$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD000/E6602ED20DB411EABA5C1D7FC4F9AE02/QOlsrrGdQeDa1lL0Na0I566Anvk.mft File: QOlsrrGdQeDa1lL0Na0I566Anvk.mft (raw, json) Hash identifier: K+A7dYMABJwi3ZYfmtYoj8QoeGWoJHCcFJPo0ZhspTo= Subject key identifier: 3E:80:F9:B3:E8:D1:FE:8B:95:58:F0:0B:A7:A4:8F:38:66:8D:A5:9F Authority key identifier: 40:E9:6C:AE:B1:9D:41:E0:DA:D6:52:F4:35:AD:08:E7:AE:80:9E:F9 Certificate issuer: /CN=A91BD000/serialNumber=40E96CAEB19D41E0DAD652F435AD08E7AE809EF9 Certificate serial: 0C2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOlsrrGdQeDa1lL0Na0I566Anvk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BD000/E6602ED20DB411EABA5C1D7FC4F9AE02/QOlsrrGdQeDa1lL0Na0I566Anvk.mft Manifest number: 0C22 Signing time: Thu 12 Jun 2025 18:28:50 +0000 Manifest this update: Thu 12 Jun 2025 18:28:49 +0000 Manifest next update: Thu 19 Jun 2025 18:28:49 +0000 Files and hashes: 1: QOlsrrGdQeDa1lL0Na0I566Anvk.crl (hash: sB8fslvUolc+GlCu2g9+HozIcltt12mrR2Z7PgAl0a4=) 2: A55C1282ACA311EFBA427354C4F9AE02.roa (hash: xR90gNQMnqZeX9/Y9edNzOkrUxu48WORxv+O+Po63Y4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BD000/E6602ED20DB411EABA5C1D7FC4F9AE02/QOlsrrGdQeDa1lL0Na0I566Anvk.crl rsync://rpki.apnic.net/member_repository/A91BD000/E6602ED20DB411EABA5C1D7FC4F9AE02/QOlsrrGdQeDa1lL0Na0I566Anvk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOlsrrGdQeDa1lL0Na0I566Anvk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 18:28:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3116 (0xc2c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BD000, serialNumber=40E96CAEB19D41E0DAD652F435AD08E7AE809EF9 Validity Not Before: Jun 12 18:28:49 2025 GMT Not After : Jun 19 18:28:49 2025 GMT Subject: CN=684b1c61-625b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:13:d0:fc:36:ec:f4:08:46:88:a3:17:6e:c8: 63:5b:e5:31:ae:56:d6:ea:7c:67:c9:d0:10:17:36: 8c:33:ae:6b:ba:ab:6f:dd:69:57:3e:5d:27:32:ab: d4:8d:65:c8:f9:0b:a3:27:31:58:38:50:cd:9f:79: af:35:7d:e5:b9:5f:f8:e2:b2:c9:aa:30:c2:81:bd: 60:67:a8:9a:6f:52:37:d3:02:f5:31:22:9a:62:ea: 0b:f3:6a:49:4a:a8:33:23:a7:a9:85:2b:a5:a2:61: 05:87:21:1f:66:7c:fd:66:4c:a8:64:f0:79:b1:eb: 1d:ea:69:06:78:d6:ae:aa:ae:bd:46:d2:a6:42:74: 01:cf:c5:72:64:85:38:0b:fb:5f:0d:72:d4:fc:da: 87:81:76:b2:94:fa:ef:b4:df:ad:c2:bb:bc:74:4c: 41:df:53:d1:1c:6d:ef:08:b7:f4:72:54:2f:c5:e6: 72:8f:30:a4:f5:d2:4d:26:f6:66:ee:ef:cd:68:ca: d4:be:c4:ea:44:01:f5:ea:f2:63:42:5d:d3:e0:79: eb:90:49:2a:a0:ea:ba:1a:7e:4e:df:12:36:58:11: 6b:70:9e:7a:86:cd:54:9f:57:0a:b1:b5:63:c7:6e: 30:0f:23:8c:23:bf:5e:f2:db:4a:2a:e2:cb:c5:49: 15:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:80:F9:B3:E8:D1:FE:8B:95:58:F0:0B:A7:A4:8F:38:66:8D:A5:9F X509v3 Authority Key Identifier: keyid:40:E9:6C:AE:B1:9D:41:E0:DA:D6:52:F4:35:AD:08:E7:AE:80:9E:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BD000/E6602ED20DB411EABA5C1D7FC4F9AE02/QOlsrrGdQeDa1lL0Na0I566Anvk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOlsrrGdQeDa1lL0Na0I566Anvk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD000/E6602ED20DB411EABA5C1D7FC4F9AE02/QOlsrrGdQeDa1lL0Na0I566Anvk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:8f:76:65:63:a8:da:97:87:80:c7:3b:fa:ca:3d:34:2c:95: 15:62:b6:33:63:13:6e:89:0d:d9:09:6f:91:01:47:7a:d7:a8: 44:50:31:57:de:6d:84:d5:90:bb:f2:44:a2:d1:1f:10:51:62: 2e:27:b7:32:b2:2a:54:24:4b:99:71:0c:5c:39:a1:b2:cb:c9: 48:40:89:2c:30:cf:99:a0:86:69:10:7d:fb:99:89:a1:a8:61: 41:de:c1:a2:4a:be:9e:27:74:c5:15:5f:d9:38:ef:07:43:2a: be:b6:e7:44:ec:d7:bd:a0:85:23:6f:dc:1e:17:50:64:07:7e: 9f:17:43:99:25:47:2b:eb:1d:f2:af:05:c7:80:4b:b9:e6:f4: ed:ac:93:8f:82:30:9b:3d:84:3d:9d:16:4c:e2:fb:b6:1c:0c: dc:00:07:10:50:0a:0b:2b:1e:16:ae:5d:ba:66:aa:5a:24:e0: 65:34:0c:bc:fd:63:40:99:92:25:9a:10:bf:83:2b:f4:7e:b8: 64:bb:b6:b6:6b:8c:07:3c:57:f4:3a:30:d3:9e:b1:39:78:04: 2a:45:c9:09:8f:4f:b8:3f:3a:29:c8:aa:f6:86:92:33:b6:e9: e9:77:3b:1f:01:29:ba:d0:b9:85:cf:bb:7d:cd:43:1f:61:23: b4:c3:0c:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDCwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkQwMDAxMTAvBgNVBAUTKDQwRTk2Q0FFQjE5RDQxRTBEQUQ2NTJGNDM1QUQwOEU3 QUU4MDlFRjkwHhcNMjUwNjEyMTgyODQ5WhcNMjUwNjE5MTgyODQ5WjAYMRYwFAYD VQQDEw02ODRiMWM2MS02MjViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwhPQ/Dbs9AhGiKMXbshjW+UxrlbW6nxnydAQFzaMM65ruqtv3WlXPl0nMqvU jWXI+QujJzFYOFDNn3mvNX3luV/44rLJqjDCgb1gZ6iab1I30wL1MSKaYuoL82pJ SqgzI6ephSulomEFhyEfZnz9ZkyoZPB5sesd6mkGeNauqq69RtKmQnQBz8VyZIU4 C/tfDXLU/NqHgXaylPrvtN+twru8dExB31PRHG3vCLf0clQvxeZyjzCk9dJNJvZm 7u/NaMrUvsTqRAH16vJjQl3T4HnrkEkqoOq6Gn5O3xI2WBFrcJ56hs1Un1cKsbVj x24wDyOMI79e8ttKKuLLxUkVxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD6A+bPo 0f6LlVjwC6ekjzhmjaWfMB8GA1UdIwQYMBaAFEDpbK6xnUHg2tZS9DWtCOeugJ75 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRDAwMC9FNjYwMkVEMjBE QjQxMUVBQkE1QzFEN0ZDNEY5QUUwMi9RT2xzcnJHZFFlRGExbEwwTmEwSTU2NkFu dmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FPbHNyckdkUWVEYTFsTDBOYTBJNTY2QW52ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RDAwMC9FNjYwMkVEMjBEQjQxMUVBQkE1QzFEN0ZDNEY5QUUwMi9RT2xzcnJHZFFl RGExbEwwTmEwSTU2NkFudmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtj3ZlY6jal4eAxzv6yj00LJUVYrYzYxNuiQ3ZCW+RAUd616hEUDFX 3m2E1ZC78kSi0R8QUWIuJ7cysipUJEuZcQxcOaGyy8lIQIksMM+ZoIZpEH37mYmh qGFB3sGiSr6eJ3TFFV/ZOO8HQyq+tudE7Ne9oIUjb9weF1BkB36fF0OZJUcr6x3y rwXHgEu55vTtrJOPgjCbPYQ9nRZM4vu2HAzcAAcQUAoLKx4Wrl26ZqpaJOBlNAy8 /WNAmZIlmhC/gyv0frhku7a2a4wHPFf0OjDTnrE5eAQqRckJj0+4PzopyKr2hpIz tunpdzsfASm60LmFz7t9zUMfYSO0wwxy -----END CERTIFICATE-----Generated at Sat Jun 14 09:15:30 2025 by rpki-client