$ rpki-client -vvf rpki.apnic.net/member_repository/A914740F/4142D50ECC9411EA9B2DF753C4F9AE02/QVzfw-bOZTMG6pWtFn0uiXXF5AM.mft File: QVzfw-bOZTMG6pWtFn0uiXXF5AM.mft (raw, json) Hash identifier: k4KCODDR2RfbzEUuJu/jeDZJtU+m3WUW35xezFY9Wp8= Subject key identifier: DF:79:18:FD:85:A0:47:F2:5D:5E:3C:A7:06:3B:B9:8E:05:B1:50:F4 Authority key identifier: 41:5C:DF:C3:E6:CE:65:33:06:EA:95:AD:16:7D:2E:89:75:C5:E4:03 Certificate issuer: /CN=A914740F/serialNumber=415CDFC3E6CE653306EA95AD167D2E8975C5E403 Certificate serial: 0859 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVzfw-bOZTMG6pWtFn0uiXXF5AM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914740F/4142D50ECC9411EA9B2DF753C4F9AE02/QVzfw-bOZTMG6pWtFn0uiXXF5AM.mft Manifest number: 0848 Signing time: Fri 30 May 2025 20:59:08 +0000 Manifest this update: Fri 30 May 2025 20:59:07 +0000 Manifest next update: Fri 06 Jun 2025 20:59:07 +0000 Files and hashes: 1: QVzfw-bOZTMG6pWtFn0uiXXF5AM.crl (hash: XMPsU1qTsyfqBQViT2Mf3v8o5unBuMZrZMArdeuDj1E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914740F/4142D50ECC9411EA9B2DF753C4F9AE02/QVzfw-bOZTMG6pWtFn0uiXXF5AM.crl rsync://rpki.apnic.net/member_repository/A914740F/4142D50ECC9411EA9B2DF753C4F9AE02/QVzfw-bOZTMG6pWtFn0uiXXF5AM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVzfw-bOZTMG6pWtFn0uiXXF5AM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 20:59:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2137 (0x859) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914740F, serialNumber=415CDFC3E6CE653306EA95AD167D2E8975C5E403 Validity Not Before: May 30 20:59:07 2025 GMT Not After : Jun 6 20:59:07 2025 GMT Subject: CN=683a1c1b-218b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:df:2b:e3:37:ee:39:e9:db:20:0b:e9:55:9a: 0d:b9:78:44:68:49:ed:26:d6:88:82:d6:05:46:8d: 68:dd:0a:8b:80:99:ef:ff:1b:f9:2b:45:e0:18:c1: 01:49:e8:20:88:93:1e:f9:80:ab:0a:df:1f:81:1f: 7e:89:c4:fe:de:62:f2:22:06:15:e5:c8:7e:9e:2b: d4:b4:d0:9b:97:57:32:25:f8:51:c6:dd:c9:f1:62: 93:c9:98:db:ae:fe:01:b6:f0:2b:7d:af:00:16:e9: 9a:b7:63:8c:00:3e:aa:72:7d:da:1a:73:6d:95:2b: f4:a8:7b:0d:9a:23:98:8a:31:5e:77:98:9c:79:82: 55:cb:07:10:95:21:d7:d4:67:df:c0:79:fb:13:03: f8:36:d8:be:01:08:bc:34:9e:a4:ff:c1:ed:13:e1: d9:14:73:5e:43:31:bc:1b:7d:3c:52:4d:d0:b9:ba: 9c:f5:3a:3b:01:22:7b:42:30:6d:13:a7:f4:3e:e1: ac:3f:7d:40:ec:c7:60:9a:de:3b:e0:04:df:2a:fd: f7:8b:ae:ea:da:aa:86:8e:a5:69:79:83:79:a5:5b: 28:62:2c:4d:06:c4:46:2d:0a:bb:2a:32:f6:3f:12: 9d:06:1f:7a:5f:f2:ae:1f:45:da:4c:26:23:54:04: fc:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:79:18:FD:85:A0:47:F2:5D:5E:3C:A7:06:3B:B9:8E:05:B1:50:F4 X509v3 Authority Key Identifier: keyid:41:5C:DF:C3:E6:CE:65:33:06:EA:95:AD:16:7D:2E:89:75:C5:E4:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914740F/4142D50ECC9411EA9B2DF753C4F9AE02/QVzfw-bOZTMG6pWtFn0uiXXF5AM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVzfw-bOZTMG6pWtFn0uiXXF5AM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914740F/4142D50ECC9411EA9B2DF753C4F9AE02/QVzfw-bOZTMG6pWtFn0uiXXF5AM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:58:9a:dc:89:cb:9a:5a:1b:43:e2:f6:40:78:e5:15:77:3e: 4a:17:d4:39:64:5d:1c:f8:b5:11:6a:57:65:34:a2:e9:70:17: c3:e3:e9:e2:1f:f5:fa:5c:eb:88:a3:39:4d:36:b4:cf:d2:e6: 08:5f:bc:a7:ad:1b:ec:df:a6:b7:f8:2e:f8:5f:8f:02:d8:4a: be:c9:29:8e:a8:61:b1:a1:b0:36:0c:62:88:87:50:d8:0b:50: d6:a3:83:b2:11:1b:46:3c:66:1b:6b:f1:c2:ba:4b:ec:03:11: 09:60:f1:cc:52:dd:f0:6f:ec:1d:e8:3d:24:54:7e:bb:38:08: 64:e1:cd:cb:e1:9e:85:ec:ad:d4:7b:54:4d:4f:98:61:69:ac: 75:20:55:4d:6e:c8:20:d0:21:12:e5:bb:ba:61:6a:ba:3c:69: 58:0a:f9:83:4f:86:03:eb:23:c5:34:ba:d2:af:15:03:c6:db: f7:c6:c3:f3:2a:24:62:a4:e3:ad:95:0e:78:e0:73:51:83:d6: 37:de:e6:3a:18:6b:a9:e6:32:e1:f2:53:5a:95:f5:83:37:4f: 50:21:e1:c9:ee:2c:46:a1:af:b6:a0:07:a2:44:31:d1:2d:d3: 33:ab:5c:4f:6f:5a:0d:07:f2:16:4f:a8:42:4e:f6:e0:31:fa: 8b:4a:5c:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCFkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc0MEYxMTAvBgNVBAUTKDQxNUNERkMzRTZDRTY1MzMwNkVBOTVBRDE2N0QyRTg5 NzVDNUU0MDMwHhcNMjUwNTMwMjA1OTA3WhcNMjUwNjA2MjA1OTA3WjAYMRYwFAYD VQQDEw02ODNhMWMxYi0yMThiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyt8r4zfuOenbIAvpVZoNuXhEaEntJtaIgtYFRo1o3QqLgJnv/xv5K0XgGMEB SeggiJMe+YCrCt8fgR9+icT+3mLyIgYV5ch+nivUtNCbl1cyJfhRxt3J8WKTyZjb rv4BtvArfa8AFumat2OMAD6qcn3aGnNtlSv0qHsNmiOYijFed5iceYJVywcQlSHX 1GffwHn7EwP4Nti+AQi8NJ6k/8HtE+HZFHNeQzG8G308Uk3Qubqc9To7ASJ7QjBt E6f0PuGsP31A7Mdgmt474ATfKv33i67q2qqGjqVpeYN5pVsoYixNBsRGLQq7KjL2 PxKdBh96X/KuH0XaTCYjVAT8iwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN95GP2F oEfyXV48pwY7uY4FsVD0MB8GA1UdIwQYMBaAFEFc38PmzmUzBuqVrRZ9Lol1xeQD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzQwRi80MTQyRDUwRUND OTQxMUVBOUIyREY3NTNDNEY5QUUwMi9RVnpmdy1iT1pUTUc2cFd0Rm4wdWlYWEY1 QU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FWemZ3LWJPWlRNRzZwV3RGbjB1aVhYRjVBTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzQwRi80MTQyRDUwRUNDOTQxMUVBOUIyREY3NTNDNEY5QUUwMi9RVnpmdy1iT1pU TUc2cFd0Rm4wdWlYWEY1QU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5WJrcicuaWhtD4vZAeOUVdz5KF9Q5ZF0c+LURaldlNKLpcBfD4+ni H/X6XOuIozlNNrTP0uYIX7ynrRvs36a3+C74X48C2Eq+ySmOqGGxobA2DGKIh1DY C1DWo4OyERtGPGYba/HCukvsAxEJYPHMUt3wb+wd6D0kVH67OAhk4c3L4Z6F7K3U e1RNT5hhaax1IFVNbsgg0CES5bu6YWq6PGlYCvmDT4YD6yPFNLrSrxUDxtv3xsPz KiRipOOtlQ544HNRg9Y33uY6GGup5jLh8lNalfWDN09QIeHJ7ixGoa+2oAeiRDHR LdMzq1xPb1oNB/IWT6hCTvbgMfqLSlxE -----END CERTIFICATE-----Generated at Sat May 31 17:41:02 2025 by rpki-client