$ rpki-client -vvf rpki.apnic.net/member_repository/A91C27E8/692F72F2F9BA11E7A4C2943BC4F9AE02/qXUlmYQNbuyqG_aMCQWtffRpouc.mft File: qXUlmYQNbuyqG_aMCQWtffRpouc.mft (raw, json) Hash identifier: o5+8yi6CakyTCXRnTtIJXNMBBqj/SkXL5DeL2R03vSI= Subject key identifier: B2:08:CA:E4:24:42:DB:D7:D6:FB:E9:8A:8F:BA:73:C6:76:C4:09:2B Authority key identifier: A9:75:25:99:84:0D:6E:EC:AA:1B:F6:8C:09:05:AD:7D:F4:69:A2:E7 Certificate issuer: /CN=A91C27E8/serialNumber=A9752599840D6EECAA1BF68C0905AD7DF469A2E7 Certificate serial: 16C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qXUlmYQNbuyqG_aMCQWtffRpouc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C27E8/692F72F2F9BA11E7A4C2943BC4F9AE02/qXUlmYQNbuyqG_aMCQWtffRpouc.mft Manifest number: 16B1 Signing time: Fri 06 Jun 2025 16:42:29 +0000 Manifest this update: Fri 06 Jun 2025 16:42:28 +0000 Manifest next update: Fri 13 Jun 2025 16:42:28 +0000 Files and hashes: 1: qXUlmYQNbuyqG_aMCQWtffRpouc.crl (hash: zytmJohkpLYgIuWkDuOme6bXSSDLX1IYsgI7E9U11O0=) 2: BAD2356E153411E892E6D468C4F9AE02.roa (hash: ZwNXUOwbbGwEvsT0YYSZl1NqDpf0fkjGMPzYp65wdFE=) 3: 777FA9ECF9BC11E79E1A9E3FC4F9AE02.roa (hash: fI6pWEKhcfnz5T7b0Qu0ji5oi9dMvf4xCNtRiu+OZoY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C27E8/692F72F2F9BA11E7A4C2943BC4F9AE02/qXUlmYQNbuyqG_aMCQWtffRpouc.crl rsync://rpki.apnic.net/member_repository/A91C27E8/692F72F2F9BA11E7A4C2943BC4F9AE02/qXUlmYQNbuyqG_aMCQWtffRpouc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qXUlmYQNbuyqG_aMCQWtffRpouc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Jun 2025 16:42:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5825 (0x16c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C27E8, serialNumber=A9752599840D6EECAA1BF68C0905AD7DF469A2E7 Validity Not Before: Jun 6 16:42:28 2025 GMT Not After : Jun 13 16:42:28 2025 GMT Subject: CN=68431a75-8f59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:41:25:84:c9:8c:02:b6:3d:2a:d4:42:f1:c1: 57:61:d8:c0:d5:1a:16:6b:6c:c2:c1:21:f8:5e:18: 22:55:1b:d5:b1:30:a6:36:f6:57:2c:fc:6f:a8:13: ac:5a:c5:5f:e1:3d:14:f3:d6:b0:d5:53:64:a1:e2: d5:cd:20:a6:67:74:4c:4e:67:cf:08:d3:74:bf:61: 0a:5f:52:96:5c:1d:71:50:34:35:e8:06:c4:35:99: 1e:0a:26:a7:cd:6c:8e:6d:35:82:dd:be:67:40:ed: ba:35:bd:74:b4:04:c2:87:e6:7d:e0:12:1c:b2:8e: 41:ab:fc:f2:c5:98:a4:de:71:b3:7b:af:0f:a7:07: 90:a6:71:32:a7:0d:fc:31:04:0a:70:7f:ec:b0:59: 1c:bf:b9:ca:c0:1d:95:15:11:80:90:b3:fc:9e:b0: d9:67:aa:1a:6e:b1:4c:d7:1d:8a:27:fb:9d:9f:e7: 6a:16:bd:e4:66:fa:fc:01:9d:51:75:7a:d4:3f:e4: cf:37:ee:48:48:f2:7b:e4:6f:eb:ae:d7:b6:40:4a: 25:1b:94:12:7b:93:79:e4:6f:d8:9f:11:96:47:5a: 37:3c:0c:14:ea:c3:f1:ae:dd:b5:75:d3:3c:82:db: 5d:6e:d9:7b:4b:af:7d:83:67:ed:45:e6:9f:f0:35: ae:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:08:CA:E4:24:42:DB:D7:D6:FB:E9:8A:8F:BA:73:C6:76:C4:09:2B X509v3 Authority Key Identifier: keyid:A9:75:25:99:84:0D:6E:EC:AA:1B:F6:8C:09:05:AD:7D:F4:69:A2:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C27E8/692F72F2F9BA11E7A4C2943BC4F9AE02/qXUlmYQNbuyqG_aMCQWtffRpouc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qXUlmYQNbuyqG_aMCQWtffRpouc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C27E8/692F72F2F9BA11E7A4C2943BC4F9AE02/qXUlmYQNbuyqG_aMCQWtffRpouc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:da:d1:44:43:f8:a0:a5:c0:73:ef:d6:11:dc:3f:5b:8a:04: fb:ee:c2:9d:02:78:a3:ca:42:5e:84:d4:86:9c:c2:5c:2b:ac: cf:f2:de:1c:6d:ae:23:b7:55:2f:c2:e4:c9:f5:d4:b1:aa:64: 80:32:20:64:b7:6e:6a:bf:8a:1d:e4:eb:84:be:b3:cf:9a:a4: 9b:62:2c:81:13:54:c5:4c:0b:39:79:e3:7e:a3:37:5c:06:26: 38:0f:c1:b7:6b:c0:c6:fc:68:b1:0a:76:f1:8b:c4:db:53:fc: 40:40:66:3b:37:ec:97:56:29:9c:56:91:9b:b9:66:86:2e:ae: e7:51:50:72:6d:6b:16:69:c2:24:33:3f:76:a4:79:22:19:19: ac:50:d4:2f:1b:ac:06:6f:2d:8f:ef:c2:63:3d:fc:94:0d:b6: c9:20:20:e0:1e:13:39:c2:86:bb:97:b1:c2:c3:80:24:26:40: 22:1d:44:7c:d5:c1:5c:1a:3b:30:47:ac:63:e9:ba:9a:6e:7f: ec:61:6b:93:7a:3b:a4:b0:f5:e4:80:8c:de:57:38:cb:1b:12: 2d:8c:81:c9:62:cb:93:eb:e8:e5:0e:c7:d2:66:b3:b3:63:5f: bf:90:af:f3:10:a6:df:68:ab:d3:f8:6a:71:30:32:0c:e5:d0: 57:d0:5d:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFsEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzI3RTgxMTAvBgNVBAUTKEE5NzUyNTk5ODQwRDZFRUNBQTFCRjY4QzA5MDVBRDdE RjQ2OUEyRTcwHhcNMjUwNjA2MTY0MjI4WhcNMjUwNjEzMTY0MjI4WjAYMRYwFAYD VQQDEw02ODQzMWE3NS04ZjU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqUElhMmMArY9KtRC8cFXYdjA1RoWa2zCwSH4XhgiVRvVsTCmNvZXLPxvqBOs WsVf4T0U89aw1VNkoeLVzSCmZ3RMTmfPCNN0v2EKX1KWXB1xUDQ16AbENZkeCian zWyObTWC3b5nQO26Nb10tATCh+Z94BIcso5Bq/zyxZik3nGze68PpweQpnEypw38 MQQKcH/ssFkcv7nKwB2VFRGAkLP8nrDZZ6oabrFM1x2KJ/udn+dqFr3kZvr8AZ1R dXrUP+TPN+5ISPJ75G/rrte2QEolG5QSe5N55G/YnxGWR1o3PAwU6sPxrt21ddM8 gttdbtl7S699g2ftReaf8DWuXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLIIyuQk QtvX1vvpio+6c8Z2xAkrMB8GA1UdIwQYMBaAFKl1JZmEDW7sqhv2jAkFrX30aaLn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMjdFOC82OTJGNzJGMkY5 QkExMUU3QTRDMjk0M0JDNEY5QUUwMi9xWFVsbVlRTmJ1eXFHX2FNQ1FXdGZmUnBv dWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FYVWxtWVFOYnV5cUdfYU1DUVd0ZmZScG91Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MjdFOC82OTJGNzJGMkY5QkExMUU3QTRDMjk0M0JDNEY5QUUwMi9xWFVsbVlRTmJ1 eXFHX2FNQ1FXdGZmUnBvdWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQ2tFEQ/igpcBz79YR3D9bigT77sKdAnijykJehNSGnMJcK6zP8t4c ba4jt1UvwuTJ9dSxqmSAMiBkt25qv4od5OuEvrPPmqSbYiyBE1TFTAs5eeN+ozdc BiY4D8G3a8DG/GixCnbxi8TbU/xAQGY7N+yXVimcVpGbuWaGLq7nUVBybWsWacIk Mz92pHkiGRmsUNQvG6wGby2P78JjPfyUDbbJICDgHhM5woa7l7HCw4AkJkAiHUR8 1cFcGjswR6xj6bqabn/sYWuTejuksPXkgIzeVzjLGxItjIHJYsuT6+jlDsfSZrOz Y1+/kK/zEKbfaKvT+GpxMDIM5dBX0F37 -----END CERTIFICATE-----Generated at Sat Jun 7 06:30:42 2025 by rpki-client