$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3B89/D8356BACB07411EA87B60F73C4F9AE02/QpCYAlfGdws2CulWLaWJPGDa2nc.mft File: QpCYAlfGdws2CulWLaWJPGDa2nc.mft (raw, json) Hash identifier: 6NBl2KzhfJv7So97ZPKtHz9lT4dso3xenFofd1BwElE= Subject key identifier: 74:E5:F6:86:8A:B8:15:0A:C0:8E:58:75:6B:7D:86:3B:F2:2F:49:CF Authority key identifier: 42:90:98:02:57:C6:77:0B:36:0A:E9:56:2D:A5:89:3C:60:DA:DA:77 Certificate issuer: /CN=A91C3B89/serialNumber=4290980257C6770B360AE9562DA5893C60DADA77 Certificate serial: 08D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QpCYAlfGdws2CulWLaWJPGDa2nc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C3B89/D8356BACB07411EA87B60F73C4F9AE02/QpCYAlfGdws2CulWLaWJPGDa2nc.mft Manifest number: 08D0 Signing time: Wed 04 Jun 2025 20:22:22 +0000 Manifest this update: Wed 04 Jun 2025 20:22:21 +0000 Manifest next update: Wed 11 Jun 2025 20:22:21 +0000 Files and hashes: 1: QpCYAlfGdws2CulWLaWJPGDa2nc.crl (hash: qrQWGe6jAf4GGvjiXvF3q14rjs8LS+45oJcpG1JZvc8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C3B89/D8356BACB07411EA87B60F73C4F9AE02/QpCYAlfGdws2CulWLaWJPGDa2nc.crl rsync://rpki.apnic.net/member_repository/A91C3B89/D8356BACB07411EA87B60F73C4F9AE02/QpCYAlfGdws2CulWLaWJPGDa2nc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QpCYAlfGdws2CulWLaWJPGDa2nc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Jun 2025 20:22:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2256 (0x8d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C3B89, serialNumber=4290980257C6770B360AE9562DA5893C60DADA77 Validity Not Before: Jun 4 20:22:21 2025 GMT Not After : Jun 11 20:22:21 2025 GMT Subject: CN=6840aafd-b635 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:e7:f3:1f:75:9a:35:a5:3e:75:58:43:3b:93: 05:81:13:f1:b0:04:4b:29:e8:cd:b3:a4:a9:07:29: f6:c6:65:d6:61:f2:00:36:c4:7e:eb:04:a3:11:65: 8e:96:30:96:4f:71:3c:cc:6e:d8:f3:ca:87:c5:02: 05:f1:9a:1d:fb:e6:ed:9c:5d:44:c6:18:4b:93:6f: 60:b0:56:a6:10:a3:50:40:25:bf:9e:0e:ae:9b:44: 26:67:a9:cb:d6:04:f5:31:87:8a:f0:05:3e:01:9a: b0:55:14:b9:67:81:0d:ba:25:eb:05:ac:e4:38:4d: 06:cc:6e:26:b4:bc:03:b9:a3:04:52:12:04:99:5d: bb:f2:8c:0f:ba:7e:ce:8c:07:43:ca:0e:da:f9:26: 20:79:05:46:bc:38:ef:fd:88:19:cd:d3:60:2f:df: 76:da:10:6e:2d:ea:2a:b7:e7:86:4d:4a:ef:03:2f: 1a:71:37:4a:eb:a9:2e:23:a7:75:ec:ad:a2:69:86: 2f:23:fb:33:96:5d:8e:86:77:2a:59:bc:ce:08:26: 2d:1e:37:bf:05:ad:7a:5c:c1:86:a4:86:fc:e8:63: ff:5c:b1:44:df:5b:59:e3:41:a8:b5:dd:0b:c5:07: 27:52:22:d6:71:24:57:53:94:82:f7:b7:9b:17:91: 7e:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:E5:F6:86:8A:B8:15:0A:C0:8E:58:75:6B:7D:86:3B:F2:2F:49:CF X509v3 Authority Key Identifier: keyid:42:90:98:02:57:C6:77:0B:36:0A:E9:56:2D:A5:89:3C:60:DA:DA:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C3B89/D8356BACB07411EA87B60F73C4F9AE02/QpCYAlfGdws2CulWLaWJPGDa2nc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QpCYAlfGdws2CulWLaWJPGDa2nc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3B89/D8356BACB07411EA87B60F73C4F9AE02/QpCYAlfGdws2CulWLaWJPGDa2nc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:d4:54:fb:98:4b:8f:2c:03:62:5e:a0:fb:ac:a0:c7:58:a6: c4:8f:ec:4d:2a:bb:c8:9f:9b:29:83:9e:43:d1:f3:43:76:0e: 37:e5:f5:e8:88:2b:71:34:f7:36:80:4d:b0:04:e3:7d:cd:b3: 0d:e2:26:9a:3f:ff:b6:9b:fe:03:7d:4e:db:7c:c8:94:48:fc: 8d:d2:1f:13:82:db:1d:c3:b6:41:18:e8:81:ed:a9:ae:1c:7f: cd:7d:05:09:d9:d2:52:d6:4b:87:82:6b:fa:38:33:ad:98:85: fa:15:3a:36:22:33:f3:8f:42:ed:e6:b7:fe:f6:bc:03:5c:ce: 10:ec:59:ee:7d:71:88:bf:33:c3:e7:2b:63:0b:bf:7b:ba:e7: 77:d5:d3:51:b0:55:f5:26:7e:f5:01:c9:e2:28:c7:fa:e9:4f: 36:36:b7:79:ac:b3:ad:58:5b:7c:d5:de:a7:2e:ae:c8:0e:c3: fa:66:c0:a0:d9:6d:f8:ba:23:d0:6e:da:ff:51:37:33:58:61: cf:b2:5a:30:9a:31:fa:2c:99:56:29:10:d2:d6:4c:f3:15:d8: 42:c5:17:8c:7c:f5:6d:2f:11:a3:a8:1b:88:f3:8e:b8:d9:d6: e1:11:84:f8:57:bd:db:43:bb:af:f4:4d:f5:97:d8:f1:94:2b: e3:9b:4b:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCNAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzNCODkxMTAvBgNVBAUTKDQyOTA5ODAyNTdDNjc3MEIzNjBBRTk1NjJEQTU4OTND NjBEQURBNzcwHhcNMjUwNjA0MjAyMjIxWhcNMjUwNjExMjAyMjIxWjAYMRYwFAYD VQQDEw02ODQwYWFmZC1iNjM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq+fzH3WaNaU+dVhDO5MFgRPxsARLKejNs6SpByn2xmXWYfIANsR+6wSjEWWO ljCWT3E8zG7Y88qHxQIF8Zod++btnF1ExhhLk29gsFamEKNQQCW/ng6um0QmZ6nL 1gT1MYeK8AU+AZqwVRS5Z4ENuiXrBazkOE0GzG4mtLwDuaMEUhIEmV278owPun7O jAdDyg7a+SYgeQVGvDjv/YgZzdNgL9922hBuLeoqt+eGTUrvAy8acTdK66kuI6d1 7K2iaYYvI/szll2OhncqWbzOCCYtHje/Ba16XMGGpIb86GP/XLFE31tZ40Gotd0L xQcnUiLWcSRXU5SC97ebF5F+AwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHTl9oaK uBUKwI5YdWt9hjvyL0nPMB8GA1UdIwQYMBaAFEKQmAJXxncLNgrpVi2liTxg2tp3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDM0I4OS9EODM1NkJBQ0Iw NzQxMUVBODdCNjBGNzNDNEY5QUUwMi9RcENZQWxmR2R3czJDdWxXTGFXSlBHRGEy bmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FwQ1lBbGZHZHdzMkN1bFdMYVdKUEdEYTJuYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD M0I4OS9EODM1NkJBQ0IwNzQxMUVBODdCNjBGNzNDNEY5QUUwMi9RcENZQWxmR2R3 czJDdWxXTGFXSlBHRGEybmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCG1FT7mEuPLANiXqD7rKDHWKbEj+xNKrvIn5spg55D0fNDdg435fXo iCtxNPc2gE2wBON9zbMN4iaaP/+2m/4DfU7bfMiUSPyN0h8Tgtsdw7ZBGOiB7amu HH/NfQUJ2dJS1kuHgmv6ODOtmIX6FTo2IjPzj0Lt5rf+9rwDXM4Q7FnufXGIvzPD 5ytjC797uud31dNRsFX1Jn71AcniKMf66U82Nrd5rLOtWFt81d6nLq7IDsP6ZsCg 2W34uiPQbtr/UTczWGHPslowmjH6LJlWKRDS1kzzFdhCxReMfPVtLxGjqBuI8464 2dbhEYT4V73bQ7uv9E31l9jxlCvjm0sS -----END CERTIFICATE-----Generated at Thu Jun 5 20:00:26 2025 by rpki-client