$ rpki-client -vvf rpki.apnic.net/member_repository/A9140436/1561BEDE765711EF8BFC7A11C4F9AE02/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.mft File: QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.mft (raw, json) Hash identifier: U/19UoOnkdBbPRhZe9e0ea/4QLzD6Lv87cMgFPYTbgE= Subject key identifier: 77:B3:D5:55:54:78:51:1A:98:AE:07:A7:8A:21:1A:19:D2:8C:C9:C2 Authority key identifier: 42:C2:CB:A4:7F:AD:38:9F:D1:8B:61:CA:E2:24:72:D6:1E:0E:A8:96 Certificate issuer: /CN=A9140436/serialNumber=42C2CBA47FAD389FD18B61CAE22472D61E0EA896 Certificate serial: 82 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9140436/1561BEDE765711EF8BFC7A11C4F9AE02/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.mft Manifest number: 7F Signing time: Thu 15 May 2025 05:59:23 +0000 Manifest this update: Thu 15 May 2025 05:59:22 +0000 Manifest next update: Thu 22 May 2025 05:59:22 +0000 Files and hashes: 1: QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.crl (hash: jwYq58+hbOqtsM1nd6S9pJK3GW6gGK1bbMgT6IWHgKg=) 2: 5F18EB127A7E11EF932E0B3EC4F9AE02.roa (hash: Rjd53QdMueDJga8fsZ46U1pxir9CvtJnZAWgLguQIlA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9140436/1561BEDE765711EF8BFC7A11C4F9AE02/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.crl rsync://rpki.apnic.net/member_repository/A9140436/1561BEDE765711EF8BFC7A11C4F9AE02/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 05:59:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 130 (0x82) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9140436, serialNumber=42C2CBA47FAD389FD18B61CAE22472D61E0EA896 Validity Not Before: May 15 05:59:22 2025 GMT Not After : May 22 05:59:22 2025 GMT Subject: CN=682582bb-6a50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:63:3f:97:d9:dc:de:e5:8a:ea:3a:85:c2:91: 2b:a0:bc:1b:76:42:61:06:02:52:65:96:44:aa:16: f1:f9:37:76:ee:85:c4:58:c0:a5:e3:97:22:94:bc: 3b:28:6b:ef:e9:75:4c:d8:b3:93:a0:71:b6:e6:b5: 2f:39:b3:0b:90:1f:6c:bf:54:18:b4:2b:0c:88:09: fc:a6:56:93:bd:5c:e4:96:28:c9:c8:c7:22:d4:a6: ac:33:03:22:96:32:74:c2:b8:49:d8:db:f6:bb:82: f1:8c:0e:d6:7a:a1:25:f1:64:b4:89:43:6f:2a:75: b4:f4:43:ff:39:b1:4e:4d:ca:a8:47:19:03:be:81: 6f:8b:76:63:1a:21:59:51:27:06:88:b3:c0:32:a4: fe:42:95:45:52:78:f9:ae:b8:57:de:0b:ed:46:84: a4:98:30:11:43:a5:24:df:03:6d:95:79:2d:1c:e7: 2b:c1:a6:49:82:eb:51:d6:99:51:22:8c:fa:32:63: 1b:b5:e8:a0:ec:2f:87:b0:d0:1d:e0:1f:72:3a:9f: fe:54:d9:a2:26:22:a1:e4:86:25:6f:ff:77:20:d9: 53:48:73:9d:39:b5:98:7a:e1:8b:2e:af:ca:ef:65: da:9c:21:b3:42:dc:58:44:1e:75:58:c5:17:4d:64: 27:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:B3:D5:55:54:78:51:1A:98:AE:07:A7:8A:21:1A:19:D2:8C:C9:C2 X509v3 Authority Key Identifier: keyid:42:C2:CB:A4:7F:AD:38:9F:D1:8B:61:CA:E2:24:72:D6:1E:0E:A8:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9140436/1561BEDE765711EF8BFC7A11C4F9AE02/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140436/1561BEDE765711EF8BFC7A11C4F9AE02/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:b7:58:0b:e8:f5:92:2b:34:de:00:69:9c:be:e7:85:9d:db: 78:23:85:7a:e4:c6:73:3a:3f:30:1a:51:2b:0a:77:40:36:5c: 2f:64:61:72:fd:51:ac:d4:8b:dc:e7:78:eb:2a:f3:f9:cb:c4: ed:d3:d2:0d:56:cc:24:cc:5b:8b:aa:85:1c:42:cc:3d:a7:10: 29:09:9e:05:01:be:c8:3f:bd:d3:95:c9:c2:8a:e0:00:b9:7b: 72:2b:cf:45:7a:4a:5f:3d:a5:d2:b6:5b:87:75:01:95:8f:86: eb:6c:90:92:63:79:d8:2a:7a:77:43:b8:d8:91:8a:0f:cc:c4: d3:f7:d7:10:f7:56:ad:ff:6f:a2:42:71:2f:bd:ec:c0:34:0d: 55:09:98:d2:26:28:4b:56:df:ba:75:c0:e2:7c:b5:ea:c1:22: a0:e1:af:0c:61:ac:4a:dd:e5:21:ae:70:13:e7:f0:46:25:7c: 8e:16:10:f6:d9:0b:a8:72:74:0d:b4:95:15:40:1a:79:23:5d: 4f:eb:03:9f:e5:b2:a0:b2:16:c2:f1:8f:de:91:86:13:a5:ef: 1e:b1:2e:59:ea:f3:48:86:2d:0a:33:12:cd:0b:c4:12:e0:66: 22:7c:39:8d:d8:2b:cd:5e:ad:66:8c:12:b3:02:96:ce:35:7d: 4f:9d:27:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDA0MzYxMTAvBgNVBAUTKDQyQzJDQkE0N0ZBRDM4OUZEMThCNjFDQUUyMjQ3MkQ2 MUUwRUE4OTYwHhcNMjUwNTE1MDU1OTIyWhcNMjUwNTIyMDU1OTIyWjAYMRYwFAYD VQQDEw02ODI1ODJiYi02YTUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7GM/l9nc3uWK6jqFwpEroLwbdkJhBgJSZZZEqhbx+Td27oXEWMCl45cilLw7 KGvv6XVM2LOToHG25rUvObMLkB9sv1QYtCsMiAn8plaTvVzklijJyMci1KasMwMi ljJ0wrhJ2Nv2u4LxjA7WeqEl8WS0iUNvKnW09EP/ObFOTcqoRxkDvoFvi3ZjGiFZ UScGiLPAMqT+QpVFUnj5rrhX3gvtRoSkmDARQ6Uk3wNtlXktHOcrwaZJgutR1plR Ioz6MmMbteig7C+HsNAd4B9yOp/+VNmiJiKh5IYlb/93INlTSHOdObWYeuGLLq/K 72XanCGzQtxYRB51WMUXTWQnIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHez1VVU eFEamK4Hp4ohGhnSjMnCMB8GA1UdIwQYMBaAFELCy6R/rTif0YthyuIkctYeDqiW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDQzNi8xNTYxQkVERTc2 NTcxMUVGOEJGQzdBMTFDNEY5QUUwMi9Rc0xMcEgtdE9KX1JpMkhLNGlSeTFoNE9x SlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1FzTExwSC10T0pfUmkySEs0aVJ5MWg0T3FKWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MDQzNi8xNTYxQkVERTc2NTcxMUVGOEJGQzdBMTFDNEY5QUUwMi9Rc0xMcEgtdE9K X1JpMkhLNGlSeTFoNE9xSlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCht1gL6PWSKzTeAGmcvueFndt4I4V65MZzOj8wGlErCndANlwvZGFy /VGs1Ivc53jrKvP5y8Tt09INVswkzFuLqoUcQsw9pxApCZ4FAb7IP73TlcnCiuAA uXtyK89FekpfPaXStluHdQGVj4brbJCSY3nYKnp3Q7jYkYoPzMTT99cQ91at/2+i QnEvvezANA1VCZjSJihLVt+6dcDifLXqwSKg4a8MYaxK3eUhrnAT5/BGJXyOFhD2 2QuocnQNtJUVQBp5I11P6wOf5bKgshbC8Y/ekYYTpe8esS5Z6vNIhi0KMxLNC8QS 4GYifDmN2CvNXq1mjBKzApbONX1PnSfw -----END CERTIFICATE-----Generated at Fri May 16 14:56:18 2025 by rpki-client