$ rpki-client -vvf rpki.apnic.net/member_repository/A918CEC7/9BB4EAB4C87B11EDA6132A40C4F9AE02/QWGK4TpB-ZnFeQQotxb8rlQkqJE.mft File: QWGK4TpB-ZnFeQQotxb8rlQkqJE.mft (raw, json) Hash identifier: GKRUuc6izEvbB2//Vy/jLSYxN1ICPna7rwN0RFJYqZs= Subject key identifier: 5B:9A:16:29:48:7C:E5:65:AF:7B:01:7A:CE:C4:87:66:6C:C7:5D:63 Authority key identifier: 41:61:8A:E1:3A:41:F9:99:C5:79:04:28:B7:16:FC:AE:54:24:A8:91 Certificate issuer: /CN=A918CEC7/serialNumber=41618AE13A41F999C5790428B716FCAE5424A891 Certificate serial: 0185 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QWGK4TpB-ZnFeQQotxb8rlQkqJE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918CEC7/9BB4EAB4C87B11EDA6132A40C4F9AE02/QWGK4TpB-ZnFeQQotxb8rlQkqJE.mft Manifest number: 0181 Signing time: Sat 29 Mar 2025 03:13:08 +0000 Manifest this update: Sat 29 Mar 2025 03:13:08 +0000 Manifest next update: Sat 05 Apr 2025 03:13:08 +0000 Files and hashes: 1: QWGK4TpB-ZnFeQQotxb8rlQkqJE.crl (hash: cyIrH6XANYLeLcwD72I09tsVNsFgZ8paXmrghp5MpMY=) 2: CCD6FD9AC92E11ED931E6469C4F9AE02.roa (hash: bAtzTQ6ksGlovLoJiFT89uWNFpngQdeDkCpn1zXsqCU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918CEC7/9BB4EAB4C87B11EDA6132A40C4F9AE02/QWGK4TpB-ZnFeQQotxb8rlQkqJE.crl rsync://rpki.apnic.net/member_repository/A918CEC7/9BB4EAB4C87B11EDA6132A40C4F9AE02/QWGK4TpB-ZnFeQQotxb8rlQkqJE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QWGK4TpB-ZnFeQQotxb8rlQkqJE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 03:13:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 389 (0x185) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918CEC7 Validity Not Before: Mar 29 03:13:08 2025 GMT Not After : Apr 5 03:13:08 2025 GMT Subject: CN=67e76544-df8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a8:0c:9b:17:7f:1a:20:61:97:51:1e:29:15: e3:35:dd:87:fa:87:30:ae:4c:2d:4f:40:e3:12:08: 73:37:f5:79:5b:cd:3b:bf:f5:c5:8a:3f:a3:b9:3b: e5:10:ca:85:8a:23:da:5e:c9:fe:a5:f3:0f:4b:e4: 66:96:49:62:07:0b:d5:fb:95:bf:00:24:cf:9f:72: 7c:94:49:3b:c0:de:2e:14:8d:b6:b7:c5:ee:57:a0: cf:b8:58:e6:81:74:39:de:d4:99:3e:4b:48:03:f8: 57:41:d5:ea:d2:5b:44:7c:1b:07:ae:fe:ad:e9:a8: 5d:ed:4c:3f:dd:25:0d:a7:9c:26:c5:cf:35:83:37: 93:e1:41:ee:ba:d5:fe:cb:3a:8d:6a:86:71:f0:b5: 6f:bc:77:9a:ea:ee:4d:cf:69:a6:0e:e3:7b:fb:cd: 23:05:04:e2:78:1f:a9:4b:61:00:9a:7c:18:8a:b4: e6:2e:4b:b1:1a:51:40:56:1b:f0:65:58:a7:bb:5b: 2b:b2:1a:48:86:ef:9d:9f:3e:19:11:68:b9:17:92: c9:85:ca:61:86:f8:b9:ef:c6:46:da:0f:c3:0e:2c: 7d:1a:f8:86:bc:86:f8:de:87:ca:8a:54:22:11:db: 13:0e:42:2b:69:c7:ef:36:d5:fb:06:be:cd:87:be: f4:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:9A:16:29:48:7C:E5:65:AF:7B:01:7A:CE:C4:87:66:6C:C7:5D:63 X509v3 Authority Key Identifier: keyid:41:61:8A:E1:3A:41:F9:99:C5:79:04:28:B7:16:FC:AE:54:24:A8:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918CEC7/9BB4EAB4C87B11EDA6132A40C4F9AE02/QWGK4TpB-ZnFeQQotxb8rlQkqJE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QWGK4TpB-ZnFeQQotxb8rlQkqJE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CEC7/9BB4EAB4C87B11EDA6132A40C4F9AE02/QWGK4TpB-ZnFeQQotxb8rlQkqJE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:50:57:f8:dd:71:b2:9f:ea:52:ec:49:12:61:07:06:34:99: de:ec:a7:a3:ab:6f:8c:d7:0a:30:50:fb:16:e6:6e:ae:f3:d6: 4b:56:67:d3:0b:28:3e:04:06:0e:0a:ee:f8:de:c4:d7:29:06: fe:0b:01:2e:97:b0:1f:ea:fa:8b:2a:12:ea:04:f2:30:b7:d9: 4b:24:bf:f6:d1:e4:c5:d8:e5:b7:f1:f6:c4:45:fa:bb:8f:7b: 81:87:22:25:7e:3f:e9:c5:c3:bc:80:c7:ab:7b:c8:24:02:50: cf:ab:c6:2f:94:bc:ae:9c:ff:31:43:45:2f:28:0f:91:39:08: ab:e2:50:4e:4e:7f:86:be:e2:e7:3e:5b:26:c3:a0:40:6d:0f: ae:55:8e:64:50:1e:97:05:e6:22:d4:a5:30:4d:d8:3f:74:ec: f5:0a:13:f5:12:f1:81:2f:b9:eb:2e:56:9a:ba:65:8e:e4:32: 5f:c4:64:32:2b:76:10:d5:62:aa:dd:97:89:dc:5d:05:73:b3: e6:41:cb:0c:53:c7:b7:90:55:9b:9c:c2:bb:60:96:cb:46:bc: d3:a5:ad:d0:ea:98:83:9f:4c:6f:c7:16:18:34:e4:5c:3f:23: 6f:d0:4e:63:67:81:f5:ca:e0:3a:54:8c:13:4e:2f:35:ad:ec: ed:53:e3:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OENFQzcxMTAvBgNVBAUTKDQxNjE4QUUxM0E0MUY5OTlDNTc5MDQyOEI3MTZGQ0FF NTQyNEE4OTEwHhcNMjUwMzI5MDMxMzA4WhcNMjUwNDA1MDMxMzA4WjAYMRYwFAYD VQQDEw02N2U3NjU0NC1kZjhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt6gMmxd/GiBhl1EeKRXjNd2H+ocwrkwtT0DjEghzN/V5W807v/XFij+juTvl EMqFiiPaXsn+pfMPS+RmlkliBwvV+5W/ACTPn3J8lEk7wN4uFI22t8XuV6DPuFjm gXQ53tSZPktIA/hXQdXq0ltEfBsHrv6t6ahd7Uw/3SUNp5wmxc81gzeT4UHuutX+ yzqNaoZx8LVvvHea6u5Nz2mmDuN7+80jBQTieB+pS2EAmnwYirTmLkuxGlFAVhvw ZVinu1srshpIhu+dnz4ZEWi5F5LJhcphhvi578ZG2g/DDix9GviGvIb43ofKilQi EdsTDkIracfvNtX7Br7Nh770xwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFuaFilI fOVlr3sBes7Eh2Zsx11jMB8GA1UdIwQYMBaAFEFhiuE6QfmZxXkEKLcW/K5UJKiR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Q0VDNy85QkI0RUFCNEM4 N0IxMUVEQTYxMzJBNDBDNEY5QUUwMi9RV0dLNFRwQi1abkZlUVFvdHhiOHJsUWtx SkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FXR0s0VHBCLVpuRmVRUW90eGI4cmxRa3FKRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Q0VDNy85QkI0RUFCNEM4N0IxMUVEQTYxMzJBNDBDNEY5QUUwMi9RV0dLNFRwQi1a bkZlUVFvdHhiOHJsUWtxSkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGUFf43XGyn+pS7EkSYQcGNJne7Kejq2+M1wowUPsW5m6u89ZLVmfT Cyg+BAYOCu743sTXKQb+CwEul7Af6vqLKhLqBPIwt9lLJL/20eTF2OW38fbERfq7 j3uBhyIlfj/pxcO8gMere8gkAlDPq8YvlLyunP8xQ0UvKA+ROQir4lBOTn+GvuLn Plsmw6BAbQ+uVY5kUB6XBeYi1KUwTdg/dOz1ChP1EvGBL7nrLlaaumWO5DJfxGQy K3YQ1WKq3ZeJ3F0Fc7PmQcsMU8e3kFWbnMK7YJbLRrzTpa3Q6piDn0xvxxYYNORc PyNv0E5jZ4H1yuA6VIwTTi81reztU+Oy -----END CERTIFICATE-----Generated at Fri Apr 4 22:10:45 2025 by rpki-client