$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/q2foL8hqrKgqz_jcNkXNcWEBP3Y.mft File: q2foL8hqrKgqz_jcNkXNcWEBP3Y.mft (raw, json) Hash identifier: La/2DEiPl9oA3BwpToDtRUbV9s0ZWs44P7koZ8pH7lk= Subject key identifier: 4D:3A:16:C6:B6:DF:47:62:CB:ED:3C:B5:61:E1:BB:E5:EB:77:80:55 Authority key identifier: AB:67:E8:2F:C8:6A:AC:A8:2A:CF:F8:DC:36:45:CD:71:61:01:3F:76 Certificate issuer: /CN=A91D1E4C/serialNumber=AB67E82FC86AACA82ACFF8DC3645CD7161013F76 Certificate serial: 0301 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2foL8hqrKgqz_jcNkXNcWEBP3Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/q2foL8hqrKgqz_jcNkXNcWEBP3Y.mft Manifest number: 0B13 Signing time: Sat 28 Jun 2025 20:28:00 +0000 Manifest this update: Sat 28 Jun 2025 20:27:59 +0000 Manifest next update: Sat 05 Jul 2025 20:27:59 +0000 Files and hashes: 1: q2foL8hqrKgqz_jcNkXNcWEBP3Y.crl (hash: cy7Rk7aPNAbPr62j1Ee8FEnYE9YD3m1CWVa1l6tujvQ=) 2: 743B3188E57211ECBC81A87EC4F9AE02.roa (hash: ukecD2pxHGlgKyIFMtJzbdcdaqfvaNOkIkVTe1ei8KE=) 3: FC358296CFA011EDA4AC5B18C4F9AE02.roa (hash: Kfs6t0RkTXatIBLPnXrK64Ffg/DQYtGVawG99/fXQls=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/q2foL8hqrKgqz_jcNkXNcWEBP3Y.crl rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/q2foL8hqrKgqz_jcNkXNcWEBP3Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2foL8hqrKgqz_jcNkXNcWEBP3Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 20:27:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 769 (0x301) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1E4C, serialNumber=AB67E82FC86AACA82ACFF8DC3645CD7161013F76 Validity Not Before: Jun 28 20:27:59 2025 GMT Not After : Jul 5 20:27:59 2025 GMT Subject: CN=6860504f-b9ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:5d:e8:1b:04:04:bb:56:dd:5c:6e:92:82:9d: 27:f5:7f:16:96:f9:2d:4e:cb:65:a5:c4:4f:79:d4: 43:cb:e9:69:59:54:8a:9b:aa:f0:9f:dc:43:f5:77: 7c:af:84:53:eb:6a:4d:c8:a0:bd:95:7e:41:c3:af: b4:d8:94:cf:d1:3b:34:03:18:11:8f:99:7d:24:6c: 76:ed:de:32:86:68:c3:f7:0f:3a:d9:b1:0e:bc:30: 63:1c:88:38:e3:39:8a:14:e1:18:02:12:98:79:7e: 8d:1e:e2:f5:9a:7e:cb:d9:b3:d7:70:7b:3c:53:0c: e8:0f:1d:f9:17:42:bd:10:99:ab:b9:01:c4:87:01: ff:23:6c:a8:01:ee:53:32:52:7a:8b:37:cf:a6:24: e3:85:92:81:45:96:3b:94:ce:eb:c4:9e:66:4e:23: 5b:89:5a:32:fc:93:96:62:3c:69:cf:38:06:08:71: e2:79:93:d7:47:7f:83:ee:b1:02:ad:9f:bd:0a:83: 24:69:3b:27:0a:8c:5a:0d:99:7f:18:df:bc:7c:78: d0:01:41:b9:64:dc:3e:46:5c:cb:24:c1:25:6e:96: 62:7b:d1:fc:bd:d4:14:d2:07:e9:f6:28:be:c9:79: d1:ac:c7:fa:8c:1c:c4:c6:e7:42:26:5d:f9:af:b5: 26:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:3A:16:C6:B6:DF:47:62:CB:ED:3C:B5:61:E1:BB:E5:EB:77:80:55 X509v3 Authority Key Identifier: keyid:AB:67:E8:2F:C8:6A:AC:A8:2A:CF:F8:DC:36:45:CD:71:61:01:3F:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/q2foL8hqrKgqz_jcNkXNcWEBP3Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2foL8hqrKgqz_jcNkXNcWEBP3Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/q2foL8hqrKgqz_jcNkXNcWEBP3Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:00:0d:14:90:0e:92:8d:96:37:e1:da:20:73:94:a4:06:07: 89:01:da:cb:69:a7:94:5f:b4:5d:9e:37:2d:95:cc:45:c8:99: 28:29:b5:41:93:f9:1b:49:ec:6a:af:b8:47:5b:5b:07:c9:1f: ea:83:4d:1e:8a:dd:dd:5d:68:21:51:1f:46:28:7f:50:6c:44: 18:8c:86:56:68:16:04:43:6e:ad:d1:12:09:34:a3:07:36:18: 2c:25:0e:8a:a9:08:e8:ae:fa:15:09:40:db:e4:60:80:24:66: cf:b6:77:23:14:83:23:ea:55:d7:37:8d:59:75:b6:c4:3e:8a: f0:ba:b3:4f:59:e9:f1:96:3a:61:e1:37:f3:a7:ed:d0:be:bb: 26:19:50:b1:d3:6d:3d:22:ae:be:3d:bd:8d:af:ca:1b:aa:f3: 7a:1a:cc:bc:f5:83:88:42:aa:53:97:fa:0a:eb:9c:18:e8:bb: 29:d7:c2:36:c0:dc:17:79:e8:a8:4c:a0:3a:b9:76:ce:b1:fe: b1:d9:8c:e4:5a:e1:fc:1f:b6:6a:4c:21:5b:10:40:1f:8f:36: 6c:ee:8c:ab:67:66:2f:05:fe:58:7d:58:0a:94:a1:f8:d9:81: b0:6f:23:0e:c0:75:c7:e2:b1:e9:7d:76:42:e3:89:1a:0d:76: d6:95:4a:41 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAwEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDFFNEMxMTAvBgNVBAUTKEFCNjdFODJGQzg2QUFDQTgyQUNGRjhEQzM2NDVDRDcx NjEwMTNGNzYwHhcNMjUwNjI4MjAyNzU5WhcNMjUwNzA1MjAyNzU5WjAYMRYwFAYD VQQDEw02ODYwNTA0Zi1iOWFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsF3oGwQEu1bdXG6Sgp0n9X8WlvktTstlpcRPedRDy+lpWVSKm6rwn9xD9Xd8 r4RT62pNyKC9lX5Bw6+02JTP0Ts0AxgRj5l9JGx27d4yhmjD9w862bEOvDBjHIg4 4zmKFOEYAhKYeX6NHuL1mn7L2bPXcHs8UwzoDx35F0K9EJmruQHEhwH/I2yoAe5T MlJ6izfPpiTjhZKBRZY7lM7rxJ5mTiNbiVoy/JOWYjxpzzgGCHHieZPXR3+D7rEC rZ+9CoMkaTsnCoxaDZl/GN+8fHjQAUG5ZNw+RlzLJMElbpZie9H8vdQU0gfp9ii+ yXnRrMf6jBzExudCJl35r7UmjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE06Fsa2 30diy+08tWHhu+Xrd4BVMB8GA1UdIwQYMBaAFKtn6C/IaqyoKs/43DZFzXFhAT92 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMUU0Qy83REFEQTU2Q0Q5 NEQxMUVBQTYwNEFDNTNDNEY5QUUwMi9xMmZvTDhocXJLZ3F6X2pjTmtYTmNXRUJQ M1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3EyZm9MOGhxcktncXpfamNOa1hOY1dFQlAzWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MUU0Qy83REFEQTU2Q0Q5NEQxMUVBQTYwNEFDNTNDNEY5QUUwMi9xMmZvTDhocXJL Z3F6X2pjTmtYTmNXRUJQM1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGAA0UkA6SjZY34dogc5SkBgeJAdrLaaeUX7RdnjctlcxFyJkoKbVB k/kbSexqr7hHW1sHyR/qg00eit3dXWghUR9GKH9QbEQYjIZWaBYEQ26t0RIJNKMH NhgsJQ6KqQjorvoVCUDb5GCAJGbPtncjFIMj6lXXN41ZdbbEPorwurNPWenxljph 4Tfzp+3QvrsmGVCx0209Iq6+Pb2Nr8obqvN6Gsy89YOIQqpTl/oK65wY6Lsp18I2 wNwXeeioTKA6uXbOsf6x2YzkWuH8H7ZqTCFbEEAfjzZs7oyrZ2YvBf5YfVgKlKH4 2YGwbyMOwHXH4rHpfXZC44kaDXbWlUpB -----END CERTIFICATE-----Generated at Sun Jun 29 16:36:44 2025 by rpki-client