$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB916/74EC397E7D3D11EE9AF7391AC4F9AE02/1Q0Rg3MIqx8Vp181FkP7f8AUhUw.mft File: 1Q0Rg3MIqx8Vp181FkP7f8AUhUw.mft (raw, json) Hash identifier: pS/5epKFq+7uddiwqv4sUcc/ifrwcTLOIFbTLupn3JU= Subject key identifier: 38:71:EA:39:B2:7A:2A:6C:E1:F1:83:0F:58:2A:6B:1A:EF:AC:F5:35 Authority key identifier: D5:0D:11:83:73:08:AB:1F:15:A7:5F:35:16:43:FB:7F:C0:14:85:4C Certificate issuer: /CN=A91DB916/serialNumber=D50D11837308AB1F15A75F351643FB7FC014854C Certificate serial: 0131 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Q0Rg3MIqx8Vp181FkP7f8AUhUw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB916/74EC397E7D3D11EE9AF7391AC4F9AE02/1Q0Rg3MIqx8Vp181FkP7f8AUhUw.mft Manifest number: 012D Signing time: Mon 09 Jun 2025 03:40:00 +0000 Manifest this update: Mon 09 Jun 2025 03:39:59 +0000 Manifest next update: Mon 16 Jun 2025 03:39:59 +0000 Files and hashes: 1: 1Q0Rg3MIqx8Vp181FkP7f8AUhUw.crl (hash: RCAcBT86368hocIBYdeGBrUOX34SGQW7Q1d9o25tD28=) 2: 18066BD682CD11EE82EA6452C4F9AE02.roa (hash: Qq2SAGpjgK4uluR309YS8e5suVCymWeDT3qQa1R/qak=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB916/74EC397E7D3D11EE9AF7391AC4F9AE02/1Q0Rg3MIqx8Vp181FkP7f8AUhUw.crl rsync://rpki.apnic.net/member_repository/A91DB916/74EC397E7D3D11EE9AF7391AC4F9AE02/1Q0Rg3MIqx8Vp181FkP7f8AUhUw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Q0Rg3MIqx8Vp181FkP7f8AUhUw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Jun 2025 03:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 305 (0x131) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB916, serialNumber=D50D11837308AB1F15A75F351643FB7FC014854C Validity Not Before: Jun 9 03:39:59 2025 GMT Not After : Jun 16 03:39:59 2025 GMT Subject: CN=6846578f-c2d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:3c:6b:23:a0:50:8f:30:fb:65:3f:a9:93:d8: 4a:70:48:ff:c8:18:35:31:67:fb:36:d9:8a:18:06: d8:ce:55:03:8b:41:38:d5:b2:c5:d3:0a:7e:d1:fa: 5b:39:23:0c:49:6b:fe:81:30:e5:2f:df:74:e2:65: 2f:70:93:f0:9a:fe:ab:db:2b:64:3c:9b:1b:aa:cc: ba:64:c6:71:12:bf:6e:f5:f3:25:1b:fa:4b:ef:06: 92:fc:ac:bd:90:44:74:51:3f:f5:9a:e4:b6:20:e3: c4:46:43:f3:99:cf:71:82:0c:66:09:ef:d4:09:2f: 42:e4:e5:88:b6:d4:f3:02:15:b6:c6:94:30:e8:05: d1:54:f2:1a:ac:6c:ff:f1:87:1b:e9:9e:9c:59:db: b7:7e:3d:4d:6e:ab:9c:67:73:3a:2f:38:9f:ed:1f: ab:ad:8c:61:0f:fb:ed:8d:20:33:ab:bb:a0:b2:66: 4b:12:03:19:e2:2c:3d:bd:59:14:a9:45:df:e0:c6: 8e:9f:c5:c9:e2:78:ee:65:48:61:0c:76:b8:0d:c5: 00:45:08:eb:d3:1b:ec:f0:fb:cc:2c:c1:7e:88:ba: 4e:92:c8:66:75:d2:c5:d6:0f:dc:ec:1d:dd:eb:11: 88:a6:40:7f:03:90:0e:61:29:d6:5a:b2:17:cf:07: 97:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:71:EA:39:B2:7A:2A:6C:E1:F1:83:0F:58:2A:6B:1A:EF:AC:F5:35 X509v3 Authority Key Identifier: keyid:D5:0D:11:83:73:08:AB:1F:15:A7:5F:35:16:43:FB:7F:C0:14:85:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB916/74EC397E7D3D11EE9AF7391AC4F9AE02/1Q0Rg3MIqx8Vp181FkP7f8AUhUw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Q0Rg3MIqx8Vp181FkP7f8AUhUw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB916/74EC397E7D3D11EE9AF7391AC4F9AE02/1Q0Rg3MIqx8Vp181FkP7f8AUhUw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:85:c2:14:67:3c:b6:37:61:6d:72:95:f8:94:6e:00:94:f6: c0:af:e4:f3:f7:6b:03:9e:a7:6d:93:39:fb:03:a0:f3:dc:09: 9d:9a:c8:95:7c:cb:81:dd:d9:8a:e8:ba:e1:6c:b3:b7:9e:24: 36:76:16:89:a8:b1:1f:68:26:57:a6:8a:9c:79:cd:ab:a6:62: e9:79:28:95:9c:ee:1e:51:8a:ff:72:60:52:28:ec:fb:4f:71: 44:2d:b6:3e:1f:9b:1f:6c:4b:9b:be:1f:85:16:bf:c2:1d:5b: 2b:50:62:dc:80:f2:c2:89:f4:5d:73:b0:ee:01:49:9a:8f:f7: 77:9c:ce:4c:33:87:1d:c4:7d:28:84:40:73:fc:69:0e:ba:f3: fc:a8:0d:83:76:be:56:6e:0e:4a:24:c6:dd:e6:ac:ac:a8:f2: 5d:ef:b6:26:6a:94:4a:fa:10:ad:ca:47:43:e0:03:4a:e4:61: 28:36:5b:1f:52:8b:70:2b:c0:3d:a4:07:fc:c7:dd:8f:94:59: 9c:ea:d1:17:51:42:cd:f2:21:b5:a0:cf:72:eb:f2:a3:3e:2e: 07:38:fe:0a:99:72:a7:4c:47:2b:fe:9a:59:f9:50:f3:3b:c1: 07:02:16:27:12:98:1e:39:cf:93:10:74:77:f1:30:78:4f:4c: e6:fd:a7:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REI5MTYxMTAvBgNVBAUTKEQ1MEQxMTgzNzMwOEFCMUYxNUE3NUYzNTE2NDNGQjdG QzAxNDg1NEMwHhcNMjUwNjA5MDMzOTU5WhcNMjUwNjE2MDMzOTU5WjAYMRYwFAYD VQQDEw02ODQ2NTc4Zi1jMmQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvjxrI6BQjzD7ZT+pk9hKcEj/yBg1MWf7NtmKGAbYzlUDi0E41bLF0wp+0fpb OSMMSWv+gTDlL9904mUvcJPwmv6r2ytkPJsbqsy6ZMZxEr9u9fMlG/pL7waS/Ky9 kER0UT/1muS2IOPERkPzmc9xggxmCe/UCS9C5OWIttTzAhW2xpQw6AXRVPIarGz/ 8Ycb6Z6cWdu3fj1NbqucZ3M6Lzif7R+rrYxhD/vtjSAzq7ugsmZLEgMZ4iw9vVkU qUXf4MaOn8XJ4njuZUhhDHa4DcUARQjr0xvs8PvMLMF+iLpOkshmddLF1g/c7B3d 6xGIpkB/A5AOYSnWWrIXzweXrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDhx6jmy eips4fGDD1gqaxrvrPU1MB8GA1UdIwQYMBaAFNUNEYNzCKsfFadfNRZD+3/AFIVM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjkxNi83NEVDMzk3RTdE M0QxMUVFOUFGNzM5MUFDNEY5QUUwMi8xUTBSZzNNSXF4OFZwMTgxRmtQN2Y4QVVo VXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFRMFJnM01JcXg4VnAxODFGa1A3ZjhBVWhVdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjkxNi83NEVDMzk3RTdEM0QxMUVFOUFGNzM5MUFDNEY5QUUwMi8xUTBSZzNNSXF4 OFZwMTgxRmtQN2Y4QVVoVXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLhcIUZzy2N2FtcpX4lG4AlPbAr+Tz92sDnqdtkzn7A6Dz3AmdmsiV fMuB3dmK6LrhbLO3niQ2dhaJqLEfaCZXpoqcec2rpmLpeSiVnO4eUYr/cmBSKOz7 T3FELbY+H5sfbEubvh+FFr/CHVsrUGLcgPLCifRdc7DuAUmaj/d3nM5MM4cdxH0o hEBz/GkOuvP8qA2Ddr5Wbg5KJMbd5qysqPJd77YmapRK+hCtykdD4ANK5GEoNlsf UotwK8A9pAf8x92PlFmc6tEXUULN8iG1oM9y6/KjPi4HOP4KmXKnTEcr/ppZ+VDz O8EHAhYnEpgeOc+TEHR38TB4T0zm/aej -----END CERTIFICATE-----Generated at Mon Jun 9 09:05:02 2025 by rpki-client