$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7363/FF8B4B6C1D8411E28CD33DDB08B02CD2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.mft File: qJfATeEvCm9Zwa0VCfCyCfpUOLM.mft (raw, json) Hash identifier: ActiHz9IwnW3cWDIMCJ5RkTK7TZavc2CzSPizbEm2+k= Subject key identifier: D8:B8:57:A5:BB:40:DB:17:73:3B:D3:C5:25:80:A5:0C:AF:F9:3A:48 Authority key identifier: A8:97:C0:4D:E1:2F:0A:6F:59:C1:AD:15:09:F0:B2:09:FA:54:38:B3 Certificate issuer: /CN=A91E7363/serialNumber=A897C04DE12F0A6F59C1AD1509F0B209FA5438B3 Certificate serial: 3503 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7363/FF8B4B6C1D8411E28CD33DDB08B02CD2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.mft Manifest number: 34C4 Signing time: Mon 30 Jun 2025 14:28:31 +0000 Manifest this update: Mon 30 Jun 2025 14:28:31 +0000 Manifest next update: Mon 07 Jul 2025 14:28:31 +0000 Files and hashes: 1: qJfATeEvCm9Zwa0VCfCyCfpUOLM.crl (hash: FwsoIZRUzZg/CN01g0FOFfTm8bgoCJJ+Mfcp933pxX4=) 2: 3F0948F82D1011ECB745DB85C4F9AE02.roa (hash: 9JsagnY9rpoPlsVMt4iVRdULuA/96P9hw1zuWPkbXY4=) 3: D93EA75AEE5C11E995881B1BC4F9AE02.roa (hash: yyuVGHEHdjgOJV3OL5d2WHtm2S0Tu6t1QPxDqH/At3U=) 4: 0D0AE5040AE711E89D0C5071C4F9AE02.roa (hash: 1QH0WR9EAexZONoxgrkCIP2BPHtzOEA7LLO//ildFDE=) 5: 2CDDCAB868AC11EDAA6C8F2AC4F9AE02.roa (hash: snUS5Nz9OXbIohiNncX/rLVlHKKNwvL/WKysUwbCRFM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7363/FF8B4B6C1D8411E28CD33DDB08B02CD2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.crl rsync://rpki.apnic.net/member_repository/A91E7363/FF8B4B6C1D8411E28CD33DDB08B02CD2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 14:28:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13571 (0x3503) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7363, serialNumber=A897C04DE12F0A6F59C1AD1509F0B209FA5438B3 Validity Not Before: Jun 30 14:28:31 2025 GMT Not After : Jul 7 14:28:31 2025 GMT Subject: CN=68629f0f-a824 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:bd:5d:c5:54:33:63:98:a1:b4:71:cf:d2:3e: 88:c9:b6:03:4d:e1:9e:93:5f:d3:44:47:bb:95:37: 3d:a2:a3:fd:46:fc:4d:81:2f:f3:3c:2f:93:a8:ca: 37:41:af:ed:db:9f:09:98:f7:a2:9a:df:a5:1a:4b: a6:eb:86:e3:a4:87:4f:1b:d5:75:9e:09:ec:c6:84: 70:a6:ef:c0:ec:96:86:c0:f8:32:75:9c:aa:ae:92: 16:1d:a9:40:b7:16:11:3b:80:38:61:12:2b:35:e5: ce:bb:66:a9:ac:06:b1:6f:80:e2:cd:b5:0d:56:48: 43:51:d6:e0:fc:e6:b2:d9:d1:c2:fc:17:f4:53:ad: c5:df:c8:d6:7a:8f:53:af:3e:6d:da:dc:51:97:ac: db:21:29:1c:f2:49:d9:46:09:74:24:5c:ee:fc:8e: 47:f5:e8:fc:ae:32:c5:09:16:01:01:a8:b7:c3:32: 67:ee:6c:b0:ce:1c:1d:65:f2:32:ad:14:64:b9:2d: a2:4f:a6:4e:8a:50:3c:95:9f:90:52:a0:e4:e8:34: fe:71:79:4e:08:ed:89:bc:6e:cf:1a:ac:60:73:e1: 7c:23:aa:8d:e6:25:b6:56:62:c0:e8:9f:b1:98:97: 94:dd:cd:8d:88:6d:9a:4e:33:b6:e1:94:bf:ba:19: 50:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:B8:57:A5:BB:40:DB:17:73:3B:D3:C5:25:80:A5:0C:AF:F9:3A:48 X509v3 Authority Key Identifier: keyid:A8:97:C0:4D:E1:2F:0A:6F:59:C1:AD:15:09:F0:B2:09:FA:54:38:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7363/FF8B4B6C1D8411E28CD33DDB08B02CD2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7363/FF8B4B6C1D8411E28CD33DDB08B02CD2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:b4:be:26:c5:aa:ae:7e:1d:fa:4b:31:22:26:19:23:7b:c6: ac:8e:86:07:e1:82:9b:d4:8a:a2:d6:68:95:5b:51:ac:7d:91: c6:09:0e:8b:19:ce:66:20:cc:af:aa:62:90:d6:10:21:2c:20: 34:db:3a:59:3c:24:94:c8:ef:d8:e7:c1:35:2f:08:c3:38:9e: 69:39:6b:11:82:43:0f:69:0f:d6:a1:85:bf:9d:81:3a:ff:26: 6c:7b:c6:d5:6f:77:20:e9:98:98:98:95:e7:3a:cb:57:1a:d3: 51:c3:e9:dd:35:69:24:cb:9c:01:6d:81:de:c1:5d:a2:22:a9: 50:12:cf:62:a9:b5:ee:fb:5d:9d:b5:48:4b:89:fc:82:15:84: 69:67:c2:6f:0f:fe:72:cb:90:4d:61:49:39:74:65:2b:cf:56: ae:98:55:00:53:08:ff:aa:b7:85:e5:d9:d7:15:b4:7e:7e:9b: 31:43:77:ec:ce:99:b4:33:30:17:bf:6b:cd:26:3c:11:90:b3: 4c:d6:93:21:a8:73:bf:9c:c0:86:a3:36:f8:d7:d0:21:84:41: 6b:70:5a:f5:b3:c9:11:81:bc:cb:01:5c:b3:0a:f3:ea:f3:f3: aa:ce:11:34:f3:a9:26:6a:3d:10:4b:7a:3e:df:e7:fd:f6:f5: 7e:33:d2:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNQMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTczNjMxMTAvBgNVBAUTKEE4OTdDMDRERTEyRjBBNkY1OUMxQUQxNTA5RjBCMjA5 RkE1NDM4QjMwHhcNMjUwNjMwMTQyODMxWhcNMjUwNzA3MTQyODMxWjAYMRYwFAYD VQQDEw02ODYyOWYwZi1hODI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvL1dxVQzY5ihtHHP0j6IybYDTeGek1/TREe7lTc9oqP9RvxNgS/zPC+TqMo3 Qa/t258JmPeimt+lGkum64bjpIdPG9V1ngnsxoRwpu/A7JaGwPgydZyqrpIWHalA txYRO4A4YRIrNeXOu2aprAaxb4DizbUNVkhDUdbg/Oay2dHC/Bf0U63F38jWeo9T rz5t2txRl6zbISkc8knZRgl0JFzu/I5H9ej8rjLFCRYBAai3wzJn7mywzhwdZfIy rRRkuS2iT6ZOilA8lZ+QUqDk6DT+cXlOCO2JvG7PGqxgc+F8I6qN5iW2VmLA6J+x mJeU3c2NiG2aTjO24ZS/uhlQvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNi4V6W7 QNsXczvTxSWApQyv+TpIMB8GA1UdIwQYMBaAFKiXwE3hLwpvWcGtFQnwsgn6VDiz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzM2My9GRjhCNEI2QzFE ODQxMUUyOENEMzNEREIwOEIwMkNEMi9xSmZBVGVFdkNtOVp3YTBWQ2ZDeUNmcFVP TE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FKZkFUZUV2Q205WndhMFZDZkN5Q2ZwVU9MTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzM2My9GRjhCNEI2QzFEODQxMUUyOENEMzNEREIwOEIwMkNEMi9xSmZBVGVFdkNt OVp3YTBWQ2ZDeUNmcFVPTE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4tL4mxaqufh36SzEiJhkje8asjoYH4YKb1Iqi1miVW1GsfZHGCQ6L Gc5mIMyvqmKQ1hAhLCA02zpZPCSUyO/Y58E1LwjDOJ5pOWsRgkMPaQ/WoYW/nYE6 /yZse8bVb3cg6ZiYmJXnOstXGtNRw+ndNWkky5wBbYHewV2iIqlQEs9iqbXu+12d tUhLifyCFYRpZ8JvD/5yy5BNYUk5dGUrz1aumFUAUwj/qreF5dnXFbR+fpsxQ3fs zpm0MzAXv2vNJjwRkLNM1pMhqHO/nMCGozb419AhhEFrcFr1s8kRgbzLAVyzCvPq 8/OqzhE086kmaj0QS3o+3+f99vV+M9LV -----END CERTIFICATE-----Generated at Tue Jul 1 03:16:08 2025 by rpki-client