$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADBA2/D6954412553B11E7AA0EDE2AC4F9AE02/qmMtxAKnAveanDaT6cxGxZge6Ow.mft File: qmMtxAKnAveanDaT6cxGxZge6Ow.mft (raw, json) Hash identifier: dZQAcZ1bwo+4VXFNdqi3I4IJtqFI7iBL8HqlM4e/fIk= Subject key identifier: 33:BA:84:B5:D3:3F:B3:79:CE:85:CC:B1:75:2A:5C:BB:B9:32:1B:40 Authority key identifier: AA:63:2D:C4:02:A7:02:F7:9A:9C:36:93:E9:CC:46:C5:98:1E:E8:EC Certificate issuer: /CN=A91ADBA2/serialNumber=AA632DC402A702F79A9C3693E9CC46C5981EE8EC Certificate serial: 19F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qmMtxAKnAveanDaT6cxGxZge6Ow.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ADBA2/D6954412553B11E7AA0EDE2AC4F9AE02/qmMtxAKnAveanDaT6cxGxZge6Ow.mft Manifest number: 19EC Signing time: Fri 30 May 2025 16:33:48 +0000 Manifest this update: Fri 30 May 2025 16:33:48 +0000 Manifest next update: Fri 06 Jun 2025 16:33:48 +0000 Files and hashes: 1: qmMtxAKnAveanDaT6cxGxZge6Ow.crl (hash: tS/8nITpT6WXkPKjPXfkQ/PHZuxOqDEvimnIVXEQgoE=) 2: 6C30EF68D9AD11EBA5CFBB17C4F9AE02.roa (hash: JD/t6QBbxRTutJyXKFJnddzibwxtjVqq1blAC5X3uC4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ADBA2/D6954412553B11E7AA0EDE2AC4F9AE02/qmMtxAKnAveanDaT6cxGxZge6Ow.crl rsync://rpki.apnic.net/member_repository/A91ADBA2/D6954412553B11E7AA0EDE2AC4F9AE02/qmMtxAKnAveanDaT6cxGxZge6Ow.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qmMtxAKnAveanDaT6cxGxZge6Ow.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 16:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6643 (0x19f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ADBA2, serialNumber=AA632DC402A702F79A9C3693E9CC46C5981EE8EC Validity Not Before: May 30 16:33:48 2025 GMT Not After : Jun 6 16:33:48 2025 GMT Subject: CN=6839ddec-3c69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ef:8b:ab:d9:89:37:66:b3:47:b7:04:0c:93: 74:7b:91:51:9d:b6:b0:44:e5:02:38:95:48:61:5b: 9a:c8:41:92:15:2e:f6:94:24:80:88:2f:e2:e1:ad: fb:f1:ef:c9:9f:b3:d7:1d:bf:4d:74:7b:1f:46:7c: c9:89:78:e5:8e:88:00:c7:77:e4:3e:be:af:f8:ca: 13:b9:e5:2b:13:7c:21:d4:66:e2:f3:ff:58:e6:54: ef:8f:4e:32:d2:1c:85:b2:a0:79:0f:5a:77:19:9d: 8b:01:92:54:76:37:be:e2:fc:38:db:1b:78:a2:e5: 09:6c:e3:47:73:20:85:59:5d:6b:f1:6c:6e:23:e0: e5:8a:80:34:04:cd:26:e6:25:38:a0:92:85:3d:3f: 40:53:dc:63:29:6a:a8:4d:f8:63:0e:bb:92:aa:25: f8:42:cd:7f:00:53:c3:c1:bc:f7:51:02:98:02:85: af:3e:f5:00:dd:0c:3a:87:3f:05:36:93:cb:b7:4d: 7a:25:61:83:2a:e8:51:ff:31:21:bf:f2:07:d3:74: bb:04:69:c7:0e:2f:fd:e0:99:ed:d0:06:4c:fd:86: f4:79:de:99:11:c6:dd:bc:0a:25:ce:d9:f5:56:94: eb:da:7c:25:02:61:5c:8a:7c:fb:99:73:5b:7a:e7: 50:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:BA:84:B5:D3:3F:B3:79:CE:85:CC:B1:75:2A:5C:BB:B9:32:1B:40 X509v3 Authority Key Identifier: keyid:AA:63:2D:C4:02:A7:02:F7:9A:9C:36:93:E9:CC:46:C5:98:1E:E8:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ADBA2/D6954412553B11E7AA0EDE2AC4F9AE02/qmMtxAKnAveanDaT6cxGxZge6Ow.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qmMtxAKnAveanDaT6cxGxZge6Ow.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADBA2/D6954412553B11E7AA0EDE2AC4F9AE02/qmMtxAKnAveanDaT6cxGxZge6Ow.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:f5:a3:06:e7:7f:fc:9d:b3:10:63:70:b0:6f:8d:ed:79:e9: 5b:ac:6c:7b:91:7a:2c:d2:74:56:3c:fd:42:65:8e:7a:e3:2d: e9:86:ff:b3:b4:a5:09:62:92:2c:45:16:0d:d2:c4:76:90:bd: b0:78:6b:83:c8:f2:1a:b8:ea:23:ad:f1:86:ad:1d:67:a8:0f: aa:7b:3f:f8:d7:33:bb:8a:09:d9:a1:36:3a:a7:4d:bf:4b:62: 8c:cc:e5:23:2e:1e:7a:ca:12:f2:08:80:9f:a4:2b:9d:ff:10: 00:96:db:ba:3e:19:79:b5:23:84:84:7b:b2:1e:83:4c:57:62: 54:35:d3:f7:1a:58:ea:a1:01:94:7b:5b:e1:35:56:8b:7c:f1: e5:a0:a6:e1:25:eb:ad:45:5f:74:72:f1:fb:db:3e:16:5e:83: 58:4a:69:54:5d:2a:a5:91:60:97:1a:dd:fb:57:8f:2f:3f:8a: 0b:46:4a:05:2d:a4:76:41:af:a9:9d:39:ee:ef:04:37:81:6b: 95:88:5f:9e:71:b7:2f:25:f9:83:fb:e4:33:33:f1:a2:36:ae: 90:8b:b4:e2:04:38:5b:35:b8:98:17:1a:1b:c6:f0:8d:1d:0d: 36:0e:a3:db:1a:b5:f1:19:3e:4d:20:ac:9c:4f:15:95:9f:8b: 6e:8f:9b:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGfMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QURCQTIxMTAvBgNVBAUTKEFBNjMyREM0MDJBNzAyRjc5QTlDMzY5M0U5Q0M0NkM1 OTgxRUU4RUMwHhcNMjUwNTMwMTYzMzQ4WhcNMjUwNjA2MTYzMzQ4WjAYMRYwFAYD VQQDEw02ODM5ZGRlYy0zYzY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsu+Lq9mJN2azR7cEDJN0e5FRnbawROUCOJVIYVuayEGSFS72lCSAiC/i4a37 8e/Jn7PXHb9NdHsfRnzJiXjljogAx3fkPr6v+MoTueUrE3wh1Gbi8/9Y5lTvj04y 0hyFsqB5D1p3GZ2LAZJUdje+4vw42xt4ouUJbONHcyCFWV1r8WxuI+DlioA0BM0m 5iU4oJKFPT9AU9xjKWqoTfhjDruSqiX4Qs1/AFPDwbz3UQKYAoWvPvUA3Qw6hz8F NpPLt016JWGDKuhR/zEhv/IH03S7BGnHDi/94Jnt0AZM/Yb0ed6ZEcbdvAolztn1 VpTr2nwlAmFcinz7mXNbeudQRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDO6hLXT P7N5zoXMsXUqXLu5MhtAMB8GA1UdIwQYMBaAFKpjLcQCpwL3mpw2k+nMRsWYHujs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBREJBMi9ENjk1NDQxMjU1 M0IxMUU3QUEwRURFMkFDNEY5QUUwMi9xbU10eEFLbkF2ZWFuRGFUNmN4R3haZ2U2 T3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FtTXR4QUtuQXZlYW5EYVQ2Y3hHeFpnZTZPdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB REJBMi9ENjk1NDQxMjU1M0IxMUU3QUEwRURFMkFDNEY5QUUwMi9xbU10eEFLbkF2 ZWFuRGFUNmN4R3haZ2U2T3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAI9aMG53/8nbMQY3Cwb43teelbrGx7kXos0nRWPP1CZY564y3phv+z tKUJYpIsRRYN0sR2kL2weGuDyPIauOojrfGGrR1nqA+qez/41zO7ignZoTY6p02/ S2KMzOUjLh56yhLyCICfpCud/xAAltu6Phl5tSOEhHuyHoNMV2JUNdP3GljqoQGU e1vhNVaLfPHloKbhJeutRV90cvH72z4WXoNYSmlUXSqlkWCXGt37V48vP4oLRkoF LaR2Qa+pnTnu7wQ3gWuViF+ecbcvJfmD++QzM/GiNq6Qi7TiBDhbNbiYFxobxvCN HQ02DqPbGrXxGT5NIKycTxWVn4tuj5tk -----END CERTIFICATE-----Generated at Sat May 31 17:17:27 2025 by rpki-client