$ rpki-client -vvf rpki.apnic.net/member_repository/A91178F4/D7065E34213211EA9A05FF40C4F9AE02/QvY5Q1NTT7CXXsweC49bZSOvr8U.mft File: QvY5Q1NTT7CXXsweC49bZSOvr8U.mft (raw, json) Hash identifier: mN+8bkoTEjXhgpSDfkRSGXkAVCcvBpbm772nqYcZ/MU= Subject key identifier: 07:A2:44:BB:FF:77:49:18:CE:35:2B:4D:EC:04:76:FE:8F:9E:8B:42 Authority key identifier: 42:F6:39:43:53:53:4F:B0:97:5E:CC:1E:0B:8F:5B:65:23:AF:AF:C5 Certificate issuer: /CN=A91178F4/serialNumber=42F6394353534FB0975ECC1E0B8F5B6523AFAFC5 Certificate serial: 0BBA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QvY5Q1NTT7CXXsweC49bZSOvr8U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91178F4/D7065E34213211EA9A05FF40C4F9AE02/QvY5Q1NTT7CXXsweC49bZSOvr8U.mft Manifest number: 0BBA Signing time: Fri 30 May 2025 19:08:25 +0000 Manifest this update: Fri 30 May 2025 19:08:25 +0000 Manifest next update: Fri 06 Jun 2025 19:08:25 +0000 Files and hashes: 1: QvY5Q1NTT7CXXsweC49bZSOvr8U.crl (hash: vY+7KEnAsMDLjAkvjHicMFjsiii7c85pArkFr02BA2Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91178F4/D7065E34213211EA9A05FF40C4F9AE02/QvY5Q1NTT7CXXsweC49bZSOvr8U.crl rsync://rpki.apnic.net/member_repository/A91178F4/D7065E34213211EA9A05FF40C4F9AE02/QvY5Q1NTT7CXXsweC49bZSOvr8U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QvY5Q1NTT7CXXsweC49bZSOvr8U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 19:08:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3002 (0xbba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91178F4, serialNumber=42F6394353534FB0975ECC1E0B8F5B6523AFAFC5 Validity Not Before: May 30 19:08:25 2025 GMT Not After : Jun 6 19:08:25 2025 GMT Subject: CN=683a0229-7620 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:4e:02:e9:27:8f:ac:57:bc:1f:b3:6c:92:f2: a5:bc:2a:a5:03:fc:05:9b:70:b4:b5:2e:cb:9d:e5: 5e:9d:20:9d:1c:b1:fe:2f:20:19:b9:51:97:47:54: 15:03:8f:0f:7c:eb:05:1e:15:d6:63:d3:89:7d:eb: b9:c5:51:2e:7c:ff:74:79:cc:71:bc:91:52:6f:09: 96:f2:e4:5f:b8:43:c4:83:ed:e2:65:35:83:33:28: c0:ff:d0:8b:1c:a3:de:ed:d5:99:00:03:a9:63:d0: 13:56:4e:bb:06:61:e7:d3:00:78:0e:ab:e5:06:78: 6b:ee:60:c4:d5:d8:fe:f4:9a:cf:6c:57:1e:8e:5d: 0b:80:76:97:05:ef:fd:87:16:4e:55:ff:69:2f:ef: 23:00:5d:be:d0:b1:b9:f5:01:55:bb:ba:23:8f:33: dd:09:77:85:59:dd:fe:6a:95:04:54:65:aa:b8:2c: ff:b3:b6:12:f2:79:2e:e8:53:4f:09:38:e1:5d:17: 81:86:6a:0c:75:dc:c8:57:75:1b:54:84:d6:75:db: 3a:61:05:54:bd:4b:23:b0:4f:77:ba:f8:45:d3:a0: 5b:bb:f5:e2:a7:b2:5a:db:9b:8c:ba:62:94:c7:ee: 07:fc:33:82:dd:60:c3:32:33:54:0f:0f:4c:bb:0e: 06:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:A2:44:BB:FF:77:49:18:CE:35:2B:4D:EC:04:76:FE:8F:9E:8B:42 X509v3 Authority Key Identifier: keyid:42:F6:39:43:53:53:4F:B0:97:5E:CC:1E:0B:8F:5B:65:23:AF:AF:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91178F4/D7065E34213211EA9A05FF40C4F9AE02/QvY5Q1NTT7CXXsweC49bZSOvr8U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QvY5Q1NTT7CXXsweC49bZSOvr8U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91178F4/D7065E34213211EA9A05FF40C4F9AE02/QvY5Q1NTT7CXXsweC49bZSOvr8U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:aa:36:c6:ac:2c:d6:fc:06:a6:bb:a7:bd:72:df:b2:64:47: 0f:a3:32:79:91:20:11:4c:03:29:ab:ba:e0:06:4e:50:da:d1: 7a:c5:d2:05:df:0d:ed:b7:33:9d:d5:d4:10:20:ed:0d:bc:b2: a6:2f:03:80:2c:f6:c2:55:b5:e6:cd:0f:c7:a2:b8:31:ec:b1: d1:ef:f4:4e:39:26:bc:0f:8c:cd:e1:86:60:67:92:7c:39:57: 6e:8c:36:39:20:55:fa:4a:0d:e3:9f:26:6f:b7:07:66:e4:a6: 39:60:55:c0:a7:76:29:93:98:50:10:d3:ed:63:90:31:f9:a5: 89:84:d8:73:f1:c8:95:60:ed:25:d6:77:67:43:67:91:85:d3: 91:f6:e2:64:fe:6b:43:79:e4:80:d2:9d:7a:d1:b5:33:7f:6c: 44:90:ae:d5:af:1e:45:4b:61:71:a3:f4:e2:8f:b1:a5:73:64: fc:ea:f6:fa:e7:d9:25:69:33:71:4d:9a:2f:66:06:e5:c6:63: 16:f0:b1:05:11:c1:43:79:48:24:c6:e1:34:54:d8:ff:9d:c8: 2f:80:57:08:25:71:e3:4d:51:e7:2d:2f:7a:68:be:df:02:c1: c4:ad:39:dc:28:33:b5:e1:fc:89:d6:17:da:6f:d4:aa:d6:ea: 32:3d:41:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC7owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTc4RjQxMTAvBgNVBAUTKDQyRjYzOTQzNTM1MzRGQjA5NzVFQ0MxRTBCOEY1QjY1 MjNBRkFGQzUwHhcNMjUwNTMwMTkwODI1WhcNMjUwNjA2MTkwODI1WjAYMRYwFAYD VQQDEw02ODNhMDIyOS03NjIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7U4C6SePrFe8H7NskvKlvCqlA/wFm3C0tS7LneVenSCdHLH+LyAZuVGXR1QV A48PfOsFHhXWY9OJfeu5xVEufP90ecxxvJFSbwmW8uRfuEPEg+3iZTWDMyjA/9CL HKPe7dWZAAOpY9ATVk67BmHn0wB4DqvlBnhr7mDE1dj+9JrPbFcejl0LgHaXBe/9 hxZOVf9pL+8jAF2+0LG59QFVu7ojjzPdCXeFWd3+apUEVGWquCz/s7YS8nku6FNP CTjhXReBhmoMddzIV3UbVITWdds6YQVUvUsjsE93uvhF06Bbu/Xip7Ja25uMumKU x+4H/DOC3WDDMjNUDw9Muw4GYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAeiRLv/ d0kYzjUrTewEdv6PnotCMB8GA1UdIwQYMBaAFEL2OUNTU0+wl17MHguPW2Ujr6/F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzhGNC9ENzA2NUUzNDIx MzIxMUVBOUEwNUZGNDBDNEY5QUUwMi9Rdlk1UTFOVFQ3Q1hYc3dlQzQ5YlpTT3Zy OFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1F2WTVRMU5UVDdDWFhzd2VDNDliWlNPdnI4VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NzhGNC9ENzA2NUUzNDIxMzIxMUVBOUEwNUZGNDBDNEY5QUUwMi9Rdlk1UTFOVFQ3 Q1hYc3dlQzQ5YlpTT3ZyOFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgqjbGrCzW/Aamu6e9ct+yZEcPozJ5kSARTAMpq7rgBk5Q2tF6xdIF 3w3ttzOd1dQQIO0NvLKmLwOALPbCVbXmzQ/Horgx7LHR7/ROOSa8D4zN4YZgZ5J8 OVdujDY5IFX6Sg3jnyZvtwdm5KY5YFXAp3Ypk5hQENPtY5Ax+aWJhNhz8ciVYO0l 1ndnQ2eRhdOR9uJk/mtDeeSA0p160bUzf2xEkK7Vrx5FS2Fxo/Tij7Glc2T86vb6 59klaTNxTZovZgblxmMW8LEFEcFDeUgkxuE0VNj/ncgvgFcIJXHjTVHnLS96aL7f AsHErTncKDO14fyJ1hfab9Sq1uoyPUES -----END CERTIFICATE-----Generated at Sat May 31 17:10:15 2025 by rpki-client