$ rpki-client -vvf rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.mft File: QBtCmQbJDqA-z8YbFbpO8SOQM3k.mft (raw, json) Hash identifier: lwxCuREXe7k7LL1DUlGbmSE+MLsI3qKfkHUrj9Wb048= Subject key identifier: 0E:70:89:4A:3F:80:AA:F2:26:C3:6C:50:93:E3:28:82:04:9A:14:F7 Authority key identifier: 40:1B:42:99:06:C9:0E:A0:3E:CF:C6:1B:15:BA:4E:F1:23:90:33:79 Certificate issuer: /CN=A9157D7A/serialNumber=401B429906C90EA03ECFC61B15BA4EF123903379 Certificate serial: 077D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBtCmQbJDqA-z8YbFbpO8SOQM3k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.mft Manifest number: 06EF Signing time: Sat 31 May 2025 22:49:41 +0000 Manifest this update: Sat 31 May 2025 22:49:41 +0000 Manifest next update: Sat 07 Jun 2025 22:49:41 +0000 Files and hashes: 1: QBtCmQbJDqA-z8YbFbpO8SOQM3k.crl (hash: HqycEVXogEdQDBasRNbT0En24DhouElYmZveKEtNdNQ=) 2: 2E96A63A690A11EF9525E980C4F9AE02.roa (hash: cke1NFfNL9L9qxr7ZE02PXCwTKlIG2fZiMZ8kT9IRhc=) 3: 324F926C3BAC11F09BF98E0EC4F9AE02.roa (hash: YExyYVpoKuPS92PXIw6lfaHg+kVwZ7w7jJoYEWTy6x0=) 4: C186DD80331A11EC8F33C209C4F9AE02.roa (hash: 4LAsvPxFJVP/38iRypn40TaMOPz9lx58IyU7j8BYYnw=) 5: 03BA8B36824411EF94479387C4F9AE02.roa (hash: J+iY4JEtmySFwOCqaP72SvJVDZLPvNEiLKvI7NyNzmE=) 6: 5FD09C68393C11EFB8A9065BC4F9AE02.roa (hash: vMbIDct9MA/MTRo5g6rG9rCZ9V47y1ZmNSqrr1liLbI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.crl rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBtCmQbJDqA-z8YbFbpO8SOQM3k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 22:49:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1917 (0x77d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157D7A, serialNumber=401B429906C90EA03ECFC61B15BA4EF123903379 Validity Not Before: May 31 22:49:41 2025 GMT Not After : Jun 7 22:49:41 2025 GMT Subject: CN=683b8785-8faa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c8:43:4b:59:17:db:71:d5:cc:b1:32:59:00: a3:d9:d2:0a:01:b0:41:2a:f4:f1:88:db:89:f7:c6: 83:43:d2:5b:13:73:ed:76:e8:eb:ea:66:0e:4b:7c: 63:92:38:1d:eb:9a:f5:a7:37:cd:f4:7a:6d:5b:be: b8:93:e7:af:4a:c4:a2:b5:24:96:48:7c:49:40:42: 3b:2d:6c:5c:4b:f5:34:d0:61:e1:9f:4e:61:24:34: 7e:c1:6f:f2:2a:24:6e:f4:72:45:4e:2d:87:18:e7: 80:af:78:9d:dd:ad:6c:47:69:dc:1f:6d:e6:8a:70: c7:05:7a:73:fb:52:a3:b8:cb:da:60:2c:cc:fc:2e: ed:15:22:7e:f2:da:ca:05:8c:8a:4a:3a:2e:ee:d7: ac:f1:f2:63:d5:7d:03:48:29:bf:c1:85:b9:87:fd: 82:85:70:20:6a:4c:fe:e2:cd:90:e0:6e:bd:e6:fb: cd:4d:f4:5a:2b:26:fe:87:83:76:af:8c:1e:e9:5c: 2a:b6:ce:88:a2:76:dc:82:c9:6b:06:04:a8:a4:c7: 21:ad:0b:55:a6:7f:ae:57:b2:92:61:04:15:4a:7c: 14:9e:b8:ff:a0:ea:a7:1b:26:83:4f:82:34:cc:19: e0:41:2a:c7:b6:42:07:9b:76:0d:54:64:1d:33:08: b2:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:70:89:4A:3F:80:AA:F2:26:C3:6C:50:93:E3:28:82:04:9A:14:F7 X509v3 Authority Key Identifier: keyid:40:1B:42:99:06:C9:0E:A0:3E:CF:C6:1B:15:BA:4E:F1:23:90:33:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBtCmQbJDqA-z8YbFbpO8SOQM3k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:d1:a0:7c:70:52:3b:fe:d9:07:b4:27:1c:bc:00:b4:e1:71: ec:fd:dc:c2:b0:61:7b:da:7b:3d:b3:9f:ec:77:83:b0:61:fb: 0c:3a:a2:a7:65:5e:ed:46:12:fd:9d:5a:2f:43:df:8f:dd:9f: e9:a3:54:c9:4c:21:44:ba:da:b5:5e:3d:79:50:fc:da:49:59: bd:77:14:dd:b7:d7:7d:c5:ee:26:b8:38:be:e4:63:28:e9:b7: 44:0e:06:a3:ca:c3:b9:63:13:6f:0b:85:72:27:20:4c:a7:d8: 87:f4:48:8a:32:ce:70:d0:aa:3a:2e:05:51:48:6f:b2:f9:11: 95:69:4b:76:b5:cb:d0:5b:65:27:84:c1:f6:7b:41:52:c2:62: ce:bb:8e:1c:ba:a3:43:15:c4:16:47:39:5a:f0:b6:d8:70:24: 40:79:c0:8f:54:c9:0c:90:3e:6c:2e:7d:cc:a7:65:ea:f1:ef: f2:b4:75:7b:fa:c0:a9:dc:ab:cb:24:e7:91:d1:7f:56:1c:99: 9d:93:e0:4b:70:18:bc:56:f6:ce:96:3b:7b:e6:9b:92:fb:88: 88:3b:5b:1f:4b:d8:c1:93:b4:ee:cb:16:1e:dd:d1:e2:b6:bc: eb:ef:43:1d:41:3b:f7:21:26:64:7c:a0:e1:5c:b1:69:ae:61: d4:aa:60:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB30wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdEN0ExMTAvBgNVBAUTKDQwMUI0Mjk5MDZDOTBFQTAzRUNGQzYxQjE1QkE0RUYx MjM5MDMzNzkwHhcNMjUwNTMxMjI0OTQxWhcNMjUwNjA3MjI0OTQxWjAYMRYwFAYD VQQDEw02ODNiODc4NS04ZmFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAushDS1kX23HVzLEyWQCj2dIKAbBBKvTxiNuJ98aDQ9JbE3Ptdujr6mYOS3xj kjgd65r1pzfN9HptW764k+evSsSitSSWSHxJQEI7LWxcS/U00GHhn05hJDR+wW/y KiRu9HJFTi2HGOeAr3id3a1sR2ncH23minDHBXpz+1KjuMvaYCzM/C7tFSJ+8trK BYyKSjou7tes8fJj1X0DSCm/wYW5h/2ChXAgakz+4s2Q4G695vvNTfRaKyb+h4N2 r4we6Vwqts6IonbcgslrBgSopMchrQtVpn+uV7KSYQQVSnwUnrj/oOqnGyaDT4I0 zBngQSrHtkIHm3YNVGQdMwiy3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA5wiUo/ gKryJsNsUJPjKIIEmhT3MB8GA1UdIwQYMBaAFEAbQpkGyQ6gPs/GGxW6TvEjkDN5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0Q3QS81RERDQ0NDNjk5 MTUxMUVCOTY3MjcyNDNDNEY5QUUwMi9RQnRDbVFiSkRxQS16OFliRmJwTzhTT1FN M2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FCdENtUWJKRHFBLXo4WWJGYnBPOFNPUU0zay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 N0Q3QS81RERDQ0NDNjk5MTUxMUVCOTY3MjcyNDNDNEY5QUUwMi9RQnRDbVFiSkRx QS16OFliRmJwTzhTT1FNM2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCs0aB8cFI7/tkHtCccvAC04XHs/dzCsGF72ns9s5/sd4OwYfsMOqKn ZV7tRhL9nVovQ9+P3Z/po1TJTCFEutq1Xj15UPzaSVm9dxTdt9d9xe4muDi+5GMo 6bdEDgajysO5YxNvC4VyJyBMp9iH9EiKMs5w0Ko6LgVRSG+y+RGVaUt2tcvQW2Un hMH2e0FSwmLOu44cuqNDFcQWRzla8LbYcCRAecCPVMkMkD5sLn3Mp2Xq8e/ytHV7 +sCp3KvLJOeR0X9WHJmdk+BLcBi8VvbOljt75puS+4iIO1sfS9jBk7TuyxYe3dHi trzr70MdQTv3ISZkfKDhXLFprmHUqmB1 -----END CERTIFICATE-----Generated at Mon Jun 2 06:49:03 2025 by rpki-client