$ rpki-client -vvf rpki.apnic.net/member_repository/A918CEC7/9BB4EAB4C87B11EDA6132A40C4F9AE02/QWGK4TpB-ZnFeQQotxb8rlQkqJE.mft File: QWGK4TpB-ZnFeQQotxb8rlQkqJE.mft (raw, json) Hash identifier: apO+vLE7wzbPXqsDl2ld1WuJ6Qqw5nOCYHgohIfCZaA= Subject key identifier: 54:6A:88:9C:72:86:B0:4C:4B:FD:21:25:D1:44:64:05:85:CD:B7:1B Authority key identifier: 41:61:8A:E1:3A:41:F9:99:C5:79:04:28:B7:16:FC:AE:54:24:A8:91 Certificate issuer: /CN=A918CEC7/serialNumber=41618AE13A41F999C5790428B716FCAE5424A891 Certificate serial: 019C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QWGK4TpB-ZnFeQQotxb8rlQkqJE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918CEC7/9BB4EAB4C87B11EDA6132A40C4F9AE02/QWGK4TpB-ZnFeQQotxb8rlQkqJE.mft Manifest number: 0198 Signing time: Tue 13 May 2025 02:43:17 +0000 Manifest this update: Tue 13 May 2025 02:43:16 +0000 Manifest next update: Tue 20 May 2025 02:43:16 +0000 Files and hashes: 1: QWGK4TpB-ZnFeQQotxb8rlQkqJE.crl (hash: 1d6Wy69Exy6lWYMg9EVoLX9G+nP+iNCqadLqsuOTz/k=) 2: CCD6FD9AC92E11ED931E6469C4F9AE02.roa (hash: bAtzTQ6ksGlovLoJiFT89uWNFpngQdeDkCpn1zXsqCU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918CEC7/9BB4EAB4C87B11EDA6132A40C4F9AE02/QWGK4TpB-ZnFeQQotxb8rlQkqJE.crl rsync://rpki.apnic.net/member_repository/A918CEC7/9BB4EAB4C87B11EDA6132A40C4F9AE02/QWGK4TpB-ZnFeQQotxb8rlQkqJE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QWGK4TpB-ZnFeQQotxb8rlQkqJE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 02:43:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 412 (0x19c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918CEC7, serialNumber=41618AE13A41F999C5790428B716FCAE5424A891 Validity Not Before: May 13 02:43:16 2025 GMT Not After : May 20 02:43:16 2025 GMT Subject: CN=6822b1c5-fbf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:76:fd:3f:42:f6:1b:7a:ed:4f:f1:f4:89:85: a5:88:e8:f4:2a:c4:02:a3:72:9c:ed:2c:9a:75:aa: 39:4b:9e:87:ba:75:1a:8c:a7:b3:a9:3e:65:84:3e: 0d:84:67:d0:a1:5a:ab:ed:67:9d:ff:ca:c4:d0:7a: 40:c1:c5:1e:bb:2d:2b:ae:60:24:b6:c0:9b:b1:38: 6d:e6:24:e6:b9:01:1f:5f:52:78:c0:5e:30:48:99: f3:dd:18:7a:d6:a8:1b:b1:bf:be:b5:eb:32:28:a5: 76:7c:64:8c:54:29:6f:f7:20:b2:e6:bd:ec:9c:5f: 07:36:75:dd:d8:eb:53:c0:f4:76:a5:59:5c:ec:41: 44:8f:58:9c:26:bb:c3:08:4c:92:f1:44:b7:0c:e6: 44:93:2a:f9:df:d3:20:9b:97:16:57:25:dc:ab:49: 34:ec:5d:e1:99:ea:8a:31:d1:4f:d8:81:16:6f:1a: f5:2a:07:bb:3c:a9:21:ba:79:09:84:83:a9:09:16: 39:46:2c:18:33:68:5b:4b:54:f0:1f:ce:5c:b2:47: 43:9d:d9:23:31:bb:c1:ad:52:6e:0c:d2:76:f1:99: 02:8b:b0:00:8a:ed:50:14:30:10:19:9a:80:3c:6b: 31:3b:59:a4:63:5a:0c:fa:b9:fc:3b:79:c2:1a:54: 11:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:6A:88:9C:72:86:B0:4C:4B:FD:21:25:D1:44:64:05:85:CD:B7:1B X509v3 Authority Key Identifier: keyid:41:61:8A:E1:3A:41:F9:99:C5:79:04:28:B7:16:FC:AE:54:24:A8:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918CEC7/9BB4EAB4C87B11EDA6132A40C4F9AE02/QWGK4TpB-ZnFeQQotxb8rlQkqJE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QWGK4TpB-ZnFeQQotxb8rlQkqJE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CEC7/9BB4EAB4C87B11EDA6132A40C4F9AE02/QWGK4TpB-ZnFeQQotxb8rlQkqJE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:53:97:ed:a1:7c:1d:b1:62:8c:12:74:4c:fb:b7:f0:ed:e8: 34:52:85:1d:62:99:5c:7c:39:29:01:28:21:73:12:e0:ff:e3: fd:cc:91:5e:a5:f9:ef:fd:b1:97:38:ba:ca:1c:6e:ad:41:a9: f5:8c:46:58:8a:09:d0:11:b2:26:65:24:f9:d1:b6:c8:e5:fd: ae:08:99:48:35:17:52:dc:e7:cd:f5:71:31:70:4d:8b:24:f1: b5:7c:e6:70:4f:0f:be:bd:dc:74:b2:a5:5f:75:7f:b5:35:58: f8:86:9e:79:32:b1:13:ec:f1:73:d2:19:27:c3:c3:bd:63:5f: 94:57:7b:a5:27:bd:36:75:24:29:74:05:23:89:50:9a:00:6b: fd:0c:43:41:27:3a:7b:6c:be:df:8a:2f:bc:f8:2d:2e:f2:81: 91:4c:2a:2f:a9:52:32:4f:48:2c:35:1f:40:c2:39:7d:ed:0e: 7b:ba:71:56:17:e3:7f:72:cd:39:73:4f:60:ca:2f:a4:1f:77: a0:8b:08:bf:c7:5b:42:bc:7c:b4:93:c6:09:fa:29:57:87:ec: 14:c3:05:ca:88:6c:08:7b:09:87:80:71:71:15:87:3b:4a:18: dc:66:f8:e0:c5:03:af:d1:35:f3:16:19:40:5b:07:02:96:0f: a6:d4:4a:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OENFQzcxMTAvBgNVBAUTKDQxNjE4QUUxM0E0MUY5OTlDNTc5MDQyOEI3MTZGQ0FF NTQyNEE4OTEwHhcNMjUwNTEzMDI0MzE2WhcNMjUwNTIwMDI0MzE2WjAYMRYwFAYD VQQDEw02ODIyYjFjNS1mYmYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtnb9P0L2G3rtT/H0iYWliOj0KsQCo3Kc7Syadao5S56HunUajKezqT5lhD4N hGfQoVqr7Wed/8rE0HpAwcUeuy0rrmAktsCbsTht5iTmuQEfX1J4wF4wSJnz3Rh6 1qgbsb++tesyKKV2fGSMVClv9yCy5r3snF8HNnXd2OtTwPR2pVlc7EFEj1icJrvD CEyS8US3DOZEkyr539Mgm5cWVyXcq0k07F3hmeqKMdFP2IEWbxr1Kge7PKkhunkJ hIOpCRY5RiwYM2hbS1TwH85cskdDndkjMbvBrVJuDNJ28ZkCi7AAiu1QFDAQGZqA PGsxO1mkY1oM+rn8O3nCGlQRswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFRqiJxy hrBMS/0hJdFEZAWFzbcbMB8GA1UdIwQYMBaAFEFhiuE6QfmZxXkEKLcW/K5UJKiR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Q0VDNy85QkI0RUFCNEM4 N0IxMUVEQTYxMzJBNDBDNEY5QUUwMi9RV0dLNFRwQi1abkZlUVFvdHhiOHJsUWtx SkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FXR0s0VHBCLVpuRmVRUW90eGI4cmxRa3FKRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Q0VDNy85QkI0RUFCNEM4N0IxMUVEQTYxMzJBNDBDNEY5QUUwMi9RV0dLNFRwQi1a bkZlUVFvdHhiOHJsUWtxSkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBoU5ftoXwdsWKMEnRM+7fw7eg0UoUdYplcfDkpASghcxLg/+P9zJFe pfnv/bGXOLrKHG6tQan1jEZYignQEbImZST50bbI5f2uCJlINRdS3OfN9XExcE2L JPG1fOZwTw++vdx0sqVfdX+1NVj4hp55MrET7PFz0hknw8O9Y1+UV3ulJ702dSQp dAUjiVCaAGv9DENBJzp7bL7fii+8+C0u8oGRTCovqVIyT0gsNR9Awjl97Q57unFW F+N/cs05c09gyi+kH3egiwi/x1tCvHy0k8YJ+ilXh+wUwwXKiGwIewmHgHFxFYc7 ShjcZvjgxQOv0TXzFhlAWwcClg+m1EpR -----END CERTIFICATE-----Generated at Wed May 14 16:30:52 2025 by rpki-client