$ rpki-client -vvf rpki.apnic.net/member_repository/A919E8DB/B48E25F4B76311EF82DD8F33C4F9AE02/QGGGPd9D57OxiePJwyF7wSuzXyE.mft File: QGGGPd9D57OxiePJwyF7wSuzXyE.mft (raw, json) Hash identifier: 7i+bgBnBsIro9AxdpnLINxHxYZhh3beHtwCv3jgAnDk= Subject key identifier: A9:44:DC:52:A7:79:AE:75:6E:95:47:95:A3:B4:4C:06:07:18:A0:B0 Authority key identifier: 40:61:86:3D:DF:43:E7:B3:B1:89:E3:C9:C3:21:7B:C1:2B:B3:5F:21 Certificate issuer: /CN=A919E8DB/serialNumber=4061863DDF43E7B3B189E3C9C3217BC12BB35F21 Certificate serial: 68 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QGGGPd9D57OxiePJwyF7wSuzXyE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919E8DB/B48E25F4B76311EF82DD8F33C4F9AE02/QGGGPd9D57OxiePJwyF7wSuzXyE.mft Manifest number: 5E Signing time: Thu 15 May 2025 06:34:34 +0000 Manifest this update: Thu 15 May 2025 06:34:33 +0000 Manifest next update: Thu 22 May 2025 06:34:33 +0000 Files and hashes: 1: QGGGPd9D57OxiePJwyF7wSuzXyE.crl (hash: x1nAJZTrMYyUXK6MuGrPFCPyj6LbGgG+rLeeXibxVc0=) 2: DCAA44D6BF2A11EFBAAF1F16C4F9AE02.roa (hash: fSJH1SOLPO4NysKX51na/qXDmlPOAQyyNuZ41eZmd8c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919E8DB/B48E25F4B76311EF82DD8F33C4F9AE02/QGGGPd9D57OxiePJwyF7wSuzXyE.crl rsync://rpki.apnic.net/member_repository/A919E8DB/B48E25F4B76311EF82DD8F33C4F9AE02/QGGGPd9D57OxiePJwyF7wSuzXyE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QGGGPd9D57OxiePJwyF7wSuzXyE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 06:34:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 104 (0x68) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919E8DB, serialNumber=4061863DDF43E7B3B189E3C9C3217BC12BB35F21 Validity Not Before: May 15 06:34:33 2025 GMT Not After : May 22 06:34:33 2025 GMT Subject: CN=68258af9-2631 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:47:e5:26:ea:36:37:22:11:5d:31:96:e5:02: 45:a3:a9:19:58:72:92:9c:56:3a:f0:6a:66:d5:ef: 18:74:81:9f:f0:80:2d:fb:99:9d:a7:01:ba:8c:bc: fa:61:a2:eb:24:15:03:6c:2c:47:a6:4e:26:5c:a0: e6:78:11:47:cb:83:bf:57:80:5f:63:6f:a9:89:9f: 67:d7:94:0e:90:a7:9e:c1:9b:d9:8a:3a:26:8e:19: e0:18:b1:34:4e:3a:8c:38:eb:6b:77:2c:b3:ba:e1: 09:c8:fe:6e:5f:4b:92:24:53:b8:27:79:8e:97:4f: 45:f9:c5:24:39:f6:de:83:d1:88:f7:44:ab:7c:b2: 42:56:37:c5:09:d2:cd:e9:f3:9c:17:de:fe:c9:bd: 5d:0c:ea:8f:27:bb:44:52:60:0a:ef:c9:96:bd:97: 16:1f:af:b2:79:80:59:99:c4:d6:98:4d:ef:db:f6: 89:8c:4d:79:74:1e:96:df:1a:6b:1e:ea:41:57:0b: 33:79:4b:ca:ad:b8:98:27:32:52:c0:97:82:4f:5d: 5d:26:1e:ce:1b:2f:59:8b:bd:0d:06:37:c5:46:6d: 00:4f:73:27:b8:f6:c4:47:92:04:e4:7b:a1:d8:2b: ad:70:1c:d3:86:66:78:ac:39:b9:3c:30:93:73:35: 79:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:44:DC:52:A7:79:AE:75:6E:95:47:95:A3:B4:4C:06:07:18:A0:B0 X509v3 Authority Key Identifier: keyid:40:61:86:3D:DF:43:E7:B3:B1:89:E3:C9:C3:21:7B:C1:2B:B3:5F:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919E8DB/B48E25F4B76311EF82DD8F33C4F9AE02/QGGGPd9D57OxiePJwyF7wSuzXyE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QGGGPd9D57OxiePJwyF7wSuzXyE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E8DB/B48E25F4B76311EF82DD8F33C4F9AE02/QGGGPd9D57OxiePJwyF7wSuzXyE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:fd:3e:be:4a:da:0a:71:c9:b9:0a:14:01:a3:74:c3:4b:62: a6:07:1f:a9:d4:d9:86:a2:a2:77:a2:45:67:ba:dc:10:94:1c: f7:4d:39:fe:c3:f6:5e:ba:5f:b1:a8:b6:ee:7f:59:30:eb:81: c1:a0:b6:4b:17:ca:3b:c5:27:6e:15:60:fb:d8:8c:ea:92:4b: f1:f1:9f:fe:2e:88:68:d6:f6:43:6e:24:9f:49:95:c5:f3:d3: 88:41:22:e6:7b:9a:06:e4:fb:3c:7c:61:c0:34:54:66:af:b0: 64:db:fc:75:87:5f:8b:71:cc:07:f7:5e:ce:f6:07:d0:53:1e: 7d:2e:ca:3a:bd:ab:00:b8:c0:2e:84:0e:2f:b1:b5:5a:2a:46: d7:0c:e6:d6:e8:a9:31:1c:da:0d:f9:65:f1:d1:99:c7:5b:de: 05:a3:a5:90:14:28:e5:70:2b:c6:34:7f:3a:4e:95:fd:7a:84: 81:ef:e7:2f:8b:c9:0e:c8:89:7f:0a:74:c6:da:f2:80:cc:2d: e9:97:cc:d9:83:b1:89:44:f2:a0:58:6e:4b:65:e9:9e:b0:f5: c5:5a:fb:ca:70:a6:4b:42:e7:4b:13:3d:3a:b5:ef:5f:5d:34: 7f:e5:ce:20:dc:c5:8c:a3:09:30:ba:6b:9d:74:4c:03:41:f6: 47:bc:87:b0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBaDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 RThEQjExMC8GA1UEBRMoNDA2MTg2M0RERjQzRTdCM0IxODlFM0M5QzMyMTdCQzEy QkIzNUYyMTAeFw0yNTA1MTUwNjM0MzNaFw0yNTA1MjIwNjM0MzNaMBgxFjAUBgNV BAMTDTY4MjU4YWY5LTI2MzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCRR+Um6jY3IhFdMZblAkWjqRlYcpKcVjrwambV7xh0gZ/wgC37mZ2nAbqMvPph ouskFQNsLEemTiZcoOZ4EUfLg79XgF9jb6mJn2fXlA6Qp57Bm9mKOiaOGeAYsTRO Oow462t3LLO64QnI/m5fS5IkU7gneY6XT0X5xSQ59t6D0Yj3RKt8skJWN8UJ0s3p 85wX3v7JvV0M6o8nu0RSYArvyZa9lxYfr7J5gFmZxNaYTe/b9omMTXl0HpbfGmse 6kFXCzN5S8qtuJgnMlLAl4JPXV0mHs4bL1mLvQ0GN8VGbQBPcye49sRHkgTke6HY K61wHNOGZnisObk8MJNzNXkLAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUqUTcUqd5 rnVulUeVo7RMBgcYoLAwHwYDVR0jBBgwFoAUQGGGPd9D57OxiePJwyF7wSuzXyEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlFOERCL0I0OEUyNUY0Qjc2 MzExRUY4MkREOEYzM0M0RjlBRTAyL1FHR0dQZDlENTdPeGllUEp3eUY3d1N1elh5 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUUdHR1BkOUQ1N094aWVQSnd5Rjd3U3V6WHlFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlF OERCL0I0OEUyNUY0Qjc2MzExRUY4MkREOEYzM0M0RjlBRTAyL1FHR0dQZDlENTdP eGllUEp3eUY3d1N1elh5RS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFn9Pr5K2gpxybkKFAGjdMNLYqYHH6nU2YaioneiRWe63BCUHPdNOf7D 9l66X7Gotu5/WTDrgcGgtksXyjvFJ24VYPvYjOqSS/Hxn/4uiGjW9kNuJJ9JlcXz 04hBIuZ7mgbk+zx8YcA0VGavsGTb/HWHX4txzAf3Xs72B9BTHn0uyjq9qwC4wC6E Di+xtVoqRtcM5tboqTEc2g35ZfHRmcdb3gWjpZAUKOVwK8Y0fzpOlf16hIHv5y+L yQ7IiX8KdMba8oDMLemXzNmDsYlE8qBYbktl6Z6w9cVa+8pwpktC50sTPTq1719d NH/lziDcxYyjCTC6a510TANB9ke8h7A= -----END CERTIFICATE-----Generated at Sat May 17 07:07:06 2025 by rpki-client