$ rpki-client -vvf rpki.apnic.net/member_repository/A915D6C2/F9C46FAC53A211EC9D5E615DC4F9AE02/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.mft File: QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.mft (raw, json) Hash identifier: McGZMQ3yRHNy1Ztk/s6+OK53nOeG2LGdUKUEQdUrCqA= Subject key identifier: 91:EB:C0:8B:A6:CC:98:19:B1:B5:17:9F:31:C6:DB:62:2E:71:A0:5B Authority key identifier: 42:B7:49:E1:EC:DB:E0:30:74:7F:8C:B5:74:7F:2D:73:A5:E4:24:54 Certificate issuer: /CN=A915D6C2/serialNumber=42B749E1ECDBE030747F8CB5747F2D73A5E42454 Certificate serial: 0463 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D6C2/F9C46FAC53A211EC9D5E615DC4F9AE02/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.mft Manifest number: 0458 Signing time: Sat 31 May 2025 00:24:51 +0000 Manifest this update: Sat 31 May 2025 00:24:50 +0000 Manifest next update: Sat 07 Jun 2025 00:24:50 +0000 Files and hashes: 1: QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.crl (hash: 8uvAw4+yQQNXdkV/0inwYzb3UfoUPbT0JU39MI4D9qk=) 2: 58A4A3E2B73A11ED8A2A8964C4F9AE02.roa (hash: xz+NY0PKDA1h31JonPA24zzAghWJ7xvhqwh0rxa8hB0=) 3: 5808B946B73A11ED8A2A8964C4F9AE02.roa (hash: XeoWUyV8cBersz5ERZwPilXowKBP6ZkIQoJiUYARqzE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D6C2/F9C46FAC53A211EC9D5E615DC4F9AE02/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.crl rsync://rpki.apnic.net/member_repository/A915D6C2/F9C46FAC53A211EC9D5E615DC4F9AE02/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:24:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1123 (0x463) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D6C2, serialNumber=42B749E1ECDBE030747F8CB5747F2D73A5E42454 Validity Not Before: May 31 00:24:50 2025 GMT Not After : Jun 7 00:24:50 2025 GMT Subject: CN=683a4c53-d918 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:4c:92:d6:3f:87:bc:7c:cb:c5:9c:89:1f:ab: df:89:00:3b:9a:bb:86:33:18:75:13:a0:b9:5a:14: 26:d0:5a:1a:53:2c:69:20:d4:d1:df:23:b5:09:44: 1c:db:33:37:ba:35:84:3b:5c:3f:d0:61:cf:42:cf: a1:5e:a2:4a:00:a2:32:ec:c9:20:3d:1c:35:8e:4b: 46:5e:60:62:b5:ed:1d:04:42:31:1a:54:63:0d:88: ea:df:f5:69:b5:6f:27:3c:52:19:ea:ec:cf:42:d5: bc:1b:19:48:aa:5a:7e:b6:a1:19:e5:a9:cf:76:66: 61:93:f4:84:6e:a5:ce:9a:55:54:c4:0c:b8:94:4f: 3b:b1:4c:82:5e:73:b0:ec:0b:2f:e0:fd:0e:74:66: 9d:5b:07:c4:eb:8a:35:e5:e1:07:9d:f5:e9:77:83: 87:fe:7e:71:01:f9:51:c5:09:9c:16:f9:98:c8:13: 5c:27:d5:07:7d:ac:8b:5e:ef:ea:8d:22:0b:0b:6a: d1:b0:4f:71:54:8b:3d:59:7f:c0:a4:40:3d:85:79: e1:09:21:68:90:1b:04:c3:d8:72:d0:9f:67:0d:36: e4:2d:6d:a6:2b:b0:1c:77:1f:5b:18:83:36:38:f6: be:ee:ad:47:a1:07:aa:63:6b:87:4d:7c:4b:57:b7: 18:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:EB:C0:8B:A6:CC:98:19:B1:B5:17:9F:31:C6:DB:62:2E:71:A0:5B X509v3 Authority Key Identifier: keyid:42:B7:49:E1:EC:DB:E0:30:74:7F:8C:B5:74:7F:2D:73:A5:E4:24:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D6C2/F9C46FAC53A211EC9D5E615DC4F9AE02/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D6C2/F9C46FAC53A211EC9D5E615DC4F9AE02/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:80:81:f1:90:96:0d:d9:00:5f:ff:98:d9:fa:eb:0f:92:52: 91:7b:2d:5a:86:b9:bb:37:7f:52:37:21:95:78:19:25:0e:79: fd:28:99:43:a3:f4:79:13:95:b0:b6:38:1c:01:a9:cb:4b:37: 9e:2f:49:eb:b7:89:b4:cd:ff:b8:51:ba:47:ac:c6:fc:16:f8: 40:a1:bb:9b:a2:c7:68:56:0d:29:5d:fc:b7:3b:8e:5c:03:04: 35:6c:4d:5f:57:e8:78:43:5d:b3:79:e6:bc:5a:32:8d:b6:44: 26:fb:6e:e3:b3:bf:1b:4f:9b:97:9a:73:06:0b:88:68:d7:ae: fb:95:52:b5:46:6b:31:8d:35:59:24:96:de:be:25:1d:9b:ef: 28:e2:6e:16:8d:e7:b0:07:f9:5f:9e:76:3f:79:71:b5:7f:74: 11:8a:8a:04:51:ea:3b:74:b8:ed:0c:71:65:d8:01:eb:47:34: e1:7d:d8:dd:9f:1f:ba:65:53:8d:13:57:be:33:4f:88:8a:50: 3a:a6:5a:d4:26:d1:9f:1b:72:f0:7f:5e:c9:f5:15:e5:f3:38: f6:f2:bf:05:24:eb:6c:b0:79:79:ba:ef:3a:19:03:9e:aa:64: c8:9c:01:0e:34:6d:29:bd:81:63:b7:66:07:7f:fc:e4:12:ef: e8:b9:6a:16 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBGMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQ2QzIxMTAvBgNVBAUTKDQyQjc0OUUxRUNEQkUwMzA3NDdGOENCNTc0N0YyRDcz QTVFNDI0NTQwHhcNMjUwNTMxMDAyNDUwWhcNMjUwNjA3MDAyNDUwWjAYMRYwFAYD VQQDEw02ODNhNGM1My1kOTE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAskyS1j+HvHzLxZyJH6vfiQA7mruGMxh1E6C5WhQm0FoaUyxpINTR3yO1CUQc 2zM3ujWEO1w/0GHPQs+hXqJKAKIy7MkgPRw1jktGXmBite0dBEIxGlRjDYjq3/Vp tW8nPFIZ6uzPQtW8GxlIqlp+tqEZ5anPdmZhk/SEbqXOmlVUxAy4lE87sUyCXnOw 7Asv4P0OdGadWwfE64o15eEHnfXpd4OH/n5xAflRxQmcFvmYyBNcJ9UHfayLXu/q jSILC2rRsE9xVIs9WX/ApEA9hXnhCSFokBsEw9hy0J9nDTbkLW2mK7Acdx9bGIM2 OPa+7q1HoQeqY2uHTXxLV7cYQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJHrwIum zJgZsbUXnzHG22IucaBbMB8GA1UdIwQYMBaAFEK3SeHs2+AwdH+MtXR/LXOl5CRU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDZDMi9GOUM0NkZBQzUz QTIxMUVDOUQ1RTYxNURDNEY5QUUwMi9RcmRKNGV6YjREQjBmNHkxZEg4dGM2WGtK RlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FyZEo0ZXpiNERCMGY0eTFkSDh0YzZYa0pGUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDZDMi9GOUM0NkZBQzUzQTIxMUVDOUQ1RTYxNURDNEY5QUUwMi9RcmRKNGV6YjRE QjBmNHkxZEg4dGM2WGtKRlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwgIHxkJYN2QBf/5jZ+usPklKRey1ahrm7N39SNyGVeBklDnn9KJlD o/R5E5WwtjgcAanLSzeeL0nrt4m0zf+4UbpHrMb8FvhAobubosdoVg0pXfy3O45c AwQ1bE1fV+h4Q12zeea8WjKNtkQm+27js78bT5uXmnMGC4ho1677lVK1RmsxjTVZ JJbeviUdm+8o4m4WjeewB/lfnnY/eXG1f3QRiooEUeo7dLjtDHFl2AHrRzThfdjd nx+6ZVONE1e+M0+IilA6plrUJtGfG3Lwf17J9RXl8zj28r8FJOtssHl5uu86GQOe qmTInAEONG0pvYFjt2YHf/zkEu/ouWoW -----END CERTIFICATE-----Generated at Sat May 31 14:36:45 2025 by rpki-client