$ rpki-client -vvf rpki.apnic.net/member_repository/A9164860/6BEAE0887B3911EE9E91845FC4F9AE02/QP0nMwGov44nCXYsZPSuom0q4LQ.mft File: QP0nMwGov44nCXYsZPSuom0q4LQ.mft (raw, json) Hash identifier: bZ7UxjoQfMGBrvKVewEQSbdLEhuLJQ0FeXyJulI8vdk= Subject key identifier: D1:3F:04:C7:E5:BD:0C:73:D6:53:79:D3:97:F5:03:B4:53:E8:B7:03 Authority key identifier: 40:FD:27:33:01:A8:BF:8E:27:09:76:2C:64:F4:AE:A2:6D:2A:E0:B4 Certificate issuer: /CN=A9164860/serialNumber=40FD273301A8BF8E2709762C64F4AEA26D2AE0B4 Certificate serial: 0126 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QP0nMwGov44nCXYsZPSuom0q4LQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9164860/6BEAE0887B3911EE9E91845FC4F9AE02/QP0nMwGov44nCXYsZPSuom0q4LQ.mft Manifest number: 0123 Signing time: Mon 12 May 2025 17:06:45 +0000 Manifest this update: Mon 12 May 2025 17:06:45 +0000 Manifest next update: Mon 19 May 2025 17:06:45 +0000 Files and hashes: 1: QP0nMwGov44nCXYsZPSuom0q4LQ.crl (hash: y1H2V71VhDxNbg8n0biEKKXHt2QYf97NzgSumx+RP+4=) 2: 26BFE5FE841611EEB980955AC4F9AE02.roa (hash: mR7p6xLL+eywaq3IEYtE5q1FtrVRKFEpVD4lZkW4skg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9164860/6BEAE0887B3911EE9E91845FC4F9AE02/QP0nMwGov44nCXYsZPSuom0q4LQ.crl rsync://rpki.apnic.net/member_repository/A9164860/6BEAE0887B3911EE9E91845FC4F9AE02/QP0nMwGov44nCXYsZPSuom0q4LQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QP0nMwGov44nCXYsZPSuom0q4LQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 17:06:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 294 (0x126) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9164860, serialNumber=40FD273301A8BF8E2709762C64F4AEA26D2AE0B4 Validity Not Before: May 12 17:06:45 2025 GMT Not After : May 19 17:06:45 2025 GMT Subject: CN=68222aa5-ee16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:3a:01:52:49:7e:79:3b:4c:08:88:8a:b2:02: 4d:01:02:29:72:dd:16:fe:df:0d:36:cf:c1:e3:c5: bb:66:ae:cd:8a:65:d7:bb:cd:20:c6:f0:d8:1f:16: 91:34:47:06:63:04:f7:67:d8:41:77:df:63:23:3f: 9a:16:8d:99:f4:24:3a:a4:4e:9f:e6:74:34:aa:90: 45:1c:83:56:49:49:a4:21:47:23:30:05:ea:e0:bf: e1:cc:a8:33:0a:bf:3d:35:33:28:8f:b7:1c:56:7c: cc:07:63:b7:de:45:53:f9:b2:1f:e9:23:59:3f:09: 8e:bf:56:1a:5c:07:93:4c:a1:bd:20:cb:1e:46:f5: 4a:d4:e2:1f:c6:22:51:58:81:b6:d9:0b:c8:a7:96: 07:4f:20:d8:ee:4f:fe:08:da:65:85:23:2d:14:58: 70:6b:1a:42:67:16:a5:00:f1:21:77:91:04:c8:ea: 2b:f6:80:f4:97:75:06:ec:06:8e:78:2f:19:42:f5: d9:24:94:20:d5:cb:06:ab:c5:a8:92:b0:0c:fc:89: a2:bd:14:af:9a:d7:b1:f7:cc:7d:eb:e8:a6:f3:27: 61:f5:11:04:eb:00:0c:c0:22:e4:60:60:57:d1:c7: 17:e0:c5:0c:9c:92:f4:0e:06:0c:30:e1:1e:26:33: 33:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:3F:04:C7:E5:BD:0C:73:D6:53:79:D3:97:F5:03:B4:53:E8:B7:03 X509v3 Authority Key Identifier: keyid:40:FD:27:33:01:A8:BF:8E:27:09:76:2C:64:F4:AE:A2:6D:2A:E0:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9164860/6BEAE0887B3911EE9E91845FC4F9AE02/QP0nMwGov44nCXYsZPSuom0q4LQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QP0nMwGov44nCXYsZPSuom0q4LQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164860/6BEAE0887B3911EE9E91845FC4F9AE02/QP0nMwGov44nCXYsZPSuom0q4LQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:2d:dd:48:0a:0b:62:f5:ce:91:ef:1c:26:0c:ec:de:26:43: 2d:b3:79:70:f4:02:26:94:d2:02:f6:43:97:a6:06:5a:53:73: f2:51:a5:94:ae:fc:cf:17:fe:6d:50:5d:dc:f2:82:71:bb:32: f3:07:6a:5f:4a:d6:e9:10:3e:77:34:c3:9b:9c:bb:d2:46:a1: d0:e6:5e:6c:f0:f3:8f:d3:a8:cc:2a:0c:06:93:67:3e:63:b9: df:af:44:e8:b7:b6:42:e6:ae:90:b8:2f:87:42:c3:fb:7e:2c: e5:49:bd:f1:c0:fc:94:b2:e5:79:2d:39:fb:89:4b:e4:fd:02: b5:bf:ad:cd:cc:eb:cd:9d:b4:93:2c:07:8f:5b:9f:1f:f9:b2: fa:6b:95:b7:2b:46:2a:32:f6:4d:5e:a6:6b:85:68:f3:43:4e: 3f:7f:81:45:b8:00:7d:31:2b:66:58:68:ab:09:15:17:55:a6: b2:c5:c5:24:b0:88:b0:f1:0d:6d:8d:17:1f:57:19:60:32:73: c5:bf:08:02:61:f4:d1:c1:09:48:fe:9f:09:b3:e9:b0:9c:25: 0a:73:18:5c:a1:3f:45:af:22:19:ab:da:6c:f7:66:73:3e:ec: b4:f9:09:9f:7e:3f:19:cc:f3:f4:b9:fd:2c:b9:fa:d7:3e:37: e0:cf:91:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjQ4NjAxMTAvBgNVBAUTKDQwRkQyNzMzMDFBOEJGOEUyNzA5NzYyQzY0RjRBRUEy NkQyQUUwQjQwHhcNMjUwNTEyMTcwNjQ1WhcNMjUwNTE5MTcwNjQ1WjAYMRYwFAYD VQQDEw02ODIyMmFhNS1lZTE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAszoBUkl+eTtMCIiKsgJNAQIpct0W/t8NNs/B48W7Zq7NimXXu80gxvDYHxaR NEcGYwT3Z9hBd99jIz+aFo2Z9CQ6pE6f5nQ0qpBFHINWSUmkIUcjMAXq4L/hzKgz Cr89NTMoj7ccVnzMB2O33kVT+bIf6SNZPwmOv1YaXAeTTKG9IMseRvVK1OIfxiJR WIG22QvIp5YHTyDY7k/+CNplhSMtFFhwaxpCZxalAPEhd5EEyOor9oD0l3UG7AaO eC8ZQvXZJJQg1csGq8WokrAM/ImivRSvmtex98x96+im8ydh9REE6wAMwCLkYGBX 0ccX4MUMnJL0DgYMMOEeJjMz4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNE/BMfl vQxz1lN505f1A7RT6LcDMB8GA1UdIwQYMBaAFED9JzMBqL+OJwl2LGT0rqJtKuC0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDg2MC82QkVBRTA4ODdC MzkxMUVFOUU5MTg0NUZDNEY5QUUwMi9RUDBuTXdHb3Y0NG5DWFlzWlBTdW9tMHE0 TFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1FQMG5Nd0dvdjQ0bkNYWXNaUFN1b20wcTRMUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NDg2MC82QkVBRTA4ODdCMzkxMUVFOUU5MTg0NUZDNEY5QUUwMi9RUDBuTXdHb3Y0 NG5DWFlzWlBTdW9tMHE0TFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCcLd1ICgti9c6R7xwmDOzeJkMts3lw9AImlNIC9kOXpgZaU3PyUaWU rvzPF/5tUF3c8oJxuzLzB2pfStbpED53NMObnLvSRqHQ5l5s8POP06jMKgwGk2c+ Y7nfr0Tot7ZC5q6QuC+HQsP7fizlSb3xwPyUsuV5LTn7iUvk/QK1v63NzOvNnbST LAePW58f+bL6a5W3K0YqMvZNXqZrhWjzQ04/f4FFuAB9MStmWGirCRUXVaayxcUk sIiw8Q1tjRcfVxlgMnPFvwgCYfTRwQlI/p8Js+mwnCUKcxhcoT9FryIZq9ps92Zz Puy0+Qmffj8ZzPP0uf0sufrXPjfgz5E2 -----END CERTIFICATE-----Generated at Tue May 13 04:33:05 2025 by rpki-client