$ rpki-client -vvf rpki.apnic.net/member_repository/A9147609/632C30AE440E11E8903D3A5BC4F9AE02/QqvQ9dysTQxkACUczEnW_9l1Q78.mft File: QqvQ9dysTQxkACUczEnW_9l1Q78.mft (raw, json) Hash identifier: qkjhZLJR3lJ41qj1X62Kqp/cNrFOexFcdOL7Do+auJ0= Subject key identifier: 2D:0B:8A:17:25:35:73:15:F1:92:2F:8A:07:03:78:42:C2:E9:CF:AC Authority key identifier: 42:AB:D0:F5:DC:AC:4D:0C:64:00:25:1C:CC:49:D6:FF:D9:75:43:BF Certificate issuer: /CN=A9147609/serialNumber=42ABD0F5DCAC4D0C6400251CCC49D6FFD97543BF Certificate serial: 1534 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QqvQ9dysTQxkACUczEnW_9l1Q78.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147609/632C30AE440E11E8903D3A5BC4F9AE02/QqvQ9dysTQxkACUczEnW_9l1Q78.mft Manifest number: 1DAA Signing time: Fri 30 May 2025 16:59:09 +0000 Manifest this update: Fri 30 May 2025 16:59:08 +0000 Manifest next update: Fri 06 Jun 2025 16:59:08 +0000 Files and hashes: 1: QqvQ9dysTQxkACUczEnW_9l1Q78.crl (hash: 539ruVnN0oeLFRdxZTgQgYDEqT8SA2XANQnk/aZrwmw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147609/632C30AE440E11E8903D3A5BC4F9AE02/QqvQ9dysTQxkACUczEnW_9l1Q78.crl rsync://rpki.apnic.net/member_repository/A9147609/632C30AE440E11E8903D3A5BC4F9AE02/QqvQ9dysTQxkACUczEnW_9l1Q78.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QqvQ9dysTQxkACUczEnW_9l1Q78.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 16:59:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5428 (0x1534) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147609, serialNumber=42ABD0F5DCAC4D0C6400251CCC49D6FFD97543BF Validity Not Before: May 30 16:59:08 2025 GMT Not After : Jun 6 16:59:08 2025 GMT Subject: CN=6839e3dd-313b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ab:b4:87:ee:07:36:02:1d:8e:cf:6a:72:96: e0:1b:f2:45:b6:43:d9:34:a2:27:ad:e0:01:15:1e: 62:c8:73:50:ba:ac:43:01:ee:a1:bf:87:81:a7:59: ee:70:00:cc:2a:18:f7:f5:ae:76:ee:e1:0a:c4:92: 1d:2f:c4:0e:34:a4:84:3f:14:9a:5f:63:de:53:a5: 89:f4:26:7c:59:7c:95:3d:14:29:b5:ad:21:34:20: d2:c6:92:56:5e:ba:6d:31:17:d6:50:93:0f:fa:b4: 4c:09:1b:4b:51:d5:7e:d4:07:97:c4:5a:b4:69:42: 80:f0:a6:ae:8b:f6:fc:73:bf:8e:6e:7b:c8:ca:25: f5:79:3b:7d:6e:e4:86:31:ea:ad:73:dd:61:1e:af: a7:7c:57:62:dc:92:43:c1:0c:08:09:9a:44:de:2f: aa:c1:4d:1c:31:79:8d:b8:67:a4:2c:98:8b:83:67: 2d:00:ec:f0:86:63:a4:41:ff:0b:af:ea:f8:02:65: 82:89:40:7d:ba:23:93:56:3b:5e:7c:76:8a:9c:64: b1:3e:35:f1:4c:3e:ed:a4:60:c0:eb:2c:c9:bf:68: b2:d9:46:49:05:ba:8f:49:3c:1d:64:26:4a:27:77: 95:44:60:be:1a:80:af:31:05:25:83:db:d7:e3:e1: 4e:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:0B:8A:17:25:35:73:15:F1:92:2F:8A:07:03:78:42:C2:E9:CF:AC X509v3 Authority Key Identifier: keyid:42:AB:D0:F5:DC:AC:4D:0C:64:00:25:1C:CC:49:D6:FF:D9:75:43:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147609/632C30AE440E11E8903D3A5BC4F9AE02/QqvQ9dysTQxkACUczEnW_9l1Q78.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QqvQ9dysTQxkACUczEnW_9l1Q78.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147609/632C30AE440E11E8903D3A5BC4F9AE02/QqvQ9dysTQxkACUczEnW_9l1Q78.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:d9:6a:27:ee:6d:6d:e5:85:4b:b8:4f:ff:89:70:7b:06:9e: 84:9f:0e:6a:1b:04:c4:2f:8f:ed:48:33:40:f3:83:4a:e1:94: 80:bc:18:03:2e:34:5e:58:7b:92:e6:ec:df:e1:a8:52:28:44: b8:36:65:d4:84:62:e8:d2:26:fe:ec:33:5e:7e:83:02:d7:e6: 54:b8:e2:f8:8c:48:74:37:76:da:ed:9d:49:2f:6b:2e:ee:78: fb:40:e3:16:b4:d7:93:31:99:58:f7:5d:5b:1a:e9:18:e7:ef: a0:96:10:b9:83:55:d9:95:ae:3b:c5:58:1d:c9:ed:c9:27:a7: 2d:93:c5:43:77:b7:53:d4:9c:dd:c3:fe:c9:0e:e4:2c:61:61: c6:90:d0:94:f0:2b:a7:c5:b0:1a:56:49:b8:dc:91:9a:c6:42: 58:a5:34:07:33:78:34:7e:ba:20:fa:48:22:a5:ae:39:c2:10: 22:36:67:98:13:4f:a3:18:7e:a3:3a:ec:92:1a:f9:1b:cc:47: f8:eb:c9:48:2d:99:84:e7:35:03:72:94:05:48:fd:57:75:fb: e3:4a:7d:81:fc:da:59:48:9a:c1:7c:bb:77:ae:85:46:9e:b2: 61:fa:6b:d7:52:5f:f8:5e:3e:fb:f8:ee:76:42:c9:67:5a:5c: 94:f5:47:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFTQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc2MDkxMTAvBgNVBAUTKDQyQUJEMEY1RENBQzREMEM2NDAwMjUxQ0NDNDlENkZG RDk3NTQzQkYwHhcNMjUwNTMwMTY1OTA4WhcNMjUwNjA2MTY1OTA4WjAYMRYwFAYD VQQDEw02ODM5ZTNkZC0zMTNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzqu0h+4HNgIdjs9qcpbgG/JFtkPZNKInreABFR5iyHNQuqxDAe6hv4eBp1nu cADMKhj39a527uEKxJIdL8QONKSEPxSaX2PeU6WJ9CZ8WXyVPRQpta0hNCDSxpJW XrptMRfWUJMP+rRMCRtLUdV+1AeXxFq0aUKA8Kaui/b8c7+ObnvIyiX1eTt9buSG Meqtc91hHq+nfFdi3JJDwQwICZpE3i+qwU0cMXmNuGekLJiLg2ctAOzwhmOkQf8L r+r4AmWCiUB9uiOTVjtefHaKnGSxPjXxTD7tpGDA6yzJv2iy2UZJBbqPSTwdZCZK J3eVRGC+GoCvMQUlg9vX4+FOnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC0Lihcl NXMV8ZIvigcDeELC6c+sMB8GA1UdIwQYMBaAFEKr0PXcrE0MZAAlHMxJ1v/ZdUO/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzYwOS82MzJDMzBBRTQ0 MEUxMUU4OTAzRDNBNUJDNEY5QUUwMi9RcXZROWR5c1RReGtBQ1VjekVuV185bDFR NzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FxdlE5ZHlzVFF4a0FDVWN6RW5XXzlsMVE3OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzYwOS82MzJDMzBBRTQ0MEUxMUU4OTAzRDNBNUJDNEY5QUUwMi9RcXZROWR5c1RR eGtBQ1VjekVuV185bDFRNzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBF2Won7m1t5YVLuE//iXB7Bp6Enw5qGwTEL4/tSDNA84NK4ZSAvBgD LjReWHuS5uzf4ahSKES4NmXUhGLo0ib+7DNefoMC1+ZUuOL4jEh0N3ba7Z1JL2su 7nj7QOMWtNeTMZlY911bGukY5++glhC5g1XZla47xVgdye3JJ6ctk8VDd7dT1Jzd w/7JDuQsYWHGkNCU8CunxbAaVkm43JGaxkJYpTQHM3g0frog+kgipa45whAiNmeY E0+jGH6jOuySGvkbzEf468lILZmE5zUDcpQFSP1XdfvjSn2B/NpZSJrBfLt3roVG nrJh+mvXUl/4Xj77+O52QslnWlyU9UeB -----END CERTIFICATE-----Generated at Sat May 31 17:58:48 2025 by rpki-client