$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0EE/435C3EE009C011EEBE12583AC4F9AE02/qju6qgnV04M0CJnW1TqW1UBTnAE.mft File: qju6qgnV04M0CJnW1TqW1UBTnAE.mft (raw, json) Hash identifier: cIq/IcRPDW2VDqdEVu650OdwRhH8qQIVw1E8ZhpWsTk= Subject key identifier: 68:A6:4E:47:B4:B1:7B:03:61:1E:8C:0A:21:C5:45:8C:BF:FE:1D:94 Authority key identifier: AA:3B:BA:AA:09:D5:D3:83:34:08:99:D6:D5:3A:96:D5:40:53:9C:01 Certificate issuer: /CN=A915A0EE/serialNumber=AA3BBAAA09D5D383340899D6D53A96D540539C01 Certificate serial: 0169 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/qju6qgnV04M0CJnW1TqW1UBTnAE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A0EE/435C3EE009C011EEBE12583AC4F9AE02/qju6qgnV04M0CJnW1TqW1UBTnAE.mft Manifest number: 0169 Signing time: Sat 17 May 2025 03:31:20 +0000 Manifest this update: Sat 17 May 2025 03:31:19 +0000 Manifest next update: Sat 24 May 2025 03:31:19 +0000 Files and hashes: 1: qju6qgnV04M0CJnW1TqW1UBTnAE.crl (hash: q25DcY1gPzmYwhpUSFOvKHBKN4KSX1Yy9qUJUox3yck=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A0EE/435C3EE009C011EEBE12583AC4F9AE02/qju6qgnV04M0CJnW1TqW1UBTnAE.crl rsync://rpki.apnic.net/member_repository/A915A0EE/435C3EE009C011EEBE12583AC4F9AE02/qju6qgnV04M0CJnW1TqW1UBTnAE.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/qju6qgnV04M0CJnW1TqW1UBTnAE.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 May 2025 02:50:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 361 (0x169) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A0EE, serialNumber=AA3BBAAA09D5D383340899D6D53A96D540539C01 Validity Not Before: May 17 03:31:19 2025 GMT Not After : May 24 03:31:19 2025 GMT Subject: CN=68280308-e7dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:24:3a:bb:ee:f6:fd:cf:7f:b4:a4:72:63:cb: 99:40:ab:4f:40:78:a3:71:5a:4f:f2:f1:24:17:15: fb:c8:05:6f:c9:1d:ca:da:e9:17:b3:28:09:15:c0: b4:fc:ef:04:3b:be:b5:ed:fc:d0:70:25:7f:8f:b7: 24:f6:f2:24:65:fb:eb:f5:87:ad:9a:af:30:7e:dc: ba:ff:00:49:89:85:b4:47:83:19:91:85:80:5e:88: 15:b6:bb:c8:d8:cd:dc:36:1e:9d:b8:d8:64:2c:ee: ad:8a:4d:37:11:fa:1e:e0:37:a7:14:e0:a2:17:15: 59:2d:24:48:6f:dc:72:ec:4b:7e:0f:cf:7e:4a:59: 01:62:96:65:2e:c8:58:3b:fc:e2:eb:ab:bb:d4:fd: 0b:54:8f:2b:3c:f3:9a:80:3e:04:fa:26:ef:03:8e: 94:3d:0e:3d:95:6c:a4:c6:7c:34:e4:90:34:1a:62: c3:12:56:03:93:ca:10:82:a1:a3:1a:dd:a8:f0:04: 09:46:34:cb:22:b0:64:e9:c2:59:8a:d6:3c:6d:42: bf:57:f9:a9:68:30:5e:5f:73:a0:0c:ad:8a:bb:3b: 0a:58:0f:71:a7:81:dc:83:c3:13:25:49:72:11:31: e9:9a:99:b9:ae:8f:fd:6f:64:dc:16:20:6e:d4:72: 59:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:A6:4E:47:B4:B1:7B:03:61:1E:8C:0A:21:C5:45:8C:BF:FE:1D:94 X509v3 Authority Key Identifier: keyid:AA:3B:BA:AA:09:D5:D3:83:34:08:99:D6:D5:3A:96:D5:40:53:9C:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A0EE/435C3EE009C011EEBE12583AC4F9AE02/qju6qgnV04M0CJnW1TqW1UBTnAE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/qju6qgnV04M0CJnW1TqW1UBTnAE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0EE/435C3EE009C011EEBE12583AC4F9AE02/qju6qgnV04M0CJnW1TqW1UBTnAE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:1c:66:b3:64:15:30:6a:75:95:63:13:12:5c:e5:c7:e2:e5: 30:17:90:4f:a9:a7:68:cf:a7:68:3d:ba:01:b7:61:38:ee:6f: d2:7f:fc:4c:f8:8c:33:a8:f2:a8:dc:f7:90:24:32:aa:be:fc: 5a:38:8d:8d:aa:61:cc:9f:d6:2f:d8:d9:94:f2:6a:34:53:35: b1:87:cd:0c:26:98:e0:12:35:54:73:48:32:f3:e2:da:fb:2b: 2d:56:15:19:a9:07:98:3c:20:56:e3:5e:dc:31:c5:f5:87:da: 0d:23:35:90:25:76:70:ad:80:b2:14:7b:ae:0d:cf:0e:96:5f: 68:74:80:d2:c7:5d:2e:ea:16:ab:09:d9:9a:d7:b5:f7:19:20: ea:13:63:d7:bb:e5:59:da:ae:61:37:3f:ef:cc:8a:61:bc:1a: 10:1f:0a:c3:77:f8:87:e2:0e:ae:3f:c2:3b:e3:90:e3:45:18: af:dd:93:95:0d:6d:84:32:be:10:72:f9:57:f7:c1:07:b9:10: ba:a0:cb:3c:65:5e:6c:9c:04:a9:5d:6a:ed:62:2a:4a:c2:44: 9b:2e:b0:37:dc:2a:e6:22:ae:0e:16:36:fd:49:11:a5:79:2b: ba:0e:a9:f2:fb:e8:10:4f:82:5a:12:7c:62:8d:4a:54:19:53: a8:71:52:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUEwRUUxMTAvBgNVBAUTKEFBM0JCQUFBMDlENUQzODMzNDA4OTlENkQ1M0E5NkQ1 NDA1MzlDMDEwHhcNMjUwNTE3MDMzMTE5WhcNMjUwNTI0MDMzMTE5WjAYMRYwFAYD VQQDEw02ODI4MDMwOC1lN2RjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwSQ6u+72/c9/tKRyY8uZQKtPQHijcVpP8vEkFxX7yAVvyR3K2ukXsygJFcC0 /O8EO7617fzQcCV/j7ck9vIkZfvr9Yetmq8wfty6/wBJiYW0R4MZkYWAXogVtrvI 2M3cNh6duNhkLO6tik03Efoe4DenFOCiFxVZLSRIb9xy7Et+D89+SlkBYpZlLshY O/zi66u71P0LVI8rPPOagD4E+ibvA46UPQ49lWykxnw05JA0GmLDElYDk8oQgqGj Gt2o8AQJRjTLIrBk6cJZitY8bUK/V/mpaDBeX3OgDK2KuzsKWA9xp4Hcg8MTJUly ETHpmpm5ro/9b2TcFiBu1HJZBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGimTke0 sXsDYR6MCiHFRYy//h2UMB8GA1UdIwQYMBaAFKo7uqoJ1dODNAiZ1tU6ltVAU5wB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTBFRS80MzVDM0VFMDA5 QzAxMUVFQkUxMjU4M0FDNEY5QUUwMi9xanU2cWduVjA0TTBDSm5XMVRxVzFVQlRu QUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL3FqdTZxZ25WMDRNMENKblcxVHFXMVVCVG5BRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QTBFRS80MzVDM0VFMDA5QzAxMUVFQkUxMjU4M0FDNEY5QUUwMi9xanU2cWduVjA0 TTBDSm5XMVRxVzFVQlRuQUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtHGazZBUwanWVYxMSXOXH4uUwF5BPqadoz6doPboBt2E47m/Sf/xM +IwzqPKo3PeQJDKqvvxaOI2NqmHMn9Yv2NmU8mo0UzWxh80MJpjgEjVUc0gy8+La +ystVhUZqQeYPCBW417cMcX1h9oNIzWQJXZwrYCyFHuuDc8Oll9odIDSx10u6har Cdma17X3GSDqE2PXu+VZ2q5hNz/vzIphvBoQHwrDd/iH4g6uP8I745DjRRiv3ZOV DW2EMr4QcvlX98EHuRC6oMs8ZV5snASpXWrtYipKwkSbLrA33CrmIq4OFjb9SRGl eSu6Dqny++gQT4JaEnxijUpUGVOocVLJ -----END CERTIFICATE-----Generated at Sat May 17 13:25:07 2025 by rpki-client