$ rpki-client -vvf rpki.apnic.net/member_repository/A918DB4E/77E7F9A00CE511EAA20DDD82C4F9AE02/QnWN4MwM9iwq7uk-Du5nkDpQLMw.mft File: QnWN4MwM9iwq7uk-Du5nkDpQLMw.mft (raw, json) Hash identifier: U8u84w1L+r8UbFKcZ46o0lwqYZIPWL1HFvkd3/PzKtY= Subject key identifier: 84:32:79:2C:C0:B7:9F:5F:06:07:E1:4D:34:57:9B:D0:08:4D:15:90 Authority key identifier: 42:75:8D:E0:CC:0C:F6:2C:2A:EE:E9:3E:0E:EE:67:90:3A:50:2C:CC Certificate issuer: /CN=A918DB4E/serialNumber=42758DE0CC0CF62C2AEEE93E0EEE67903A502CCC Certificate serial: 0C63 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QnWN4MwM9iwq7uk-Du5nkDpQLMw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918DB4E/77E7F9A00CE511EAA20DDD82C4F9AE02/QnWN4MwM9iwq7uk-Du5nkDpQLMw.mft Manifest number: 0C3D Signing time: Sat 10 May 2025 18:28:15 +0000 Manifest this update: Sat 10 May 2025 18:28:14 +0000 Manifest next update: Sat 17 May 2025 18:28:14 +0000 Files and hashes: 1: QnWN4MwM9iwq7uk-Du5nkDpQLMw.crl (hash: hazbe2cU2QQBuzX3htup9Lcp5ec+jMFicnsrJIINoc8=) 2: CF3CF4A2DECD11EFA34A7C66C4F9AE02.roa (hash: WhFdwVA+Rqc9T4Pe4wg3jXjmM2B3Qv4g2BycMdAzMjs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918DB4E/77E7F9A00CE511EAA20DDD82C4F9AE02/QnWN4MwM9iwq7uk-Du5nkDpQLMw.crl rsync://rpki.apnic.net/member_repository/A918DB4E/77E7F9A00CE511EAA20DDD82C4F9AE02/QnWN4MwM9iwq7uk-Du5nkDpQLMw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QnWN4MwM9iwq7uk-Du5nkDpQLMw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 18:24:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3171 (0xc63) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918DB4E, serialNumber=42758DE0CC0CF62C2AEEE93E0EEE67903A502CCC Validity Not Before: May 10 18:28:14 2025 GMT Not After : May 17 18:28:14 2025 GMT Subject: CN=681f9abf-6333 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:05:51:8e:4d:8b:cb:6f:03:fb:76:0e:f1:57: 82:ee:1c:75:60:c2:86:c0:1b:b7:cc:f8:7a:28:63: 99:87:f9:e1:61:c2:fc:3c:87:4b:f6:5b:a9:72:6f: 06:31:41:41:cb:59:64:67:91:ea:94:0d:62:fa:0d: 8a:76:26:f0:a2:8e:4c:68:eb:84:98:b1:44:b3:e3: d1:10:5a:c3:31:16:56:99:57:ad:ca:88:ef:a2:e9: 5f:80:54:88:7b:6c:1e:6b:1c:46:a5:40:66:fa:c8: e1:62:89:6b:48:bf:c2:e7:72:a0:e4:b6:9a:de:fe: 63:69:64:92:7c:6e:43:8d:94:30:c1:d7:2a:a2:61: db:27:c7:7b:a8:d2:ca:2f:5c:ce:85:94:aa:c4:23: 75:b8:63:cf:50:53:f4:ec:e0:49:a7:06:1d:53:5b: cd:5f:68:91:da:73:f3:e0:f8:ac:25:01:fb:52:f5: a6:83:8b:f0:33:e2:30:9e:dc:39:f3:e4:f3:21:e1: e0:d7:c0:91:b5:8c:ab:bb:98:65:e0:86:40:00:75: b2:c0:80:f9:6e:9c:8d:28:4b:94:88:66:c0:90:b7: 6d:07:8a:6f:d5:41:bb:a4:e7:10:ac:08:fa:3b:86: 0d:94:85:5d:46:5c:59:ca:67:86:bb:6c:d3:d5:4b: 86:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:32:79:2C:C0:B7:9F:5F:06:07:E1:4D:34:57:9B:D0:08:4D:15:90 X509v3 Authority Key Identifier: keyid:42:75:8D:E0:CC:0C:F6:2C:2A:EE:E9:3E:0E:EE:67:90:3A:50:2C:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918DB4E/77E7F9A00CE511EAA20DDD82C4F9AE02/QnWN4MwM9iwq7uk-Du5nkDpQLMw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QnWN4MwM9iwq7uk-Du5nkDpQLMw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918DB4E/77E7F9A00CE511EAA20DDD82C4F9AE02/QnWN4MwM9iwq7uk-Du5nkDpQLMw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:3c:cc:9b:40:88:64:3a:b3:3b:3c:47:b7:e2:78:86:36:18: c9:53:42:7d:83:46:7a:f9:3b:5d:d6:cb:b9:38:20:63:2f:68: 9b:b7:93:82:1f:0c:4e:c0:08:72:d2:d5:90:4e:4d:e5:fa:77: 7b:2d:8f:eb:1f:d5:59:1b:fb:85:79:41:93:32:6d:55:27:a7: db:92:59:18:fd:e7:01:85:24:e9:fb:c9:7b:b2:0a:f9:95:81: 2e:21:20:0a:78:7e:3b:c5:75:54:63:e3:f1:21:3a:dc:20:08: 16:b2:f8:5a:cc:a6:34:44:62:31:0f:98:e0:0b:2c:4f:71:34: 3a:a7:cc:4a:b2:3b:17:d0:59:d9:57:7e:9b:03:09:50:9e:27: c5:0e:08:1c:a0:01:80:b6:71:59:85:1e:10:94:42:50:b9:d0: b2:18:f1:1d:e4:d0:4a:cd:c1:bc:ca:27:c3:86:8b:6c:20:69: 2a:a6:d7:41:03:98:a1:c7:fb:48:05:93:3b:a9:ec:76:0c:33: 14:52:df:49:c7:93:54:34:4c:16:7f:6c:81:24:3f:7c:92:e3: 41:da:b5:79:eb:b7:9e:2a:72:c7:e7:86:60:46:97:19:46:85: 64:2e:d5:36:74:25:70:64:5c:28:48:ab:5e:fb:d4:bb:c5:75: f1:01:bc:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDGMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OERCNEUxMTAvBgNVBAUTKDQyNzU4REUwQ0MwQ0Y2MkMyQUVFRTkzRTBFRUU2Nzkw M0E1MDJDQ0MwHhcNMjUwNTEwMTgyODE0WhcNMjUwNTE3MTgyODE0WjAYMRYwFAYD VQQDEw02ODFmOWFiZi02MzMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1gVRjk2Ly28D+3YO8VeC7hx1YMKGwBu3zPh6KGOZh/nhYcL8PIdL9lupcm8G MUFBy1lkZ5HqlA1i+g2Kdibwoo5MaOuEmLFEs+PREFrDMRZWmVetyojvoulfgFSI e2weaxxGpUBm+sjhYolrSL/C53Kg5Laa3v5jaWSSfG5DjZQwwdcqomHbJ8d7qNLK L1zOhZSqxCN1uGPPUFP07OBJpwYdU1vNX2iR2nPz4PisJQH7UvWmg4vwM+Iwntw5 8+TzIeHg18CRtYyru5hl4IZAAHWywID5bpyNKEuUiGbAkLdtB4pv1UG7pOcQrAj6 O4YNlIVdRlxZymeGu2zT1UuGBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIQyeSzA t59fBgfhTTRXm9AITRWQMB8GA1UdIwQYMBaAFEJ1jeDMDPYsKu7pPg7uZ5A6UCzM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4REI0RS83N0U3RjlBMDBD RTUxMUVBQTIwREREODJDNEY5QUUwMi9RbldONE13TTlpd3E3dWstRHU1bmtEcFFM TXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FuV040TXdNOWl3cTd1ay1EdTVua0RwUUxNdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 REI0RS83N0U3RjlBMDBDRTUxMUVBQTIwREREODJDNEY5QUUwMi9RbldONE13TTlp d3E3dWstRHU1bmtEcFFMTXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjPMybQIhkOrM7PEe34niGNhjJU0J9g0Z6+Ttd1su5OCBjL2ibt5OC HwxOwAhy0tWQTk3l+nd7LY/rH9VZG/uFeUGTMm1VJ6fbklkY/ecBhSTp+8l7sgr5 lYEuISAKeH47xXVUY+PxITrcIAgWsvhazKY0RGIxD5jgCyxPcTQ6p8xKsjsX0FnZ V36bAwlQnifFDggcoAGAtnFZhR4QlEJQudCyGPEd5NBKzcG8yifDhotsIGkqptdB A5ihx/tIBZM7qex2DDMUUt9Jx5NUNEwWf2yBJD98kuNB2rV567eeKnLH54ZgRpcZ RoVkLtU2dCVwZFwoSKte+9S7xXXxAbzY -----END CERTIFICATE-----Generated at Sun May 11 04:27:48 2025 by rpki-client