$ rpki-client -vvf rpki.apnic.net/member_repository/A914C002/C8FE0808A92511EEAC4BDB57C4F9AE02/qUOt-S08RCBEEEWA1VuTUv3h1ok.mft File: qUOt-S08RCBEEEWA1VuTUv3h1ok.mft (raw, json) Hash identifier: /GMO6DGKbtLcRkn7vpOd1P+FWiX6kZClSkLQCi5sXAE= Subject key identifier: 39:B1:89:7E:91:2B:B1:34:AD:9D:1A:A4:9F:51:09:9B:11:A0:09:C7 Authority key identifier: A9:43:AD:F9:2D:3C:44:20:44:10:45:80:D5:5B:93:52:FD:E1:D6:89 Certificate issuer: /CN=A914C002/serialNumber=A943ADF92D3C442044104580D55B9352FDE1D689 Certificate serial: 0118 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qUOt-S08RCBEEEWA1VuTUv3h1ok.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C002/C8FE0808A92511EEAC4BDB57C4F9AE02/qUOt-S08RCBEEEWA1VuTUv3h1ok.mft Manifest number: 0118 Signing time: Sun 29 Jun 2025 03:54:03 +0000 Manifest this update: Sun 29 Jun 2025 03:54:02 +0000 Manifest next update: Sun 06 Jul 2025 03:54:02 +0000 Files and hashes: 1: qUOt-S08RCBEEEWA1VuTUv3h1ok.crl (hash: UOCpEfKNwOt9XfKwpxPyFTjUwarqpMGZToXCacLVRso=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C002/C8FE0808A92511EEAC4BDB57C4F9AE02/qUOt-S08RCBEEEWA1VuTUv3h1ok.crl rsync://rpki.apnic.net/member_repository/A914C002/C8FE0808A92511EEAC4BDB57C4F9AE02/qUOt-S08RCBEEEWA1VuTUv3h1ok.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qUOt-S08RCBEEEWA1VuTUv3h1ok.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 03:54:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 280 (0x118) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C002, serialNumber=A943ADF92D3C442044104580D55B9352FDE1D689 Validity Not Before: Jun 29 03:54:02 2025 GMT Not After : Jul 6 03:54:02 2025 GMT Subject: CN=6860b8da-b3a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:dd:52:05:1f:d9:f7:9d:42:e5:22:b2:29:a9: 49:38:93:0e:8f:8d:f2:d8:04:6a:21:92:36:0b:96: 8a:1b:0b:7c:31:04:42:33:1f:02:60:1d:f8:ff:aa: b2:29:1d:ee:ed:c3:62:cd:5a:bb:c8:a8:e4:8e:0a: 90:23:1c:64:50:bf:7e:05:c8:7d:b6:75:35:a1:51: ff:5e:5a:1a:4e:78:9b:72:13:0b:86:37:61:40:ea: 43:ea:54:b8:9c:cf:cd:70:8f:b6:a2:ef:7e:ef:2f: 56:9d:4a:34:76:2c:35:8d:4f:f5:d1:b5:41:30:72: 35:b8:ca:fb:d0:d9:90:1a:db:4d:86:d8:35:88:ae: fe:21:0e:12:98:85:29:be:f3:30:63:0b:f4:cc:db: 6a:b2:56:f1:92:5e:c9:c8:ef:df:20:5e:a9:bd:d9: 03:1d:16:9f:a3:64:fb:03:a7:2d:67:09:95:00:29: 92:70:09:63:25:c5:cb:f7:30:57:09:82:3b:d3:95: 58:36:78:02:af:06:ce:5d:b8:cc:c3:3d:ef:bf:6a: 8a:9f:9a:23:e7:b0:36:6b:50:85:bd:73:51:23:a9: 36:b2:4b:88:25:3b:6d:30:ff:13:d6:f4:45:ce:33: 98:d6:5d:29:86:86:d4:02:7d:ca:56:64:96:1a:0d: 8e:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:B1:89:7E:91:2B:B1:34:AD:9D:1A:A4:9F:51:09:9B:11:A0:09:C7 X509v3 Authority Key Identifier: keyid:A9:43:AD:F9:2D:3C:44:20:44:10:45:80:D5:5B:93:52:FD:E1:D6:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C002/C8FE0808A92511EEAC4BDB57C4F9AE02/qUOt-S08RCBEEEWA1VuTUv3h1ok.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qUOt-S08RCBEEEWA1VuTUv3h1ok.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C002/C8FE0808A92511EEAC4BDB57C4F9AE02/qUOt-S08RCBEEEWA1VuTUv3h1ok.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:1e:c2:f8:36:2e:8d:5d:15:06:57:a9:0c:cf:6a:5c:90:ca: 39:76:96:6f:16:0e:9b:f4:11:ec:68:21:37:f1:79:00:38:f0: 20:c5:51:45:77:9d:6b:04:f0:ca:90:cb:f8:87:08:9f:a4:49: 56:42:7e:c2:40:98:a1:fd:26:29:ce:ba:bd:95:dc:89:b2:ff: 9c:7a:1b:37:36:99:b8:e1:cc:b5:49:d1:39:15:98:86:67:e0: ad:a5:96:7b:ba:3c:39:8f:6d:96:38:5e:06:b9:3d:29:b2:fa: d4:33:b9:ce:40:86:83:30:3e:be:fe:42:77:b0:71:23:67:6b: ac:0e:05:de:8b:98:ef:a8:1f:d7:c0:86:00:c0:0c:9d:9c:05: d0:73:e0:92:63:d0:fb:60:a7:9d:c3:48:77:38:2b:6f:14:e8: 53:2b:55:cd:b8:05:74:74:79:b8:6c:5c:e9:ae:28:df:57:b4: 8b:ba:eb:6b:c5:55:d1:e5:44:1b:34:2b:c9:00:f6:5d:7a:e8: 02:6f:50:d3:48:63:d0:c5:36:fa:6a:3e:f0:56:b4:38:6e:9c: 8d:4f:74:73:2c:6e:60:92:67:87:e9:8a:bc:b8:db:89:d8:a2: a5:0a:b3:00:05:3d:d9:de:36:f6:e2:9e:7a:d0:f4:9a:93:bd: 91:4d:50:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEMwMDIxMTAvBgNVBAUTKEE5NDNBREY5MkQzQzQ0MjA0NDEwNDU4MEQ1NUI5MzUy RkRFMUQ2ODkwHhcNMjUwNjI5MDM1NDAyWhcNMjUwNzA2MDM1NDAyWjAYMRYwFAYD VQQDEw02ODYwYjhkYS1iM2EyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnt1SBR/Z951C5SKyKalJOJMOj43y2ARqIZI2C5aKGwt8MQRCMx8CYB34/6qy KR3u7cNizVq7yKjkjgqQIxxkUL9+Bch9tnU1oVH/XloaTnibchMLhjdhQOpD6lS4 nM/NcI+2ou9+7y9WnUo0diw1jU/10bVBMHI1uMr70NmQGttNhtg1iK7+IQ4SmIUp vvMwYwv0zNtqslbxkl7JyO/fIF6pvdkDHRafo2T7A6ctZwmVACmScAljJcXL9zBX CYI705VYNngCrwbOXbjMwz3vv2qKn5oj57A2a1CFvXNRI6k2skuIJTttMP8T1vRF zjOY1l0phobUAn3KVmSWGg2O2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDmxiX6R K7E0rZ0apJ9RCZsRoAnHMB8GA1UdIwQYMBaAFKlDrfktPEQgRBBFgNVbk1L94daJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzAwMi9DOEZFMDgwOEE5 MjUxMUVFQUM0QkRCNTdDNEY5QUUwMi9xVU90LVMwOFJDQkVFRVdBMVZ1VFV2M2gx b2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FVT3QtUzA4UkNCRUVFV0ExVnVUVXYzaDFvay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzAwMi9DOEZFMDgwOEE5MjUxMUVFQUM0QkRCNTdDNEY5QUUwMi9xVU90LVMwOFJD QkVFRVdBMVZ1VFV2M2gxb2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgHsL4Ni6NXRUGV6kMz2pckMo5dpZvFg6b9BHsaCE38XkAOPAgxVFF d51rBPDKkMv4hwifpElWQn7CQJih/SYpzrq9ldyJsv+cehs3Npm44cy1SdE5FZiG Z+CtpZZ7ujw5j22WOF4GuT0psvrUM7nOQIaDMD6+/kJ3sHEjZ2usDgXei5jvqB/X wIYAwAydnAXQc+CSY9D7YKedw0h3OCtvFOhTK1XNuAV0dHm4bFzprijfV7SLuutr xVXR5UQbNCvJAPZdeugCb1DTSGPQxTb6aj7wVrQ4bpyNT3RzLG5gkmeH6Yq8uNuJ 2KKlCrMABT3Z3jb24p560PSak72RTVDp -----END CERTIFICATE-----Generated at Mon Jun 30 19:50:15 2025 by rpki-client