$ rpki-client -vvf rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/quxIh3HXuUGFyKkP420pfedshLw.mft File: quxIh3HXuUGFyKkP420pfedshLw.mft (raw, json) Hash identifier: qSs9OmmEYM4wZhgOsk8eRna6i2lrFOsyELx92bluLU0= Subject key identifier: 19:81:97:40:AD:A7:A2:66:A0:84:51:C8:9A:FC:1D:8F:7E:DA:73:B2 Authority key identifier: AA:EC:48:87:71:D7:B9:41:85:C8:A9:0F:E3:6D:29:7D:E7:6C:84:BC Certificate issuer: /CN=A91C60A5/serialNumber=AAEC488771D7B94185C8A90FE36D297DE76C84BC Certificate serial: 79 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/quxIh3HXuUGFyKkP420pfedshLw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/quxIh3HXuUGFyKkP420pfedshLw.mft Manifest number: 76 Signing time: Sun 01 Jun 2025 06:33:28 +0000 Manifest this update: Sun 01 Jun 2025 06:33:27 +0000 Manifest next update: Sun 08 Jun 2025 06:33:27 +0000 Files and hashes: 1: quxIh3HXuUGFyKkP420pfedshLw.crl (hash: oKQqlzUDMRf0BYBSmysZxyCXSl0kbq3IPHjj7d3eEXM=) 2: C5B7E29491F111EFA1C14C61C4F9AE02.roa (hash: id6HTAhbs7lkZSnmnWxvojaKrloCyVbBox6Qwy3+IY8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/quxIh3HXuUGFyKkP420pfedshLw.crl rsync://rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/quxIh3HXuUGFyKkP420pfedshLw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/quxIh3HXuUGFyKkP420pfedshLw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 06:33:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 121 (0x79) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C60A5, serialNumber=AAEC488771D7B94185C8A90FE36D297DE76C84BC Validity Not Before: Jun 1 06:33:27 2025 GMT Not After : Jun 8 06:33:27 2025 GMT Subject: CN=683bf437-d1be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:3d:7f:89:f4:ed:ab:a5:fb:33:76:ca:1f:05: cc:e4:05:39:70:2e:c5:a7:d9:e9:ab:c8:3e:dc:13: b4:c7:ea:4a:0b:1f:59:0c:ec:9d:cc:9b:cd:fb:91: f7:d1:ef:e2:d3:21:24:2f:35:a9:1d:11:bd:1f:6c: 51:ce:07:ba:11:72:90:cd:6f:61:0b:90:a4:64:dc: dd:7c:33:9e:93:93:5f:6e:f2:af:eb:c7:f0:a4:03: b6:a9:b7:59:50:b9:ab:ee:86:fe:d4:c9:a4:4c:9a: 68:7c:fb:8b:37:16:09:62:ed:37:93:c0:36:be:fe: 58:f5:d5:1d:9c:5d:c4:de:a9:e9:64:38:75:e0:aa: 9f:cc:41:b0:85:95:3c:b3:88:b3:60:62:c3:c0:fa: 7a:e2:6a:61:91:f5:51:dd:7f:58:c6:db:61:9c:22: f8:76:3b:3b:16:2e:81:9e:28:a9:59:c3:32:a9:fe: de:66:fe:b7:e5:3c:e0:a9:15:a9:c4:25:a3:4a:2b: f1:30:64:1d:0c:fa:b1:d1:a0:85:4c:30:78:7d:e1: 5b:fc:d7:fe:89:2a:fa:ef:52:00:0d:68:4d:90:15: 3c:a5:cf:81:99:74:61:dc:60:2e:22:0c:9f:c1:1e: f6:38:75:c0:ab:7c:de:47:9e:19:8e:0f:1b:e5:d2: 50:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:81:97:40:AD:A7:A2:66:A0:84:51:C8:9A:FC:1D:8F:7E:DA:73:B2 X509v3 Authority Key Identifier: keyid:AA:EC:48:87:71:D7:B9:41:85:C8:A9:0F:E3:6D:29:7D:E7:6C:84:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/quxIh3HXuUGFyKkP420pfedshLw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/quxIh3HXuUGFyKkP420pfedshLw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/quxIh3HXuUGFyKkP420pfedshLw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:b0:be:8b:91:d8:f4:19:5b:25:ee:74:61:68:38:8e:f8:dc: 64:4e:3b:29:6d:c2:07:94:46:bb:18:0f:a6:ba:fc:19:e5:e9: 5d:c7:1c:58:77:6c:63:a4:9b:c7:8e:70:60:21:46:f6:5d:34: f5:68:2e:7f:39:b5:43:79:0a:67:d3:74:2c:9c:32:50:42:64: b0:5d:72:9d:d1:c0:87:ec:3a:db:e5:ea:1b:ed:be:46:44:25: 19:7e:ac:4a:a8:bb:4d:a1:f2:ec:c0:50:86:3f:c8:b9:b3:3c: 32:16:49:48:45:f5:ac:20:f4:de:8f:cc:dd:ca:52:9c:68:20: 6b:00:e3:c5:77:c5:aa:89:a1:82:3c:ad:51:4a:b3:d7:a6:6b: 00:f2:7a:ef:c5:ae:30:ac:db:7f:7a:c3:b2:6c:b6:d2:fc:aa: b7:f9:92:5c:fc:26:e6:0f:6e:61:13:6f:c5:5d:90:f6:ab:c5: d3:3e:bc:c0:d9:88:b0:16:69:a8:49:5d:ec:bd:ee:01:ea:e0: 80:f7:12:09:b6:91:21:ed:76:07:30:50:10:57:6d:2e:20:4d: e3:23:52:a6:0b:4d:18:1f:8a:dd:eb:99:0e:ca:4c:2b:87:0e: ac:5b:ea:e9:1b:3e:d1:c1:ca:dd:2b:c2:e1:13:b5:bc:8c:94: 91:f0:12:5b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBeTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD NjBBNTExMC8GA1UEBRMoQUFFQzQ4ODc3MUQ3Qjk0MTg1QzhBOTBGRTM2RDI5N0RF NzZDODRCQzAeFw0yNTA2MDEwNjMzMjdaFw0yNTA2MDgwNjMzMjdaMBgxFjAUBgNV BAMTDTY4M2JmNDM3LWQxYmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC5PX+J9O2rpfszdsofBczkBTlwLsWn2emryD7cE7TH6koLH1kM7J3Mm837kffR 7+LTISQvNakdEb0fbFHOB7oRcpDNb2ELkKRk3N18M56Tk19u8q/rx/CkA7apt1lQ uavuhv7UyaRMmmh8+4s3Fgli7TeTwDa+/lj11R2cXcTeqelkOHXgqp/MQbCFlTyz iLNgYsPA+nriamGR9VHdf1jG22GcIvh2OzsWLoGeKKlZwzKp/t5m/rflPOCpFanE JaNKK/EwZB0M+rHRoIVMMHh94Vv81/6JKvrvUgANaE2QFTylz4GZdGHcYC4iDJ/B HvY4dcCrfN5HnhmODxvl0lBLAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUGYGXQK2n omaghFHImvwdj37ac7IwHwYDVR0jBBgwFoAUquxIh3HXuUGFyKkP420pfedshLww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM2MEE1Lzk5N0IzNjZFOTFG MDExRUZCNjk2NUMyNEM0RjlBRTAyL3F1eEloM0hYdVVHRnlLa1A0MjBwZmVkc2hM dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvcXV4SWgzSFh1VUdGeUtrUDQyMHBmZWRzaEx3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM2 MEE1Lzk5N0IzNjZFOTFGMDExRUZCNjk2NUMyNEM0RjlBRTAyL3F1eEloM0hYdVVH RnlLa1A0MjBwZmVkc2hMdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFiwvouR2PQZWyXudGFoOI743GROOyltwgeURrsYD6a6/Bnl6V3HHFh3 bGOkm8eOcGAhRvZdNPVoLn85tUN5CmfTdCycMlBCZLBdcp3RwIfsOtvl6hvtvkZE JRl+rEqou02h8uzAUIY/yLmzPDIWSUhF9awg9N6PzN3KUpxoIGsA48V3xaqJoYI8 rVFKs9emawDyeu/FrjCs2396w7JsttL8qrf5klz8JuYPbmETb8VdkParxdM+vMDZ iLAWaahJXey97gHq4ID3Egm2kSHtdgcwUBBXbS4gTeMjUqYLTRgfit3rmQ7KTCuH Dqxb6ukbPtHByt0rwuETtbyMlJHwEls= -----END CERTIFICATE-----Generated at Mon Jun 2 20:12:50 2025 by rpki-client