$ rpki-client -vvf rpki.apnic.net/member_repository/A9198D6B/81E83F62D64A11EAB6A66410C4F9AE02/qQILYm9QRkjk2_akIHbomXPEq8A.mft File: qQILYm9QRkjk2_akIHbomXPEq8A.mft (raw, json) Hash identifier: M41PEHMNzWLaPmP7E2YpCs116IJR0gqaDL5wkajPR0U= Subject key identifier: 4E:23:81:87:21:74:81:AB:F9:27:91:C3:43:11:6C:E7:22:A9:80:5C Authority key identifier: A9:02:0B:62:6F:50:46:48:E4:DB:F6:A4:20:76:E8:99:73:C4:AB:C0 Certificate issuer: /CN=A9198D6B/serialNumber=A9020B626F504648E4DBF6A42076E89973C4ABC0 Certificate serial: 0822 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qQILYm9QRkjk2_akIHbomXPEq8A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9198D6B/81E83F62D64A11EAB6A66410C4F9AE02/qQILYm9QRkjk2_akIHbomXPEq8A.mft Manifest number: 0817 Signing time: Wed 14 May 2025 20:56:57 +0000 Manifest this update: Wed 14 May 2025 20:56:57 +0000 Manifest next update: Wed 21 May 2025 20:56:57 +0000 Files and hashes: 1: qQILYm9QRkjk2_akIHbomXPEq8A.crl (hash: z8iT3YfT7iThP/0S4AI+nw2sZIsL5tInkh6qAdk6oFk=) 2: 0446C8B2945911EB83AC5363C4F9AE02.roa (hash: l0ICGLwuaPDJO60DuHwg4w9v81ASlnFGPH6s06O+ZdY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9198D6B/81E83F62D64A11EAB6A66410C4F9AE02/qQILYm9QRkjk2_akIHbomXPEq8A.crl rsync://rpki.apnic.net/member_repository/A9198D6B/81E83F62D64A11EAB6A66410C4F9AE02/qQILYm9QRkjk2_akIHbomXPEq8A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qQILYm9QRkjk2_akIHbomXPEq8A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 20:56:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2082 (0x822) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9198D6B, serialNumber=A9020B626F504648E4DBF6A42076E89973C4ABC0 Validity Not Before: May 14 20:56:57 2025 GMT Not After : May 21 20:56:57 2025 GMT Subject: CN=68250399-1718 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:e9:4b:88:a0:ff:55:23:c4:f0:b5:95:7f:86: 58:e8:f9:63:d5:cd:e7:7d:65:a4:4f:48:fe:8e:04: 4d:d6:fe:9d:35:9f:18:b5:cb:ab:dd:07:ff:ae:76: 66:45:2e:19:31:bc:f5:a3:34:64:1d:ac:a3:86:a1: 16:93:49:5c:d7:81:59:3e:24:f0:70:67:c9:f4:82: 8a:dd:88:f7:71:5a:f6:9e:d4:59:37:f1:22:0f:a9: 26:30:71:76:25:7c:4a:36:b8:2f:bf:9d:09:58:0c: 4c:eb:99:e2:66:ec:33:0f:80:ae:f5:5b:ba:c4:be: 4e:0f:63:f1:c5:65:f6:01:b5:eb:6c:02:f5:d2:5d: 3f:70:c8:e5:89:88:71:32:53:58:ee:18:f6:05:a0: f7:c3:71:ce:73:18:dc:13:d5:01:d1:06:e0:2f:ae: 95:15:af:3b:b2:5b:cf:7d:df:f8:67:dd:30:5b:cf: ed:72:d4:c4:bf:23:ef:57:59:1d:9d:47:3b:f8:49: ec:f0:3e:c7:d8:3d:91:d7:40:aa:79:b2:05:b5:99: e7:ff:fa:22:4b:03:d1:c1:b7:b5:72:62:72:19:13: a1:6d:cb:d5:97:30:9c:fc:cc:a3:a6:7d:d2:91:54: c3:db:39:92:3a:21:21:7d:13:55:8b:03:84:cd:f4: 17:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:23:81:87:21:74:81:AB:F9:27:91:C3:43:11:6C:E7:22:A9:80:5C X509v3 Authority Key Identifier: keyid:A9:02:0B:62:6F:50:46:48:E4:DB:F6:A4:20:76:E8:99:73:C4:AB:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9198D6B/81E83F62D64A11EAB6A66410C4F9AE02/qQILYm9QRkjk2_akIHbomXPEq8A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qQILYm9QRkjk2_akIHbomXPEq8A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198D6B/81E83F62D64A11EAB6A66410C4F9AE02/qQILYm9QRkjk2_akIHbomXPEq8A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:c0:42:9b:19:1c:c7:80:90:86:89:d3:93:47:f0:de:d5:36: 14:b2:50:e7:10:05:9d:e7:8a:8d:89:ff:5d:0c:29:72:8b:74: cf:01:5c:85:5c:89:8e:a1:08:7f:c3:00:89:9d:e2:f0:45:4f: 1b:e9:71:20:79:38:1e:c8:6f:b3:c4:18:be:de:0e:f7:53:96: 56:7a:e7:e9:1a:16:0e:2b:f4:ed:0f:3a:d2:5f:cc:c5:3f:f9: 5f:5e:36:0e:c1:72:c3:21:03:05:a1:c5:87:a1:b1:c3:45:1c: 84:85:02:c3:8a:d2:fe:c2:a0:08:5f:b0:1c:f8:da:59:24:06: 5f:c3:e1:88:1f:eb:f6:79:5d:26:04:35:f9:00:8d:3e:0c:24: 25:ae:ec:52:cc:92:7f:84:61:bf:93:7d:a5:cf:3f:63:5c:05: 68:95:97:d8:13:5d:46:33:25:b1:2a:ea:b3:ab:01:ec:0c:1c: d5:8b:6a:5a:4b:09:6d:18:ca:05:5c:7f:f5:58:1b:ac:10:3a: 5f:84:92:57:a3:83:64:6f:46:83:5d:0b:a1:54:bc:a6:df:8f: ad:e0:83:77:96:2f:46:0d:0b:43:8a:05:c9:60:b6:b5:c8:b3: 66:62:3b:55:5b:71:b6:81:3b:fb:3c:1b:18:01:78:77:02:20: 31:9e:87:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCCIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OThENkIxMTAvBgNVBAUTKEE5MDIwQjYyNkY1MDQ2NDhFNERCRjZBNDIwNzZFODk5 NzNDNEFCQzAwHhcNMjUwNTE0MjA1NjU3WhcNMjUwNTIxMjA1NjU3WjAYMRYwFAYD VQQDEw02ODI1MDM5OS0xNzE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn+lLiKD/VSPE8LWVf4ZY6Plj1c3nfWWkT0j+jgRN1v6dNZ8Ytcur3Qf/rnZm RS4ZMbz1ozRkHayjhqEWk0lc14FZPiTwcGfJ9IKK3Yj3cVr2ntRZN/EiD6kmMHF2 JXxKNrgvv50JWAxM65niZuwzD4Cu9Vu6xL5OD2PxxWX2AbXrbAL10l0/cMjliYhx MlNY7hj2BaD3w3HOcxjcE9UB0QbgL66VFa87slvPfd/4Z90wW8/tctTEvyPvV1kd nUc7+Ens8D7H2D2R10CqebIFtZnn//oiSwPRwbe1cmJyGROhbcvVlzCc/Myjpn3S kVTD2zmSOiEhfRNViwOEzfQXEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE4jgYch dIGr+SeRw0MRbOciqYBcMB8GA1UdIwQYMBaAFKkCC2JvUEZI5Nv2pCB26JlzxKvA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OEQ2Qi84MUU4M0Y2MkQ2 NEExMUVBQjZBNjY0MTBDNEY5QUUwMi9xUUlMWW05UVJramsyX2FrSUhib21YUEVx OEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FRSUxZbTlRUmtqazJfYWtJSGJvbVhQRXE4QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OEQ2Qi84MUU4M0Y2MkQ2NEExMUVBQjZBNjY0MTBDNEY5QUUwMi9xUUlMWW05UVJr amsyX2FrSUhib21YUEVxOEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDwEKbGRzHgJCGidOTR/De1TYUslDnEAWd54qNif9dDClyi3TPAVyF XImOoQh/wwCJneLwRU8b6XEgeTgeyG+zxBi+3g73U5ZWeufpGhYOK/TtDzrSX8zF P/lfXjYOwXLDIQMFocWHobHDRRyEhQLDitL+wqAIX7Ac+NpZJAZfw+GIH+v2eV0m BDX5AI0+DCQlruxSzJJ/hGG/k32lzz9jXAVolZfYE11GMyWxKuqzqwHsDBzVi2pa SwltGMoFXH/1WBusEDpfhJJXo4Nkb0aDXQuhVLym34+t4IN3li9GDQtDigXJYLa1 yLNmYjtVW3G2gTv7PBsYAXh3AiAxnodP -----END CERTIFICATE-----Generated at Fri May 16 18:12:38 2025 by rpki-client