$ rpki-client -vvf rpki.apnic.net/member_repository/A9146179/54E04716AA7C11EFA33BFD77C4F9AE02/QFAqSwwf9GgvUuNAZARERSh9S7g.mft File: QFAqSwwf9GgvUuNAZARERSh9S7g.mft (raw, json) Hash identifier: XpwQsccHRxwNC4Ym6glrlwYLc911tQpU6xf+OGeaDmY= Subject key identifier: 3A:AC:8D:4E:EA:E1:38:42:7F:1B:91:DF:C7:06:54:65:C4:60:AF:B0 Authority key identifier: 40:50:2A:4B:0C:1F:F4:68:2F:52:E3:40:64:04:44:45:28:7D:4B:B8 Certificate issuer: /CN=A9146179/serialNumber=40502A4B0C1FF4682F52E34064044445287D4BB8 Certificate serial: 61 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFAqSwwf9GgvUuNAZARERSh9S7g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146179/54E04716AA7C11EFA33BFD77C4F9AE02/QFAqSwwf9GgvUuNAZARERSh9S7g.mft Manifest number: 60 Signing time: Sat 31 May 2025 06:38:01 +0000 Manifest this update: Sat 31 May 2025 06:38:00 +0000 Manifest next update: Sat 07 Jun 2025 06:38:00 +0000 Files and hashes: 1: QFAqSwwf9GgvUuNAZARERSh9S7g.crl (hash: VKy+Fw2Wx6d3MvMJ+jEN9SyFKHFSy7jqTrGi4D567lQ=) 2: D2158BC4AA7C11EF9A76A779C4F9AE02.roa (hash: LaPRc5QCE3D/egNmbBmNccMoDV83OnAl0IeSttB5Fwk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146179/54E04716AA7C11EFA33BFD77C4F9AE02/QFAqSwwf9GgvUuNAZARERSh9S7g.crl rsync://rpki.apnic.net/member_repository/A9146179/54E04716AA7C11EFA33BFD77C4F9AE02/QFAqSwwf9GgvUuNAZARERSh9S7g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFAqSwwf9GgvUuNAZARERSh9S7g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 06:38:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 97 (0x61) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146179, serialNumber=40502A4B0C1FF4682F52E34064044445287D4BB8 Validity Not Before: May 31 06:38:00 2025 GMT Not After : Jun 7 06:38:00 2025 GMT Subject: CN=683aa3c8-772d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:aa:d4:1a:93:cc:aa:d2:d9:0d:17:d3:2c:3e: f1:9d:6f:cc:93:06:02:cd:8d:1c:27:14:66:9b:73: 00:93:17:b0:e5:2e:7a:b0:3e:b5:77:26:d9:a0:70: de:55:30:09:99:5b:16:65:5a:ca:e5:6a:98:14:9e: 15:6f:40:e3:1a:77:13:e7:56:71:56:6e:29:25:3c: 1f:61:50:ea:5a:39:9d:01:f8:83:71:3d:3c:14:e1: 29:a4:a1:a6:32:cc:11:bb:3d:27:3f:96:b5:af:82: ea:97:2b:d8:3b:67:ac:d8:a7:61:12:88:fd:6f:24: 02:b8:3d:8f:57:36:ff:e7:de:0e:b8:59:0a:79:12: ad:ca:e4:08:44:5c:6d:c0:d1:68:15:7f:97:30:72: 06:55:98:16:f6:f9:c1:ed:45:67:42:95:4e:8e:03: e0:0f:48:f4:1b:a7:59:77:7f:cf:51:f8:b6:8a:22: 74:18:01:9d:af:84:26:14:30:3f:c9:34:4d:21:e4: 54:a9:48:f9:76:0a:86:23:01:f9:51:7a:87:b0:60: 5d:aa:72:56:31:fe:51:63:94:2a:57:89:e9:62:b6: eb:51:90:2e:99:8a:3e:7a:2b:0f:22:d4:d2:98:3d: 95:43:ad:70:32:ea:b1:80:6b:15:ad:13:96:32:fd: 10:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:AC:8D:4E:EA:E1:38:42:7F:1B:91:DF:C7:06:54:65:C4:60:AF:B0 X509v3 Authority Key Identifier: keyid:40:50:2A:4B:0C:1F:F4:68:2F:52:E3:40:64:04:44:45:28:7D:4B:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146179/54E04716AA7C11EFA33BFD77C4F9AE02/QFAqSwwf9GgvUuNAZARERSh9S7g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFAqSwwf9GgvUuNAZARERSh9S7g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146179/54E04716AA7C11EFA33BFD77C4F9AE02/QFAqSwwf9GgvUuNAZARERSh9S7g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:b5:0e:5b:eb:2a:9f:2d:b2:f0:1b:b8:40:b5:21:98:44:1c: f4:65:01:3e:8e:15:74:d3:44:d4:69:2d:37:10:57:4b:c3:c6: 24:1b:60:52:19:1b:c8:49:7b:f6:3a:c2:9d:7e:f7:7f:d6:26: 0e:6a:d8:f5:f8:1d:98:53:5c:0c:39:61:f4:42:37:67:0c:10: e3:a4:af:ac:4f:98:5d:28:1f:9b:10:bd:5c:45:a6:eb:33:80: bc:5e:c7:24:fd:9d:bb:51:1f:e9:61:19:6c:57:af:fb:d3:59: a6:e8:f7:e9:b9:0b:93:8d:10:88:11:23:4c:37:81:d9:ce:4a: 95:f3:e3:14:a1:c1:06:d8:87:06:5a:16:f8:58:f7:08:af:36: 13:05:84:6e:19:ce:f7:62:14:bb:af:bc:a5:ab:89:c7:6c:4d: 62:b0:43:49:e2:dc:c0:10:49:ac:9a:6f:50:70:7a:0e:0f:1c: 6e:06:d4:77:12:7d:7c:fc:14:6e:4c:13:65:72:c5:ee:cd:01: 48:06:77:25:91:a7:11:2f:5c:4f:0b:d3:f9:92:20:e3:3d:3b: 9e:b0:ef:a6:70:77:e8:ca:31:3a:ae:0f:3c:ef:7a:81:bc:5a: 14:9d:67:a1:7c:23:5b:2a:59:ec:62:d6:02:b5:e0:a7:01:de: 45:ba:ea:a3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NjE3OTExMC8GA1UEBRMoNDA1MDJBNEIwQzFGRjQ2ODJGNTJFMzQwNjQwNDQ0NDUy ODdENEJCODAeFw0yNTA1MzEwNjM4MDBaFw0yNTA2MDcwNjM4MDBaMBgxFjAUBgNV BAMTDTY4M2FhM2M4LTc3MmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDAqtQak8yq0tkNF9MsPvGdb8yTBgLNjRwnFGabcwCTF7DlLnqwPrV3JtmgcN5V MAmZWxZlWsrlapgUnhVvQOMadxPnVnFWbiklPB9hUOpaOZ0B+INxPTwU4SmkoaYy zBG7PSc/lrWvguqXK9g7Z6zYp2ESiP1vJAK4PY9XNv/n3g64WQp5Eq3K5AhEXG3A 0WgVf5cwcgZVmBb2+cHtRWdClU6OA+APSPQbp1l3f89R+LaKInQYAZ2vhCYUMD/J NE0h5FSpSPl2CoYjAflReoewYF2qclYx/lFjlCpXielitutRkC6Zij56Kw8i1NKY PZVDrXAy6rGAaxWtE5Yy/RChAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUOqyNTurh OEJ/G5HfxwZUZcRgr7AwHwYDVR0jBBgwFoAUQFAqSwwf9GgvUuNAZARERSh9S7gw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ2MTc5LzU0RTA0NzE2QUE3 QzExRUZBMzNCRkQ3N0M0RjlBRTAyL1FGQXFTd3dmOUdndlV1TkFaQVJFUlNoOVM3 Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUUZBcVN3d2Y5R2d2VXVOQVpBUkVSU2g5UzdnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ2 MTc5LzU0RTA0NzE2QUE3QzExRUZBMzNCRkQ3N0M0RjlBRTAyL1FGQXFTd3dmOUdn dlV1TkFaQVJFUlNoOVM3Zy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHy1DlvrKp8tsvAbuEC1IZhEHPRlAT6OFXTTRNRpLTcQV0vDxiQbYFIZ G8hJe/Y6wp1+93/WJg5q2PX4HZhTXAw5YfRCN2cMEOOkr6xPmF0oH5sQvVxFpusz gLxexyT9nbtRH+lhGWxXr/vTWabo9+m5C5ONEIgRI0w3gdnOSpXz4xShwQbYhwZa FvhY9wivNhMFhG4ZzvdiFLuvvKWricdsTWKwQ0ni3MAQSayab1Bweg4PHG4G1HcS fXz8FG5ME2Vyxe7NAUgGdyWRpxEvXE8L0/mSIOM9O56w76Zwd+jKMTquDzzveoG8 WhSdZ6F8I1sqWexi1gK14KcB3kW66qM= -----END CERTIFICATE-----Generated at Sat May 31 17:41:02 2025 by rpki-client