$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1AD0/86EF4BDE66CA11EBAC642735C4F9AE02/QwISXvsUnkUVYMdJW31DzZ6az_c.mft File: QwISXvsUnkUVYMdJW31DzZ6az_c.mft (raw, json) Hash identifier: RH/u9PmUhbKu+TiFzw9Tx9dxWfJn9ldIcG49iHAld2Q= Subject key identifier: 08:6C:30:0F:53:09:C8:56:EA:D2:11:F6:93:F3:07:91:45:DA:77:7D Authority key identifier: 43:02:12:5E:FB:14:9E:45:15:60:C7:49:5B:7D:43:CD:9E:9A:CF:F7 Certificate issuer: /CN=A91F1AD0/serialNumber=4302125EFB149E451560C7495B7D43CD9E9ACFF7 Certificate serial: 06B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QwISXvsUnkUVYMdJW31DzZ6az_c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F1AD0/86EF4BDE66CA11EBAC642735C4F9AE02/QwISXvsUnkUVYMdJW31DzZ6az_c.mft Manifest number: 06AB Signing time: Fri 30 May 2025 22:23:55 +0000 Manifest this update: Fri 30 May 2025 22:23:55 +0000 Manifest next update: Fri 06 Jun 2025 22:23:54 +0000 Files and hashes: 1: QwISXvsUnkUVYMdJW31DzZ6az_c.crl (hash: kkV2JqYEFCwZpeEjGwrBPVKgYmUXN/TPAnrtiJCjKeo=) 2: 9507A58E66CC11EB8CD9533AC4F9AE02.roa (hash: mw0tfPfPL7FKi2Yof+LC4zjkegn0Gmah4wfaxap8CoE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F1AD0/86EF4BDE66CA11EBAC642735C4F9AE02/QwISXvsUnkUVYMdJW31DzZ6az_c.crl rsync://rpki.apnic.net/member_repository/A91F1AD0/86EF4BDE66CA11EBAC642735C4F9AE02/QwISXvsUnkUVYMdJW31DzZ6az_c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QwISXvsUnkUVYMdJW31DzZ6az_c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 22:23:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1714 (0x6b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F1AD0, serialNumber=4302125EFB149E451560C7495B7D43CD9E9ACFF7 Validity Not Before: May 30 22:23:55 2025 GMT Not After : Jun 6 22:23:54 2025 GMT Subject: CN=683a2ffb-6c06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:7d:b3:86:fe:1f:a4:be:ab:96:8b:a0:fa:90: 72:6c:26:95:22:7c:ce:4f:13:c2:e4:b6:21:7f:fc: c9:74:21:b0:6b:77:69:13:e7:2e:81:4b:70:84:35: c1:00:6d:b3:91:03:11:39:85:9a:e3:a2:a6:d5:18: ac:9f:df:ae:89:f6:37:ab:25:54:20:23:c8:54:64: 80:bb:70:38:01:ee:84:0d:9e:60:19:e4:2a:d0:97: af:94:fe:2c:9e:6a:6d:48:3a:54:7d:eb:0d:58:e8: 6b:b8:88:4a:ee:97:f3:72:49:6f:8f:93:0d:57:67: 05:23:bc:22:a3:fa:ad:58:41:06:7b:63:91:70:6e: 78:52:60:19:60:80:1f:12:e5:fa:85:dd:2f:e5:f7: 4b:b4:2f:ea:1e:0e:c7:fb:f4:c0:15:a9:a3:91:9a: 40:2a:6d:6f:05:80:90:35:dc:11:f7:78:fd:b0:63: 0d:67:d9:38:bb:58:4a:94:02:48:33:4a:ef:68:70: 8e:77:ea:27:9f:e8:fc:ec:5f:2b:fa:8d:7e:83:89: f0:6b:bb:5f:7e:3e:41:ec:40:18:93:92:3f:5e:03: 61:bc:d8:4d:5a:1c:3f:73:b8:9a:dd:5e:8a:96:dd: 11:bc:3a:29:e8:c8:47:d6:be:b8:0f:30:14:95:1c: 42:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:6C:30:0F:53:09:C8:56:EA:D2:11:F6:93:F3:07:91:45:DA:77:7D X509v3 Authority Key Identifier: keyid:43:02:12:5E:FB:14:9E:45:15:60:C7:49:5B:7D:43:CD:9E:9A:CF:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F1AD0/86EF4BDE66CA11EBAC642735C4F9AE02/QwISXvsUnkUVYMdJW31DzZ6az_c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QwISXvsUnkUVYMdJW31DzZ6az_c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1AD0/86EF4BDE66CA11EBAC642735C4F9AE02/QwISXvsUnkUVYMdJW31DzZ6az_c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:c3:bb:bf:6c:18:84:46:69:fd:88:51:26:af:8a:2e:99:7f: 03:c2:77:75:d6:15:a4:11:7d:bd:54:5b:55:40:3b:df:52:25: c5:ee:be:73:e7:65:f7:2a:64:c2:ff:79:3f:e9:b6:f4:0e:64: 3d:ff:c8:d5:03:17:0b:4e:c2:c3:b9:65:f3:2a:bb:12:cd:67: 0f:37:80:9d:eb:9e:f8:f3:be:9d:3a:00:9b:7e:a4:b7:38:1f: 7c:04:82:15:3f:16:ba:6b:72:ac:81:d6:5d:3e:e3:9a:90:fb: a8:a6:e6:a2:6a:f9:b0:82:15:eb:93:aa:00:47:ac:32:2c:34: 68:07:06:a3:a9:b6:38:b7:41:4b:33:e9:06:9e:73:a3:08:d3: f0:fc:be:28:60:f7:57:73:ab:24:93:53:3b:3d:cb:a9:02:7a: ca:14:13:88:93:b0:4f:5d:2d:64:44:42:49:df:a5:91:ae:1f: ae:bd:ee:e0:25:66:8d:c4:4f:3d:90:bb:89:77:4e:b8:1e:79: 53:39:93:9f:8f:b0:c7:47:8c:9e:24:f6:fd:c4:13:71:77:47: fd:60:f4:5d:8d:30:05:5f:86:39:a2:84:f9:ae:a2:f1:45:2f: 70:24:cf:ba:df:71:88:99:2d:a8:e0:1c:66:54:6c:6c:26:fc: ab:a9:a2:bf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBrIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjFBRDAxMTAvBgNVBAUTKDQzMDIxMjVFRkIxNDlFNDUxNTYwQzc0OTVCN0Q0M0NE OUU5QUNGRjcwHhcNMjUwNTMwMjIyMzU1WhcNMjUwNjA2MjIyMzU0WjAYMRYwFAYD VQQDEw02ODNhMmZmYi02YzA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2n2zhv4fpL6rloug+pBybCaVInzOTxPC5LYhf/zJdCGwa3dpE+cugUtwhDXB AG2zkQMROYWa46Km1Risn9+uifY3qyVUICPIVGSAu3A4Ae6EDZ5gGeQq0JevlP4s nmptSDpUfesNWOhruIhK7pfzcklvj5MNV2cFI7wio/qtWEEGe2ORcG54UmAZYIAf EuX6hd0v5fdLtC/qHg7H+/TAFamjkZpAKm1vBYCQNdwR93j9sGMNZ9k4u1hKlAJI M0rvaHCOd+onn+j87F8r+o1+g4nwa7tffj5B7EAYk5I/XgNhvNhNWhw/c7ia3V6K lt0RvDop6MhH1r64DzAUlRxCQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAhsMA9T CchW6tIR9pPzB5FF2nd9MB8GA1UdIwQYMBaAFEMCEl77FJ5FFWDHSVt9Q82ems/3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMUFEMC84NkVGNEJERTY2 Q0ExMUVCQUM2NDI3MzVDNEY5QUUwMi9Rd0lTWHZzVW5rVVZZTWRKVzMxRHpaNmF6 X2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1F3SVNYdnNVbmtVVllNZEpXMzFEelo2YXpfYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MUFEMC84NkVGNEJERTY2Q0ExMUVCQUM2NDI3MzVDNEY5QUUwMi9Rd0lTWHZzVW5r VVZZTWRKVzMxRHpaNmF6X2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0w7u/bBiERmn9iFEmr4oumX8Dwnd11hWkEX29VFtVQDvfUiXF7r5z 52X3KmTC/3k/6bb0DmQ9/8jVAxcLTsLDuWXzKrsSzWcPN4Cd6574876dOgCbfqS3 OB98BIIVPxa6a3KsgdZdPuOakPuopuaiavmwghXrk6oAR6wyLDRoBwajqbY4t0FL M+kGnnOjCNPw/L4oYPdXc6skk1M7PcupAnrKFBOIk7BPXS1kREJJ36WRrh+uve7g JWaNxE89kLuJd064HnlTOZOfj7DHR4yeJPb9xBNxd0f9YPRdjTAFX4Y5ooT5rqLx RS9wJM+633GImS2o4BxmVGxsJvyrqaK/ -----END CERTIFICATE-----Generated at Sat May 31 16:56:08 2025 by rpki-client