$ rpki-client -vvf rpki.apnic.net/member_repository/A91F77FC/FED90156AF3011E9AEE13E34C4F9AE02/q6TDlMi5vRUbOziWObjG_4BwSfI.mft File: q6TDlMi5vRUbOziWObjG_4BwSfI.mft (raw, json) Hash identifier: A0rvkF2iCAnHyZJfRZl8m/KtO30OrJlb1eoIe2+Eu2I= Subject key identifier: 18:0C:35:17:1F:A8:29:3F:52:F5:D1:62:80:05:91:94:28:F7:B0:F8 Authority key identifier: AB:A4:C3:94:C8:B9:BD:15:1B:3B:38:96:39:B8:C6:FF:80:70:49:F2 Certificate issuer: /CN=A91F77FC/serialNumber=ABA4C394C8B9BD151B3B389639B8C6FF807049F2 Certificate serial: 0E11 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q6TDlMi5vRUbOziWObjG_4BwSfI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F77FC/FED90156AF3011E9AEE13E34C4F9AE02/q6TDlMi5vRUbOziWObjG_4BwSfI.mft Manifest number: 0E08 Signing time: Wed 02 Jul 2025 18:03:39 +0000 Manifest this update: Wed 02 Jul 2025 18:03:38 +0000 Manifest next update: Wed 09 Jul 2025 18:03:38 +0000 Files and hashes: 1: q6TDlMi5vRUbOziWObjG_4BwSfI.crl (hash: ungAClrc7JpUfNsGGzZw+09h+DAROebNvojw04Y9n74=) 2: 70783ACCAF3411E99DF2F83EC4F9AE02.roa (hash: zDcQXuAykU10DhyikYZPwzsk10KGNkvQLJMhbZSIlBE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F77FC/FED90156AF3011E9AEE13E34C4F9AE02/q6TDlMi5vRUbOziWObjG_4BwSfI.crl rsync://rpki.apnic.net/member_repository/A91F77FC/FED90156AF3011E9AEE13E34C4F9AE02/q6TDlMi5vRUbOziWObjG_4BwSfI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q6TDlMi5vRUbOziWObjG_4BwSfI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 18:03:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3601 (0xe11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F77FC, serialNumber=ABA4C394C8B9BD151B3B389639B8C6FF807049F2 Validity Not Before: Jul 2 18:03:38 2025 GMT Not After : Jul 9 18:03:38 2025 GMT Subject: CN=6865747a-443a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:94:ad:45:ad:70:67:7f:75:cc:f6:1d:33:a5: f8:a3:9e:28:17:55:63:f4:ab:a3:d3:b1:f8:88:86: 4a:2a:f2:ac:fe:ad:0e:91:87:1f:43:95:b0:c8:f3: c1:0a:60:5b:24:44:a0:01:e1:9b:54:dc:77:46:de: c7:a2:08:47:c3:8c:8b:ab:54:42:fa:23:aa:1b:c0: 27:f8:6c:29:bc:97:d5:1d:64:39:83:ac:cb:5c:28: 6b:b5:fd:48:1d:71:90:21:da:bf:dd:3e:1a:cd:59: e3:f0:18:b4:11:d0:be:80:f0:46:50:83:0b:8a:5a: 73:03:a9:66:38:b4:92:97:f4:bc:24:b3:3f:29:3d: d4:dc:af:1b:c0:0c:1a:cc:00:e3:fe:7a:94:ab:2c: 0a:d8:29:6a:e6:0a:bd:be:ea:cd:99:9a:d7:4d:80: 7c:62:6d:8e:38:b0:e9:98:d9:06:a6:74:5b:50:3e: 61:19:17:33:bd:51:88:58:ce:b0:64:cb:9f:86:71: 7c:7f:35:27:b0:25:c7:1b:31:82:d5:85:0b:0c:3d: 5d:3d:fd:ed:31:43:70:d5:bf:2f:ff:0d:12:a8:53: 09:89:f2:ff:e7:95:1d:5b:67:6e:a4:02:ea:12:75: b5:79:96:90:25:3d:b3:05:59:f2:5d:dc:09:a4:74: 8e:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:0C:35:17:1F:A8:29:3F:52:F5:D1:62:80:05:91:94:28:F7:B0:F8 X509v3 Authority Key Identifier: keyid:AB:A4:C3:94:C8:B9:BD:15:1B:3B:38:96:39:B8:C6:FF:80:70:49:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F77FC/FED90156AF3011E9AEE13E34C4F9AE02/q6TDlMi5vRUbOziWObjG_4BwSfI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q6TDlMi5vRUbOziWObjG_4BwSfI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F77FC/FED90156AF3011E9AEE13E34C4F9AE02/q6TDlMi5vRUbOziWObjG_4BwSfI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:ae:64:d8:da:49:9b:01:cc:9d:f5:6f:09:90:e8:02:8e:ae: b2:82:cc:2a:45:df:b2:7a:b8:e1:2d:5a:26:dd:90:b0:44:98: b4:c8:23:d0:e7:0f:d0:3c:dd:88:1e:1c:65:84:7a:eb:1e:37: 52:2e:a5:d8:a8:f0:de:c3:df:78:3a:69:a0:03:83:e5:03:1d: 3a:96:ac:0c:eb:5d:83:51:af:63:fc:57:a2:cf:5e:99:9c:eb: d3:c4:83:e6:ab:71:bd:74:3d:62:47:9e:a5:cf:24:97:11:67: 22:69:14:57:5e:57:70:d9:43:b7:de:09:2e:d0:07:25:cc:e8: e5:27:67:25:4a:c4:69:82:92:c0:6b:95:55:e5:43:ad:88:c8: 5f:e3:1f:d6:c8:04:14:18:14:64:57:e1:87:4f:fe:db:cd:1c: 71:9d:f6:82:6d:8d:ba:e5:ec:99:a1:f4:0e:db:57:37:1f:5c: 21:b0:35:36:0e:99:14:59:0c:9b:a1:5b:88:ca:82:1b:0b:97: ae:e0:16:74:99:ec:21:47:8a:0f:42:a1:c2:5c:ae:45:25:c1: e6:89:ed:33:4b:9a:50:9e:ed:b8:67:c4:df:49:d0:98:a4:d2: 90:e9:2c:27:b6:bd:cb:7f:f8:e2:28:f6:7a:e9:cc:78:b6:f1: 54:8d:c9:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDhEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjc3RkMxMTAvBgNVBAUTKEFCQTRDMzk0QzhCOUJEMTUxQjNCMzg5NjM5QjhDNkZG ODA3MDQ5RjIwHhcNMjUwNzAyMTgwMzM4WhcNMjUwNzA5MTgwMzM4WjAYMRYwFAYD VQQDEw02ODY1NzQ3YS00NDNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvJStRa1wZ391zPYdM6X4o54oF1Vj9Kuj07H4iIZKKvKs/q0OkYcfQ5WwyPPB CmBbJESgAeGbVNx3Rt7HoghHw4yLq1RC+iOqG8An+GwpvJfVHWQ5g6zLXChrtf1I HXGQIdq/3T4azVnj8Bi0EdC+gPBGUIMLilpzA6lmOLSSl/S8JLM/KT3U3K8bwAwa zADj/nqUqywK2Clq5gq9vurNmZrXTYB8Ym2OOLDpmNkGpnRbUD5hGRczvVGIWM6w ZMufhnF8fzUnsCXHGzGC1YULDD1dPf3tMUNw1b8v/w0SqFMJifL/55UdW2dupALq EnW1eZaQJT2zBVnyXdwJpHSO/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBgMNRcf qCk/UvXRYoAFkZQo97D4MB8GA1UdIwQYMBaAFKukw5TIub0VGzs4ljm4xv+AcEny MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzdGQy9GRUQ5MDE1NkFG MzAxMUU5QUVFMTNFMzRDNEY5QUUwMi9xNlREbE1pNXZSVWJPemlXT2JqR180QndT ZkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3E2VERsTWk1dlJVYk96aVdPYmpHXzRCd1NmSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzdGQy9GRUQ5MDE1NkFGMzAxMUU5QUVFMTNFMzRDNEY5QUUwMi9xNlREbE1pNXZS VWJPemlXT2JqR180QndTZkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2rmTY2kmbAcyd9W8JkOgCjq6ygswqRd+yerjhLVom3ZCwRJi0yCPQ 5w/QPN2IHhxlhHrrHjdSLqXYqPDew994OmmgA4PlAx06lqwM612DUa9j/Feiz16Z nOvTxIPmq3G9dD1iR56lzySXEWciaRRXXldw2UO33gku0AclzOjlJ2clSsRpgpLA a5VV5UOtiMhf4x/WyAQUGBRkV+GHT/7bzRxxnfaCbY265eyZofQO21c3H1whsDU2 DpkUWQyboVuIyoIbC5eu4BZ0mewhR4oPQqHCXK5FJcHmie0zS5pQnu24Z8TfSdCY pNKQ6Swntr3Lf/jiKPZ66cx4tvFUjckQ -----END CERTIFICATE-----Generated at Thu Jul 3 10:37:40 2025 by rpki-client