$ rpki-client -vvf rpki.apnic.net/member_repository/A9146179/54E04716AA7C11EFA33BFD77C4F9AE02/QFAqSwwf9GgvUuNAZARERSh9S7g.mft File: QFAqSwwf9GgvUuNAZARERSh9S7g.mft (raw, json) Hash identifier: wDTa+VnCBKlkhX2eSmjxG2MntTja3sa1rANTVk96A60= Subject key identifier: 2D:78:5B:E1:BD:FB:F3:44:F9:32:5C:3D:8E:D6:DA:C5:45:B8:47:E5 Authority key identifier: 40:50:2A:4B:0C:1F:F4:68:2F:52:E3:40:64:04:44:45:28:7D:4B:B8 Certificate issuer: /CN=A9146179/serialNumber=40502A4B0C1FF4682F52E34064044445287D4BB8 Certificate serial: 73 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFAqSwwf9GgvUuNAZARERSh9S7g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146179/54E04716AA7C11EFA33BFD77C4F9AE02/QFAqSwwf9GgvUuNAZARERSh9S7g.mft Manifest number: 72 Signing time: Sat 05 Jul 2025 07:09:17 +0000 Manifest this update: Sat 05 Jul 2025 07:09:17 +0000 Manifest next update: Sat 12 Jul 2025 07:09:17 +0000 Files and hashes: 1: QFAqSwwf9GgvUuNAZARERSh9S7g.crl (hash: u2bRx3UxkTu2ZM+aMi8EIT8wKU7ANfOJtKJI9KpYOc4=) 2: D2158BC4AA7C11EF9A76A779C4F9AE02.roa (hash: LaPRc5QCE3D/egNmbBmNccMoDV83OnAl0IeSttB5Fwk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146179/54E04716AA7C11EFA33BFD77C4F9AE02/QFAqSwwf9GgvUuNAZARERSh9S7g.crl rsync://rpki.apnic.net/member_repository/A9146179/54E04716AA7C11EFA33BFD77C4F9AE02/QFAqSwwf9GgvUuNAZARERSh9S7g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFAqSwwf9GgvUuNAZARERSh9S7g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 115 (0x73) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146179, serialNumber=40502A4B0C1FF4682F52E34064044445287D4BB8 Validity Not Before: Jul 5 07:09:17 2025 GMT Not After : Jul 12 07:09:17 2025 GMT Subject: CN=6868cf9d-109c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:fa:c8:0a:0a:72:34:b4:00:28:15:26:f2:ad: ce:aa:e9:2b:7e:fe:de:df:c5:86:11:81:2b:85:a3: aa:75:e6:fc:e0:a3:84:b8:5a:7e:aa:90:62:3e:31: 5f:04:29:ce:d5:0b:9b:31:9f:fb:d2:cd:e6:6c:b3: 10:bc:24:08:f7:6d:e5:e0:07:4e:ea:c9:6c:d9:7b: 15:6a:29:5a:c2:65:9e:51:53:1d:d2:47:9d:85:f1: 1c:34:ea:db:fd:52:9c:00:b2:ba:14:81:e5:8a:df: 08:32:21:a5:bd:3b:95:bb:a3:b0:54:f9:39:b7:8c: ea:84:73:09:69:6e:0a:82:4d:f2:45:dd:e9:d1:43: fb:56:d3:77:0c:7e:87:fb:f3:7e:de:dd:ca:ca:33: d9:bb:a3:e9:5d:07:b0:a9:3f:0a:ba:8c:af:ef:f7: f3:52:7d:32:11:d5:a7:ec:85:c2:6f:f6:db:8a:c5: c7:dc:32:5a:c8:9e:c6:d0:ba:03:9d:d1:89:a2:00: 5b:87:9e:2e:98:53:67:b2:4c:2a:59:bd:0f:5c:0f: 77:2f:6f:bb:5c:ad:9f:1e:6e:78:07:eb:7d:27:2e: f4:07:41:49:24:e1:0e:8a:c6:25:ab:9e:55:44:1f: e7:76:75:27:de:36:4f:31:b3:65:b8:49:76:94:d2: 5d:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:78:5B:E1:BD:FB:F3:44:F9:32:5C:3D:8E:D6:DA:C5:45:B8:47:E5 X509v3 Authority Key Identifier: keyid:40:50:2A:4B:0C:1F:F4:68:2F:52:E3:40:64:04:44:45:28:7D:4B:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146179/54E04716AA7C11EFA33BFD77C4F9AE02/QFAqSwwf9GgvUuNAZARERSh9S7g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFAqSwwf9GgvUuNAZARERSh9S7g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146179/54E04716AA7C11EFA33BFD77C4F9AE02/QFAqSwwf9GgvUuNAZARERSh9S7g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:05:0b:04:53:08:f2:71:cc:ce:b1:1d:f4:d1:e7:99:3b:26: 5b:d0:45:1a:e1:23:d6:30:67:c1:0c:1d:88:4d:9d:ae:23:79: 30:73:69:ac:34:94:5c:c3:c5:40:29:7f:b5:44:37:09:06:61: 16:92:8c:b3:6f:0a:7b:c5:37:a4:2f:51:60:58:c8:40:70:8d: 8a:c6:49:f3:92:f8:d5:e8:b9:a6:5e:fc:bb:e8:78:17:92:2e: eb:d9:7b:16:08:6d:96:36:23:00:bc:5b:fc:c8:f1:da:21:4c: 15:bf:ad:80:3c:fd:97:37:fd:2b:33:28:28:7b:34:ff:2d:65: 41:90:b1:93:cc:b5:1d:a4:8f:84:ae:b9:7c:14:52:60:9f:0c: fa:b1:86:09:ff:bc:0d:74:59:7c:e4:5c:28:05:55:97:ca:0a: 17:c2:7f:8a:30:94:2a:81:f6:f9:44:37:1b:00:76:7b:1d:c4: ee:44:44:2d:02:43:9f:7b:5a:ce:8e:fa:f1:75:55:d0:57:a1: 1f:a6:67:0f:66:26:9c:83:7b:27:c3:3c:61:fe:2c:ac:c1:36: e6:4b:2e:14:02:8e:d8:e5:cd:eb:bd:99:34:7d:dc:5b:54:08: 21:d9:69:9e:95:36:03:d3:c2:2d:44:1a:15:91:fa:d8:d7:34: 5d:e9:3b:fa -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBczANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NjE3OTExMC8GA1UEBRMoNDA1MDJBNEIwQzFGRjQ2ODJGNTJFMzQwNjQwNDQ0NDUy ODdENEJCODAeFw0yNTA3MDUwNzA5MTdaFw0yNTA3MTIwNzA5MTdaMBgxFjAUBgNV BAMTDTY4NjhjZjlkLTEwOWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC6+sgKCnI0tAAoFSbyrc6q6St+/t7fxYYRgSuFo6p15vzgo4S4Wn6qkGI+MV8E Kc7VC5sxn/vSzeZssxC8JAj3beXgB07qyWzZexVqKVrCZZ5RUx3SR52F8Rw06tv9 UpwAsroUgeWK3wgyIaW9O5W7o7BU+Tm3jOqEcwlpbgqCTfJF3enRQ/tW03cMfof7 837e3crKM9m7o+ldB7CpPwq6jK/v9/NSfTIR1afshcJv9tuKxcfcMlrInsbQugOd 0YmiAFuHni6YU2eyTCpZvQ9cD3cvb7tcrZ8ebngH630nLvQHQUkk4Q6KxiWrnlVE H+d2dSfeNk8xs2W4SXaU0l3VAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQULXhb4b37 80T5Mlw9jtbaxUW4R+UwHwYDVR0jBBgwFoAUQFAqSwwf9GgvUuNAZARERSh9S7gw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ2MTc5LzU0RTA0NzE2QUE3 QzExRUZBMzNCRkQ3N0M0RjlBRTAyL1FGQXFTd3dmOUdndlV1TkFaQVJFUlNoOVM3 Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUUZBcVN3d2Y5R2d2VXVOQVpBUkVSU2g5UzdnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ2 MTc5LzU0RTA0NzE2QUE3QzExRUZBMzNCRkQ3N0M0RjlBRTAyL1FGQXFTd3dmOUdn dlV1TkFaQVJFUlNoOVM3Zy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADIFCwRTCPJxzM6xHfTR55k7JlvQRRrhI9YwZ8EMHYhNna4jeTBzaaw0 lFzDxUApf7VENwkGYRaSjLNvCnvFN6QvUWBYyEBwjYrGSfOS+NXouaZe/LvoeBeS LuvZexYIbZY2IwC8W/zI8dohTBW/rYA8/Zc3/SszKCh7NP8tZUGQsZPMtR2kj4Su uXwUUmCfDPqxhgn/vA10WXzkXCgFVZfKChfCf4owlCqB9vlENxsAdnsdxO5ERC0C Q597Ws6O+vF1VdBXoR+mZw9mJpyDeyfDPGH+LKzBNuZLLhQCjtjlzeu9mTR93FtU CCHZaZ6VNgPTwi1EGhWR+tjXNF3pO/o= -----END CERTIFICATE-----Generated at Sat Jul 5 19:03:55 2025 by rpki-client