$ rpki-client -vvf rpki.apnic.net/member_repository/A913D6C9/73FBD332481D11ECB6FEDF77C4F9AE02/Qfi2tHutsA9vj-jn4BP_VaGOdCg.mft File: Qfi2tHutsA9vj-jn4BP_VaGOdCg.mft (raw, json) Hash identifier: u1nmYRa6QYNhNBq7rn8cMTihlvMTcS47E80z/GzAmEA= Subject key identifier: E3:8A:00:4D:10:75:9B:3F:34:05:26:37:21:4E:BD:06:2A:49:06:EA Authority key identifier: 41:F8:B6:B4:7B:AD:B0:0F:6F:8F:E8:E7:E0:13:FF:55:A1:8E:74:28 Certificate issuer: /CN=A913D6C9/serialNumber=41F8B6B47BADB00F6F8FE8E7E013FF55A18E7428 Certificate serial: 0486 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qfi2tHutsA9vj-jn4BP_VaGOdCg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913D6C9/73FBD332481D11ECB6FEDF77C4F9AE02/Qfi2tHutsA9vj-jn4BP_VaGOdCg.mft Manifest number: 047C Signing time: Sat 31 May 2025 00:18:49 +0000 Manifest this update: Sat 31 May 2025 00:18:48 +0000 Manifest next update: Sat 07 Jun 2025 00:18:48 +0000 Files and hashes: 1: Qfi2tHutsA9vj-jn4BP_VaGOdCg.crl (hash: ayZghISHMBqAuNqvRpEKDRw7TWBMuODU/77lHfc6di0=) 2: 54AC9B64C3B411EEBF90C180C4F9AE02.roa (hash: BPstFCUC7r4sqZcas3tBZS1NiGfkeUG5bomyvOkC2W0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913D6C9/73FBD332481D11ECB6FEDF77C4F9AE02/Qfi2tHutsA9vj-jn4BP_VaGOdCg.crl rsync://rpki.apnic.net/member_repository/A913D6C9/73FBD332481D11ECB6FEDF77C4F9AE02/Qfi2tHutsA9vj-jn4BP_VaGOdCg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qfi2tHutsA9vj-jn4BP_VaGOdCg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:18:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1158 (0x486) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913D6C9, serialNumber=41F8B6B47BADB00F6F8FE8E7E013FF55A18E7428 Validity Not Before: May 31 00:18:48 2025 GMT Not After : Jun 7 00:18:48 2025 GMT Subject: CN=683a4ae9-c353 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:fd:9c:40:98:d7:30:62:db:53:66:c1:e2:6a: 4b:22:23:04:06:f8:35:83:35:00:97:c3:11:3b:c5: f0:39:b6:6d:d4:91:48:4c:c0:48:b0:e2:f3:17:25: 6e:f9:b2:c6:8c:93:ce:15:ad:20:36:03:11:ef:65: ba:81:26:ce:6b:bc:5d:b2:3a:69:0b:73:9a:d6:f1: 4d:35:dc:4f:c3:3b:06:93:6c:44:b1:82:03:b7:3f: 92:97:3e:c1:c1:4f:6f:19:60:fc:2f:1b:be:89:5c: ea:a4:88:a3:a9:a8:41:d9:5d:b6:71:db:16:50:f3: 79:59:c3:c1:29:ec:23:d9:90:7b:4a:0d:f6:9a:5f: e0:59:f8:85:03:fa:71:c5:c1:b3:39:f3:e1:1d:19: 25:49:73:89:9a:ab:77:e7:8d:54:07:0e:5d:68:46: f3:b4:85:88:17:b2:02:80:6d:26:fe:b7:f9:f1:44: ed:6b:03:ff:c8:52:a4:5b:76:49:cb:8c:3a:e0:f7: 40:65:f9:43:4f:9b:7d:3e:8e:46:02:75:a9:93:06: b7:8f:e9:5f:10:c2:07:86:56:31:bf:b7:d5:a7:14: dd:b8:29:59:71:03:20:df:78:a9:ff:15:db:4a:de: 8d:f4:44:5c:87:a0:7c:2b:1a:57:58:3e:d3:aa:39: c7:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:8A:00:4D:10:75:9B:3F:34:05:26:37:21:4E:BD:06:2A:49:06:EA X509v3 Authority Key Identifier: keyid:41:F8:B6:B4:7B:AD:B0:0F:6F:8F:E8:E7:E0:13:FF:55:A1:8E:74:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913D6C9/73FBD332481D11ECB6FEDF77C4F9AE02/Qfi2tHutsA9vj-jn4BP_VaGOdCg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qfi2tHutsA9vj-jn4BP_VaGOdCg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D6C9/73FBD332481D11ECB6FEDF77C4F9AE02/Qfi2tHutsA9vj-jn4BP_VaGOdCg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:44:3b:1c:ad:f9:34:64:95:e9:35:f9:22:8f:bf:22:e8:6e: 61:1c:a5:e9:c3:a9:e4:a7:48:93:86:22:ef:6a:c6:29:23:11: 35:5d:76:4f:b7:97:e5:e0:cc:01:3c:a9:c6:d8:15:34:96:b2: 69:46:f1:af:b7:5a:cf:90:a0:06:6e:d5:57:fc:16:e3:22:20: 7a:8b:e4:81:30:31:0c:e6:d6:83:2c:9d:ce:62:40:f1:5e:25: fd:b3:3e:1b:5c:e6:c7:23:5d:31:e1:d0:d2:ef:2d:f1:1d:d0: 6f:35:54:10:d2:cc:8a:d9:56:11:d3:af:fa:b5:38:49:f9:d2: 91:28:e7:ce:e8:df:2b:e0:1b:b4:4d:d9:ff:24:5b:39:9e:de: 2c:7e:df:05:b1:ec:7b:3b:68:b0:99:00:4c:0f:a0:c8:89:12: f3:9d:69:21:71:cb:7c:62:22:51:e1:6d:8a:6b:27:0b:be:28: 8b:a9:0c:4e:36:2d:f0:d2:7f:87:8c:13:a8:c0:39:d0:fb:d4: b2:e6:17:ae:c3:12:c6:3b:8d:f1:3d:b5:ba:01:07:43:b9:00: 18:14:52:2e:8c:a3:4f:35:a8:7e:ab:5f:13:5d:18:43:0c:7a: 8d:75:27:89:87:aa:9b:59:87:73:b7:cc:27:c8:02:89:81:06: 56:90:6c:cf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBIYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0Q2QzkxMTAvBgNVBAUTKDQxRjhCNkI0N0JBREIwMEY2RjhGRThFN0UwMTNGRjU1 QTE4RTc0MjgwHhcNMjUwNTMxMDAxODQ4WhcNMjUwNjA3MDAxODQ4WjAYMRYwFAYD VQQDEw02ODNhNGFlOS1jMzUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2f2cQJjXMGLbU2bB4mpLIiMEBvg1gzUAl8MRO8XwObZt1JFITMBIsOLzFyVu +bLGjJPOFa0gNgMR72W6gSbOa7xdsjppC3Oa1vFNNdxPwzsGk2xEsYIDtz+Slz7B wU9vGWD8Lxu+iVzqpIijqahB2V22cdsWUPN5WcPBKewj2ZB7Sg32ml/gWfiFA/px xcGzOfPhHRklSXOJmqt3541UBw5daEbztIWIF7ICgG0m/rf58UTtawP/yFKkW3ZJ y4w64PdAZflDT5t9Po5GAnWpkwa3j+lfEMIHhlYxv7fVpxTduClZcQMg33ip/xXb St6N9ERch6B8KxpXWD7TqjnHFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOOKAE0Q dZs/NAUmNyFOvQYqSQbqMB8GA1UdIwQYMBaAFEH4trR7rbAPb4/o5+AT/1WhjnQo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRDZDOS83M0ZCRDMzMjQ4 MUQxMUVDQjZGRURGNzdDNEY5QUUwMi9RZmkydEh1dHNBOXZqLWpuNEJQX1ZhR09k Q2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FmaTJ0SHV0c0E5dmotam40QlBfVmFHT2RDZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RDZDOS83M0ZCRDMzMjQ4MUQxMUVDQjZGRURGNzdDNEY5QUUwMi9RZmkydEh1dHNB OXZqLWpuNEJQX1ZhR09kQ2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8RDscrfk0ZJXpNfkij78i6G5hHKXpw6nkp0iThiLvasYpIxE1XXZP t5fl4MwBPKnG2BU0lrJpRvGvt1rPkKAGbtVX/BbjIiB6i+SBMDEM5taDLJ3OYkDx XiX9sz4bXObHI10x4dDS7y3xHdBvNVQQ0syK2VYR06/6tThJ+dKRKOfO6N8r4Bu0 Tdn/JFs5nt4sft8Fsex7O2iwmQBMD6DIiRLznWkhcct8YiJR4W2KaycLviiLqQxO Ni3w0n+HjBOowDnQ+9Sy5heuwxLGO43xPbW6AQdDuQAYFFIujKNPNah+q18TXRhD DHqNdSeJh6qbWYdzt8wnyAKJgQZWkGzP -----END CERTIFICATE-----Generated at Sat May 31 16:55:07 2025 by rpki-client