$ rpki-client -vvf rpki.apnic.net/member_repository/A918CEC7/9BB4EAB4C87B11EDA6132A40C4F9AE02/QWGK4TpB-ZnFeQQotxb8rlQkqJE.mft File: QWGK4TpB-ZnFeQQotxb8rlQkqJE.mft (raw, json) Hash identifier: NoTengHXqFBfvIxfCcLyjxASldJys1J4Mtj8OGPGKXc= Subject key identifier: 79:53:18:8B:FE:B9:5F:BE:C8:66:00:90:C1:44:93:2F:4D:CD:DB:92 Authority key identifier: 41:61:8A:E1:3A:41:F9:99:C5:79:04:28:B7:16:FC:AE:54:24:A8:91 Certificate issuer: /CN=A918CEC7/serialNumber=41618AE13A41F999C5790428B716FCAE5424A891 Certificate serial: 01B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QWGK4TpB-ZnFeQQotxb8rlQkqJE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918CEC7/9BB4EAB4C87B11EDA6132A40C4F9AE02/QWGK4TpB-ZnFeQQotxb8rlQkqJE.mft Manifest number: 01B2 Signing time: Tue 01 Jul 2025 03:39:41 +0000 Manifest this update: Tue 01 Jul 2025 03:39:41 +0000 Manifest next update: Tue 08 Jul 2025 03:39:41 +0000 Files and hashes: 1: QWGK4TpB-ZnFeQQotxb8rlQkqJE.crl (hash: t2CKZKqskbdUUGBBE8TgVMjtT2nEErFq/clj5u6SMyk=) 2: CCD6FD9AC92E11ED931E6469C4F9AE02.roa (hash: ZnYmMUtT+u1669x0fGQAfdpMBiM/DgOuBzoEAwERP+Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918CEC7/9BB4EAB4C87B11EDA6132A40C4F9AE02/QWGK4TpB-ZnFeQQotxb8rlQkqJE.crl rsync://rpki.apnic.net/member_repository/A918CEC7/9BB4EAB4C87B11EDA6132A40C4F9AE02/QWGK4TpB-ZnFeQQotxb8rlQkqJE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QWGK4TpB-ZnFeQQotxb8rlQkqJE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 03:39:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 439 (0x1b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918CEC7, serialNumber=41618AE13A41F999C5790428B716FCAE5424A891 Validity Not Before: Jul 1 03:39:41 2025 GMT Not After : Jul 8 03:39:41 2025 GMT Subject: CN=6863587d-1ffa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:5c:a3:d6:10:2f:2e:3c:6b:fb:da:43:68:b5: fb:21:19:e4:c8:1c:0f:0f:e1:7e:c9:90:6c:87:24: 0c:ca:f7:4d:57:5c:d5:01:2f:b5:11:ee:56:e3:b6: c9:16:cb:9c:87:db:ea:2e:d3:1d:2e:24:ef:b9:7a: 0d:bd:9e:ba:f1:92:e4:9a:9b:76:c6:59:ac:8c:62: 1d:ca:35:de:f8:62:4b:69:cd:e7:04:40:cd:dc:1b: 16:74:62:b0:ab:d2:a0:61:36:f4:a8:a1:88:16:c0: 67:47:bf:14:9d:dd:cb:82:74:69:c3:ba:b6:d8:3f: de:71:79:7c:4d:27:33:e0:09:62:2c:6a:71:a3:bd: 15:ca:9a:85:f1:31:3a:a1:22:e6:67:08:14:ed:2e: a3:33:19:2c:31:8f:b4:82:c8:36:2c:70:98:aa:ef: f6:22:17:e7:09:6f:4e:ce:29:52:66:30:03:89:2c: 28:8e:27:65:d0:eb:2a:7d:81:f9:f8:63:57:6a:cd: 76:f9:fc:c6:38:67:20:2a:19:70:c8:42:f1:63:c1: 75:fe:db:a2:43:f5:ca:00:8a:24:3f:8b:48:e3:ea: fb:9e:f6:0c:0f:29:e0:78:e2:b3:98:62:4d:a3:b9: 08:2c:e0:11:3f:cb:3d:8f:a7:86:5e:d5:a3:66:06: 83:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:53:18:8B:FE:B9:5F:BE:C8:66:00:90:C1:44:93:2F:4D:CD:DB:92 X509v3 Authority Key Identifier: keyid:41:61:8A:E1:3A:41:F9:99:C5:79:04:28:B7:16:FC:AE:54:24:A8:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918CEC7/9BB4EAB4C87B11EDA6132A40C4F9AE02/QWGK4TpB-ZnFeQQotxb8rlQkqJE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QWGK4TpB-ZnFeQQotxb8rlQkqJE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CEC7/9BB4EAB4C87B11EDA6132A40C4F9AE02/QWGK4TpB-ZnFeQQotxb8rlQkqJE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:db:2b:57:7a:04:21:41:fb:92:a0:61:19:dd:2b:16:d9:e8: 53:e0:4c:7c:20:f3:8b:28:78:96:a8:bd:6d:56:8d:7a:cc:fe: d7:70:ef:8a:89:d5:3e:31:ed:81:23:c1:21:c7:7b:37:32:4f: 9d:4c:14:97:13:c4:a6:f8:d5:d0:5a:98:7b:9f:90:43:82:c0: 31:99:b7:95:b4:1e:ed:a7:2e:f0:8e:c5:49:f6:e9:a9:4a:41: 6e:96:c0:93:e2:89:16:f7:39:af:58:09:a8:3d:bd:4d:36:90: eb:08:c3:fe:07:20:50:e8:8c:8c:7b:20:81:62:ca:23:15:a6: 8e:44:4a:c4:92:4c:29:27:8f:28:57:27:89:0e:ed:3a:d6:f6: ab:8d:01:92:d5:34:b4:56:82:ae:ca:0d:89:d3:9d:f5:6e:6f: 35:8e:c7:cf:f2:f3:c4:b2:42:63:24:08:39:18:35:4b:f3:a8: e1:2e:a5:2a:4b:39:55:b1:d4:df:94:f5:33:3e:7f:62:a0:52: 58:27:51:35:57:8d:f9:82:46:19:42:cb:c2:e3:2b:ff:01:e2: 12:f1:37:1b:8d:56:e1:4c:b5:f3:a0:94:9e:6a:ee:6e:32:d0: 17:4b:b9:43:a4:44:44:84:8f:73:d4:e0:6a:89:89:b5:12:0d: 9d:1d:33:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OENFQzcxMTAvBgNVBAUTKDQxNjE4QUUxM0E0MUY5OTlDNTc5MDQyOEI3MTZGQ0FF NTQyNEE4OTEwHhcNMjUwNzAxMDMzOTQxWhcNMjUwNzA4MDMzOTQxWjAYMRYwFAYD VQQDEw02ODYzNTg3ZC0xZmZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5lyj1hAvLjxr+9pDaLX7IRnkyBwPD+F+yZBshyQMyvdNV1zVAS+1Ee5W47bJ Fsuch9vqLtMdLiTvuXoNvZ668ZLkmpt2xlmsjGIdyjXe+GJLac3nBEDN3BsWdGKw q9KgYTb0qKGIFsBnR78Und3LgnRpw7q22D/ecXl8TScz4AliLGpxo70VypqF8TE6 oSLmZwgU7S6jMxksMY+0gsg2LHCYqu/2IhfnCW9OzilSZjADiSwojidl0OsqfYH5 +GNXas12+fzGOGcgKhlwyELxY8F1/tuiQ/XKAIokP4tI4+r7nvYMDyngeOKzmGJN o7kILOARP8s9j6eGXtWjZgaDAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHlTGIv+ uV++yGYAkMFEky9NzduSMB8GA1UdIwQYMBaAFEFhiuE6QfmZxXkEKLcW/K5UJKiR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Q0VDNy85QkI0RUFCNEM4 N0IxMUVEQTYxMzJBNDBDNEY5QUUwMi9RV0dLNFRwQi1abkZlUVFvdHhiOHJsUWtx SkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FXR0s0VHBCLVpuRmVRUW90eGI4cmxRa3FKRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Q0VDNy85QkI0RUFCNEM4N0IxMUVEQTYxMzJBNDBDNEY5QUUwMi9RV0dLNFRwQi1a bkZlUVFvdHhiOHJsUWtxSkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBb2ytXegQhQfuSoGEZ3SsW2ehT4Ex8IPOLKHiWqL1tVo16zP7XcO+K idU+Me2BI8Ehx3s3Mk+dTBSXE8Sm+NXQWph7n5BDgsAxmbeVtB7tpy7wjsVJ9ump SkFulsCT4okW9zmvWAmoPb1NNpDrCMP+ByBQ6IyMeyCBYsojFaaORErEkkwpJ48o VyeJDu061varjQGS1TS0VoKuyg2J0531bm81jsfP8vPEskJjJAg5GDVL86jhLqUq SzlVsdTflPUzPn9ioFJYJ1E1V435gkYZQsvC4yv/AeIS8TcbjVbhTLXzoJSeau5u MtAXS7lDpEREhI9z1OBqiYm1Eg2dHTO8 -----END CERTIFICATE-----Generated at Wed Jul 2 23:50:37 2025 by rpki-client