$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3989/3161C37EECD011EE8A224D49C4F9AE02/mke_QL1Ih-IkFTMnnn8dfypfb7s.mft File: mke_QL1Ih-IkFTMnnn8dfypfb7s.mft (raw, json) Hash identifier: O0ezJVRCHy88Gbmvb+jEF1zTqdUkOZiukafO03Y9wzI= Subject key identifier: DB:50:34:DD:DE:AE:35:41:3A:E8:15:70:BD:5A:10:EC:A3:2E:4E:48 Authority key identifier: 9A:47:BF:40:BD:48:87:E2:24:15:33:27:9E:7F:1D:7F:2A:5F:6F:BB Certificate issuer: /CN=A91F3989/serialNumber=9A47BF40BD4887E2241533279E7F1D7F2A5F6FBB Certificate serial: F3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mke_QL1Ih-IkFTMnnn8dfypfb7s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3989/3161C37EECD011EE8A224D49C4F9AE02/mke_QL1Ih-IkFTMnnn8dfypfb7s.mft Manifest number: EF Signing time: Thu 03 Jul 2025 05:31:15 +0000 Manifest this update: Thu 03 Jul 2025 05:31:14 +0000 Manifest next update: Thu 10 Jul 2025 05:31:14 +0000 Files and hashes: 1: mke_QL1Ih-IkFTMnnn8dfypfb7s.crl (hash: QizfgABPiLNivyH3ECX1q1c0mjZ+8xcpLDFQWAMgPuE=) 2: 56C9937C28C911F086331776C4F9AE02.roa (hash: sWZ/9dCaz3v4S72MvDmq/CPoi7rGClA8JUEmnKlDJLA=) 3: A146F2C2ECD011EE8891034AC4F9AE02.roa (hash: GmCMvjggTyREWsN9zghyP/K3sWSTqD1LSQ/qEU2884A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3989/3161C37EECD011EE8A224D49C4F9AE02/mke_QL1Ih-IkFTMnnn8dfypfb7s.crl rsync://rpki.apnic.net/member_repository/A91F3989/3161C37EECD011EE8A224D49C4F9AE02/mke_QL1Ih-IkFTMnnn8dfypfb7s.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mke_QL1Ih-IkFTMnnn8dfypfb7s.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 243 (0xf3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3989, serialNumber=9A47BF40BD4887E2241533279E7F1D7F2A5F6FBB Validity Not Before: Jul 3 05:31:14 2025 GMT Not After : Jul 10 05:31:14 2025 GMT Subject: CN=686615a2-db4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:67:d1:3b:7f:ba:9f:bd:a1:07:ba:34:a2:7c: de:37:73:6f:44:42:f2:2d:ec:16:3a:a7:5c:ed:d9: dd:95:e4:3c:f9:2c:a9:ca:85:51:1f:eb:1f:b1:67: 36:0b:68:68:a6:76:a5:24:a4:0e:f6:1c:d3:91:f2: d0:1a:ee:3b:9c:33:73:21:f5:08:18:21:8f:1d:ea: 79:88:f1:31:6a:3b:34:8d:c9:1a:53:20:1e:ed:a3: 24:96:06:10:e2:4c:86:5b:06:7f:2a:39:6b:91:d8: 67:0b:01:ed:fa:11:d9:53:82:ac:65:d4:69:a8:e8: 14:96:83:4a:62:e0:cb:10:cb:3e:b4:2c:2c:21:db: 6e:fa:59:8d:8c:af:56:b4:5c:60:be:b4:bb:16:34: 62:18:c9:c6:cd:07:ff:68:cb:66:14:99:6b:8c:89: e5:6d:b6:0e:db:c1:db:cc:27:f5:07:e8:50:13:31: b2:c8:b7:91:f6:5d:28:06:cb:74:c8:1d:cf:f0:ab: 9f:a0:34:d2:8e:60:33:82:e3:e8:ff:c0:1e:3b:9b: 82:54:25:9c:ad:19:08:3c:ff:49:4e:d4:9c:2d:18: d9:b6:61:3d:99:4d:b2:1f:85:06:b3:9a:f1:72:8e: d5:2d:74:00:3a:87:51:83:bb:fc:5a:3b:3c:cd:b1: 1b:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:50:34:DD:DE:AE:35:41:3A:E8:15:70:BD:5A:10:EC:A3:2E:4E:48 X509v3 Authority Key Identifier: keyid:9A:47:BF:40:BD:48:87:E2:24:15:33:27:9E:7F:1D:7F:2A:5F:6F:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3989/3161C37EECD011EE8A224D49C4F9AE02/mke_QL1Ih-IkFTMnnn8dfypfb7s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mke_QL1Ih-IkFTMnnn8dfypfb7s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3989/3161C37EECD011EE8A224D49C4F9AE02/mke_QL1Ih-IkFTMnnn8dfypfb7s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:ae:25:6e:6c:35:dc:0d:e9:8d:09:81:41:00:59:c5:40:9c: cf:97:68:f6:9e:0e:76:dc:3d:45:48:c4:0a:4f:d8:89:10:a0: 52:2a:87:db:1c:d3:14:6f:e5:be:74:ae:ae:13:52:73:a8:72: 26:c6:09:27:c0:04:94:52:ef:36:92:67:db:8c:88:90:79:17: 4b:d0:56:ec:a6:65:54:53:f5:6a:6d:a1:6e:cd:d3:90:ab:d3: 96:4a:95:17:c7:6e:df:a2:36:e3:c2:9f:ba:1a:76:87:0e:98: 94:55:ac:b1:11:63:3d:a8:63:7b:b0:c1:57:3b:8e:7b:a2:2e: c9:36:be:e4:2d:21:93:8b:98:fd:6f:25:c5:f4:e0:ec:13:38: ae:5a:b0:57:12:13:06:40:41:2d:72:ca:27:60:bd:77:e0:3f: 05:a9:15:56:c3:33:70:35:17:29:c8:71:5e:63:b5:6c:0b:d6: 2e:69:b4:8f:2d:44:b8:40:4d:3a:e7:ba:93:70:bf:95:16:b8: cb:89:92:f3:4b:a9:e9:e6:2b:29:ee:da:b1:72:a2:25:d5:d8: 57:e2:a6:9e:e2:17:7b:a9:fc:de:69:1d:ba:6d:d0:06:b4:ca: c3:1a:7b:2d:6a:d7:66:a6:55:c0:d2:7f:1e:48:80:eb:12:81: d2:8c:0b:b0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjM5ODkxMTAvBgNVBAUTKDlBNDdCRjQwQkQ0ODg3RTIyNDE1MzMyNzlFN0YxRDdG MkE1RjZGQkIwHhcNMjUwNzAzMDUzMTE0WhcNMjUwNzEwMDUzMTE0WjAYMRYwFAYD VQQDEw02ODY2MTVhMi1kYjRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1mfRO3+6n72hB7o0onzeN3NvRELyLewWOqdc7dndleQ8+SypyoVRH+sfsWc2 C2hopnalJKQO9hzTkfLQGu47nDNzIfUIGCGPHep5iPExajs0jckaUyAe7aMklgYQ 4kyGWwZ/KjlrkdhnCwHt+hHZU4KsZdRpqOgUloNKYuDLEMs+tCwsIdtu+lmNjK9W tFxgvrS7FjRiGMnGzQf/aMtmFJlrjInlbbYO28HbzCf1B+hQEzGyyLeR9l0oBst0 yB3P8KufoDTSjmAzguPo/8AeO5uCVCWcrRkIPP9JTtScLRjZtmE9mU2yH4UGs5rx co7VLXQAOodRg7v8Wjs8zbEbYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNtQNN3e rjVBOugVcL1aEOyjLk5IMB8GA1UdIwQYMBaAFJpHv0C9SIfiJBUzJ55/HX8qX2+7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzk4OS8zMTYxQzM3RUVD RDAxMUVFOEEyMjRENDlDNEY5QUUwMi9ta2VfUUwxSWgtSWtGVE1ubm44ZGZ5cGZi N3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL21rZV9RTDFJaC1Ja0ZUTW5ubjhkZnlwZmI3cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Mzk4OS8zMTYxQzM3RUVDRDAxMUVFOEEyMjRENDlDNEY5QUUwMi9ta2VfUUwxSWgt SWtGVE1ubm44ZGZ5cGZiN3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/riVubDXcDemNCYFBAFnFQJzPl2j2ng523D1FSMQKT9iJEKBSKofb HNMUb+W+dK6uE1JzqHImxgknwASUUu82kmfbjIiQeRdL0FbspmVUU/VqbaFuzdOQ q9OWSpUXx27fojbjwp+6GnaHDpiUVayxEWM9qGN7sMFXO457oi7JNr7kLSGTi5j9 byXF9ODsEziuWrBXEhMGQEEtcsonYL134D8FqRVWwzNwNRcpyHFeY7VsC9YuabSP LUS4QE0657qTcL+VFrjLiZLzS6np5isp7tqxcqIl1dhX4qae4hd7qfzeaR26bdAG tMrDGnstatdmplXA0n8eSIDrEoHSjAuw -----END CERTIFICATE-----Generated at Fri Jul 4 13:56:27 2025 by rpki-client