$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE6B9/526E16A4044E11EA8442D40FC4F9AE02/3qLQJgwXCVFn4eO81lmJ_nZHy2o.mft File: 3qLQJgwXCVFn4eO81lmJ_nZHy2o.mft (raw, json) Hash identifier: n1KU/s0qXCFVZgcIpDHxKzcd4EPTN9Fb5QbgQhgFCB0= Subject key identifier: D0:3C:B7:27:62:94:32:96:05:78:CD:E2:B4:61:37:11:CB:6E:03:E4 Authority key identifier: DE:A2:D0:26:0C:17:09:51:67:E1:E3:BC:D6:59:89:FE:76:47:CB:6A Certificate issuer: /CN=A91AE6B9/serialNumber=DEA2D0260C17095167E1E3BCD65989FE7647CB6A Certificate serial: 0C4F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3qLQJgwXCVFn4eO81lmJ_nZHy2o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE6B9/526E16A4044E11EA8442D40FC4F9AE02/3qLQJgwXCVFn4eO81lmJ_nZHy2o.mft Manifest number: 0C48 Signing time: Fri 30 May 2025 18:34:52 +0000 Manifest this update: Fri 30 May 2025 18:34:51 +0000 Manifest next update: Fri 06 Jun 2025 18:34:51 +0000 Files and hashes: 1: 3qLQJgwXCVFn4eO81lmJ_nZHy2o.crl (hash: lM+6QS/YqF+X3GLH/BxEtddL5U/2hTPHw1LwwcKJa/Y=) 2: D91746DE044F11EA8C37D012C4F9AE02.roa (hash: alyiVZNnvo5j+FeNDvZT50h35M8ryhRQyKsBnyLFnkg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE6B9/526E16A4044E11EA8442D40FC4F9AE02/3qLQJgwXCVFn4eO81lmJ_nZHy2o.crl rsync://rpki.apnic.net/member_repository/A91AE6B9/526E16A4044E11EA8442D40FC4F9AE02/3qLQJgwXCVFn4eO81lmJ_nZHy2o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3qLQJgwXCVFn4eO81lmJ_nZHy2o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 18:34:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3151 (0xc4f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE6B9, serialNumber=DEA2D0260C17095167E1E3BCD65989FE7647CB6A Validity Not Before: May 30 18:34:51 2025 GMT Not After : Jun 6 18:34:51 2025 GMT Subject: CN=6839fa4c-22d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:cd:5c:96:b0:be:72:74:eb:b6:04:54:6f:13: 27:5a:00:48:d8:5c:d1:4a:45:18:e9:66:cc:6d:b7: 17:0f:7d:4c:4b:0a:ad:b7:7f:d8:00:1d:5b:b1:b9: 88:9a:58:28:77:5d:fb:ea:f6:c4:b9:39:f8:18:55: 1e:3d:32:95:f7:17:67:da:46:3d:f6:99:37:1a:94: 0b:83:78:95:0c:49:1a:14:2a:21:19:d3:0e:ed:6d: e9:11:15:73:25:2e:00:35:2f:db:b0:56:d2:e5:f9: 52:6c:76:3c:f2:fe:61:0e:98:54:db:e8:f2:1e:3a: 64:b1:a2:13:be:7a:85:40:72:dd:28:4b:65:fc:13: 53:b9:61:eb:98:fe:eb:c5:c0:20:80:bc:e9:84:7c: fd:c1:57:ae:c7:74:11:4e:b5:8d:fe:fa:7a:a0:1e: aa:a8:57:ca:f7:a9:cd:ce:54:83:b6:9e:bf:72:4d: 95:61:b8:ca:5c:c9:69:a8:24:41:f6:09:e1:73:e7: f7:d2:87:9c:f3:66:2b:9f:29:ed:3c:c4:be:5e:ba: bc:f3:bc:8c:11:64:27:08:0f:49:00:05:f7:59:34: 9c:a2:32:1c:ce:31:bd:a5:52:b8:52:86:f4:54:76: 02:ef:ab:e3:1d:24:53:5e:4e:5f:b2:2d:2b:34:f0: 73:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:3C:B7:27:62:94:32:96:05:78:CD:E2:B4:61:37:11:CB:6E:03:E4 X509v3 Authority Key Identifier: keyid:DE:A2:D0:26:0C:17:09:51:67:E1:E3:BC:D6:59:89:FE:76:47:CB:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE6B9/526E16A4044E11EA8442D40FC4F9AE02/3qLQJgwXCVFn4eO81lmJ_nZHy2o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3qLQJgwXCVFn4eO81lmJ_nZHy2o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE6B9/526E16A4044E11EA8442D40FC4F9AE02/3qLQJgwXCVFn4eO81lmJ_nZHy2o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:67:2f:8c:2f:b7:87:d0:99:d9:59:7b:65:60:bd:0b:bf:0c: d4:23:b7:c3:f7:89:69:22:88:41:dc:f8:ef:f5:67:73:ea:9f: 38:5a:52:2e:e6:2a:aa:6f:d2:dc:5f:31:84:88:e4:a6:57:4d: 84:f2:40:c5:61:43:d4:c4:3c:51:50:d2:8c:f4:b1:b6:42:e3: c3:8f:e5:14:ec:3f:6d:2c:61:9a:34:67:be:37:4c:1e:a2:2a: 70:2e:0f:04:94:68:eb:47:32:90:4b:78:4c:6e:84:5b:7d:ff: 70:8c:05:be:f6:5d:6f:c5:9c:fd:c6:c9:e5:be:cd:c9:fc:40: c8:3f:f6:67:9d:1c:18:76:52:4c:34:e7:55:ef:31:22:37:e3: b2:52:99:37:18:16:8e:6c:ac:12:08:c5:be:32:0d:a8:98:b3: 77:cc:75:1e:c5:1f:9c:c6:cf:97:a1:76:7c:d1:c6:47:94:dd: b5:d2:73:ca:3d:6b:13:0a:af:39:d6:85:b6:56:3d:5e:22:49: e2:8e:ea:23:5f:22:e8:46:64:b4:dd:ef:4b:40:a6:a2:0e:74: 17:e9:ac:64:e6:cb:1d:83:0f:46:b4:55:d3:64:6d:bd:44:a6: aa:6f:08:0e:d9:e7:aa:71:54:19:d2:7a:e1:ab:bf:71:63:2f: fc:6e:b8:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDE8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUU2QjkxMTAvBgNVBAUTKERFQTJEMDI2MEMxNzA5NTE2N0UxRTNCQ0Q2NTk4OUZF NzY0N0NCNkEwHhcNMjUwNTMwMTgzNDUxWhcNMjUwNjA2MTgzNDUxWjAYMRYwFAYD VQQDEw02ODM5ZmE0Yy0yMmQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxs1clrC+cnTrtgRUbxMnWgBI2FzRSkUY6WbMbbcXD31MSwqtt3/YAB1bsbmI mlgod1376vbEuTn4GFUePTKV9xdn2kY99pk3GpQLg3iVDEkaFCohGdMO7W3pERVz JS4ANS/bsFbS5flSbHY88v5hDphU2+jyHjpksaITvnqFQHLdKEtl/BNTuWHrmP7r xcAggLzphHz9wVeux3QRTrWN/vp6oB6qqFfK96nNzlSDtp6/ck2VYbjKXMlpqCRB 9gnhc+f30oec82YrnyntPMS+Xrq887yMEWQnCA9JAAX3WTScojIczjG9pVK4Uob0 VHYC76vjHSRTXk5fsi0rNPBzAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNA8tydi lDKWBXjN4rRhNxHLbgPkMB8GA1UdIwQYMBaAFN6i0CYMFwlRZ+HjvNZZif52R8tq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTZCOS81MjZFMTZBNDA0 NEUxMUVBODQ0MkQ0MEZDNEY5QUUwMi8zcUxRSmd3WENWRm40ZU84MWxtSl9uWkh5 Mm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNxTFFKZ3dYQ1ZGbjRlTzgxbG1KX25aSHkyby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RTZCOS81MjZFMTZBNDA0NEUxMUVBODQ0MkQ0MEZDNEY5QUUwMi8zcUxRSmd3WENW Rm40ZU84MWxtSl9uWkh5Mm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCnZy+ML7eH0JnZWXtlYL0LvwzUI7fD94lpIohB3Pjv9Wdz6p84WlIu 5iqqb9LcXzGEiOSmV02E8kDFYUPUxDxRUNKM9LG2QuPDj+UU7D9tLGGaNGe+N0we oipwLg8ElGjrRzKQS3hMboRbff9wjAW+9l1vxZz9xsnlvs3J/EDIP/ZnnRwYdlJM NOdV7zEiN+OyUpk3GBaObKwSCMW+Mg2omLN3zHUexR+cxs+XoXZ80cZHlN210nPK PWsTCq851oW2Vj1eIknijuojXyLoRmS03e9LQKaiDnQX6axk5ssdgw9GtFXTZG29 RKaqbwgO2eeqcVQZ0nrhq79xYy/8brj7 -----END CERTIFICATE-----Generated at Sat May 31 16:55:08 2025 by rpki-client