$ rpki-client -vvf rpki.apnic.net/member_repository/A911CB05/F0B66CF88A9A11EFB8AA5648C4F9AE02/QN3u8Bjq3N5NG_eNFUhR-Ni8JqU.mft File: QN3u8Bjq3N5NG_eNFUhR-Ni8JqU.mft (raw, json) Hash identifier: gRsbBVW0O3XNw6z3fHUidJ6r1PH5TCuMvfclzMFKJTw= Subject key identifier: 3A:31:5C:79:0E:CE:53:5B:3B:F2:DE:FA:71:39:3C:C5:B8:28:2E:2A Authority key identifier: 40:DD:EE:F0:18:EA:DC:DE:4D:1B:F7:8D:15:48:51:F8:D8:BC:26:A5 Certificate issuer: /CN=A911CB05/serialNumber=40DDEEF018EADCDE4D1BF78D154851F8D8BC26A5 Certificate serial: 6F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QN3u8Bjq3N5NG_eNFUhR-Ni8JqU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911CB05/F0B66CF88A9A11EFB8AA5648C4F9AE02/QN3u8Bjq3N5NG_eNFUhR-Ni8JqU.mft Manifest number: 6E Signing time: Tue 13 May 2025 06:04:09 +0000 Manifest this update: Tue 13 May 2025 06:04:08 +0000 Manifest next update: Tue 20 May 2025 06:04:08 +0000 Files and hashes: 1: QN3u8Bjq3N5NG_eNFUhR-Ni8JqU.crl (hash: oJt12ajbTJzVnpSk9ZGsSUWZd1J6hMYJYiwn+hrKhkc=) 2: E692CC2A8A9B11EFBC56AA85C4F9AE02.roa (hash: eCOiciHVF02QIJ92sCGpWxzFiJ0IghOmtXmYmm4vkYY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911CB05/F0B66CF88A9A11EFB8AA5648C4F9AE02/QN3u8Bjq3N5NG_eNFUhR-Ni8JqU.crl rsync://rpki.apnic.net/member_repository/A911CB05/F0B66CF88A9A11EFB8AA5648C4F9AE02/QN3u8Bjq3N5NG_eNFUhR-Ni8JqU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QN3u8Bjq3N5NG_eNFUhR-Ni8JqU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 06:04:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 111 (0x6f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911CB05, serialNumber=40DDEEF018EADCDE4D1BF78D154851F8D8BC26A5 Validity Not Before: May 13 06:04:08 2025 GMT Not After : May 20 06:04:08 2025 GMT Subject: CN=6822e0d8-012f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:72:8f:40:30:c9:16:f1:ce:d7:f3:90:45:2a: ca:db:5c:4c:42:8a:d9:78:ea:e1:be:56:b1:3d:ca: 08:a8:30:c2:bd:02:dd:df:10:10:6d:2e:95:21:88: 89:90:31:02:5a:48:25:48:c6:76:42:78:7f:28:80: b6:ca:9d:b2:9c:37:23:8a:62:df:f6:03:58:77:5c: f9:04:68:74:f4:4f:12:62:bc:eb:b4:f8:f3:97:3f: ec:be:e3:a1:07:8b:5b:65:bf:fd:4e:92:9f:a0:45: a8:c1:55:e8:e2:1c:72:1c:b3:ac:4c:c9:4c:b0:4f: bd:c1:ad:d2:ec:96:2b:dc:a9:aa:3e:5c:64:26:78: ae:00:74:81:4d:91:ae:4f:b5:52:d0:8b:63:f9:14: 4b:36:9b:f2:38:4e:64:f7:1b:2e:24:35:31:a6:c4: 06:26:07:e2:59:3e:24:ac:25:77:2d:94:3f:ee:ab: 16:a6:13:26:fd:27:df:9c:27:94:65:8c:2e:f7:80: dd:ad:bd:eb:b9:2f:54:1a:a0:0b:ea:17:e1:63:ad: 42:09:4d:03:c2:f9:1f:1d:43:d1:7a:8a:73:05:82: 2f:88:0c:9a:c8:d1:83:ff:8d:32:3f:d3:bc:d7:a3: 2c:5a:60:60:fe:a5:fa:91:1c:72:96:75:ea:20:cb: f4:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:31:5C:79:0E:CE:53:5B:3B:F2:DE:FA:71:39:3C:C5:B8:28:2E:2A X509v3 Authority Key Identifier: keyid:40:DD:EE:F0:18:EA:DC:DE:4D:1B:F7:8D:15:48:51:F8:D8:BC:26:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911CB05/F0B66CF88A9A11EFB8AA5648C4F9AE02/QN3u8Bjq3N5NG_eNFUhR-Ni8JqU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QN3u8Bjq3N5NG_eNFUhR-Ni8JqU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CB05/F0B66CF88A9A11EFB8AA5648C4F9AE02/QN3u8Bjq3N5NG_eNFUhR-Ni8JqU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d3:d9:2a:ce:42:d3:75:c0:3e:7f:f6:57:80:f9:13:10:71:27: 9c:1f:89:a5:bc:e4:7c:77:22:5f:01:be:96:3b:7e:01:de:48: dc:3f:33:7f:82:45:b1:ff:d0:54:8d:0a:12:93:cf:cf:fc:5c: 88:5a:09:e7:1a:40:cb:9c:ef:9f:a7:72:4b:8a:84:79:5b:f1: b4:93:eb:72:c6:79:5a:d0:5c:56:0c:0d:4f:dd:3c:32:aa:25: fd:80:c3:3f:a1:09:9e:3d:36:9b:7f:50:fe:ce:d5:e8:96:3c: 46:0b:86:98:5a:e7:20:6c:fb:3f:33:c7:7b:05:57:15:60:97: 2c:72:5d:90:f0:bd:1d:d5:0f:4d:dc:4a:a9:d4:28:bc:42:34: c2:f1:ab:54:3f:e1:92:73:32:42:7c:90:0a:fa:b8:44:f2:d9: 41:c0:bd:d2:4f:90:e0:52:36:d1:0a:ff:ae:63:a3:79:5c:85: e9:2e:44:41:c6:80:30:12:13:93:d2:2e:ff:b2:0f:4b:f1:24: 8e:e0:b3:ca:aa:e9:c2:67:39:50:b3:ad:78:43:7a:75:17:1f: 53:5d:e9:56:e2:bf:57:a6:2d:91:f5:08:f8:08:45:eb:02:9f: d8:cb:1c:64:40:eb:15:61:77:a5:cd:59:b2:82:08:d1:a2:72: 31:e6:0b:12 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx Q0IwNTExMC8GA1UEBRMoNDBEREVFRjAxOEVBRENERTREMUJGNzhEMTU0ODUxRjhE OEJDMjZBNTAeFw0yNTA1MTMwNjA0MDhaFw0yNTA1MjAwNjA0MDhaMBgxFjAUBgNV BAMTDTY4MjJlMGQ4LTAxMmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC1co9AMMkW8c7X85BFKsrbXExCitl46uG+VrE9ygioMMK9At3fEBBtLpUhiImQ MQJaSCVIxnZCeH8ogLbKnbKcNyOKYt/2A1h3XPkEaHT0TxJivOu0+POXP+y+46EH i1tlv/1Okp+gRajBVejiHHIcs6xMyUywT73BrdLslivcqao+XGQmeK4AdIFNka5P tVLQi2P5FEs2m/I4TmT3Gy4kNTGmxAYmB+JZPiSsJXctlD/uqxamEyb9J9+cJ5Rl jC73gN2tveu5L1QaoAvqF+FjrUIJTQPC+R8dQ9F6inMFgi+IDJrI0YP/jTI/07zX oyxaYGD+pfqRHHKWdeogy/QJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUOjFceQ7O U1s78t76cTk8xbgoLiowHwYDVR0jBBgwFoAUQN3u8Bjq3N5NG/eNFUhR+Ni8JqUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFDQjA1L0YwQjY2Q0Y4OEE5 QTExRUZCOEFBNTY0OEM0RjlBRTAyL1FOM3U4QmpxM041TkdfZU5GVWhSLU5pOEpx VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvUU4zdThCanEzTjVOR19lTkZVaFItTmk4SnFVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFD QjA1L0YwQjY2Q0Y4OEE5QTExRUZCOEFBNTY0OEM0RjlBRTAyL1FOM3U4QmpxM041 TkdfZU5GVWhSLU5pOEpxVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBANPZKs5C03XAPn/2V4D5ExBxJ5wfiaW85Hx3Il8BvpY7fgHeSNw/M3+C RbH/0FSNChKTz8/8XIhaCecaQMuc75+nckuKhHlb8bST63LGeVrQXFYMDU/dPDKq Jf2Awz+hCZ49Npt/UP7O1eiWPEYLhpha5yBs+z8zx3sFVxVglyxyXZDwvR3VD03c SqnUKLxCNMLxq1Q/4ZJzMkJ8kAr6uETy2UHAvdJPkOBSNtEK/65jo3lchekuREHG gDASE5PSLv+yD0vxJI7gs8qq6cJnOVCzrXhDenUXH1Nd6Vbiv1emLZH1CPgIResC n9jLHGRA6xVhd6XNWbKCCNGicjHmCxI= -----END CERTIFICATE-----Generated at Wed May 14 23:29:42 2025 by rpki-client