdRUQcbVzgKAPKRMkT9cZPCgsaDl95z8Qy 5O7TVV1KgLA4FTm4qeFOJ9h5jLe5tsRlDkiF3BAi0O/JDRwaez2+b1wvi7t/vxHm cfWFPF0grUTkO+uaxv8Av3MxCFHh6g8VM3kxtouvnNLqgP3egK9RgOMR0vspHDt4 aDKYnwqVP9PZyLg4soqd2INUZiXqeuUrFrs/FShnFRXkY+MiqFen1KtdAjkeZMWy gJEvZeqIVVso9CCQb+WiE3NpIgSG5/cL0JOY3bw2s6aBFeMNvnrfuriO8Ffitl22 q20tZtZVHtL2bUe6t3gHAo+7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUqrLVdL2F aDlYxu2HwGkMWA+5AO0wHwYDVR0jBBgwFoAUCQZ4gs3AIDSRYeCTvzRzGz+CK9cw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE3MjczL0YzRDIyQzJDRTc3 MTExRUY5REZCREQ1MEM0RjlBRTAyL0NRWjRnczNBSURTUlllQ1R2elJ6R3otQ0s5 Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvQ1FaNGdzM0FJRFNSWWVDVHZ6UnpHei1DSzljLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE3 MjczL0YzRDIyQzJDRTc3MTExRUY5REZCREQ1MEM0RjlBRTAyL0NRWjRnczNBSURT UlllQ1R2elJ6R3otQ0s5Yy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAKWI3xPLmSGnOVMX3Zgc/Pikv9vRUKmz10ZIAVFaCphWzCIge4ZRkse ziCjBeL2QuODXRDS5X5YemhJFftVngzsmoPy1lUvy3mToj8Bxyq6/dd/OYA3XS81 1KombKA3Gq3KxMURHiA0B/OQbjpaNgqP2zXlxIqrzQsfLh40xDAovHAJTTnOXuQm 374e8w7d7iNCVBgy0cUMifB6LXzZH8Q+8djn6k6JQPgBXLIwFRFhjqQVfHuLisYn I7dlATCudSnIgDlPdKWCh8tMSZNLuMVp36XUQaxRWBirApFWBUCZQoZeUIP9ngHN djbw0N5i47cHSQ/RuFkiSQ3qC6RH6No= -----END CERTIFICATE-----Generated at Tue Jun 3 23:54:18 2025 by rpki-client