$ rpki-client -vvf rpki.apnic.net/member_repository/A9142127/20F4443A546D11EABDD3C117C4F9AE02/QVAn2MkpjpfaBcDEPc2Lr1IXQXU.mft File: QVAn2MkpjpfaBcDEPc2Lr1IXQXU.mft (raw, json) Hash identifier: CIiV2Aobo5VW1ueumxC1PKv2fQvuBIqmMtPOLKVorQw= Subject key identifier: 7E:83:0E:D3:23:79:0A:B7:DD:30:B6:28:68:BB:CE:55:56:AB:11:1C Authority key identifier: 41:50:27:D8:C9:29:8E:97:DA:05:C0:C4:3D:CD:8B:AF:52:17:41:75 Certificate issuer: /CN=A9142127/serialNumber=415027D8C9298E97DA05C0C43DCD8BAF52174175 Certificate serial: 0AD4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVAn2MkpjpfaBcDEPc2Lr1IXQXU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142127/20F4443A546D11EABDD3C117C4F9AE02/QVAn2MkpjpfaBcDEPc2Lr1IXQXU.mft Manifest number: 0AC4 Signing time: Fri 30 May 2025 19:43:07 +0000 Manifest this update: Fri 30 May 2025 19:43:07 +0000 Manifest next update: Fri 06 Jun 2025 19:43:07 +0000 Files and hashes: 1: QVAn2MkpjpfaBcDEPc2Lr1IXQXU.crl (hash: /JldrxeOacGeg5Sy9fM13SSPz8hmaaroCBfVDOUALy8=) 2: 7B3737EE546E11EAAA4CF919C4F9AE02.roa (hash: XMZdqD9gB3JqFRbYSCLRYPYkSAmXVoSI5VBqXbHS+f0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142127/20F4443A546D11EABDD3C117C4F9AE02/QVAn2MkpjpfaBcDEPc2Lr1IXQXU.crl rsync://rpki.apnic.net/member_repository/A9142127/20F4443A546D11EABDD3C117C4F9AE02/QVAn2MkpjpfaBcDEPc2Lr1IXQXU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVAn2MkpjpfaBcDEPc2Lr1IXQXU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 19:43:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2772 (0xad4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142127, serialNumber=415027D8C9298E97DA05C0C43DCD8BAF52174175 Validity Not Before: May 30 19:43:07 2025 GMT Not After : Jun 6 19:43:07 2025 GMT Subject: CN=683a0a4b-69e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:28:44:85:32:ce:79:d7:55:71:30:ce:48:4d: b9:3d:b4:91:21:08:73:10:67:be:b1:04:3c:05:9b: f3:97:21:4f:79:25:93:73:77:42:11:4d:81:ee:69: e6:1b:b3:65:a2:9c:9a:18:bb:a1:bc:bb:20:fc:c7: 43:09:bc:62:72:1d:5b:3e:18:9e:b5:54:1f:ac:f8: e6:1b:13:1a:ab:ee:e6:1b:0e:73:21:55:e9:5e:ef: 3f:ad:11:51:fa:ed:f6:ec:cf:d1:d2:30:87:38:22: 77:90:aa:6e:40:ad:e7:4a:47:0d:c6:c9:b4:35:7b: 0d:2e:15:a0:7a:dd:3c:52:a8:54:ad:be:81:07:c9: 85:f8:09:77:da:52:c2:07:c5:1b:e7:c4:f7:50:f9: 27:e6:38:61:5a:20:17:32:96:66:a5:ee:83:72:94: eb:2b:b8:75:bc:eb:61:4d:ae:69:f6:0a:fa:5b:46: 29:70:a7:cf:65:e7:08:94:63:94:eb:70:08:7e:13: 9b:4f:06:21:4e:b2:e9:5b:b7:16:20:91:6f:6b:e1: 73:1e:13:1d:57:af:32:6f:c5:93:ae:5c:6f:b6:b6: 20:2a:b4:37:b5:15:6a:0d:5e:7c:8b:96:27:cd:b1: ee:3e:92:5a:14:a6:a6:76:c4:60:92:78:cd:c5:19: 5d:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:83:0E:D3:23:79:0A:B7:DD:30:B6:28:68:BB:CE:55:56:AB:11:1C X509v3 Authority Key Identifier: keyid:41:50:27:D8:C9:29:8E:97:DA:05:C0:C4:3D:CD:8B:AF:52:17:41:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142127/20F4443A546D11EABDD3C117C4F9AE02/QVAn2MkpjpfaBcDEPc2Lr1IXQXU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVAn2MkpjpfaBcDEPc2Lr1IXQXU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142127/20F4443A546D11EABDD3C117C4F9AE02/QVAn2MkpjpfaBcDEPc2Lr1IXQXU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:20:36:8f:d3:af:2d:ba:38:0f:a1:65:e3:cf:6a:ec:61:f6: 19:da:20:94:e6:17:4e:d9:10:6e:97:d5:68:5a:e5:68:df:e1: 00:02:74:82:18:3b:6e:cb:4b:22:30:18:a6:0e:d2:60:ac:a4: 96:e6:e8:e4:1a:32:af:25:65:54:43:38:bb:fe:7f:c0:e1:d5: bf:4a:a3:d4:a1:e8:19:21:33:f4:01:e8:93:76:06:9d:a4:72: 51:f8:4d:04:11:7f:9f:f5:24:f0:0d:99:e7:b1:4b:1f:dc:0f: ae:3c:a7:b5:59:ef:45:6f:dd:dd:15:c6:bb:02:dd:61:15:15: 4d:8e:9e:c4:15:c6:62:7f:ae:00:50:67:95:f9:d0:91:01:62: c8:d6:84:a6:be:7f:d8:81:98:f0:b1:78:38:38:67:93:02:84: 90:3c:f0:94:7b:de:70:48:8c:57:81:ed:a4:7f:0a:a5:35:8f: a8:cc:46:a0:60:e9:04:f8:1e:03:27:8b:dd:4e:48:bb:9d:58: 3f:c2:57:7b:03:73:24:10:7a:14:74:26:db:0e:3e:22:7d:ae: a5:ab:78:98:9c:17:15:db:01:59:4b:89:a2:b8:d3:0b:3f:b0: b2:b8:23:51:67:21:31:a8:57:45:20:22:77:73:d0:b5:c5:0e: 74:38:b1:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCtQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDIxMjcxMTAvBgNVBAUTKDQxNTAyN0Q4QzkyOThFOTdEQTA1QzBDNDNEQ0Q4QkFG NTIxNzQxNzUwHhcNMjUwNTMwMTk0MzA3WhcNMjUwNjA2MTk0MzA3WjAYMRYwFAYD VQQDEw02ODNhMGE0Yi02OWUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5yhEhTLOeddVcTDOSE25PbSRIQhzEGe+sQQ8BZvzlyFPeSWTc3dCEU2B7mnm G7NlopyaGLuhvLsg/MdDCbxich1bPhietVQfrPjmGxMaq+7mGw5zIVXpXu8/rRFR +u327M/R0jCHOCJ3kKpuQK3nSkcNxsm0NXsNLhWget08UqhUrb6BB8mF+Al32lLC B8Ub58T3UPkn5jhhWiAXMpZmpe6DcpTrK7h1vOthTa5p9gr6W0YpcKfPZecIlGOU 63AIfhObTwYhTrLpW7cWIJFva+FzHhMdV68yb8WTrlxvtrYgKrQ3tRVqDV58i5Yn zbHuPpJaFKamdsRgknjNxRldNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH6DDtMj eQq33TC2KGi7zlVWqxEcMB8GA1UdIwQYMBaAFEFQJ9jJKY6X2gXAxD3Ni69SF0F1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjEyNy8yMEY0NDQzQTU0 NkQxMUVBQkREM0MxMTdDNEY5QUUwMi9RVkFuMk1rcGpwZmFCY0RFUGMyTHIxSVhR WFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FWQW4yTWtwanBmYUJjREVQYzJMcjFJWFFYVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjEyNy8yMEY0NDQzQTU0NkQxMUVBQkREM0MxMTdDNEY5QUUwMi9RVkFuMk1rcGpw ZmFCY0RFUGMyTHIxSVhRWFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwIDaP068tujgPoWXjz2rsYfYZ2iCU5hdO2RBul9VoWuVo3+EAAnSC GDtuy0siMBimDtJgrKSW5ujkGjKvJWVUQzi7/n/A4dW/SqPUoegZITP0AeiTdgad pHJR+E0EEX+f9STwDZnnsUsf3A+uPKe1We9Fb93dFca7At1hFRVNjp7EFcZif64A UGeV+dCRAWLI1oSmvn/YgZjwsXg4OGeTAoSQPPCUe95wSIxXge2kfwqlNY+ozEag YOkE+B4DJ4vdTki7nVg/wld7A3MkEHoUdCbbDj4ifa6lq3iYnBcV2wFZS4miuNML P7CyuCNRZyExqFdFICJ3c9C1xQ50OLGx -----END CERTIFICATE-----Generated at Sat May 31 15:33:54 2025 by rpki-client