$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/QmfPXQMASo_v3yE5XQ_oJFSLE8E.mft File: QmfPXQMASo_v3yE5XQ_oJFSLE8E.mft (raw, json) Hash identifier: hWBHRnRukefiK3wRHylXIX7NpY2zCxtbHhYlqY4UZkw= Subject key identifier: D1:B3:2B:74:F0:6C:E1:9F:82:49:CA:9B:CC:7D:FA:FB:89:F0:42:3A Authority key identifier: 42:67:CF:5D:03:00:4A:8F:EF:DF:21:39:5D:0F:E8:24:54:8B:13:C1 Certificate issuer: /CN=A91FCEB1/serialNumber=4267CF5D03004A8FEFDF21395D0FE824548B13C1 Certificate serial: 2099 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QmfPXQMASo_v3yE5XQ_oJFSLE8E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/QmfPXQMASo_v3yE5XQ_oJFSLE8E.mft Manifest number: 27A9 Signing time: Sat 28 Jun 2025 15:51:53 +0000 Manifest this update: Sat 28 Jun 2025 15:51:52 +0000 Manifest next update: Sat 05 Jul 2025 15:51:52 +0000 Files and hashes: 1: QmfPXQMASo_v3yE5XQ_oJFSLE8E.crl (hash: PHzyCf0sOgdVCfQ5Z45YNASp1rpiiflbFra6egARspQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/QmfPXQMASo_v3yE5XQ_oJFSLE8E.crl rsync://rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/QmfPXQMASo_v3yE5XQ_oJFSLE8E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QmfPXQMASo_v3yE5XQ_oJFSLE8E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 15:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8345 (0x2099) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FCEB1, serialNumber=4267CF5D03004A8FEFDF21395D0FE824548B13C1 Validity Not Before: Jun 28 15:51:52 2025 GMT Not After : Jul 5 15:51:52 2025 GMT Subject: CN=68600f99-3e92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:cb:cb:07:7e:31:a9:25:fc:a2:4b:e4:8d:52: a1:52:0e:3a:64:70:7c:22:8f:e3:59:ca:d1:07:49: f3:2f:1c:23:fc:e4:03:4f:46:1e:17:d7:b3:e6:b6: 3c:21:ac:c3:b5:54:8c:57:f9:20:5a:0a:56:4b:1a: bb:2a:bd:78:2d:a1:b5:62:f0:35:cf:e9:27:0f:33: c3:8e:9c:73:12:52:c9:51:9a:7b:19:95:19:09:32: d3:44:f2:34:a1:69:78:fd:9c:06:31:9d:7e:c8:b5: 45:72:c4:06:d6:1f:02:0e:56:3d:80:26:ef:86:ef: a7:0b:6b:d9:fa:46:45:65:e9:45:e8:5d:fc:70:c4: 27:ce:0e:85:5c:fa:90:d9:4c:a8:b7:23:a0:c2:1a: 2d:7e:62:56:50:14:bc:9f:7b:e9:c8:3c:17:31:5a: e5:8a:73:ee:65:a9:a7:24:63:76:59:10:42:99:88: 43:2c:87:87:f4:5e:0a:4b:d1:07:36:4d:08:f9:54: 07:71:89:16:31:37:9f:f8:a0:21:29:b8:56:a9:24: bc:d1:27:a6:1c:4a:02:75:f6:7e:e3:95:75:25:c3: 94:04:bc:2e:55:38:dd:36:a2:55:1c:c6:f7:d1:bf: 16:db:01:fd:7b:ce:89:02:51:4f:b3:4a:ea:6c:3b: 0f:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:B3:2B:74:F0:6C:E1:9F:82:49:CA:9B:CC:7D:FA:FB:89:F0:42:3A X509v3 Authority Key Identifier: keyid:42:67:CF:5D:03:00:4A:8F:EF:DF:21:39:5D:0F:E8:24:54:8B:13:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/QmfPXQMASo_v3yE5XQ_oJFSLE8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QmfPXQMASo_v3yE5XQ_oJFSLE8E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/QmfPXQMASo_v3yE5XQ_oJFSLE8E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:0b:c7:49:b0:97:08:2f:b2:57:5c:34:94:ed:c4:66:fe:54: 8c:5c:37:8f:7d:75:6c:7c:57:b8:8a:d8:2d:0f:47:b7:0d:32: c3:1b:cf:33:86:32:61:a1:37:72:be:a4:05:79:af:0e:0f:c5: 11:e7:06:c0:42:1f:12:d1:24:51:4e:0a:17:25:aa:d2:88:8f: 4c:2a:06:3e:35:62:55:fc:c8:b1:2d:8b:2b:31:c0:6b:cb:66: e8:f4:81:28:c6:e2:6c:e0:c6:b7:7e:74:2c:c9:e3:80:ec:37: 94:1f:67:da:b1:dc:8a:d2:27:70:a4:c4:47:e8:01:4d:af:cf: e2:1d:c4:b0:84:b9:fb:46:74:53:90:da:c6:76:cd:1c:30:01: 9c:89:1a:5f:8b:d7:c2:f4:14:15:db:f2:6f:da:a6:c3:cc:7d: f4:1e:6d:59:a7:2b:72:21:4b:97:78:8c:bb:cc:f7:5b:d3:63: ab:2d:a6:5e:df:6f:a0:f4:71:75:f3:9d:45:19:b1:17:24:3e: 64:cb:1e:10:16:26:29:d3:3b:62:74:0e:c6:eb:da:59:8d:1c: c7:03:9e:a7:01:d3:f8:38:6c:7d:5f:8b:fd:6a:c2:5e:10:41: 12:45:ec:78:d6:8e:78:26:cb:f2:50:27:e9:bd:0b:4f:c9:f4: 6b:9c:10:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIJkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkNFQjExMTAvBgNVBAUTKDQyNjdDRjVEMDMwMDRBOEZFRkRGMjEzOTVEMEZFODI0 NTQ4QjEzQzEwHhcNMjUwNjI4MTU1MTUyWhcNMjUwNzA1MTU1MTUyWjAYMRYwFAYD VQQDEw02ODYwMGY5OS0zZTkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxMvLB34xqSX8okvkjVKhUg46ZHB8Io/jWcrRB0nzLxwj/OQDT0YeF9ez5rY8 IazDtVSMV/kgWgpWSxq7Kr14LaG1YvA1z+knDzPDjpxzElLJUZp7GZUZCTLTRPI0 oWl4/ZwGMZ1+yLVFcsQG1h8CDlY9gCbvhu+nC2vZ+kZFZelF6F38cMQnzg6FXPqQ 2UyotyOgwhotfmJWUBS8n3vpyDwXMVrlinPuZamnJGN2WRBCmYhDLIeH9F4KS9EH Nk0I+VQHcYkWMTef+KAhKbhWqSS80SemHEoCdfZ+45V1JcOUBLwuVTjdNqJVHMb3 0b8W2wH9e86JAlFPs0rqbDsPjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNGzK3Tw bOGfgknKm8x9+vuJ8EI6MB8GA1UdIwQYMBaAFEJnz10DAEqP798hOV0P6CRUixPB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQ0VCMS9FRkI4NzVDODA4 QzkxMUU2OEM3Nzg4NzhDNEY5QUUwMi9RbWZQWFFNQVNvX3YzeUU1WFFfb0pGU0xF OEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FtZlBYUU1BU29fdjN5RTVYUV9vSkZTTEU4RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Q0VCMS9FRkI4NzVDODA4QzkxMUU2OEM3Nzg4NzhDNEY5QUUwMi9RbWZQWFFNQVNv X3YzeUU1WFFfb0pGU0xFOEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8C8dJsJcIL7JXXDSU7cRm/lSMXDePfXVsfFe4itgtD0e3DTLDG88z hjJhoTdyvqQFea8OD8UR5wbAQh8S0SRRTgoXJarSiI9MKgY+NWJV/MixLYsrMcBr y2bo9IEoxuJs4Ma3fnQsyeOA7DeUH2fasdyK0idwpMRH6AFNr8/iHcSwhLn7RnRT kNrGds0cMAGciRpfi9fC9BQV2/Jv2qbDzH30Hm1ZpytyIUuXeIy7zPdb02OrLaZe 32+g9HF1851FGbEXJD5kyx4QFiYp0ztidA7G69pZjRzHA56nAdP4OGx9X4v9asJe EEESRex41o54JsvyUCfpvQtPyfRrnBCF -----END CERTIFICATE-----Generated at Sun Jun 29 16:45:27 2025 by rpki-client