$ rpki-client -vvf rpki.apnic.net/member_repository/A91F95E2/118545FA5C7511EC89ABFA0BC4F9AE02/QQWX1bAAQ-IKokCeMnHtT0HhMcc.mft File: QQWX1bAAQ-IKokCeMnHtT0HhMcc.mft (raw, json) Hash identifier: QzO/CQBB7VdKRHG1W6X20smTTSGcFDrE/zB3EBcr7YE= Subject key identifier: 7F:77:4D:E5:C9:80:45:31:D2:1A:12:F9:4B:8F:12:79:EB:E5:27:2F Authority key identifier: 41:05:97:D5:B0:00:43:E2:0A:A2:40:9E:32:71:ED:4F:41:E1:31:C7 Certificate issuer: /CN=A91F95E2/serialNumber=410597D5B00043E20AA2409E3271ED4F41E131C7 Certificate serial: 0438 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQWX1bAAQ-IKokCeMnHtT0HhMcc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F95E2/118545FA5C7511EC89ABFA0BC4F9AE02/QQWX1bAAQ-IKokCeMnHtT0HhMcc.mft Manifest number: 0434 Signing time: Thu 15 May 2025 00:20:39 +0000 Manifest this update: Thu 15 May 2025 00:20:38 +0000 Manifest next update: Thu 22 May 2025 00:20:38 +0000 Files and hashes: 1: QQWX1bAAQ-IKokCeMnHtT0HhMcc.crl (hash: BbmloHI4x04FW25Hw1uvwMD8RpaN3XWQshoudCoOTZE=) 2: 6229E2DC5C7911EC8C7BD812C4F9AE02.roa (hash: wGbE0YkCiIM+SIF6UsXM2Y8Q1BpBKgQHBXubgyLVuBc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F95E2/118545FA5C7511EC89ABFA0BC4F9AE02/QQWX1bAAQ-IKokCeMnHtT0HhMcc.crl rsync://rpki.apnic.net/member_repository/A91F95E2/118545FA5C7511EC89ABFA0BC4F9AE02/QQWX1bAAQ-IKokCeMnHtT0HhMcc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQWX1bAAQ-IKokCeMnHtT0HhMcc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 00:20:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1080 (0x438) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F95E2, serialNumber=410597D5B00043E20AA2409E3271ED4F41E131C7 Validity Not Before: May 15 00:20:38 2025 GMT Not After : May 22 00:20:38 2025 GMT Subject: CN=68253357-f6ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:25:da:46:f3:b3:08:90:11:e1:f8:86:18:21: 36:bd:5d:33:d7:f2:15:61:50:02:91:a1:2d:81:d7: 62:b0:53:ce:58:d6:14:e0:e7:c8:49:cb:4a:c7:49: 15:99:e0:b4:98:dc:4c:9c:dc:64:98:15:70:08:56: 82:04:45:78:96:a8:04:36:aa:94:87:94:e6:af:ca: c4:84:a5:f9:04:fb:87:5a:16:f1:a6:ce:97:99:55: f0:a5:b6:38:8e:b9:e9:9f:a4:b4:b9:4e:ad:a6:f3: 5b:42:b0:01:5a:d9:0e:9b:21:2b:6f:7e:ca:5f:ed: bd:19:73:c6:29:00:dc:fd:79:e5:be:88:92:de:4c: ed:cc:7e:cc:d2:42:86:78:07:4d:d9:c0:0c:2d:58: bd:c0:61:30:a2:ff:26:8b:5f:2c:e8:88:c8:69:a3: da:08:72:16:43:32:63:83:e2:da:15:e0:ab:3d:2a: 2f:6d:78:8c:2f:c7:93:c6:cd:68:a1:a9:e9:de:50: 26:11:07:36:73:91:8f:cb:0a:64:6e:e3:2a:a1:53: 66:83:94:2a:fc:f7:cc:26:e4:c7:ed:27:6e:ac:d2: 4a:d1:fe:73:21:bd:29:5f:e3:80:04:c6:f3:56:35: fe:b2:3b:f0:ff:60:02:79:5d:11:c0:67:7c:0c:22: 6b:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:77:4D:E5:C9:80:45:31:D2:1A:12:F9:4B:8F:12:79:EB:E5:27:2F X509v3 Authority Key Identifier: keyid:41:05:97:D5:B0:00:43:E2:0A:A2:40:9E:32:71:ED:4F:41:E1:31:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F95E2/118545FA5C7511EC89ABFA0BC4F9AE02/QQWX1bAAQ-IKokCeMnHtT0HhMcc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQWX1bAAQ-IKokCeMnHtT0HhMcc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F95E2/118545FA5C7511EC89ABFA0BC4F9AE02/QQWX1bAAQ-IKokCeMnHtT0HhMcc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:31:32:d9:b3:3c:3c:8d:7b:8d:53:05:8d:98:04:8d:5a:02: 02:0b:1e:70:47:e4:56:b7:e4:a8:4a:f4:91:4b:5a:18:fb:52: b6:d9:e2:ae:78:5c:22:b6:e2:b6:8a:1c:45:dc:bc:5d:a5:97: 15:5e:dc:38:6b:3d:b9:8f:6b:6b:86:92:5a:55:de:bb:74:3e: cb:6c:a0:79:f8:92:f4:c2:d3:e6:46:04:f8:2a:0b:82:8f:1c: 9b:00:61:fd:f6:a3:b0:36:d1:8a:8b:91:5c:1f:50:f0:2c:80: b4:62:7b:50:23:87:e3:f7:56:3e:a1:55:0b:98:47:71:48:7d: c5:af:ec:ee:56:c0:e3:45:f5:f5:00:f7:af:09:24:02:41:4d: bb:ca:dc:0b:d5:22:e1:aa:2e:35:25:d3:00:9f:f3:b8:75:37: e0:1f:ae:b4:54:8d:03:df:95:81:b9:94:a3:97:03:99:33:1b: 71:4f:fd:1f:2b:2d:1b:67:60:dc:82:ff:c7:59:75:a2:69:12: 0a:4d:e5:0e:6c:5f:3d:94:0f:8b:b7:8c:c5:fd:2f:02:29:4f: 86:ed:95:8f:77:81:8c:9f:97:6f:ba:cd:7f:87:c5:ce:d2:ad: 4f:49:ef:50:f5:46:78:47:4f:6c:84:da:74:64:f1:2d:6e:aa: 7e:ef:c1:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBDgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjk1RTIxMTAvBgNVBAUTKDQxMDU5N0Q1QjAwMDQzRTIwQUEyNDA5RTMyNzFFRDRG NDFFMTMxQzcwHhcNMjUwNTE1MDAyMDM4WhcNMjUwNTIyMDAyMDM4WjAYMRYwFAYD VQQDEw02ODI1MzM1Ny1mNmNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxiXaRvOzCJAR4fiGGCE2vV0z1/IVYVACkaEtgddisFPOWNYU4OfISctKx0kV meC0mNxMnNxkmBVwCFaCBEV4lqgENqqUh5Tmr8rEhKX5BPuHWhbxps6XmVXwpbY4 jrnpn6S0uU6tpvNbQrABWtkOmyErb37KX+29GXPGKQDc/XnlvoiS3kztzH7M0kKG eAdN2cAMLVi9wGEwov8mi18s6IjIaaPaCHIWQzJjg+LaFeCrPSovbXiML8eTxs1o oanp3lAmEQc2c5GPywpkbuMqoVNmg5Qq/PfMJuTH7SdurNJK0f5zIb0pX+OABMbz VjX+sjvw/2ACeV0RwGd8DCJrvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH93TeXJ gEUx0hoS+UuPEnnr5ScvMB8GA1UdIwQYMBaAFEEFl9WwAEPiCqJAnjJx7U9B4THH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOTVFMi8xMTg1NDVGQTVD NzUxMUVDODlBQkZBMEJDNEY5QUUwMi9RUVdYMWJBQVEtSUtva0NlTW5IdFQwSGhN Y2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FRV1gxYkFBUS1JS29rQ2VNbkh0VDBIaE1jYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OTVFMi8xMTg1NDVGQTVDNzUxMUVDODlBQkZBMEJDNEY5QUUwMi9RUVdYMWJBQVEt SUtva0NlTW5IdFQwSGhNY2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUMTLZszw8jXuNUwWNmASNWgICCx5wR+RWt+SoSvSRS1oY+1K22eKu eFwituK2ihxF3LxdpZcVXtw4az25j2trhpJaVd67dD7LbKB5+JL0wtPmRgT4KguC jxybAGH99qOwNtGKi5FcH1DwLIC0YntQI4fj91Y+oVULmEdxSH3Fr+zuVsDjRfX1 APevCSQCQU27ytwL1SLhqi41JdMAn/O4dTfgH660VI0D35WBuZSjlwOZMxtxT/0f Ky0bZ2Dcgv/HWXWiaRIKTeUObF89lA+Lt4zF/S8CKU+G7ZWPd4GMn5dvus1/h8XO 0q1PSe9Q9UZ4R09shNp0ZPEtbqp+78FG -----END CERTIFICATE-----Generated at Thu May 15 11:46:35 2025 by rpki-client