$ rpki-client -vvf rpki.apnic.net/member_repository/A91894BE/0B4D029C13C511ED9F5AF26AC4F9AE02/q-SlyJP0_Kxy2WRGir563z5vyP4.mft File: q-SlyJP0_Kxy2WRGir563z5vyP4.mft (raw, json) Hash identifier: P0MQPLCIcuekbAfxhEC7VB/EY7G73UcN6qyLwQPnOUE= Subject key identifier: 39:E2:F4:A0:3F:2E:7A:14:4F:59:19:C4:92:4A:CC:A2:C6:0F:EB:E5 Authority key identifier: AB:E4:A5:C8:93:F4:FC:AC:72:D9:64:46:8A:BE:7A:DF:3E:6F:C8:FE Certificate issuer: /CN=A91894BE/serialNumber=ABE4A5C893F4FCAC72D964468ABE7ADF3E6FC8FE Certificate serial: 027C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q-SlyJP0_Kxy2WRGir563z5vyP4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91894BE/0B4D029C13C511ED9F5AF26AC4F9AE02/q-SlyJP0_Kxy2WRGir563z5vyP4.mft Manifest number: 0278 Signing time: Thu 03 Jul 2025 02:06:14 +0000 Manifest this update: Thu 03 Jul 2025 02:06:14 +0000 Manifest next update: Thu 10 Jul 2025 02:06:14 +0000 Files and hashes: 1: q-SlyJP0_Kxy2WRGir563z5vyP4.crl (hash: fPoRhhWxOTdh5Djjt9oYua7k/rwq87Ec1dbL58djS5k=) 2: 942BF3C013CA11ED983E350EC4F9AE02.roa (hash: 7RgKIXJ+YIFOFiYNofYamgA+0eKHAOepqg8p2i4RVOc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91894BE/0B4D029C13C511ED9F5AF26AC4F9AE02/q-SlyJP0_Kxy2WRGir563z5vyP4.crl rsync://rpki.apnic.net/member_repository/A91894BE/0B4D029C13C511ED9F5AF26AC4F9AE02/q-SlyJP0_Kxy2WRGir563z5vyP4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q-SlyJP0_Kxy2WRGir563z5vyP4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 02:06:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 636 (0x27c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91894BE, serialNumber=ABE4A5C893F4FCAC72D964468ABE7ADF3E6FC8FE Validity Not Before: Jul 3 02:06:14 2025 GMT Not After : Jul 10 02:06:14 2025 GMT Subject: CN=6865e596-5df7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:24:53:ba:b7:a2:94:2d:8d:62:f9:83:bc:ab: 98:81:85:8e:61:f7:ac:61:68:00:12:dc:cc:eb:70: 25:48:69:b5:89:27:98:c0:8f:4f:3c:fa:bb:37:4e: ef:f5:be:42:bf:d2:3b:a8:ea:5c:7c:7f:af:bb:d9: 21:90:eb:e7:a3:6f:44:bf:17:3e:da:be:84:be:ad: 60:fa:ac:71:9f:1a:32:58:5c:99:5e:bf:46:a6:b3: 87:72:f8:86:c0:45:9e:df:5e:24:14:ff:c9:3c:65: 25:ea:3a:9f:a3:b2:e7:f3:d0:a1:1e:2a:21:05:94: 78:59:1a:26:45:a0:39:8a:13:fa:e4:b5:5c:c8:89: 4c:cd:17:1b:84:36:f0:32:5d:ba:b7:d8:e0:da:90: 22:8d:af:0c:38:38:09:27:21:db:2d:9e:af:2f:ef: 08:42:5e:51:1d:ba:f7:16:c4:23:fe:6d:8f:42:02: 0a:ea:3a:0f:0b:03:73:c2:8e:5e:0c:30:89:b6:cb: ea:80:e7:8e:61:33:0c:3f:1b:de:ec:49:89:ab:f7: ad:19:7d:a3:23:22:78:be:b5:a5:79:42:65:29:c6: 2e:a1:6c:de:50:4e:bf:bb:4b:95:4a:cf:a1:4e:0e: 7c:ad:93:28:5b:3e:83:88:0c:35:e1:fb:34:d0:4f: 18:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:E2:F4:A0:3F:2E:7A:14:4F:59:19:C4:92:4A:CC:A2:C6:0F:EB:E5 X509v3 Authority Key Identifier: keyid:AB:E4:A5:C8:93:F4:FC:AC:72:D9:64:46:8A:BE:7A:DF:3E:6F:C8:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91894BE/0B4D029C13C511ED9F5AF26AC4F9AE02/q-SlyJP0_Kxy2WRGir563z5vyP4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q-SlyJP0_Kxy2WRGir563z5vyP4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91894BE/0B4D029C13C511ED9F5AF26AC4F9AE02/q-SlyJP0_Kxy2WRGir563z5vyP4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:0e:92:2c:f9:a5:90:04:e1:b1:3c:bd:68:a0:7d:14:58:eb: 3a:f4:54:d1:a6:b6:43:9c:a0:18:d5:3c:6a:c6:75:91:c4:cf: d9:8a:69:15:cf:f4:35:a9:95:d5:7f:f1:e5:15:80:02:86:b5: 5b:f4:3c:cc:1a:29:48:60:53:d0:26:8e:f2:f2:62:1d:1e:46: fb:6b:68:f6:d1:15:9c:58:2c:cb:be:b6:c0:17:91:4c:4c:71: 90:de:40:f2:bf:17:cb:ea:da:79:57:9a:b5:ab:6c:15:58:2d: 7a:71:56:d1:92:56:fc:6f:b9:6c:cd:32:12:28:71:f6:b9:42: 6b:a2:93:04:cb:2a:bd:60:cd:66:e1:2b:0a:8a:c5:6c:a0:d7: a3:86:f7:06:4c:f1:13:31:e2:fd:f1:60:0f:91:0d:d6:a5:05: 44:fa:fc:62:ef:35:c4:9d:a4:ce:33:59:42:cc:6e:8c:1a:35: aa:83:7c:64:aa:1d:c0:29:37:bc:8c:99:aa:95:25:27:e4:ff: 97:45:6e:9a:6f:29:f2:eb:81:04:fe:08:3d:97:27:34:6a:8a: f4:8f:91:bb:6e:79:08:c9:13:e1:0c:98:67:da:da:1f:62:81: c3:02:11:52:e1:f7:35:d0:b3:fd:25:d1:eb:44:96:fb:b5:68: b1:cb:9d:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAnwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODk0QkUxMTAvBgNVBAUTKEFCRTRBNUM4OTNGNEZDQUM3MkQ5NjQ0NjhBQkU3QURG M0U2RkM4RkUwHhcNMjUwNzAzMDIwNjE0WhcNMjUwNzEwMDIwNjE0WjAYMRYwFAYD VQQDEw02ODY1ZTU5Ni01ZGY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxiRTureilC2NYvmDvKuYgYWOYfesYWgAEtzM63AlSGm1iSeYwI9PPPq7N07v 9b5Cv9I7qOpcfH+vu9khkOvno29Evxc+2r6Evq1g+qxxnxoyWFyZXr9GprOHcviG wEWe314kFP/JPGUl6jqfo7Ln89ChHiohBZR4WRomRaA5ihP65LVcyIlMzRcbhDbw Ml26t9jg2pAija8MODgJJyHbLZ6vL+8IQl5RHbr3FsQj/m2PQgIK6joPCwNzwo5e DDCJtsvqgOeOYTMMPxve7EmJq/etGX2jIyJ4vrWleUJlKcYuoWzeUE6/u0uVSs+h Tg58rZMoWz6DiAw14fs00E8YawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDni9KA/ LnoUT1kZxJJKzKLGD+vlMB8GA1UdIwQYMBaAFKvkpciT9PysctlkRoq+et8+b8j+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTRCRS8wQjREMDI5QzEz QzUxMUVEOUY1QUYyNkFDNEY5QUUwMi9xLVNseUpQMF9LeHkyV1JHaXI1NjN6NXZ5 UDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3EtU2x5SlAwX0t4eTJXUkdpcjU2M3o1dnlQNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OTRCRS8wQjREMDI5QzEzQzUxMUVEOUY1QUYyNkFDNEY5QUUwMi9xLVNseUpQMF9L eHkyV1JHaXI1NjN6NXZ5UDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAiDpIs+aWQBOGxPL1ooH0UWOs69FTRprZDnKAY1TxqxnWRxM/ZimkV z/Q1qZXVf/HlFYAChrVb9DzMGilIYFPQJo7y8mIdHkb7a2j20RWcWCzLvrbAF5FM THGQ3kDyvxfL6tp5V5q1q2wVWC16cVbRklb8b7lszTISKHH2uUJropMEyyq9YM1m 4SsKisVsoNejhvcGTPETMeL98WAPkQ3WpQVE+vxi7zXEnaTOM1lCzG6MGjWqg3xk qh3AKTe8jJmqlSUn5P+XRW6abyny64EE/gg9lyc0aor0j5G7bnkIyRPhDJhn2tof YoHDAhFS4fc10LP9JdHrRJb7tWixy51Q -----END CERTIFICATE-----Generated at Thu Jul 3 18:07:20 2025 by rpki-client