$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDD4D/6E94AAFED27D11ED8E9A2580C4F9AE02/qXeTIZMxLej1k4T5CX9D3WvDF-E.mft File: qXeTIZMxLej1k4T5CX9D3WvDF-E.mft (raw, json) Hash identifier: ffFzlltzpy68Bb2e4ybU15F+ZX7Ihf85t++R7k48UVo= Subject key identifier: 83:C5:58:48:A3:DA:3A:3D:81:45:62:0A:83:3A:18:04:64:4E:24:74 Authority key identifier: A9:77:93:21:93:31:2D:E8:F5:93:84:F9:09:7F:43:DD:6B:C3:17:E1 Certificate issuer: /CN=A91FDD4D/serialNumber=A977932193312DE8F59384F9097F43DD6BC317E1 Certificate serial: 01A5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qXeTIZMxLej1k4T5CX9D3WvDF-E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDD4D/6E94AAFED27D11ED8E9A2580C4F9AE02/qXeTIZMxLej1k4T5CX9D3WvDF-E.mft Manifest number: 01A2 Signing time: Mon 02 Jun 2025 16:06:51 +0000 Manifest this update: Mon 02 Jun 2025 16:06:51 +0000 Manifest next update: Mon 09 Jun 2025 16:06:51 +0000 Files and hashes: 1: qXeTIZMxLej1k4T5CX9D3WvDF-E.crl (hash: Q4vRbhAHU2oWaF35xRzdeTUv5pGU2+qdZZgHnXZtcuc=) 2: 10F77754D28311EDB1655152C4F9AE02.roa (hash: F/LDXxakDpGw+3XLXdPKCVfoeyAVKMDr7JqjszcCvB0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDD4D/6E94AAFED27D11ED8E9A2580C4F9AE02/qXeTIZMxLej1k4T5CX9D3WvDF-E.crl rsync://rpki.apnic.net/member_repository/A91FDD4D/6E94AAFED27D11ED8E9A2580C4F9AE02/qXeTIZMxLej1k4T5CX9D3WvDF-E.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qXeTIZMxLej1k4T5CX9D3WvDF-E.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 16:06:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 421 (0x1a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDD4D, serialNumber=A977932193312DE8F59384F9097F43DD6BC317E1 Validity Not Before: Jun 2 16:06:51 2025 GMT Not After : Jun 9 16:06:51 2025 GMT Subject: CN=683dcc1b-65b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:0a:e7:bc:90:a8:4e:ce:69:de:3d:19:7a:53: 21:9f:5c:23:92:b7:f8:73:68:5f:3d:8e:9f:8e:07: 32:b3:98:f6:3b:30:6d:e4:25:b5:f2:1f:bb:71:ef: 64:8f:2d:e0:6d:e9:7f:8c:3d:f6:48:14:28:c0:41: 0f:cb:50:48:99:92:21:20:cc:e2:1c:06:82:8f:b9: 53:3d:53:b1:17:c3:84:de:ec:68:a2:ef:59:ee:5e: 6a:1e:d5:cb:87:69:d8:82:fb:2c:ca:7c:e9:a9:da: 7b:93:1c:ad:a4:ba:bd:81:d6:d2:47:e6:e3:a3:44: ee:2b:30:0c:de:5c:0d:3a:6e:7b:71:c2:9e:ec:41: 54:16:31:9c:af:72:6f:31:30:5b:45:b8:4a:8e:9d: e5:d5:b5:7e:2d:60:45:16:53:d4:a0:b8:c1:9c:20: bc:29:f8:ab:11:34:92:09:f8:81:16:f8:92:32:de: 43:8a:1b:2b:ad:d5:17:93:0d:00:63:ca:f8:b4:c5: fb:16:5b:a5:e5:65:0a:57:4a:7d:b8:c8:de:8d:92: 3a:79:26:49:60:e0:66:0b:aa:4d:04:fd:98:59:a6: e4:91:ba:0c:11:ba:b4:ec:44:ae:11:e0:77:c1:e9: a5:a9:ae:84:99:3f:b1:5c:8e:26:21:a2:9c:67:7b: 40:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:C5:58:48:A3:DA:3A:3D:81:45:62:0A:83:3A:18:04:64:4E:24:74 X509v3 Authority Key Identifier: keyid:A9:77:93:21:93:31:2D:E8:F5:93:84:F9:09:7F:43:DD:6B:C3:17:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDD4D/6E94AAFED27D11ED8E9A2580C4F9AE02/qXeTIZMxLej1k4T5CX9D3WvDF-E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qXeTIZMxLej1k4T5CX9D3WvDF-E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDD4D/6E94AAFED27D11ED8E9A2580C4F9AE02/qXeTIZMxLej1k4T5CX9D3WvDF-E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:fe:d1:13:1a:2e:fe:1e:d7:e6:e6:14:14:27:a3:02:5c:be: 89:89:d1:56:38:7b:a4:bc:79:2d:94:28:2a:94:13:44:fb:89: b2:b1:9c:88:a8:7d:d5:5e:ce:f7:dd:10:17:f9:78:53:41:eb: cc:dd:6e:be:fe:46:90:e5:59:aa:88:28:20:2f:f1:86:b3:aa: c4:72:df:56:d5:c7:7a:a2:d5:04:17:63:0c:21:9d:04:9a:c6: 1f:e0:db:30:29:1d:ac:02:9e:7c:cd:ac:41:05:37:cb:36:1a: 69:b9:78:fe:99:28:e7:76:55:15:a7:b0:52:f1:a0:88:76:09: 27:30:7f:01:57:13:6d:00:e4:c7:03:20:50:78:5b:74:ee:6f: 47:21:27:df:ad:83:20:dc:ee:ff:31:cc:ef:01:cd:75:9a:49: 1c:45:e9:2a:53:c0:16:d0:ec:d3:44:64:0b:c2:51:4c:4b:0c: e6:52:19:65:50:a5:c5:5c:01:a1:93:96:3f:54:5e:cd:f5:46: bb:f8:b7:3d:a6:eb:2a:1c:3d:91:87:34:c4:d8:91:61:d1:9b: a8:a7:ed:10:cd:d2:5c:60:fe:5f:8b:8f:cf:4b:2b:23:43:92: f6:81:69:1d:0e:ed:c9:0a:6d:e7:2e:f4:b0:3a:6b:eb:49:d6: 06:1e:50:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRENEQxMTAvBgNVBAUTKEE5Nzc5MzIxOTMzMTJERThGNTkzODRGOTA5N0Y0M0RE NkJDMzE3RTEwHhcNMjUwNjAyMTYwNjUxWhcNMjUwNjA5MTYwNjUxWjAYMRYwFAYD VQQDEw02ODNkY2MxYi02NWI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqwrnvJCoTs5p3j0ZelMhn1wjkrf4c2hfPY6fjgcys5j2OzBt5CW18h+7ce9k jy3gbel/jD32SBQowEEPy1BImZIhIMziHAaCj7lTPVOxF8OE3uxoou9Z7l5qHtXL h2nYgvssynzpqdp7kxytpLq9gdbSR+bjo0TuKzAM3lwNOm57ccKe7EFUFjGcr3Jv MTBbRbhKjp3l1bV+LWBFFlPUoLjBnCC8KfirETSSCfiBFviSMt5DihsrrdUXkw0A Y8r4tMX7Flul5WUKV0p9uMjejZI6eSZJYOBmC6pNBP2YWabkkboMEbq07ESuEeB3 wemlqa6EmT+xXI4mIaKcZ3tAkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIPFWEij 2jo9gUViCoM6GARkTiR0MB8GA1UdIwQYMBaAFKl3kyGTMS3o9ZOE+Ql/Q91rwxfh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREQ0RC82RTk0QUFGRUQy N0QxMUVEOEU5QTI1ODBDNEY5QUUwMi9xWGVUSVpNeExlajFrNFQ1Q1g5RDNXdkRG LUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3FYZVRJWk14TGVqMWs0VDVDWDlEM1d2REYtRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG REQ0RC82RTk0QUFGRUQyN0QxMUVEOEU5QTI1ODBDNEY5QUUwMi9xWGVUSVpNeExl ajFrNFQ1Q1g5RDNXdkRGLUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAy/tETGi7+Htfm5hQUJ6MCXL6JidFWOHukvHktlCgqlBNE+4mysZyI qH3VXs733RAX+XhTQevM3W6+/kaQ5VmqiCggL/GGs6rEct9W1cd6otUEF2MMIZ0E msYf4NswKR2sAp58zaxBBTfLNhppuXj+mSjndlUVp7BS8aCIdgknMH8BVxNtAOTH AyBQeFt07m9HISffrYMg3O7/MczvAc11mkkcRekqU8AW0OzTRGQLwlFMSwzmUhll UKXFXAGhk5Y/VF7N9Ua7+Lc9pusqHD2RhzTE2JFh0Zuop+0QzdJcYP5fi4/PSysj Q5L2gWkdDu3JCm3nLvSwOmvrSdYGHlDG -----END CERTIFICATE-----Generated at Wed Jun 4 00:04:40 2025 by rpki-client