$ rpki-client -vvf rpki.apnic.net/member_repository/A9178C7A/AC45962E9C4011ED97008470C4F9AE02/QNuuLIMZi8b60lgpmII0VqN3Y6s.mft File: QNuuLIMZi8b60lgpmII0VqN3Y6s.mft (raw, json) Hash identifier: rjIFGVuMG9ScwHJ+ey1PfCkygvVonBKcqExoPG7Fsvk= Subject key identifier: 67:E8:5D:72:4D:12:58:C5:B1:C1:A8:88:65:41:E8:F8:E3:35:5A:3B Authority key identifier: 40:DB:AE:2C:83:19:8B:C6:FA:D2:58:29:98:82:34:56:A3:77:63:AB Certificate issuer: /CN=A9178C7A/serialNumber=40DBAE2C83198BC6FAD2582998823456A37763AB Certificate serial: 01B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QNuuLIMZi8b60lgpmII0VqN3Y6s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178C7A/AC45962E9C4011ED97008470C4F9AE02/QNuuLIMZi8b60lgpmII0VqN3Y6s.mft Manifest number: 01AF Signing time: Tue 13 May 2025 02:28:22 +0000 Manifest this update: Tue 13 May 2025 02:28:22 +0000 Manifest next update: Tue 20 May 2025 02:28:22 +0000 Files and hashes: 1: QNuuLIMZi8b60lgpmII0VqN3Y6s.crl (hash: EzXT+t0L4G6CV4HOpmbLPG/hagF9Yk4mpcnG60olcCo=) 2: 668242F49C4511EDB73A4379C4F9AE02.roa (hash: gmNihSedKpDGfcYPF1sadPjFdgvJvl9JTBA30x8f3SM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178C7A/AC45962E9C4011ED97008470C4F9AE02/QNuuLIMZi8b60lgpmII0VqN3Y6s.crl rsync://rpki.apnic.net/member_repository/A9178C7A/AC45962E9C4011ED97008470C4F9AE02/QNuuLIMZi8b60lgpmII0VqN3Y6s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QNuuLIMZi8b60lgpmII0VqN3Y6s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 02:28:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 435 (0x1b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178C7A, serialNumber=40DBAE2C83198BC6FAD2582998823456A37763AB Validity Not Before: May 13 02:28:22 2025 GMT Not After : May 20 02:28:22 2025 GMT Subject: CN=6822ae46-34bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:ea:cc:62:bf:7e:76:17:f6:05:85:52:49:09: a8:c4:bc:3d:63:92:f5:ce:55:38:91:2d:8e:d7:17: 27:4a:74:1f:7f:77:36:4e:96:ad:33:c9:c8:13:3a: 9c:ae:31:87:03:8e:4b:f4:7d:ad:6e:43:8f:d9:1b: e2:f4:69:a8:c8:15:4d:8d:f5:96:b9:45:0e:16:ee: 75:15:c1:ea:be:94:88:39:5e:12:24:86:30:ac:c2: 8d:ba:a0:5f:36:55:c8:02:b1:62:f3:b3:06:b4:0b: a0:6b:d8:21:81:5d:63:94:c2:53:5e:de:bf:ad:c1: 36:05:ae:37:27:0b:24:16:d7:b9:ed:03:7f:61:95: 98:33:aa:c1:1e:9c:90:c9:53:56:fd:9b:53:29:a4: 0e:5d:c9:83:f2:5a:7a:d0:d6:45:46:58:d4:d6:d9: 29:16:88:83:b2:c6:1b:5c:59:2f:f7:fd:82:91:c4: fe:25:ad:bd:9a:8e:58:4e:b3:25:db:d7:8d:b3:af: dd:85:aa:af:7a:7c:c9:31:30:f1:0c:aa:44:20:50: b8:80:b3:ce:89:47:f6:45:a8:c1:12:96:d1:89:a9: 9c:b8:9b:3f:b1:40:6a:ea:44:d5:30:dc:49:e2:3d: da:49:b9:d8:d1:2a:a9:1c:2e:4f:ea:80:f5:1b:cd: ed:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:E8:5D:72:4D:12:58:C5:B1:C1:A8:88:65:41:E8:F8:E3:35:5A:3B X509v3 Authority Key Identifier: keyid:40:DB:AE:2C:83:19:8B:C6:FA:D2:58:29:98:82:34:56:A3:77:63:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178C7A/AC45962E9C4011ED97008470C4F9AE02/QNuuLIMZi8b60lgpmII0VqN3Y6s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QNuuLIMZi8b60lgpmII0VqN3Y6s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178C7A/AC45962E9C4011ED97008470C4F9AE02/QNuuLIMZi8b60lgpmII0VqN3Y6s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:c0:df:54:f0:d3:b0:90:51:dc:aa:f8:ab:fd:6b:46:e1:38: 13:a5:bd:08:e2:1e:aa:99:ba:3a:fa:47:12:a8:4f:be:9a:f2: cf:ee:40:b4:5b:fe:d3:5c:7c:77:1e:2e:4d:bf:b1:dc:15:78: c7:73:e5:1c:73:b4:d7:54:f2:8c:84:ec:e8:ae:59:cf:3f:81: 3f:6f:e2:46:d9:d1:38:d9:83:30:f7:05:52:63:ae:a2:3a:35: 74:a6:49:36:97:f7:fb:04:9e:13:68:05:6d:07:05:32:86:65: 7e:70:3b:69:aa:40:b5:83:94:78:1c:78:f0:5c:c8:e0:e4:eb: 5e:68:8b:f5:ae:f5:0c:09:a2:3b:12:59:8c:86:ce:11:35:2b: 79:19:27:a9:55:fd:05:b9:2b:e9:48:ae:2a:77:5b:88:96:45: ee:99:59:2b:d5:08:df:52:3e:f4:0c:e4:c5:a0:01:ee:c2:67: 4e:dd:6c:0f:2c:c2:d4:24:e3:49:fc:9e:cb:2b:28:d3:fd:51: f4:f9:7f:76:4c:c5:54:cf:43:09:d8:b3:69:80:88:07:dd:5c: fe:2a:fe:35:87:69:37:98:56:00:5b:10:91:ee:c5:1e:25:bb: 3b:fb:6d:6e:50:fe:1b:72:56:5a:54:78:53:81:90:30:e4:e9: 2e:cf:55:ed -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzhDN0ExMTAvBgNVBAUTKDQwREJBRTJDODMxOThCQzZGQUQyNTgyOTk4ODIzNDU2 QTM3NzYzQUIwHhcNMjUwNTEzMDIyODIyWhcNMjUwNTIwMDIyODIyWjAYMRYwFAYD VQQDEw02ODIyYWU0Ni0zNGJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0OrMYr9+dhf2BYVSSQmoxLw9Y5L1zlU4kS2O1xcnSnQff3c2TpatM8nIEzqc rjGHA45L9H2tbkOP2Rvi9GmoyBVNjfWWuUUOFu51FcHqvpSIOV4SJIYwrMKNuqBf NlXIArFi87MGtAuga9ghgV1jlMJTXt6/rcE2Ba43JwskFte57QN/YZWYM6rBHpyQ yVNW/ZtTKaQOXcmD8lp60NZFRljU1tkpFoiDssYbXFkv9/2CkcT+Ja29mo5YTrMl 29eNs6/dhaqvenzJMTDxDKpEIFC4gLPOiUf2RajBEpbRiamcuJs/sUBq6kTVMNxJ 4j3aSbnY0SqpHC5P6oD1G83t/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGfoXXJN EljFscGoiGVB6PjjNVo7MB8GA1UdIwQYMBaAFEDbriyDGYvG+tJYKZiCNFajd2Or MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OEM3QS9BQzQ1OTYyRTlD NDAxMUVEOTcwMDg0NzBDNEY5QUUwMi9RTnV1TElNWmk4YjYwbGdwbUlJMFZxTjNZ NnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FOdXVMSU1aaThiNjBsZ3BtSUkwVnFOM1k2cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OEM3QS9BQzQ1OTYyRTlDNDAxMUVEOTcwMDg0NzBDNEY5QUUwMi9RTnV1TElNWmk4 YjYwbGdwbUlJMFZxTjNZNnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQwN9U8NOwkFHcqvir/WtG4TgTpb0I4h6qmbo6+kcSqE++mvLP7kC0 W/7TXHx3Hi5Nv7HcFXjHc+Ucc7TXVPKMhOzorlnPP4E/b+JG2dE42YMw9wVSY66i OjV0pkk2l/f7BJ4TaAVtBwUyhmV+cDtpqkC1g5R4HHjwXMjg5OteaIv1rvUMCaI7 ElmMhs4RNSt5GSepVf0FuSvpSK4qd1uIlkXumVkr1QjfUj70DOTFoAHuwmdO3WwP LMLUJONJ/J7LKyjT/VH0+X92TMVUz0MJ2LNpgIgH3Vz+Kv41h2k3mFYAWxCR7sUe Jbs7+21uUP4bclZaVHhTgZAw5Okuz1Xt -----END CERTIFICATE-----Generated at Tue May 13 04:44:44 2025 by rpki-client