$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD000/E6602ED20DB411EABA5C1D7FC4F9AE02/QOlsrrGdQeDa1lL0Na0I566Anvk.mft File: QOlsrrGdQeDa1lL0Na0I566Anvk.mft (raw, json) Hash identifier: +9zR5Hi5MTFqdA4qHn2MJIM8n7XuKobGnYgV9LyW5vg= Subject key identifier: E0:DF:B3:D8:77:12:CC:96:3E:AB:A2:C0:C0:F8:B4:3D:51:26:66:C3 Authority key identifier: 40:E9:6C:AE:B1:9D:41:E0:DA:D6:52:F4:35:AD:08:E7:AE:80:9E:F9 Certificate issuer: /CN=A91BD000/serialNumber=40E96CAEB19D41E0DAD652F435AD08E7AE809EF9 Certificate serial: 0C2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOlsrrGdQeDa1lL0Na0I566Anvk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BD000/E6602ED20DB411EABA5C1D7FC4F9AE02/QOlsrrGdQeDa1lL0Na0I566Anvk.mft Manifest number: 0C20 Signing time: Sun 08 Jun 2025 18:26:58 +0000 Manifest this update: Sun 08 Jun 2025 18:26:57 +0000 Manifest next update: Sun 15 Jun 2025 18:26:57 +0000 Files and hashes: 1: QOlsrrGdQeDa1lL0Na0I566Anvk.crl (hash: CGfZLiuGr08+5c1BmDXM6oJIPDjp0SgfsLyoX5NX8qc=) 2: A55C1282ACA311EFBA427354C4F9AE02.roa (hash: xR90gNQMnqZeX9/Y9edNzOkrUxu48WORxv+O+Po63Y4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BD000/E6602ED20DB411EABA5C1D7FC4F9AE02/QOlsrrGdQeDa1lL0Na0I566Anvk.crl rsync://rpki.apnic.net/member_repository/A91BD000/E6602ED20DB411EABA5C1D7FC4F9AE02/QOlsrrGdQeDa1lL0Na0I566Anvk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOlsrrGdQeDa1lL0Na0I566Anvk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Jun 2025 18:26:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3114 (0xc2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BD000, serialNumber=40E96CAEB19D41E0DAD652F435AD08E7AE809EF9 Validity Not Before: Jun 8 18:26:57 2025 GMT Not After : Jun 15 18:26:57 2025 GMT Subject: CN=6845d5f2-36b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:33:74:09:fd:17:46:e0:a5:9d:52:e1:ab:0f: 79:9c:e4:1e:2b:a3:73:2f:fb:ed:e3:da:2a:69:fa: 54:b7:23:ba:34:7a:a6:83:f5:5d:56:9a:0f:f2:1f: b6:e2:19:b7:aa:74:aa:87:64:10:b1:7c:f9:ec:a5: c9:e2:c8:fc:25:7e:89:2a:ef:54:f8:41:cd:95:10: 29:bf:6f:72:43:14:7a:22:18:1d:af:6b:e5:ad:11: ac:0b:c9:9d:ec:38:9f:9f:21:ca:9e:92:19:66:21: b3:04:8a:0b:b4:fb:e9:4d:ca:78:63:bd:f7:60:ed: 94:ea:a1:e3:30:e9:ae:51:64:c8:c3:6f:64:f5:08: 3f:f3:0a:67:92:a3:85:e0:ef:13:d8:8c:de:d4:1e: 2f:b4:20:b3:2f:e9:66:34:8b:69:5d:ab:3a:f8:db: ea:6b:cb:df:75:a6:bc:ee:92:92:41:6f:90:82:b9: 54:02:ec:95:16:40:45:e9:dd:d1:07:a3:4a:66:b7: b6:62:fd:39:b1:e9:2b:2d:3c:e8:35:b9:db:ed:ac: 06:cf:9f:60:79:5f:c6:ce:f3:38:96:e8:70:b9:f3: 98:e3:bb:38:0a:72:a4:0b:c4:d8:88:3c:97:de:a3: 5d:12:ba:d2:58:a9:b4:e7:1a:6f:fd:f2:ab:c0:0f: 63:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:DF:B3:D8:77:12:CC:96:3E:AB:A2:C0:C0:F8:B4:3D:51:26:66:C3 X509v3 Authority Key Identifier: keyid:40:E9:6C:AE:B1:9D:41:E0:DA:D6:52:F4:35:AD:08:E7:AE:80:9E:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BD000/E6602ED20DB411EABA5C1D7FC4F9AE02/QOlsrrGdQeDa1lL0Na0I566Anvk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOlsrrGdQeDa1lL0Na0I566Anvk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD000/E6602ED20DB411EABA5C1D7FC4F9AE02/QOlsrrGdQeDa1lL0Na0I566Anvk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:d3:d2:7a:d1:78:e2:dd:b4:b2:4d:76:b3:9d:74:5d:32:02: 7a:72:b5:be:f5:bd:f8:78:0a:ec:ba:4c:e2:62:1b:c3:dc:e1: 0c:bb:ac:c1:54:9d:67:90:4c:53:8e:dc:6c:dc:3c:af:a4:b7: 7b:7b:65:d7:ef:f8:17:60:07:b8:56:fc:c3:26:9c:2f:87:cf: c1:61:60:43:55:87:d5:af:21:b9:b5:ce:29:59:19:a4:a5:92: d9:84:1f:65:b9:7e:3e:50:76:ec:73:09:a1:66:dd:58:ba:27: 33:80:cc:a1:6a:7a:9f:86:91:99:41:8f:bc:43:dc:bd:6a:39: df:9c:bc:a9:31:9b:03:b9:c7:45:3e:98:08:61:98:fc:b3:a9: 18:5e:f2:d0:e0:c6:82:2d:c7:da:e1:75:d1:e1:55:e9:4b:61: 43:d0:23:bc:b6:6b:19:36:10:4c:19:3b:b9:ea:83:2e:79:8f: 2f:ca:18:ad:1e:51:19:ec:ac:04:07:b7:5d:8a:8b:fd:3f:61: 33:23:1d:2f:79:0d:ff:17:1c:f4:ea:5c:d6:62:17:83:7e:d1: 75:da:9c:c5:9a:25:27:7c:91:25:3d:e9:fd:8c:a0:4b:f7:0e: b6:72:74:61:8a:dc:93:57:98:a0:fa:33:ce:22:9b:94:af:0d: e9:c1:f2:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDCowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkQwMDAxMTAvBgNVBAUTKDQwRTk2Q0FFQjE5RDQxRTBEQUQ2NTJGNDM1QUQwOEU3 QUU4MDlFRjkwHhcNMjUwNjA4MTgyNjU3WhcNMjUwNjE1MTgyNjU3WjAYMRYwFAYD VQQDEw02ODQ1ZDVmMi0zNmIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxjN0Cf0XRuClnVLhqw95nOQeK6NzL/vt49oqafpUtyO6NHqmg/VdVpoP8h+2 4hm3qnSqh2QQsXz57KXJ4sj8JX6JKu9U+EHNlRApv29yQxR6Ihgdr2vlrRGsC8md 7DifnyHKnpIZZiGzBIoLtPvpTcp4Y733YO2U6qHjMOmuUWTIw29k9Qg/8wpnkqOF 4O8T2Ize1B4vtCCzL+lmNItpXas6+Nvqa8vfdaa87pKSQW+QgrlUAuyVFkBF6d3R B6NKZre2Yv05sekrLTzoNbnb7awGz59geV/GzvM4luhwufOY47s4CnKkC8TYiDyX 3qNdErrSWKm05xpv/fKrwA9jkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFODfs9h3 EsyWPquiwMD4tD1RJmbDMB8GA1UdIwQYMBaAFEDpbK6xnUHg2tZS9DWtCOeugJ75 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRDAwMC9FNjYwMkVEMjBE QjQxMUVBQkE1QzFEN0ZDNEY5QUUwMi9RT2xzcnJHZFFlRGExbEwwTmEwSTU2NkFu dmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FPbHNyckdkUWVEYTFsTDBOYTBJNTY2QW52ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RDAwMC9FNjYwMkVEMjBEQjQxMUVBQkE1QzFEN0ZDNEY5QUUwMi9RT2xzcnJHZFFl RGExbEwwTmEwSTU2NkFudmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCE09J60Xji3bSyTXaznXRdMgJ6crW+9b34eArsukziYhvD3OEMu6zB VJ1nkExTjtxs3DyvpLd7e2XX7/gXYAe4VvzDJpwvh8/BYWBDVYfVryG5tc4pWRmk pZLZhB9luX4+UHbscwmhZt1YuiczgMyhanqfhpGZQY+8Q9y9ajnfnLypMZsDucdF PpgIYZj8s6kYXvLQ4MaCLcfa4XXR4VXpS2FD0CO8tmsZNhBMGTu56oMueY8vyhit HlEZ7KwEB7ddiov9P2EzIx0veQ3/Fxz06lzWYheDftF12pzFmiUnfJElPen9jKBL 9w62cnRhityTV5ig+jPOIpuUrw3pwfK2 -----END CERTIFICATE-----Generated at Mon Jun 9 23:44:56 2025 by rpki-client