$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8BB1/51F9F6143D2511F080C48955C4F9AE02/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.mft File: QSqNF9-Qeng3ZQEqg7eLfLHKJRI.mft (raw, json) Hash identifier: Dfk+iBc6p8wlGq1H4Am0VhnUYd9/+jku7uReKXC+/7s= Subject key identifier: 7D:EF:64:0D:8D:99:25:47:D9:53:B3:3B:B3:48:94:70:C6:E2:CB:41 Authority key identifier: 41:2A:8D:17:DF:90:7A:78:37:65:01:2A:83:B7:8B:7C:B1:CA:25:12 Certificate issuer: /CN=A91D8BB1/serialNumber=412A8D17DF907A783765012A83B78B7CB1CA2512 Certificate serial: 06 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8BB1/51F9F6143D2511F080C48955C4F9AE02/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.mft Manifest number: 06 Signing time: Thu 05 Jun 2025 07:36:41 +0000 Manifest this update: Thu 05 Jun 2025 07:36:41 +0000 Manifest next update: Thu 12 Jun 2025 07:36:41 +0000 Files and hashes: 1: QSqNF9-Qeng3ZQEqg7eLfLHKJRI.crl (hash: hps5aQQ2pHw8uUr8GlOXPq5tfVRtgiwhBoOXHSNiMNA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8BB1/51F9F6143D2511F080C48955C4F9AE02/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.crl rsync://rpki.apnic.net/member_repository/A91D8BB1/51F9F6143D2511F080C48955C4F9AE02/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Jun 2025 07:36:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6 (0x6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8BB1, serialNumber=412A8D17DF907A783765012A83B78B7CB1CA2512 Validity Not Before: Jun 5 07:36:41 2025 GMT Not After : Jun 12 07:36:41 2025 GMT Subject: CN=68414909-9c80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:f2:aa:2b:ca:91:b3:ae:de:3e:46:85:09:65: 41:52:f0:40:a8:50:4c:1e:9a:6d:ce:9e:40:79:40: b6:59:b5:5b:9a:cb:65:99:65:83:bd:c0:8e:8d:54: 34:ed:3c:5e:dc:7b:f3:cc:e3:0f:26:6b:99:ed:b4: 28:4c:4f:92:ed:68:9e:4d:d5:85:8d:ef:1f:05:33: 7d:bb:3b:84:d7:a9:93:06:e5:e7:c6:69:7c:b9:76: 9b:06:52:b9:e9:27:c0:0b:9f:45:b7:40:14:20:a1: de:fd:85:03:c0:aa:b6:7e:84:ee:72:3c:20:80:71: 20:c5:4b:50:7e:c4:3e:d5:b4:55:46:39:64:c0:2f: a5:bb:3f:db:4c:f6:97:d6:72:fa:55:c4:6e:3a:e8: 7f:91:15:02:19:85:f8:c0:a8:44:86:04:2e:77:b0: d2:39:2d:1d:30:8c:5c:03:83:25:ad:3d:40:03:c7: 0e:86:3d:43:ff:af:10:a6:fd:7d:82:ea:40:0a:a2: 89:ed:9f:62:38:f7:ee:c8:57:c5:91:0f:1d:ed:12: 1c:91:1d:c8:05:94:e6:90:d7:1b:88:0c:e8:5e:a9: a1:5f:1c:36:36:ee:f1:f0:3b:ea:28:50:7b:ff:1c: 08:50:e7:83:c0:7b:19:78:94:25:86:42:9d:0f:41: cc:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:EF:64:0D:8D:99:25:47:D9:53:B3:3B:B3:48:94:70:C6:E2:CB:41 X509v3 Authority Key Identifier: keyid:41:2A:8D:17:DF:90:7A:78:37:65:01:2A:83:B7:8B:7C:B1:CA:25:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8BB1/51F9F6143D2511F080C48955C4F9AE02/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8BB1/51F9F6143D2511F080C48955C4F9AE02/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:4c:68:08:c7:7a:f1:5e:76:67:32:ba:d5:98:b1:a8:51:6f: ce:a2:38:15:b3:35:0c:23:c4:02:1a:ad:3d:e9:37:21:98:d4: 53:48:65:05:15:62:92:f7:4d:83:d4:98:11:ca:4e:9d:4f:98: 33:50:54:24:51:4c:ec:a6:87:f5:04:4e:b6:2b:11:9d:63:69: 9d:7d:80:68:62:2b:3f:38:8e:3e:2a:58:1f:1f:2b:61:72:08: e4:8a:11:f7:03:e4:fa:54:f2:8e:be:2e:11:af:32:a5:c8:7e: e3:b4:dd:f7:e0:f3:6b:bc:f9:db:33:fa:6b:59:48:b3:1c:3e: 6b:8c:1c:e6:89:cc:64:89:f6:7c:81:7b:64:56:59:eb:9f:75: 7b:b7:6a:b1:6e:00:47:29:9c:ac:ba:64:06:f2:67:e9:63:03: 64:ef:1d:47:66:c3:79:d4:d0:71:95:f9:2f:81:a9:b7:35:44: c5:68:58:b4:75:b2:a8:dc:8d:3a:47:f2:a3:d4:03:87:89:79: 9d:b5:ac:bb:8f:a9:02:e2:80:3e:17:86:46:90:ae:a9:a1:00: 40:86:5f:bd:b9:69:92:5c:5f:6a:22:ee:f8:a3:29:28:aa:78: bf:64:4d:04:41:14:49:89:6e:55:a1:39:70:bd:56:31:f0:76: 0a:4b:41:80 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE OEJCMTExMC8GA1UEBRMoNDEyQThEMTdERjkwN0E3ODM3NjUwMTJBODNCNzhCN0NC MUNBMjUxMjAeFw0yNTA2MDUwNzM2NDFaFw0yNTA2MTIwNzM2NDFaMBgxFjAUBgNV BAMTDTY4NDE0OTA5LTljODAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDN8qorypGzrt4+RoUJZUFS8ECoUEwemm3OnkB5QLZZtVuay2WZZYO9wI6NVDTt PF7ce/PM4w8ma5nttChMT5LtaJ5N1YWN7x8FM327O4TXqZMG5efGaXy5dpsGUrnp J8ALn0W3QBQgod79hQPAqrZ+hO5yPCCAcSDFS1B+xD7VtFVGOWTAL6W7P9tM9pfW cvpVxG466H+RFQIZhfjAqESGBC53sNI5LR0wjFwDgyWtPUADxw6GPUP/rxCm/X2C 6kAKoontn2I49+7IV8WRDx3tEhyRHcgFlOaQ1xuIDOheqaFfHDY27vHwO+ooUHv/ HAhQ54PAexl4lCWGQp0PQcw5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUfe9kDY2Z JUfZU7M7s0iUcMbiy0EwHwYDVR0jBBgwFoAUQSqNF9+Qeng3ZQEqg7eLfLHKJRIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4QkIxLzUxRjlGNjE0M0Qy NTExRjA4MEM0ODk1NUM0RjlBRTAyL1FTcU5GOS1RZW5nM1pRRXFnN2VMZkxIS0pS SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvUVNxTkY5LVFlbmczWlFFcWc3ZUxmTEhLSlJJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4 QkIxLzUxRjlGNjE0M0QyNTExRjA4MEM0ODk1NUM0RjlBRTAyL1FTcU5GOS1RZW5n M1pRRXFnN2VMZkxIS0pSSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABtMaAjHevFedmcyutWYsahRb86iOBWzNQwjxAIarT3pNyGY1FNIZQUV YpL3TYPUmBHKTp1PmDNQVCRRTOymh/UETrYrEZ1jaZ19gGhiKz84jj4qWB8fK2Fy COSKEfcD5PpU8o6+LhGvMqXIfuO03ffg82u8+dsz+mtZSLMcPmuMHOaJzGSJ9nyB e2RWWeufdXu3arFuAEcpnKy6ZAbyZ+ljA2TvHUdmw3nU0HGV+S+Bqbc1RMVoWLR1 sqjcjTpH8qPUA4eJeZ21rLuPqQLigD4XhkaQrqmhAECGX725aZJcX2oi7vijKSiq eL9kTQRBFEmJblWhOXC9VjHwdgpLQYA= -----END CERTIFICATE-----Generated at Fri Jun 6 17:13:09 2025 by rpki-client