$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6BFA/40D4B7EC660311EA99AD4F46C4F9AE02/qmLHn-GEOUEsWwLPS-tUqy674Yg.mft File: qmLHn-GEOUEsWwLPS-tUqy674Yg.mft (raw, json) Hash identifier: k21KhkHVoP7A5+5+Rkq6u1FY3M8tBhyYKRLj20xXWQM= Subject key identifier: 7A:D6:4E:95:D6:47:A2:10:E0:E7:D5:4A:2A:EC:B4:90:B7:F6:6C:98 Authority key identifier: AA:62:C7:9F:E1:84:39:41:2C:5B:02:CF:4B:EB:54:AB:2E:BB:E1:88 Certificate issuer: /CN=A91F6BFA/serialNumber=AA62C79FE18439412C5B02CF4BEB54AB2EBBE188 Certificate serial: 0A86 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qmLHn-GEOUEsWwLPS-tUqy674Yg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F6BFA/40D4B7EC660311EA99AD4F46C4F9AE02/qmLHn-GEOUEsWwLPS-tUqy674Yg.mft Manifest number: 0A6B Signing time: Fri 06 Jun 2025 19:44:13 +0000 Manifest this update: Fri 06 Jun 2025 19:44:12 +0000 Manifest next update: Fri 13 Jun 2025 19:44:12 +0000 Files and hashes: 1: qmLHn-GEOUEsWwLPS-tUqy674Yg.crl (hash: Y78GrUQNLtptMwGkIRm5rPiYpyXMR2K54mhUOYmSZ3w=) 2: 128651089A4C11EEBA49A012C4F9AE02.roa (hash: VmP7SNr/gbc8YQH8mhyiXgUhCSGimNKw35snjgd94pI=) 3: 3AFE6DA8F72911EDB956BA86C4F9AE02.roa (hash: NCtWjC1uM4+Sx0ntIvyY3s6R1AF8S0ZUO+CcBcvcH7w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F6BFA/40D4B7EC660311EA99AD4F46C4F9AE02/qmLHn-GEOUEsWwLPS-tUqy674Yg.crl rsync://rpki.apnic.net/member_repository/A91F6BFA/40D4B7EC660311EA99AD4F46C4F9AE02/qmLHn-GEOUEsWwLPS-tUqy674Yg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qmLHn-GEOUEsWwLPS-tUqy674Yg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Jun 2025 19:44:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2694 (0xa86) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F6BFA, serialNumber=AA62C79FE18439412C5B02CF4BEB54AB2EBBE188 Validity Not Before: Jun 6 19:44:12 2025 GMT Not After : Jun 13 19:44:12 2025 GMT Subject: CN=6843450d-484e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:f0:27:f8:77:24:79:5f:ec:97:5f:c7:a7:cf: 1c:fa:b0:c6:3a:85:64:99:bd:10:f1:4d:d7:a9:5e: 32:d3:7b:76:d6:e0:f6:a6:e9:90:99:99:89:18:a6: 01:58:76:92:37:a6:c5:bf:82:56:b5:56:15:64:94: 34:ae:b4:73:c6:7f:cd:e8:9d:30:e0:9c:06:dd:5a: 19:1a:5d:a1:cd:b0:00:d3:a9:c5:ee:ee:62:9c:cc: f2:5c:95:a1:70:ce:3b:20:69:73:83:11:3d:28:cb: ec:61:a9:a4:3d:73:65:57:39:41:af:92:9a:f5:97: 50:48:58:ec:46:d3:4b:83:5c:f3:b1:cd:a1:30:c7: cf:d8:66:51:bc:ef:39:e6:2d:9e:87:fa:62:c7:33: d1:d3:bd:64:35:25:a2:3b:15:76:60:fc:55:76:6c: 22:b5:58:e4:21:a9:e4:22:87:ec:d0:30:63:e1:62: 1b:b2:68:86:e9:cc:78:36:62:c0:f3:e0:95:31:c0: af:f8:c9:73:1f:d9:a1:5b:bd:30:d4:30:1a:16:b5: c4:90:9c:98:22:5c:ad:69:3d:a4:59:d9:3e:7e:46: b1:3f:d0:01:4b:d8:64:76:01:c3:8d:45:cb:83:ff: a3:8f:13:85:7c:ec:d1:61:ba:ee:02:6b:73:58:51: d3:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:D6:4E:95:D6:47:A2:10:E0:E7:D5:4A:2A:EC:B4:90:B7:F6:6C:98 X509v3 Authority Key Identifier: keyid:AA:62:C7:9F:E1:84:39:41:2C:5B:02:CF:4B:EB:54:AB:2E:BB:E1:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F6BFA/40D4B7EC660311EA99AD4F46C4F9AE02/qmLHn-GEOUEsWwLPS-tUqy674Yg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qmLHn-GEOUEsWwLPS-tUqy674Yg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6BFA/40D4B7EC660311EA99AD4F46C4F9AE02/qmLHn-GEOUEsWwLPS-tUqy674Yg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:da:96:26:5c:04:58:9e:6c:1a:e0:d2:e7:10:52:ce:e1:ee: e0:07:60:1e:62:5b:2e:da:b8:9f:af:46:10:9d:56:0e:02:62: 54:2f:8c:5a:e1:52:fa:4f:ae:23:b5:cf:02:24:5d:64:ba:d0: d8:cf:04:c5:93:ba:d0:ac:3d:ea:d9:74:9e:98:8a:48:a4:4c: 7b:cc:84:df:b6:44:b2:f9:87:91:56:63:df:db:a0:42:ed:59: a0:f5:18:c0:f0:59:8e:eb:a7:5a:ca:87:5c:31:a7:aa:18:50: cb:2f:15:97:d9:9f:62:83:47:f6:49:95:fd:13:c1:55:96:80: b1:cf:b3:86:75:2d:2d:4a:11:29:85:5c:05:18:a2:07:43:b6: 24:fa:57:2a:b2:7f:0b:d2:66:87:0b:73:d5:26:27:b1:6c:45: d5:d8:d8:0f:2d:03:4b:a4:ee:59:e8:02:23:bd:73:ef:76:00: 12:87:2c:ce:12:7b:c7:20:a5:4f:87:89:2a:e6:5b:f9:21:50: 19:8f:94:75:48:f8:2a:20:d2:f1:ca:c7:76:28:2b:e8:2d:28: 95:72:b8:67:3b:0d:d1:6f:b3:69:ef:91:55:a1:ef:3e:f3:cc: bb:64:ce:e8:1e:bc:12:3b:96:76:55:11:6b:8f:9d:73:ad:96: 63:af:91:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCoYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjZCRkExMTAvBgNVBAUTKEFBNjJDNzlGRTE4NDM5NDEyQzVCMDJDRjRCRUI1NEFC MkVCQkUxODgwHhcNMjUwNjA2MTk0NDEyWhcNMjUwNjEzMTk0NDEyWjAYMRYwFAYD VQQDEw02ODQzNDUwZC00ODRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1/An+HckeV/sl1/Hp88c+rDGOoVkmb0Q8U3XqV4y03t21uD2pumQmZmJGKYB WHaSN6bFv4JWtVYVZJQ0rrRzxn/N6J0w4JwG3VoZGl2hzbAA06nF7u5inMzyXJWh cM47IGlzgxE9KMvsYamkPXNlVzlBr5Ka9ZdQSFjsRtNLg1zzsc2hMMfP2GZRvO85 5i2eh/pixzPR071kNSWiOxV2YPxVdmwitVjkIankIofs0DBj4WIbsmiG6cx4NmLA 8+CVMcCv+MlzH9mhW70w1DAaFrXEkJyYIlytaT2kWdk+fkaxP9ABS9hkdgHDjUXL g/+jjxOFfOzRYbruAmtzWFHTPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHrWTpXW R6IQ4OfVSirstJC39myYMB8GA1UdIwQYMBaAFKpix5/hhDlBLFsCz0vrVKsuu+GI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNkJGQS80MEQ0QjdFQzY2 MDMxMUVBOTlBRDRGNDZDNEY5QUUwMi9xbUxIbi1HRU9VRXNXd0xQUy10VXF5Njc0 WWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FtTEhuLUdFT1VFc1d3TFBTLXRVcXk2NzRZZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NkJGQS80MEQ0QjdFQzY2MDMxMUVBOTlBRDRGNDZDNEY5QUUwMi9xbUxIbi1HRU9V RXNXd0xQUy10VXF5Njc0WWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZ2pYmXARYnmwa4NLnEFLO4e7gB2AeYlsu2rifr0YQnVYOAmJUL4xa 4VL6T64jtc8CJF1kutDYzwTFk7rQrD3q2XSemIpIpEx7zITftkSy+YeRVmPf26BC 7Vmg9RjA8FmO66dayodcMaeqGFDLLxWX2Z9ig0f2SZX9E8FVloCxz7OGdS0tShEp hVwFGKIHQ7Yk+lcqsn8L0maHC3PVJiexbEXV2NgPLQNLpO5Z6AIjvXPvdgAShyzO EnvHIKVPh4kq5lv5IVAZj5R1SPgqINLxysd2KCvoLSiVcrhnOw3Rb7Np75FVoe8+ 88y7ZM7oHrwSO5Z2VRFrj51zrZZjr5Gg -----END CERTIFICATE-----Generated at Sat Jun 7 17:27:36 2025 by rpki-client