$ rpki-client -vvf rpki.apnic.net/member_repository/A9113B62/2E8A754AC6E811EFBB520B0DC4F9AE02/QadeBX4lBV8UqJ9TDHjiI7Hw9ZA.mft File: QadeBX4lBV8UqJ9TDHjiI7Hw9ZA.mft (raw, json) Hash identifier: pJANGR0oGwZEnbkjDU3LL0f31M1GUbFh7jigjFshTkk= Subject key identifier: 6B:99:FE:1D:B2:26:97:90:29:03:61:94:5F:48:01:EF:A7:2D:1A:EC Authority key identifier: 41:A7:5E:05:7E:25:05:5F:14:A8:9F:53:0C:78:E2:23:B1:F0:F5:90 Certificate issuer: /CN=A9113B62/serialNumber=41A75E057E25055F14A89F530C78E223B1F0F590 Certificate serial: 4F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QadeBX4lBV8UqJ9TDHjiI7Hw9ZA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9113B62/2E8A754AC6E811EFBB520B0DC4F9AE02/QadeBX4lBV8UqJ9TDHjiI7Hw9ZA.mft Manifest number: 4E Signing time: Sat 31 May 2025 06:50:23 +0000 Manifest this update: Sat 31 May 2025 06:50:22 +0000 Manifest next update: Sat 07 Jun 2025 06:50:22 +0000 Files and hashes: 1: QadeBX4lBV8UqJ9TDHjiI7Hw9ZA.crl (hash: 58cS4yM4NFxDkwWk6MzUXunyfPfagPE4VpxCz/ghyEc=) 2: B8EBF604C6E911EFA1D4BA2BC4F9AE02.roa (hash: WSip5oZr/nzKqOFRarIzVKDUM0vv09DRdF9A4kj+F5w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9113B62/2E8A754AC6E811EFBB520B0DC4F9AE02/QadeBX4lBV8UqJ9TDHjiI7Hw9ZA.crl rsync://rpki.apnic.net/member_repository/A9113B62/2E8A754AC6E811EFBB520B0DC4F9AE02/QadeBX4lBV8UqJ9TDHjiI7Hw9ZA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QadeBX4lBV8UqJ9TDHjiI7Hw9ZA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 06:50:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79 (0x4f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9113B62, serialNumber=41A75E057E25055F14A89F530C78E223B1F0F590 Validity Not Before: May 31 06:50:22 2025 GMT Not After : Jun 7 06:50:22 2025 GMT Subject: CN=683aa6ae-8c7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:6d:7d:55:34:68:ad:b0:f3:61:91:8a:3d:e2: 8d:70:0f:9c:80:60:ce:65:1b:b5:39:0e:53:1f:28: cd:a5:58:c6:5b:4a:42:ae:c3:b7:45:42:e2:d4:76: 94:03:93:86:1d:62:ca:d6:f5:1f:76:b1:1b:14:bd: d7:5f:dc:f7:13:f7:06:1d:45:5f:06:62:4c:f9:39: b4:88:1a:70:3c:11:ea:69:f2:20:49:7e:13:79:d6: 2a:65:78:87:85:3a:76:73:55:ab:ba:65:54:51:68: 90:b1:0b:da:7f:1f:12:ff:1d:ba:a5:52:7a:d6:cd: c6:df:16:82:fc:12:0a:e9:2e:0c:a6:a8:e6:ce:78: 94:40:c9:29:ff:86:91:fe:6a:9a:d3:2f:9d:aa:44: 79:41:1c:d9:da:ca:f7:68:74:4d:b8:17:f4:a7:fe: fd:8e:84:f3:ce:24:dc:81:ce:00:1b:07:7c:13:38: 59:7a:a9:9e:c7:42:6c:f5:1f:e5:fc:4c:9a:ce:c5: d1:79:5f:00:64:83:ca:29:83:f9:5d:53:f5:22:08: 8f:dd:1a:e2:02:15:bd:fd:68:bd:45:09:1e:44:b5: e6:aa:79:a2:04:07:cd:30:0c:cb:f9:ec:1e:b9:dd: 58:be:05:63:a4:e6:9d:ee:f5:5c:32:dd:16:55:7b: 40:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:99:FE:1D:B2:26:97:90:29:03:61:94:5F:48:01:EF:A7:2D:1A:EC X509v3 Authority Key Identifier: keyid:41:A7:5E:05:7E:25:05:5F:14:A8:9F:53:0C:78:E2:23:B1:F0:F5:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9113B62/2E8A754AC6E811EFBB520B0DC4F9AE02/QadeBX4lBV8UqJ9TDHjiI7Hw9ZA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QadeBX4lBV8UqJ9TDHjiI7Hw9ZA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113B62/2E8A754AC6E811EFBB520B0DC4F9AE02/QadeBX4lBV8UqJ9TDHjiI7Hw9ZA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:5d:d0:a2:c4:e3:7f:43:81:55:a4:aa:47:79:9f:e6:c7:d8: 55:46:2d:d8:4a:9f:cc:7a:b6:20:7a:1b:63:97:00:c4:f6:e9: 85:7a:d7:b2:5f:1d:9c:d5:f1:77:d6:42:44:67:f6:af:c1:0a: 17:47:9e:cb:79:77:41:51:35:20:6b:75:10:e2:29:cf:71:90: 1a:cc:a6:df:24:75:d4:ca:90:b2:a2:96:ec:2f:d6:b4:21:e0: ee:06:04:52:73:80:de:c9:4a:df:7e:76:e3:71:52:67:0b:97: fb:78:dc:e4:7b:18:f6:7a:68:dd:10:1d:86:f6:c2:6b:3a:dc: 1c:5f:78:98:de:b3:9c:45:9f:dc:0c:54:e7:6e:92:8f:93:c7: 59:e1:58:2e:5d:ed:88:60:32:d4:c4:af:2d:af:e4:98:b9:cb: a3:4c:db:44:a3:1c:3e:6b:17:81:52:85:a9:34:bc:0b:8f:c1: cc:92:ca:89:f7:e6:9b:3e:f1:bf:61:6e:0f:eb:19:b7:07:8c: c3:46:9a:b8:6e:0f:2e:c7:cd:00:e8:64:cd:9a:d9:38:68:39: b1:05:ab:7a:ec:d0:2f:c9:b5:91:3b:a5:79:6e:c2:75:cc:31: 36:0e:d7:17:dc:45:6d:2f:14:db:61:3a:fd:f6:29:88:50:be: 08:e6:5b:e2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx M0I2MjExMC8GA1UEBRMoNDFBNzVFMDU3RTI1MDU1RjE0QTg5RjUzMEM3OEUyMjNC MUYwRjU5MDAeFw0yNTA1MzEwNjUwMjJaFw0yNTA2MDcwNjUwMjJaMBgxFjAUBgNV BAMTDTY4M2FhNmFlLThjN2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCxbX1VNGitsPNhkYo94o1wD5yAYM5lG7U5DlMfKM2lWMZbSkKuw7dFQuLUdpQD k4YdYsrW9R92sRsUvddf3PcT9wYdRV8GYkz5ObSIGnA8Eepp8iBJfhN51ipleIeF OnZzVau6ZVRRaJCxC9p/HxL/HbqlUnrWzcbfFoL8EgrpLgymqObOeJRAySn/hpH+ aprTL52qRHlBHNnayvdodE24F/Sn/v2OhPPOJNyBzgAbB3wTOFl6qZ7HQmz1H+X8 TJrOxdF5XwBkg8opg/ldU/UiCI/dGuICFb39aL1FCR5EteaqeaIEB80wDMv57B65 3Vi+BWOk5p3u9Vwy3RZVe0DPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUa5n+HbIm l5ApA2GUX0gB76ctGuwwHwYDVR0jBBgwFoAUQadeBX4lBV8UqJ9TDHjiI7Hw9ZAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEzQjYyLzJFOEE3NTRBQzZF ODExRUZCQjUyMEIwREM0RjlBRTAyL1FhZGVCWDRsQlY4VXFKOVRESGppSTdIdzla QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUWFkZUJYNGxCVjhVcUo5VERIamlJN0h3OVpBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEz QjYyLzJFOEE3NTRBQzZFODExRUZCQjUyMEIwREM0RjlBRTAyL1FhZGVCWDRsQlY4 VXFKOVRESGppSTdIdzlaQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKFd0KLE439DgVWkqkd5n+bH2FVGLdhKn8x6tiB6G2OXAMT26YV617Jf HZzV8XfWQkRn9q/BChdHnst5d0FRNSBrdRDiKc9xkBrMpt8kddTKkLKiluwv1rQh 4O4GBFJzgN7JSt9+duNxUmcLl/t43OR7GPZ6aN0QHYb2wms63BxfeJjes5xFn9wM VOduko+Tx1nhWC5d7YhgMtTEry2v5Ji5y6NM20SjHD5rF4FShak0vAuPwcySyon3 5ps+8b9hbg/rGbcHjMNGmrhuDy7HzQDoZM2a2ThoObEFq3rs0C/JtZE7pXluwnXM MTYO1xfcRW0vFNthOv32KYhQvgjmW+I= -----END CERTIFICATE-----Generated at Sat May 31 17:32:50 2025 by rpki-client