$ rpki-client -vvf rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.mft File: rQWVkiI-gWrFPEM7llhG950wUjQ.mft (raw, json) Hash identifier: zwoM/P1HADjJadLWo48OVUgNmvRI02XPcB2H2lWUjFo= Subject key identifier: 58:05:E3:83:F1:15:05:A5:CD:74:9A:BA:25:F4:CF:30:A2:58:A4:39 Authority key identifier: AD:05:95:92:22:3E:81:6A:C5:3C:43:3B:96:58:46:F7:9D:30:52:34 Certificate issuer: /CN=A91BAEDC/serialNumber=AD059592223E816AC53C433B965846F79D305234 Certificate serial: 1BA4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQWVkiI-gWrFPEM7llhG950wUjQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.mft Manifest number: 1B8D Signing time: Sat 28 Jun 2025 16:09:14 +0000 Manifest this update: Sat 28 Jun 2025 16:09:13 +0000 Manifest next update: Sat 05 Jul 2025 16:09:13 +0000 Files and hashes: 1: rQWVkiI-gWrFPEM7llhG950wUjQ.crl (hash: h6B1DmJELfGb5Br4l8e2XyynBQzKXp1eFAgMUxJ0sfc=) 2: C85D0F7E477711EBB4044E31C4F9AE02.roa (hash: d9C+rmMNQQZELmuy5aIPVlKeATtzTC5JJ8WoYiMXlHI=) 3: C98708BE477711EBB4044E31C4F9AE02.roa (hash: V0J+K3DJnN+osBZ9dwTDUPh/HvfjgBzZSWLUoCMaCuE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.crl rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQWVkiI-gWrFPEM7llhG950wUjQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 16:09:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7076 (0x1ba4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BAEDC, serialNumber=AD059592223E816AC53C433B965846F79D305234 Validity Not Before: Jun 28 16:09:13 2025 GMT Not After : Jul 5 16:09:13 2025 GMT Subject: CN=686013a9-2b34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b1:14:04:b5:5f:8a:50:ce:24:3d:27:9b:2d: c1:8f:06:93:dd:52:04:6d:d7:a6:5f:31:4a:a2:29: a7:11:87:e3:b5:1c:6d:76:6a:34:77:24:c8:24:3f: 1a:8e:fc:c2:e9:9f:36:18:aa:65:54:0d:38:71:46: 50:c6:5c:ca:df:33:dd:c4:eb:3b:0f:99:3c:ba:a3: bb:73:74:0e:be:74:cd:22:c1:ff:b2:f8:9c:92:aa: 87:a3:5a:54:b9:79:0f:38:99:91:55:b6:48:c0:d7: e8:e6:ce:cd:45:36:61:88:37:3c:bd:b2:d4:54:a2: 7e:10:a0:6b:30:71:e4:30:4e:0c:fb:1a:9b:c2:d6: d1:bb:4c:7d:69:27:8d:6b:93:43:9d:55:f2:d1:21: 55:a1:a0:0e:64:46:46:72:56:43:55:db:69:ea:db: b8:1d:81:16:82:35:dd:38:65:b4:bb:12:29:5a:63: 28:76:ae:00:36:c7:d4:66:41:0a:f1:c1:69:02:ec: e7:d8:c7:90:f6:21:cc:f8:5a:a2:19:ea:2a:ec:36: 0a:ab:03:56:25:15:30:89:2b:0e:a1:29:72:50:cf: 0f:d1:58:9e:8b:ef:9f:f6:a7:a8:f9:75:b9:2f:24: 67:38:4a:b7:3b:56:33:86:2b:ab:bc:71:3d:8a:64: aa:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:05:E3:83:F1:15:05:A5:CD:74:9A:BA:25:F4:CF:30:A2:58:A4:39 X509v3 Authority Key Identifier: keyid:AD:05:95:92:22:3E:81:6A:C5:3C:43:3B:96:58:46:F7:9D:30:52:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQWVkiI-gWrFPEM7llhG950wUjQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:c6:62:65:75:a5:8e:b0:c6:2c:7d:ab:05:c0:b1:38:0c:00: f5:80:fb:db:e9:da:d7:a4:18:17:ac:cc:34:1a:90:ef:23:ef: 0e:c1:61:a3:2b:8f:c3:fa:07:dd:11:75:62:49:e9:ba:4e:65: 57:b7:e1:76:a1:16:e9:88:76:b6:da:8d:f3:e5:35:35:67:09: a8:9e:b0:1d:35:f3:80:b1:d3:9b:dc:0a:df:1c:a5:e8:ca:f8: d7:35:e6:1d:bd:69:f3:63:da:48:7b:1b:69:82:6e:85:4c:97: 26:2c:22:e8:ae:b8:be:c8:1b:5c:b9:26:3a:d5:0c:f8:35:e9: 4c:2d:4b:c7:92:aa:6b:07:de:39:ae:9e:6d:69:87:75:5d:e5: c6:b4:76:b0:92:d0:67:39:dc:a2:ab:d3:43:d7:26:73:bb:be: 39:5a:e7:ba:22:24:21:23:2a:6a:dc:e5:79:9e:81:5a:bf:15: b3:fe:30:f6:7d:1a:6e:ae:61:ac:96:36:21:39:02:72:80:b4: c9:6d:dd:79:6a:f2:3e:26:89:26:49:4f:fd:d0:72:31:66:04: ac:03:94:7e:44:a6:85:fc:f5:f2:c7:4f:b9:99:71:46:bb:56: 88:2b:27:c6:76:ef:79:32:6b:3e:e4:0c:80:8d:6a:98:73:7d: 28:30:71:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICG6QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkFFREMxMTAvBgNVBAUTKEFEMDU5NTkyMjIzRTgxNkFDNTNDNDMzQjk2NTg0NkY3 OUQzMDUyMzQwHhcNMjUwNjI4MTYwOTEzWhcNMjUwNzA1MTYwOTEzWjAYMRYwFAYD VQQDEw02ODYwMTNhOS0yYjM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvbEUBLVfilDOJD0nmy3BjwaT3VIEbdemXzFKoimnEYfjtRxtdmo0dyTIJD8a jvzC6Z82GKplVA04cUZQxlzK3zPdxOs7D5k8uqO7c3QOvnTNIsH/svickqqHo1pU uXkPOJmRVbZIwNfo5s7NRTZhiDc8vbLUVKJ+EKBrMHHkME4M+xqbwtbRu0x9aSeN a5NDnVXy0SFVoaAOZEZGclZDVdtp6tu4HYEWgjXdOGW0uxIpWmModq4ANsfUZkEK 8cFpAuzn2MeQ9iHM+FqiGeoq7DYKqwNWJRUwiSsOoSlyUM8P0Viei++f9qeo+XW5 LyRnOEq3O1YzhiurvHE9imSqRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFgF44Px FQWlzXSauiX0zzCiWKQ5MB8GA1UdIwQYMBaAFK0FlZIiPoFqxTxDO5ZYRvedMFI0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQUVEQy8yREMxQkFGMjA5 ODUxMUU3QjFGRkMyM0ZDNEY5QUUwMi9yUVdWa2lJLWdXckZQRU03bGxoRzk1MHdV alEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JRV1ZraUktZ1dyRlBFTTdsbGhHOTUwd1VqUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QUVEQy8yREMxQkFGMjA5ODUxMUU3QjFGRkMyM0ZDNEY5QUUwMi9yUVdWa2lJLWdX ckZQRU03bGxoRzk1MHdValEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxxmJldaWOsMYsfasFwLE4DAD1gPvb6drXpBgXrMw0GpDvI+8OwWGj K4/D+gfdEXViSem6TmVXt+F2oRbpiHa22o3z5TU1ZwmonrAdNfOAsdOb3ArfHKXo yvjXNeYdvWnzY9pIextpgm6FTJcmLCLorri+yBtcuSY61Qz4NelMLUvHkqprB945 rp5taYd1XeXGtHawktBnOdyiq9ND1yZzu745Wue6IiQhIypq3OV5noFavxWz/jD2 fRpurmGsljYhOQJygLTJbd15avI+JokmSU/90HIxZgSsA5R+RKaF/PXyx0+5mXFG u1aIKyfGdu95Mms+5AyAjWqYc30oMHEO -----END CERTIFICATE-----Generated at Mon Jun 30 14:53:46 2025 by rpki-client