$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6E35/729CB23076FF11EBBFB60D14C4F9AE02/qg08vlkeG_ZBGL9vA2QSX6abipA.mft File: qg08vlkeG_ZBGL9vA2QSX6abipA.mft (raw, json) Hash identifier: VKv+HGGu/wcqzyU5EnlR50BzQW/zouDwR4La3M7RvnA= Subject key identifier: A7:43:1E:0A:A8:C0:18:33:14:00:9C:B8:04:62:DF:DC:9E:CD:90:67 Authority key identifier: AA:0D:3C:BE:59:1E:1B:F6:41:18:BF:6F:03:64:12:5F:A6:9B:8A:90 Certificate issuer: /CN=A91D6E35/serialNumber=AA0D3CBE591E1BF64118BF6F0364125FA69B8A90 Certificate serial: 068E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qg08vlkeG_ZBGL9vA2QSX6abipA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6E35/729CB23076FF11EBBFB60D14C4F9AE02/qg08vlkeG_ZBGL9vA2QSX6abipA.mft Manifest number: 0685 Signing time: Sun 08 Jun 2025 21:55:15 +0000 Manifest this update: Sun 08 Jun 2025 21:55:15 +0000 Manifest next update: Sun 15 Jun 2025 21:55:15 +0000 Files and hashes: 1: qg08vlkeG_ZBGL9vA2QSX6abipA.crl (hash: XoQJHQ8lyRlQkPZCYy2c0CF/wfi7xUFAWrW/7X0Fw5M=) 2: EE188D209F2B11EDBB1C587AC4F9AE02.roa (hash: xunDUR+vk1rAB3LOb72QA9qMR5Y4O+s76u7aM9CtIVg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6E35/729CB23076FF11EBBFB60D14C4F9AE02/qg08vlkeG_ZBGL9vA2QSX6abipA.crl rsync://rpki.apnic.net/member_repository/A91D6E35/729CB23076FF11EBBFB60D14C4F9AE02/qg08vlkeG_ZBGL9vA2QSX6abipA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qg08vlkeG_ZBGL9vA2QSX6abipA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Jun 2025 21:55:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1678 (0x68e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6E35, serialNumber=AA0D3CBE591E1BF64118BF6F0364125FA69B8A90 Validity Not Before: Jun 8 21:55:15 2025 GMT Not After : Jun 15 21:55:15 2025 GMT Subject: CN=684606c3-422c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:3d:93:2b:8d:d6:b1:33:41:86:70:c1:2e:26: bd:ea:4e:72:c9:30:32:c5:df:e5:8b:c1:2d:9a:e1: d6:c7:7a:84:1c:a6:8b:c5:bd:fc:1f:9b:bb:c8:16: 5c:14:57:1b:39:b3:1e:b1:88:c2:96:0d:34:81:07: d9:bb:18:97:51:b7:c4:9c:08:41:cf:f2:50:22:a2: 45:f1:98:e3:c3:4f:34:1b:95:7a:14:68:5b:b9:56: 9b:24:40:1d:e0:e6:91:40:06:9a:63:d9:da:e3:df: 15:e8:43:54:c9:df:c0:90:29:16:20:8f:ed:1a:12: 4f:26:53:e5:51:64:b6:4a:ce:41:e8:70:06:64:c8: dd:26:52:76:73:06:70:e3:31:12:bb:44:e4:8a:d2: f5:4d:58:f3:4e:1e:e9:7e:c5:66:87:28:6b:b8:5d: 8c:12:69:37:90:cc:53:98:a6:44:d6:a2:6c:0d:50: 91:68:f6:c5:51:d2:5e:2e:f2:49:d5:d2:42:6b:71: 7b:ce:55:a5:df:77:3d:98:45:5f:21:09:20:68:6e: e9:74:a1:6e:61:89:02:a9:61:7e:dd:a3:22:c8:66: ea:17:fe:2f:26:88:6b:7a:f6:ba:95:8d:69:01:ed: 9d:2f:18:f3:03:be:54:45:4a:7f:de:fa:61:99:03: d7:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:43:1E:0A:A8:C0:18:33:14:00:9C:B8:04:62:DF:DC:9E:CD:90:67 X509v3 Authority Key Identifier: keyid:AA:0D:3C:BE:59:1E:1B:F6:41:18:BF:6F:03:64:12:5F:A6:9B:8A:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6E35/729CB23076FF11EBBFB60D14C4F9AE02/qg08vlkeG_ZBGL9vA2QSX6abipA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qg08vlkeG_ZBGL9vA2QSX6abipA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6E35/729CB23076FF11EBBFB60D14C4F9AE02/qg08vlkeG_ZBGL9vA2QSX6abipA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:d1:db:87:be:78:a3:ba:24:19:05:6c:fe:6f:5f:4c:c0:b9: b0:4e:5c:77:84:ed:91:c1:82:a1:38:08:2d:57:50:00:2d:17: eb:78:bf:84:75:d2:a4:7d:5e:88:bb:b1:29:33:48:89:cd:a6: 5b:f4:0f:3a:dc:e4:f5:29:3d:b8:9c:63:55:91:74:96:95:75: 4e:51:6c:55:18:e7:d7:aa:de:72:77:9d:5c:28:32:6f:36:1d: ed:06:da:c1:71:f1:52:dc:98:6a:9f:da:29:72:72:01:56:34: 91:65:b6:05:6a:7e:11:a5:99:59:af:19:b5:7c:f3:b9:e7:05: 9f:e8:a0:99:0b:43:b6:ad:dc:40:72:7d:74:d5:3c:eb:23:0c: 33:70:5f:0c:48:21:11:75:16:c1:1a:20:cb:f1:ba:f3:f8:00: 29:6f:48:32:cf:84:85:b9:b7:b3:69:31:c3:d0:99:8f:fe:3e: a0:cd:83:96:0d:b2:b6:85:3c:84:3a:33:bf:21:83:ef:e4:6e: 56:7c:06:59:ff:73:c9:06:a2:49:a3:bf:e0:42:ff:ec:2e:f3: e6:95:67:c2:f9:7d:ac:21:c1:e7:8b:9a:5c:fd:01:4b:95:0a: c0:57:cd:e0:46:9c:4e:0e:ef:31:36:47:a1:fa:d2:be:51:24: fb:a5:fa:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBo4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDZFMzUxMTAvBgNVBAUTKEFBMEQzQ0JFNTkxRTFCRjY0MTE4QkY2RjAzNjQxMjVG QTY5QjhBOTAwHhcNMjUwNjA4MjE1NTE1WhcNMjUwNjE1MjE1NTE1WjAYMRYwFAYD VQQDEw02ODQ2MDZjMy00MjJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvz2TK43WsTNBhnDBLia96k5yyTAyxd/li8EtmuHWx3qEHKaLxb38H5u7yBZc FFcbObMesYjClg00gQfZuxiXUbfEnAhBz/JQIqJF8Zjjw080G5V6FGhbuVabJEAd 4OaRQAaaY9na498V6ENUyd/AkCkWII/tGhJPJlPlUWS2Ss5B6HAGZMjdJlJ2cwZw 4zESu0TkitL1TVjzTh7pfsVmhyhruF2MEmk3kMxTmKZE1qJsDVCRaPbFUdJeLvJJ 1dJCa3F7zlWl33c9mEVfIQkgaG7pdKFuYYkCqWF+3aMiyGbqF/4vJohreva6lY1p Ae2dLxjzA75URUp/3vphmQPXKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKdDHgqo wBgzFACcuARi39yezZBnMB8GA1UdIwQYMBaAFKoNPL5ZHhv2QRi/bwNkEl+mm4qQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENkUzNS83MjlDQjIzMDc2 RkYxMUVCQkZCNjBEMTRDNEY5QUUwMi9xZzA4dmxrZUdfWkJHTDl2QTJRU1g2YWJp cEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FnMDh2bGtlR19aQkdMOXZBMlFTWDZhYmlwQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NkUzNS83MjlDQjIzMDc2RkYxMUVCQkZCNjBEMTRDNEY5QUUwMi9xZzA4dmxrZUdf WkJHTDl2QTJRU1g2YWJpcEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCI0duHvnijuiQZBWz+b19MwLmwTlx3hO2RwYKhOAgtV1AALRfreL+E ddKkfV6Iu7EpM0iJzaZb9A863OT1KT24nGNVkXSWlXVOUWxVGOfXqt5yd51cKDJv Nh3tBtrBcfFS3Jhqn9opcnIBVjSRZbYFan4RpZlZrxm1fPO55wWf6KCZC0O2rdxA cn101TzrIwwzcF8MSCERdRbBGiDL8brz+AApb0gyz4SFubezaTHD0JmP/j6gzYOW DbK2hTyEOjO/IYPv5G5WfAZZ/3PJBqJJo7/gQv/sLvPmlWfC+X2sIcHni5pc/QFL lQrAV83gRpxODu8xNkeh+tK+UST7pfqu -----END CERTIFICATE-----Generated at Mon Jun 9 11:59:02 2025 by rpki-client