$ rpki-client -vvf rpki.apnic.net/member_repository/A917618F/D28D75C0C2DF11E8A64EFD2CC4F9AE02/QJOHCXJ0OMjB3r_9BBWQWEggxug.mft File: QJOHCXJ0OMjB3r_9BBWQWEggxug.mft (raw, json) Hash identifier: mzw8jxfwRzzApb9j9DnHxGG84t88cZQLxzqFsszcKIQ= Subject key identifier: 06:B9:41:B7:44:0D:A4:41:C5:65:1F:21:E8:46:DE:FA:2F:9A:06:06 Authority key identifier: 40:93:87:09:72:74:38:C8:C1:DE:BF:FD:04:15:90:58:48:20:C6:E8 Certificate issuer: /CN=A917618F/serialNumber=40938709727438C8C1DEBFFD041590584820C6E8 Certificate serial: 12AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJOHCXJ0OMjB3r_9BBWQWEggxug.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917618F/D28D75C0C2DF11E8A64EFD2CC4F9AE02/QJOHCXJ0OMjB3r_9BBWQWEggxug.mft Manifest number: 12A3 Signing time: Wed 14 May 2025 17:09:47 +0000 Manifest this update: Wed 14 May 2025 17:09:47 +0000 Manifest next update: Wed 21 May 2025 17:09:46 +0000 Files and hashes: 1: QJOHCXJ0OMjB3r_9BBWQWEggxug.crl (hash: d/MD9W8QNdmdXw4JqmUS/z6dxQ1xYdOclImm2eKbW2U=) 2: 2FE4DA1EC2E111E8A19CB72FC4F9AE02.roa (hash: HkQW1ELmD+iLXWXgNsuJGsFujvrmVSrBFXmyCQkIzxA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917618F/D28D75C0C2DF11E8A64EFD2CC4F9AE02/QJOHCXJ0OMjB3r_9BBWQWEggxug.crl rsync://rpki.apnic.net/member_repository/A917618F/D28D75C0C2DF11E8A64EFD2CC4F9AE02/QJOHCXJ0OMjB3r_9BBWQWEggxug.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJOHCXJ0OMjB3r_9BBWQWEggxug.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 17:09:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4780 (0x12ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917618F, serialNumber=40938709727438C8C1DEBFFD041590584820C6E8 Validity Not Before: May 14 17:09:47 2025 GMT Not After : May 21 17:09:46 2025 GMT Subject: CN=6824ce5b-3924 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c0:27:e7:73:97:df:1d:bc:2e:3d:14:29:08: d3:40:1a:8a:52:ce:90:7b:89:cf:9e:6d:ff:52:f7: bf:06:13:38:38:4d:21:29:de:31:0e:15:33:d5:0f: 6a:64:3b:21:9d:18:15:ce:d2:15:f7:99:f2:89:7b: d0:fc:cd:d5:fb:4e:b1:34:06:d5:c2:7a:c9:d7:4c: 90:f1:f3:c1:95:d2:87:24:d3:9f:99:44:cb:af:db: 1d:e4:28:bc:47:bc:40:5f:a0:cb:21:c5:8d:1a:f3: 06:2c:1c:b6:46:0d:30:60:c6:9c:04:6e:8d:d5:73: 34:e7:4e:06:4d:8a:6f:69:6c:ae:6a:42:f6:fd:7f: c4:2e:31:7c:9c:c2:d6:00:7e:7c:8f:16:25:6c:a4: b3:94:7e:d3:07:d3:78:88:d3:9c:2a:03:87:11:1b: 63:fa:c6:68:ad:13:86:16:df:37:38:33:b7:ab:1e: 94:b1:cc:d6:d2:70:e7:7f:7c:27:32:2c:d5:16:6e: ce:c3:04:ac:5f:ae:89:b7:f6:09:1b:be:22:ff:6a: 21:16:08:e1:ac:07:67:bc:20:40:55:62:a5:95:64: a5:2e:d8:ae:3a:de:ad:0c:da:4b:f8:eb:ac:82:1d: 69:a0:39:3e:72:79:4f:f4:ef:cf:fe:6c:a2:a8:15: c9:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:B9:41:B7:44:0D:A4:41:C5:65:1F:21:E8:46:DE:FA:2F:9A:06:06 X509v3 Authority Key Identifier: keyid:40:93:87:09:72:74:38:C8:C1:DE:BF:FD:04:15:90:58:48:20:C6:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917618F/D28D75C0C2DF11E8A64EFD2CC4F9AE02/QJOHCXJ0OMjB3r_9BBWQWEggxug.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJOHCXJ0OMjB3r_9BBWQWEggxug.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917618F/D28D75C0C2DF11E8A64EFD2CC4F9AE02/QJOHCXJ0OMjB3r_9BBWQWEggxug.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:65:1f:7f:eb:af:42:7d:ea:84:4c:cb:d1:75:7f:0c:67:d2: f3:6b:18:48:84:da:5f:b8:a4:a9:2e:74:7f:04:f4:82:cf:d3: 67:68:6c:42:4d:ef:2c:14:b0:9f:51:a1:e7:5a:04:81:85:6f: c7:14:f6:c2:de:04:cc:a8:f8:26:7e:9a:98:0b:b0:5b:6e:c2: f7:ad:ac:04:08:46:70:0a:e3:bf:4a:5f:3e:79:c3:1c:2d:8e: e7:6f:39:07:7e:a7:07:a1:28:a9:21:f1:f5:ce:df:65:14:08: ee:a5:e1:ae:bc:53:43:61:3d:d1:a1:73:82:3f:7b:c3:6a:06: d6:f1:cf:e5:28:68:26:2b:a7:82:40:0d:2b:b4:20:63:4c:90: ed:1d:a9:85:01:43:53:56:b9:a7:06:b1:48:35:00:a3:67:66: a7:fd:1c:1b:1f:f7:2d:9f:6d:4f:2d:3f:30:da:64:1a:64:de: cc:15:af:89:5b:cb:25:97:e0:67:17:97:db:1a:a6:5e:7b:e1: 0a:7b:fa:60:dd:fb:80:4c:9f:1e:1d:77:c2:2b:ee:4e:a2:ae: aa:e2:dd:ec:31:08:6c:da:1f:0e:f8:63:68:9a:10:0f:bb:ac: 43:55:d5:f9:5a:de:46:57:3d:27:a4:53:c2:8f:69:4d:32:80: 43:10:1d:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEqwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzYxOEYxMTAvBgNVBAUTKDQwOTM4NzA5NzI3NDM4QzhDMURFQkZGRDA0MTU5MDU4 NDgyMEM2RTgwHhcNMjUwNTE0MTcwOTQ3WhcNMjUwNTIxMTcwOTQ2WjAYMRYwFAYD VQQDEw02ODI0Y2U1Yi0zOTI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq8An53OX3x28Lj0UKQjTQBqKUs6Qe4nPnm3/Uve/BhM4OE0hKd4xDhUz1Q9q ZDshnRgVztIV95nyiXvQ/M3V+06xNAbVwnrJ10yQ8fPBldKHJNOfmUTLr9sd5Ci8 R7xAX6DLIcWNGvMGLBy2Rg0wYMacBG6N1XM0504GTYpvaWyuakL2/X/ELjF8nMLW AH58jxYlbKSzlH7TB9N4iNOcKgOHERtj+sZorROGFt83ODO3qx6UsczW0nDnf3wn MizVFm7OwwSsX66Jt/YJG74i/2ohFgjhrAdnvCBAVWKllWSlLtiuOt6tDNpL+Ous gh1poDk+cnlP9O/P/myiqBXJDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAa5QbdE DaRBxWUfIehG3vovmgYGMB8GA1UdIwQYMBaAFECThwlydDjIwd6//QQVkFhIIMbo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NjE4Ri9EMjhENzVDMEMy REYxMUU4QTY0RUZEMkNDNEY5QUUwMi9RSk9IQ1hKME9NakIzcl85QkJXUVdFZ2d4 dWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FKT0hDWEowT01qQjNyXzlCQldRV0VnZ3h1Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NjE4Ri9EMjhENzVDMEMyREYxMUU4QTY0RUZEMkNDNEY5QUUwMi9RSk9IQ1hKME9N akIzcl85QkJXUVdFZ2d4dWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4ZR9/669CfeqETMvRdX8MZ9LzaxhIhNpfuKSpLnR/BPSCz9NnaGxC Te8sFLCfUaHnWgSBhW/HFPbC3gTMqPgmfpqYC7BbbsL3rawECEZwCuO/Sl8+ecMc LY7nbzkHfqcHoSipIfH1zt9lFAjupeGuvFNDYT3RoXOCP3vDagbW8c/lKGgmK6eC QA0rtCBjTJDtHamFAUNTVrmnBrFINQCjZ2an/RwbH/ctn21PLT8w2mQaZN7MFa+J W8sll+BnF5fbGqZee+EKe/pg3fuATJ8eHXfCK+5Ooq6q4t3sMQhs2h8O+GNomhAP u6xDVdX5Wt5GVz0npFPCj2lNMoBDEB1g -----END CERTIFICATE-----Generated at Fri May 16 07:32:29 2025 by rpki-client