$ rpki-client -vvf rpki.apnic.net/member_repository/A9195F49/9D3C749266A211ECBB7A0A3CC4F9AE02/qHH05sNy2xC2TfOZX6FR77OfmYs.mft File: qHH05sNy2xC2TfOZX6FR77OfmYs.mft (raw, json) Hash identifier: FuP8jLgAmByZCcjkSIYm+cHrcJSerO5qhIb0BNvYOqU= Subject key identifier: 8D:6C:66:43:D1:79:F9:16:36:2B:73:C1:BB:86:CA:46:35:4D:AB:7C Authority key identifier: A8:71:F4:E6:C3:72:DB:10:B6:4D:F3:99:5F:A1:51:EF:B3:9F:99:8B Certificate issuer: /CN=A9195F49/serialNumber=A871F4E6C372DB10B64DF3995FA151EFB39F998B Certificate serial: 0427 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qHH05sNy2xC2TfOZX6FR77OfmYs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9195F49/9D3C749266A211ECBB7A0A3CC4F9AE02/qHH05sNy2xC2TfOZX6FR77OfmYs.mft Manifest number: 0420 Signing time: Tue 13 May 2025 00:13:00 +0000 Manifest this update: Tue 13 May 2025 00:12:59 +0000 Manifest next update: Tue 20 May 2025 00:12:59 +0000 Files and hashes: 1: qHH05sNy2xC2TfOZX6FR77OfmYs.crl (hash: 7EnWWRBMFOR1kPdiey11ZwyZGKiRTCFqwigz9J+ByUU=) 2: 5FC75DCC66A511EC9C199341C4F9AE02.roa (hash: jsVFzS1V8/4nPs0LiSJz70mLYAraQYwRrwx0A1zMdZQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9195F49/9D3C749266A211ECBB7A0A3CC4F9AE02/qHH05sNy2xC2TfOZX6FR77OfmYs.crl rsync://rpki.apnic.net/member_repository/A9195F49/9D3C749266A211ECBB7A0A3CC4F9AE02/qHH05sNy2xC2TfOZX6FR77OfmYs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qHH05sNy2xC2TfOZX6FR77OfmYs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 00:12:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1063 (0x427) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9195F49, serialNumber=A871F4E6C372DB10B64DF3995FA151EFB39F998B Validity Not Before: May 13 00:12:59 2025 GMT Not After : May 20 00:12:59 2025 GMT Subject: CN=68228e8b-5a7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:a5:1a:c4:03:80:11:eb:51:d0:c4:ae:a7:07: fd:81:6e:b2:fd:47:1c:21:45:f6:fe:19:26:1b:3e: af:e1:92:78:0f:65:78:07:b1:11:b8:9c:e9:59:5b: f1:57:14:f5:a3:05:cc:1c:31:01:ee:43:45:cd:9f: a9:ad:5a:44:72:31:5a:0c:49:1a:f3:83:d7:c8:5d: 9a:4a:f6:4f:f9:55:44:7b:5a:1c:e9:8a:c1:73:aa: 89:71:86:95:c0:68:c6:9f:a5:67:22:d4:83:78:e2: 77:e4:9f:d1:aa:6d:96:73:16:cb:5c:61:3b:25:ab: ee:67:1d:3b:c0:b7:85:15:d4:72:f5:e4:06:7f:d2: f5:a9:9c:2f:bb:3a:82:9b:a4:f6:a2:92:c9:a6:d9: 51:b7:45:26:be:47:5d:1e:50:3f:da:d9:35:1c:bd: 0c:3d:68:17:bd:e8:d5:dc:6a:3e:14:d3:97:35:c0: 9c:16:af:31:97:41:41:41:3e:3d:00:66:6c:d4:39: 1c:10:58:22:06:ee:1e:22:aa:ce:f5:c8:ba:60:5a: 8a:84:f1:51:e2:95:68:db:5f:1e:da:cd:21:c6:6f: a9:ed:66:38:46:b2:eb:2f:9f:ed:78:c8:2d:b4:50: b7:fd:a5:57:2d:45:76:93:26:ef:08:7e:bf:13:10: bc:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:6C:66:43:D1:79:F9:16:36:2B:73:C1:BB:86:CA:46:35:4D:AB:7C X509v3 Authority Key Identifier: keyid:A8:71:F4:E6:C3:72:DB:10:B6:4D:F3:99:5F:A1:51:EF:B3:9F:99:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9195F49/9D3C749266A211ECBB7A0A3CC4F9AE02/qHH05sNy2xC2TfOZX6FR77OfmYs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qHH05sNy2xC2TfOZX6FR77OfmYs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195F49/9D3C749266A211ECBB7A0A3CC4F9AE02/qHH05sNy2xC2TfOZX6FR77OfmYs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:c4:fc:11:c1:66:c2:c0:43:67:fc:82:83:06:b5:dd:bb:e1: c9:49:b8:96:ce:c1:c6:cc:9b:42:6a:f3:d2:08:a4:6a:37:9b: 3e:c5:6a:cf:88:7b:46:d8:07:1e:88:bf:46:cf:67:bb:7a:c8: 87:34:37:ac:51:76:8c:ae:55:98:2d:76:78:7f:68:3f:6b:23: 8c:91:f4:14:24:e3:6f:4f:79:8b:cd:a2:72:f4:b7:97:30:86: 41:ed:46:e6:84:cb:83:9d:1e:a3:ca:52:39:d4:f9:a7:1f:be: 19:29:f0:fe:89:b5:54:a7:9f:cf:fb:3a:37:67:47:7f:14:bc: 39:0d:0f:22:c2:66:b2:63:67:d2:03:5a:df:3c:ef:b7:4a:91: 96:ae:96:36:57:80:a0:6c:4a:90:a9:59:a3:35:81:00:dc:72: 66:08:bf:b6:ca:d6:fd:3d:e7:59:7b:bc:51:d3:ae:47:3f:4a: bb:74:18:6a:c1:fd:e3:7b:ee:c2:1f:c1:1c:f4:56:c3:ff:38: 13:5b:0c:a5:fa:64:47:64:a6:d0:8c:0e:00:38:91:a6:42:fa: 48:cc:fb:5b:81:78:b9:75:ee:f9:0a:d4:f3:05:c2:37:1c:d9: fa:71:fd:70:f4:b2:f9:5e:88:28:2b:f8:20:de:4e:fd:8d:3e: f4:fd:02:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBCcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTVGNDkxMTAvBgNVBAUTKEE4NzFGNEU2QzM3MkRCMTBCNjRERjM5OTVGQTE1MUVG QjM5Rjk5OEIwHhcNMjUwNTEzMDAxMjU5WhcNMjUwNTIwMDAxMjU5WjAYMRYwFAYD VQQDEw02ODIyOGU4Yi01YTdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+aUaxAOAEetR0MSupwf9gW6y/UccIUX2/hkmGz6v4ZJ4D2V4B7ERuJzpWVvx VxT1owXMHDEB7kNFzZ+prVpEcjFaDEka84PXyF2aSvZP+VVEe1oc6YrBc6qJcYaV wGjGn6VnItSDeOJ35J/Rqm2WcxbLXGE7JavuZx07wLeFFdRy9eQGf9L1qZwvuzqC m6T2opLJptlRt0UmvkddHlA/2tk1HL0MPWgXvejV3Go+FNOXNcCcFq8xl0FBQT49 AGZs1DkcEFgiBu4eIqrO9ci6YFqKhPFR4pVo218e2s0hxm+p7WY4RrLrL5/teMgt tFC3/aVXLUV2kybvCH6/ExC8QQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI1sZkPR efkWNitzwbuGykY1Tat8MB8GA1UdIwQYMBaAFKhx9ObDctsQtk3zmV+hUe+zn5mL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NUY0OS85RDNDNzQ5MjY2 QTIxMUVDQkI3QTBBM0NDNEY5QUUwMi9xSEgwNXNOeTJ4QzJUZk9aWDZGUjc3T2Zt WXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FISDA1c055MnhDMlRmT1pYNkZSNzdPZm1Zcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NUY0OS85RDNDNzQ5MjY2QTIxMUVDQkI3QTBBM0NDNEY5QUUwMi9xSEgwNXNOeTJ4 QzJUZk9aWDZGUjc3T2ZtWXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANxPwRwWbCwENn/IKDBrXdu+HJSbiWzsHGzJtCavPSCKRqN5s+xWrP iHtG2AceiL9Gz2e7esiHNDesUXaMrlWYLXZ4f2g/ayOMkfQUJONvT3mLzaJy9LeX MIZB7UbmhMuDnR6jylI51PmnH74ZKfD+ibVUp5/P+zo3Z0d/FLw5DQ8iwmayY2fS A1rfPO+3SpGWrpY2V4CgbEqQqVmjNYEA3HJmCL+2ytb9PedZe7xR065HP0q7dBhq wf3je+7CH8Ec9FbD/zgTWwyl+mRHZKbQjA4AOJGmQvpIzPtbgXi5de75CtTzBcI3 HNn6cf1w9LL5XogoK/gg3k79jT70/QKg -----END CERTIFICATE-----Generated at Tue May 13 19:15:40 2025 by rpki-client