$ rpki-client -vvf rpki.apnic.net/member_repository/A91F523F/56A4CB8AB05311EF9C2B8D3FC4F9AE02/q4PFkhuEDFQXM78Ucyl13UlzP_w.mft File: q4PFkhuEDFQXM78Ucyl13UlzP_w.mft (raw, json) Hash identifier: SS/n6ztuXQT6yvPKq99LffEmlWBsrhvrN4PWGx1hn8E= Subject key identifier: 88:D0:04:56:9D:55:1C:70:CE:35:BD:21:7C:E8:F5:89:AF:5C:29:28 Authority key identifier: AB:83:C5:92:1B:84:0C:54:17:33:BF:14:73:29:75:DD:49:73:3F:FC Certificate issuer: /CN=A91F523F/serialNumber=AB83C5921B840C541733BF14732975DD49733FFC Certificate serial: 6D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q4PFkhuEDFQXM78Ucyl13UlzP_w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F523F/56A4CB8AB05311EF9C2B8D3FC4F9AE02/q4PFkhuEDFQXM78Ucyl13UlzP_w.mft Manifest number: 6D Signing time: Tue 01 Jul 2025 07:41:10 +0000 Manifest this update: Tue 01 Jul 2025 07:41:09 +0000 Manifest next update: Tue 08 Jul 2025 07:41:09 +0000 Files and hashes: 1: q4PFkhuEDFQXM78Ucyl13UlzP_w.crl (hash: 1ZZDd4Ruj3OnPVmCQr2yJ+fcQZYAPeiujHLg592dXn8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F523F/56A4CB8AB05311EF9C2B8D3FC4F9AE02/q4PFkhuEDFQXM78Ucyl13UlzP_w.crl rsync://rpki.apnic.net/member_repository/A91F523F/56A4CB8AB05311EF9C2B8D3FC4F9AE02/q4PFkhuEDFQXM78Ucyl13UlzP_w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q4PFkhuEDFQXM78Ucyl13UlzP_w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 07:41:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 109 (0x6d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F523F, serialNumber=AB83C5921B840C541733BF14732975DD49733FFC Validity Not Before: Jul 1 07:41:09 2025 GMT Not After : Jul 8 07:41:09 2025 GMT Subject: CN=68639115-dc03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:54:2a:f6:64:21:91:09:6d:59:b5:b4:e5:b3: 2d:eb:d9:16:4e:7d:1d:47:14:97:dc:df:41:f6:ed: f3:66:12:c9:62:06:3f:34:cf:e9:33:74:fa:df:4f: ee:0b:a8:c5:6e:4c:13:e1:f3:6e:be:19:5e:b8:bb: 82:7e:c6:90:99:32:af:45:a5:2e:b9:4b:74:b9:20: 92:8e:87:66:ae:8f:84:0e:6e:ae:3e:31:ac:bf:7c: c5:12:ad:0a:f3:e0:a5:60:e1:2c:c6:10:8b:48:2a: 0d:04:b0:69:92:82:3e:9a:7c:74:53:3b:06:26:26: 99:9b:2e:5a:35:bc:c9:fc:d2:4e:e0:19:92:4b:b9: 48:00:14:49:05:7e:0c:80:45:62:a4:a4:ca:d4:1a: 02:ac:eb:a5:59:42:f8:2e:03:90:ba:a5:95:eb:c7: 4e:c8:83:32:7a:51:84:3f:29:84:50:3c:a2:3e:13: 05:6b:ba:c6:24:a0:36:19:be:1c:b0:33:7c:f6:37: 5b:c0:7d:13:54:32:a4:08:9b:57:45:07:02:90:5b: 76:91:c4:bc:2f:9f:1f:99:1f:92:56:7d:ff:ff:eb: fa:5f:f1:d1:7e:e1:ed:71:be:a9:8b:65:42:6b:30: aa:06:39:59:42:72:85:eb:2c:68:69:65:59:7d:df: cf:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:D0:04:56:9D:55:1C:70:CE:35:BD:21:7C:E8:F5:89:AF:5C:29:28 X509v3 Authority Key Identifier: keyid:AB:83:C5:92:1B:84:0C:54:17:33:BF:14:73:29:75:DD:49:73:3F:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F523F/56A4CB8AB05311EF9C2B8D3FC4F9AE02/q4PFkhuEDFQXM78Ucyl13UlzP_w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q4PFkhuEDFQXM78Ucyl13UlzP_w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F523F/56A4CB8AB05311EF9C2B8D3FC4F9AE02/q4PFkhuEDFQXM78Ucyl13UlzP_w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:90:d7:c3:e1:dd:cc:9f:9d:38:d0:5f:63:e0:d9:4b:a1:bd: 0f:9e:83:9d:fe:81:83:a7:04:33:23:46:13:e1:7c:4e:8b:d1: 0e:fd:9b:8a:69:b4:1a:c9:3c:a3:f8:d9:f4:de:47:7a:43:01: 0f:23:a4:57:de:29:96:64:44:64:ff:23:3e:f1:f7:ea:d7:9b: 0d:e9:9e:c3:57:f6:22:01:00:1b:08:5d:7c:24:e5:fc:31:c2: eb:59:7a:62:ab:57:ad:90:51:50:4a:8d:8a:3a:7d:84:5b:16: fd:92:b6:17:37:1a:ea:e8:86:15:07:75:af:cb:78:bb:0a:1d: c0:e2:1e:01:f1:fd:75:f8:48:ff:92:77:f7:ae:75:3b:9b:de: 6f:06:ce:a3:ab:f4:33:bf:03:96:03:f9:34:18:9e:1f:04:5b: 2e:4b:5b:d7:7c:c4:47:8f:80:82:3c:97:c9:01:ab:7f:b2:75: f3:28:d8:e1:1f:9e:e6:3f:0b:4c:64:8d:2b:be:ea:0e:51:55: e6:b4:43:06:9e:cf:de:23:5c:bc:7c:57:61:6b:29:c2:ce:ad: 09:f8:33:14:b6:49:d3:2e:ae:21:42:3e:f7:78:f1:b2:04:11: 3f:20:1f:96:bd:2b:84:3b:84:34:8b:96:a7:ea:da:d0:c8:9a: 20:53:62:32 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG NTIzRjExMC8GA1UEBRMoQUI4M0M1OTIxQjg0MEM1NDE3MzNCRjE0NzMyOTc1REQ0 OTczM0ZGQzAeFw0yNTA3MDEwNzQxMDlaFw0yNTA3MDgwNzQxMDlaMBgxFjAUBgNV BAMTDTY4NjM5MTE1LWRjMDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDxVCr2ZCGRCW1ZtbTlsy3r2RZOfR1HFJfc30H27fNmEsliBj80z+kzdPrfT+4L qMVuTBPh826+GV64u4J+xpCZMq9FpS65S3S5IJKOh2auj4QObq4+May/fMUSrQrz 4KVg4SzGEItIKg0EsGmSgj6afHRTOwYmJpmbLlo1vMn80k7gGZJLuUgAFEkFfgyA RWKkpMrUGgKs66VZQvguA5C6pZXrx07IgzJ6UYQ/KYRQPKI+EwVrusYkoDYZvhyw M3z2N1vAfRNUMqQIm1dFBwKQW3aRxLwvnx+ZH5JWff//6/pf8dF+4e1xvqmLZUJr MKoGOVlCcoXrLGhpZVl938+LAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUiNAEVp1V HHDONb0hfOj1ia9cKSgwHwYDVR0jBBgwFoAUq4PFkhuEDFQXM78Ucyl13UlzP/ww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY1MjNGLzU2QTRDQjhBQjA1 MzExRUY5QzJCOEQzRkM0RjlBRTAyL3E0UEZraHVFREZRWE03OFVjeWwxM1VselBf dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcTRQRmtodUVERlFYTTc4VWN5bDEzVWx6UF93LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY1 MjNGLzU2QTRDQjhBQjA1MzExRUY5QzJCOEQzRkM0RjlBRTAyL3E0UEZraHVFREZR WE03OFVjeWwxM1VselBfdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAB2Q18Ph3cyfnTjQX2Pg2UuhvQ+eg53+gYOnBDMjRhPhfE6L0Q79m4pp tBrJPKP42fTeR3pDAQ8jpFfeKZZkRGT/Iz7x9+rXmw3pnsNX9iIBABsIXXwk5fwx wutZemKrV62QUVBKjYo6fYRbFv2Sthc3GurohhUHda/LeLsKHcDiHgHx/XX4SP+S d/eudTub3m8GzqOr9DO/A5YD+TQYnh8EWy5LW9d8xEePgII8l8kBq3+ydfMo2OEf nuY/C0xkjSu+6g5RVea0Qwaez94jXLx8V2FrKcLOrQn4MxS2SdMuriFCPvd48bIE ET8gH5a9K4Q7hDSLlqfq2tDImiBTYjI= -----END CERTIFICATE-----Generated at Tue Jul 1 13:56:06 2025 by rpki-client