$ rpki-client -vvf rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.mft File: qxHoCfK8ZrDR5guKMfhrW4LgDjk.mft (raw, json) Hash identifier: 9ntOeMl5U+nLPb6rNUsu//jdcCF+fF9/welBZ8HIJsY= Subject key identifier: 8D:83:0E:2F:C8:99:E6:2A:81:FE:6C:DC:60:6B:63:A9:A4:69:19:55 Authority key identifier: AB:11:E8:09:F2:BC:66:B0:D1:E6:0B:8A:31:F8:6B:5B:82:E0:0E:39 Certificate issuer: /CN=A9191FA5/serialNumber=AB11E809F2BC66B0D1E60B8A31F86B5B82E00E39 Certificate serial: 3661 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.mft Manifest number: 3590 Signing time: Sat 28 Jun 2025 14:27:01 +0000 Manifest this update: Sat 28 Jun 2025 14:27:00 +0000 Manifest next update: Sat 05 Jul 2025 14:27:00 +0000 Files and hashes: 1: qxHoCfK8ZrDR5guKMfhrW4LgDjk.crl (hash: /h4ha4MBIM+xIutXe5tCx0gWPQVtZ8PDAOYkz52msaE=) 2: FF09B6BEC2E511EBBDB1B180C4F9AE02.roa (hash: OvCY417O6LApKrjTErQYYNbz/LnEmUx+Z3GSzHy8WPM=) 3: B8E7D994D00711EAB66A1255C4F9AE02.roa (hash: NTDwpkNkDHYvPlbXgriI89H0onb/SkI96RAfrzWAkp8=) 4: FDE510BCC2E511EBBDB1B180C4F9AE02.roa (hash: 20lxG5YaQGKYCeNDIccsMuS2DiiyPh+IbwNarzaaMG8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.crl rsync://rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 14:27:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13921 (0x3661) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191FA5, serialNumber=AB11E809F2BC66B0D1E60B8A31F86B5B82E00E39 Validity Not Before: Jun 28 14:27:00 2025 GMT Not After : Jul 5 14:27:00 2025 GMT Subject: CN=685ffbb5-2097 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d2:62:c8:33:64:16:75:cf:1b:64:cd:86:df: 4c:09:eb:6a:33:96:9e:f8:39:03:5a:13:86:11:b4: 2d:e0:d8:55:a0:a5:01:d2:b1:ca:3a:c3:f5:90:03: 33:3d:f0:e1:cd:6f:05:c9:6a:61:79:fb:19:1a:3e: 0a:71:0e:ba:24:9d:b8:e5:7a:4a:62:9a:89:ba:e9: a7:b4:4b:7c:0d:32:f7:3b:b7:a2:71:13:32:a6:63: c0:56:60:23:32:67:f9:af:17:c1:36:ba:41:5b:4f: 53:b6:1a:82:d6:ff:6a:cd:32:4a:29:35:16:d5:ca: 2a:fb:28:b2:83:f0:0c:aa:8c:68:f3:41:c7:23:94: c1:e1:d8:d2:88:48:bb:08:4e:4a:16:0b:3c:11:50: 85:68:51:d1:56:f5:8a:b3:4e:e4:bb:16:d2:12:ea: 2b:f1:70:cb:06:c1:ac:fa:6c:42:8d:f6:72:c6:a6: e8:58:6e:ec:f4:e0:e4:77:2d:3f:bc:8f:00:8a:d0: bd:9a:35:18:de:8a:ee:a6:70:73:d6:e0:c5:40:ac: 4a:ef:bb:93:21:f2:8b:c3:37:3f:47:92:b9:f6:f2: 64:3c:eb:8b:0e:20:0b:54:4d:a0:44:84:36:10:b7: 0a:3d:fb:a9:cf:7d:77:15:fd:3e:0d:f4:91:d9:56: 47:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:83:0E:2F:C8:99:E6:2A:81:FE:6C:DC:60:6B:63:A9:A4:69:19:55 X509v3 Authority Key Identifier: keyid:AB:11:E8:09:F2:BC:66:B0:D1:E6:0B:8A:31:F8:6B:5B:82:E0:0E:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:4a:75:f6:18:2a:72:67:a1:b6:63:6e:ad:d9:07:4b:0b:fe: ed:a9:46:6c:f7:6b:6f:06:15:d4:80:cb:24:f6:17:be:00:0c: be:65:7d:1a:9d:5a:23:39:7e:36:1f:1e:b0:b8:2f:fe:b3:76: 45:41:26:a0:88:0f:59:30:51:90:e8:5a:8f:2e:78:bc:1f:97: 6a:e0:d3:74:ab:ac:09:3b:bf:45:ff:f8:72:99:72:47:56:e9: 0b:4a:71:a5:7d:9e:82:2d:4e:4e:81:c9:b4:3a:c1:94:2a:96: c6:70:20:5b:1d:27:6e:cb:26:11:5e:ee:d7:a7:56:a5:38:d3: fa:8d:e1:48:da:d4:83:1a:b3:48:a8:f8:5d:7d:31:9d:4d:7c: 97:00:ef:a8:55:ad:8a:10:9d:c4:e4:48:bb:2d:e8:d4:da:57: 3c:1a:02:b8:19:38:55:fa:b1:97:b6:25:07:f6:3d:c6:c8:cb: e9:02:4a:40:84:eb:ed:a8:9b:35:38:7d:f5:18:3d:42:ba:eb: 1d:75:9a:31:c8:6d:6c:dd:87:ec:38:fc:31:b3:ea:01:ce:1e: bf:0a:fd:01:62:c1:9d:74:84:79:71:82:35:e3:c8:b5:63:98: 50:79:d3:b8:17:47:6c:a6:a9:85:03:07:82:2c:3b:d3:1e:0f: ce:b4:25:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNmEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTFGQTUxMTAvBgNVBAUTKEFCMTFFODA5RjJCQzY2QjBEMUU2MEI4QTMxRjg2QjVC ODJFMDBFMzkwHhcNMjUwNjI4MTQyNzAwWhcNMjUwNzA1MTQyNzAwWjAYMRYwFAYD VQQDEw02ODVmZmJiNS0yMDk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv9JiyDNkFnXPG2TNht9MCetqM5ae+DkDWhOGEbQt4NhVoKUB0rHKOsP1kAMz PfDhzW8FyWphefsZGj4KcQ66JJ245XpKYpqJuumntEt8DTL3O7eicRMypmPAVmAj Mmf5rxfBNrpBW09TthqC1v9qzTJKKTUW1coq+yiyg/AMqoxo80HHI5TB4djSiEi7 CE5KFgs8EVCFaFHRVvWKs07kuxbSEuor8XDLBsGs+mxCjfZyxqboWG7s9ODkdy0/ vI8AitC9mjUY3orupnBz1uDFQKxK77uTIfKLwzc/R5K59vJkPOuLDiALVE2gRIQ2 ELcKPfupz313Ff0+DfSR2VZHyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI2DDi/I meYqgf5s3GBrY6mkaRlVMB8GA1UdIwQYMBaAFKsR6AnyvGaw0eYLijH4a1uC4A45 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MUZBNS8wODA1NkNFNDFE ODcxMUUyOUREM0M2REUwOEIwMkNEMi9xeEhvQ2ZLOFpyRFI1Z3VLTWZoclc0TGdE amsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3F4SG9DZks4WnJEUjVndUtNZmhyVzRMZ0Rqay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MUZBNS8wODA1NkNFNDFEODcxMUUyOUREM0M2REUwOEIwMkNEMi9xeEhvQ2ZLOFpy RFI1Z3VLTWZoclc0TGdEamsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAnSnX2GCpyZ6G2Y26t2QdLC/7tqUZs92tvBhXUgMsk9he+AAy+ZX0a nVojOX42Hx6wuC/+s3ZFQSagiA9ZMFGQ6FqPLni8H5dq4NN0q6wJO79F//hymXJH VukLSnGlfZ6CLU5Ogcm0OsGUKpbGcCBbHSduyyYRXu7Xp1alONP6jeFI2tSDGrNI qPhdfTGdTXyXAO+oVa2KEJ3E5Ei7LejU2lc8GgK4GThV+rGXtiUH9j3GyMvpAkpA hOvtqJs1OH31GD1CuusddZoxyG1s3YfsOPwxs+oBzh6/Cv0BYsGddIR5cYI148i1 Y5hQedO4F0dspqmFAweCLDvTHg/OtCVU -----END CERTIFICATE-----Generated at Sun Jun 29 16:38:59 2025 by rpki-client