$ rpki-client -vvf rpki.apnic.net/member_repository/A9178C7A/AC45962E9C4011ED97008470C4F9AE02/QNuuLIMZi8b60lgpmII0VqN3Y6s.mft File: QNuuLIMZi8b60lgpmII0VqN3Y6s.mft (raw, json) Hash identifier: RCo+ReYiG5+cXpf5gjZG7ehe1tmaU7Rn7LU8qM6Ld8Q= Subject key identifier: F2:E0:70:8A:F7:94:AD:63:AE:0E:D7:6A:C0:56:C2:69:92:1A:E6:62 Authority key identifier: 40:DB:AE:2C:83:19:8B:C6:FA:D2:58:29:98:82:34:56:A3:77:63:AB Certificate issuer: /CN=A9178C7A/serialNumber=40DBAE2C83198BC6FAD2582998823456A37763AB Certificate serial: 019C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QNuuLIMZi8b60lgpmII0VqN3Y6s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178C7A/AC45962E9C4011ED97008470C4F9AE02/QNuuLIMZi8b60lgpmII0VqN3Y6s.mft Manifest number: 0198 Signing time: Sat 29 Mar 2025 02:58:15 +0000 Manifest this update: Sat 29 Mar 2025 02:58:14 +0000 Manifest next update: Sat 05 Apr 2025 02:58:14 +0000 Files and hashes: 1: QNuuLIMZi8b60lgpmII0VqN3Y6s.crl (hash: N2Pe7xDyDr6Nx3vu38e6Ef6WFmAuz1PYmDGfWChEzEM=) 2: 668242F49C4511EDB73A4379C4F9AE02.roa (hash: gmNihSedKpDGfcYPF1sadPjFdgvJvl9JTBA30x8f3SM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178C7A/AC45962E9C4011ED97008470C4F9AE02/QNuuLIMZi8b60lgpmII0VqN3Y6s.crl rsync://rpki.apnic.net/member_repository/A9178C7A/AC45962E9C4011ED97008470C4F9AE02/QNuuLIMZi8b60lgpmII0VqN3Y6s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QNuuLIMZi8b60lgpmII0VqN3Y6s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 02:58:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 412 (0x19c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178C7A Validity Not Before: Mar 29 02:58:14 2025 GMT Not After : Apr 5 02:58:14 2025 GMT Subject: CN=67e761c6-75d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:db:01:e7:72:a7:18:9e:f2:1c:85:f4:8a:1c: dd:e9:4f:d1:3a:9c:6b:81:63:cf:4a:a8:2d:c4:b3: 46:e2:e2:43:e0:33:fe:84:2c:4a:0e:f5:2e:86:1e: 68:ad:21:7b:b0:b7:5a:90:6a:98:53:20:18:61:db: 3c:97:0f:38:4d:04:a6:ff:f5:23:fc:3d:45:5d:44: a3:22:3e:62:76:27:d6:e8:09:b0:78:9b:a5:ba:41: e3:e1:fd:a1:96:52:91:bc:fb:c1:6a:25:12:1a:89: 37:cb:6d:e0:04:91:29:7d:33:06:0e:8c:f8:17:e7: 9c:89:30:51:fa:4b:6c:2f:0a:de:40:70:a2:9d:07: 3a:6e:8c:cc:5b:6c:45:2c:42:31:53:98:1c:1e:fa: d1:07:b7:2f:3a:dc:3d:82:a8:e4:25:19:8e:e3:b4: d7:eb:7f:a5:23:2c:3c:ff:cd:ed:d6:0d:2a:07:f4: 0c:d7:bd:60:ee:ac:f4:06:e4:bd:af:12:30:a7:76: b7:82:c6:e5:df:8f:5a:43:b4:fc:8f:46:2a:1a:03: dc:07:0d:59:c8:42:82:8c:55:50:2b:0a:29:bd:58: 03:bb:6b:86:49:a7:c7:ce:10:c6:94:e0:d0:bd:6b: 2a:cc:f1:c9:89:15:ac:d6:49:b1:ec:1f:9b:16:4d: ae:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:E0:70:8A:F7:94:AD:63:AE:0E:D7:6A:C0:56:C2:69:92:1A:E6:62 X509v3 Authority Key Identifier: keyid:40:DB:AE:2C:83:19:8B:C6:FA:D2:58:29:98:82:34:56:A3:77:63:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178C7A/AC45962E9C4011ED97008470C4F9AE02/QNuuLIMZi8b60lgpmII0VqN3Y6s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QNuuLIMZi8b60lgpmII0VqN3Y6s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178C7A/AC45962E9C4011ED97008470C4F9AE02/QNuuLIMZi8b60lgpmII0VqN3Y6s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:ab:81:db:1d:96:c2:16:d7:a0:32:c1:d9:62:cc:af:2f:59: a7:1c:5a:b2:58:4f:4a:9c:1c:b9:f1:c0:36:4a:9f:d6:57:22: 3f:71:2f:26:b5:57:81:ea:f3:a5:8b:1e:7b:91:e5:bd:17:cb: 6d:0e:8f:d7:11:dc:3f:84:16:e6:64:86:a9:de:9f:e4:2a:d2: 44:7a:0d:3b:c4:1f:8e:71:ab:d9:aa:c4:63:dc:b8:4d:4f:c4: d8:4d:76:93:7c:db:e8:cc:33:6e:fa:f2:43:3b:7e:fa:0b:7d: c3:fd:89:0c:4b:00:84:84:c8:23:b8:a0:2f:a0:df:d4:d0:64: a3:3d:e3:15:a9:03:ec:4c:c4:9e:79:50:7f:b8:64:d8:bf:8b: 79:a0:55:52:b5:81:60:85:cb:8c:8f:c6:79:6b:0c:bd:04:6c: 6c:ec:86:65:47:0c:04:0d:98:e0:04:70:b8:6e:17:41:5d:0a: 7a:2e:c1:f2:90:db:02:0e:31:ec:96:41:fb:67:8a:c2:9a:e4: e7:f9:3d:08:ad:33:17:98:a1:d9:6b:ee:8d:7b:28:4b:15:f8: 47:c3:85:f3:06:d3:a7:16:67:4a:bd:0b:fd:4b:9b:33:7e:ad: 52:94:e5:ad:39:c7:e6:0a:85:db:2c:62:86:b9:c9:72:0f:15: 2d:6d:75:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzhDN0ExMTAvBgNVBAUTKDQwREJBRTJDODMxOThCQzZGQUQyNTgyOTk4ODIzNDU2 QTM3NzYzQUIwHhcNMjUwMzI5MDI1ODE0WhcNMjUwNDA1MDI1ODE0WjAYMRYwFAYD VQQDEw02N2U3NjFjNi03NWQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzdsB53KnGJ7yHIX0ihzd6U/ROpxrgWPPSqgtxLNG4uJD4DP+hCxKDvUuhh5o rSF7sLdakGqYUyAYYds8lw84TQSm//Uj/D1FXUSjIj5idifW6AmweJulukHj4f2h llKRvPvBaiUSGok3y23gBJEpfTMGDoz4F+eciTBR+ktsLwreQHCinQc6bozMW2xF LEIxU5gcHvrRB7cvOtw9gqjkJRmO47TX63+lIyw8/83t1g0qB/QM171g7qz0BuS9 rxIwp3a3gsbl349aQ7T8j0YqGgPcBw1ZyEKCjFVQKwopvVgDu2uGSafHzhDGlODQ vWsqzPHJiRWs1kmx7B+bFk2uqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPLgcIr3 lK1jrg7XasBWwmmSGuZiMB8GA1UdIwQYMBaAFEDbriyDGYvG+tJYKZiCNFajd2Or MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OEM3QS9BQzQ1OTYyRTlD NDAxMUVEOTcwMDg0NzBDNEY5QUUwMi9RTnV1TElNWmk4YjYwbGdwbUlJMFZxTjNZ NnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FOdXVMSU1aaThiNjBsZ3BtSUkwVnFOM1k2cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OEM3QS9BQzQ1OTYyRTlDNDAxMUVEOTcwMDg0NzBDNEY5QUUwMi9RTnV1TElNWmk4 YjYwbGdwbUlJMFZxTjNZNnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKq4HbHZbCFtegMsHZYsyvL1mnHFqyWE9KnBy58cA2Sp/WVyI/cS8m tVeB6vOlix57keW9F8ttDo/XEdw/hBbmZIap3p/kKtJEeg07xB+OcavZqsRj3LhN T8TYTXaTfNvozDNu+vJDO376C33D/YkMSwCEhMgjuKAvoN/U0GSjPeMVqQPsTMSe eVB/uGTYv4t5oFVStYFghcuMj8Z5awy9BGxs7IZlRwwEDZjgBHC4bhdBXQp6LsHy kNsCDjHslkH7Z4rCmuTn+T0IrTMXmKHZa+6NeyhLFfhHw4XzBtOnFmdKvQv9S5sz fq1SlOWtOcfmCoXbLGKGuclyDxUtbXWP -----END CERTIFICATE-----Generated at Fri Apr 4 22:01:46 2025 by rpki-client