$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2C38/04BAA614A98C11EF9350FB63C4F9AE02/qjXi-Xe1XnL5FjW_fVO861NHmDs.mft File: qjXi-Xe1XnL5FjW_fVO861NHmDs.mft (raw, json) Hash identifier: vtcDfPQyfcVQnUUgOBTiq4dyV7eVxolRFgFEtKNQTQQ= Subject key identifier: D4:8C:A2:A3:E0:AE:2A:70:88:08:8C:E0:91:45:38:F8:C6:E1:0C:2A Authority key identifier: AA:35:E2:F9:77:B5:5E:72:F9:16:35:BF:7D:53:BC:EB:53:47:98:3B Certificate issuer: /CN=A91D2C38/serialNumber=AA35E2F977B55E72F91635BF7D53BCEB5347983B Certificate serial: 63 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qjXi-Xe1XnL5FjW_fVO861NHmDs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D2C38/04BAA614A98C11EF9350FB63C4F9AE02/qjXi-Xe1XnL5FjW_fVO861NHmDs.mft Manifest number: 62 Signing time: Sun 01 Jun 2025 06:46:38 +0000 Manifest this update: Sun 01 Jun 2025 06:46:38 +0000 Manifest next update: Sun 08 Jun 2025 06:46:38 +0000 Files and hashes: 1: qjXi-Xe1XnL5FjW_fVO861NHmDs.crl (hash: LKbEASKPQAglT3AhpBTprZ3lQfaGOw9IP/dvyghCfAY=) 2: 8D6B6D86A98C11EFAAC0F364C4F9AE02.roa (hash: P1YxJ4+gjHWBzmSpF7hBMmYmiKS5/7YJlO0/1zxJNmc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D2C38/04BAA614A98C11EF9350FB63C4F9AE02/qjXi-Xe1XnL5FjW_fVO861NHmDs.crl rsync://rpki.apnic.net/member_repository/A91D2C38/04BAA614A98C11EF9350FB63C4F9AE02/qjXi-Xe1XnL5FjW_fVO861NHmDs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qjXi-Xe1XnL5FjW_fVO861NHmDs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 06:46:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 99 (0x63) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D2C38, serialNumber=AA35E2F977B55E72F91635BF7D53BCEB5347983B Validity Not Before: Jun 1 06:46:38 2025 GMT Not After : Jun 8 06:46:38 2025 GMT Subject: CN=683bf74e-592d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:d2:c2:bb:6a:f1:de:b7:9c:47:78:b0:86:bd: cc:9c:8e:75:d1:9f:c7:06:32:74:f8:19:95:0d:8c: 33:7a:4f:b3:47:13:64:b4:88:93:78:a0:10:cc:e8: fc:d3:13:04:35:52:0f:48:b4:f5:65:73:25:cb:4f: 31:c0:78:8b:ef:6f:84:c3:f0:79:71:cf:7c:7a:fe: 00:06:79:2b:3f:cb:55:c3:2c:88:f1:f2:3d:e6:df: 45:1f:d1:c7:d2:fb:61:ec:e1:a3:aa:bd:27:4f:b7: 6e:32:cd:2e:89:71:3c:f2:86:94:23:a7:15:fd:1f: f6:83:24:ea:20:7b:5e:bc:66:c7:0b:4b:d9:f1:26: 98:9a:22:95:aa:7d:9a:08:90:ab:6c:4a:85:e1:8c: 36:73:6a:18:12:84:03:e6:4a:3e:85:62:28:76:24: fa:10:06:aa:6f:86:af:40:34:1a:b2:15:70:03:76: 18:07:b7:8f:88:18:89:72:a7:c6:13:c4:17:fc:9f: 11:ac:5f:6c:40:22:15:e4:4d:8f:75:14:59:eb:55: 50:cc:3a:50:08:42:7e:5f:ec:32:62:d2:99:28:0d: 28:01:43:75:90:92:91:90:6c:a0:e8:f0:0b:c1:17: 61:5d:d7:63:f4:91:87:9d:a8:4d:f9:c0:7b:10:bf: 4f:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:8C:A2:A3:E0:AE:2A:70:88:08:8C:E0:91:45:38:F8:C6:E1:0C:2A X509v3 Authority Key Identifier: keyid:AA:35:E2:F9:77:B5:5E:72:F9:16:35:BF:7D:53:BC:EB:53:47:98:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D2C38/04BAA614A98C11EF9350FB63C4F9AE02/qjXi-Xe1XnL5FjW_fVO861NHmDs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qjXi-Xe1XnL5FjW_fVO861NHmDs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2C38/04BAA614A98C11EF9350FB63C4F9AE02/qjXi-Xe1XnL5FjW_fVO861NHmDs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:0c:63:1a:57:e5:c8:54:e1:0f:65:4a:70:7a:66:1e:7d:82: 80:b3:81:bd:15:99:5d:8b:bc:7a:62:11:1f:79:dc:c6:0b:54: dd:1b:6e:aa:ce:05:db:a4:9f:9e:97:31:aa:f5:f4:fe:d4:2c: b5:52:56:eb:86:88:56:1d:5c:1c:a9:0a:e9:84:56:ea:e5:d8: 72:4f:f7:54:d0:cf:3c:b3:32:c3:84:58:c5:46:9e:32:61:fb: 01:d2:39:63:69:4b:f5:88:a6:96:4a:3e:de:db:84:16:f3:dd: 43:79:4e:f6:6c:4f:7a:22:ec:f4:8d:1b:64:de:29:88:95:83: b1:50:d6:8d:06:a3:59:54:7a:4b:b3:ba:66:42:73:d5:52:86: ec:dd:0a:27:97:78:50:69:0e:aa:7d:4f:c4:af:7e:96:e3:bb: 24:f1:78:38:21:93:bf:14:02:fd:33:10:a2:81:05:58:0b:9a: ac:68:4d:85:12:2f:df:ec:cf:9c:2e:f0:27:90:aa:d9:ef:ca: 67:71:76:60:55:81:5e:a5:5b:c6:75:e5:7c:05:44:e2:99:c3: 1e:ab:34:71:f2:eb:23:ac:36:4b:68:b8:72:7e:2d:49:44:51: 8f:a5:2b:74:f6:f3:08:a6:1a:3f:ac:7a:3c:2c:2c:85:5b:cc: 3a:d0:c1:7f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE MkMzODExMC8GA1UEBRMoQUEzNUUyRjk3N0I1NUU3MkY5MTYzNUJGN0Q1M0JDRUI1 MzQ3OTgzQjAeFw0yNTA2MDEwNjQ2MzhaFw0yNTA2MDgwNjQ2MzhaMBgxFjAUBgNV BAMTDTY4M2JmNzRlLTU5MmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDb0sK7avHet5xHeLCGvcycjnXRn8cGMnT4GZUNjDN6T7NHE2S0iJN4oBDM6PzT EwQ1Ug9ItPVlcyXLTzHAeIvvb4TD8Hlxz3x6/gAGeSs/y1XDLIjx8j3m30Uf0cfS +2Hs4aOqvSdPt24yzS6JcTzyhpQjpxX9H/aDJOoge168ZscLS9nxJpiaIpWqfZoI kKtsSoXhjDZzahgShAPmSj6FYih2JPoQBqpvhq9ANBqyFXADdhgHt4+IGIlyp8YT xBf8nxGsX2xAIhXkTY91FFnrVVDMOlAIQn5f7DJi0pkoDSgBQ3WQkpGQbKDo8AvB F2Fd12P0kYedqE35wHsQv0+LAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU1Iyio+Cu KnCICIzgkUU4+MbhDCowHwYDVR0jBBgwFoAUqjXi+Xe1XnL5FjW/fVO861NHmDsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQyQzM4LzA0QkFBNjE0QTk4 QzExRUY5MzUwRkI2M0M0RjlBRTAyL3FqWGktWGUxWG5MNUZqV19mVk84NjFOSG1E cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvcWpYaS1YZTFYbkw1RmpXX2ZWTzg2MU5IbURzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQy QzM4LzA0QkFBNjE0QTk4QzExRUY5MzUwRkI2M0M0RjlBRTAyL3FqWGktWGUxWG5M NUZqV19mVk84NjFOSG1Ecy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGoMYxpX5chU4Q9lSnB6Zh59goCzgb0VmV2LvHpiER953MYLVN0bbqrO Bdukn56XMar19P7ULLVSVuuGiFYdXBypCumEVurl2HJP91TQzzyzMsOEWMVGnjJh +wHSOWNpS/WIppZKPt7bhBbz3UN5TvZsT3oi7PSNG2TeKYiVg7FQ1o0Go1lUekuz umZCc9VShuzdCieXeFBpDqp9T8SvfpbjuyTxeDghk78UAv0zEKKBBVgLmqxoTYUS L9/sz5wu8CeQqtnvymdxdmBVgV6lW8Z15XwFROKZwx6rNHHy6yOsNktouHJ+LUlE UY+lK3T28wimGj+sejwsLIVbzDrQwX8= -----END CERTIFICATE-----Generated at Mon Jun 2 22:02:12 2025 by rpki-client