$ rpki-client -vvf rpki.apnic.net/member_repository/A9161A95/947618862BD911F0AB443122C4F9AE02/QRBhvlydJMUpvH1WmJtK0sE40SM.mft File: QRBhvlydJMUpvH1WmJtK0sE40SM.mft (raw, json) Hash identifier: +ZZ+VYzkogaGR024gTa7XO8UsvZpqfbdRiC6tR6wbNc= Subject key identifier: 40:22:24:A6:A6:A4:DA:5F:8B:7C:5D:2C:A3:D8:F6:25:5F:F9:30:0D Authority key identifier: 41:10:61:BE:5C:9D:24:C5:29:BC:7D:56:98:9B:4A:D2:C1:38:D1:23 Certificate issuer: /CN=A9161A95/serialNumber=411061BE5C9D24C529BC7D56989B4AD2C138D123 Certificate serial: 0C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRBhvlydJMUpvH1WmJtK0sE40SM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161A95/947618862BD911F0AB443122C4F9AE02/QRBhvlydJMUpvH1WmJtK0sE40SM.mft Manifest number: 0C Signing time: Sat 31 May 2025 07:39:25 +0000 Manifest this update: Sat 31 May 2025 07:39:24 +0000 Manifest next update: Sat 07 Jun 2025 07:39:24 +0000 Files and hashes: 1: QRBhvlydJMUpvH1WmJtK0sE40SM.crl (hash: 4HpBwdEFuZENS86BNC9A/7W4h1RuRLghJp9u/bAYj/I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161A95/947618862BD911F0AB443122C4F9AE02/QRBhvlydJMUpvH1WmJtK0sE40SM.crl rsync://rpki.apnic.net/member_repository/A9161A95/947618862BD911F0AB443122C4F9AE02/QRBhvlydJMUpvH1WmJtK0sE40SM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRBhvlydJMUpvH1WmJtK0sE40SM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:39:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12 (0xc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161A95, serialNumber=411061BE5C9D24C529BC7D56989B4AD2C138D123 Validity Not Before: May 31 07:39:24 2025 GMT Not After : Jun 7 07:39:24 2025 GMT Subject: CN=683ab22d-e9f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:bd:ca:5e:7c:a2:e9:cc:4d:8a:97:ea:cb:7f: 6e:93:11:5c:66:fb:9b:0a:cf:22:8a:3e:da:bf:33: b4:5f:2b:fd:f0:10:1c:f9:f6:a6:39:01:27:63:7f: 62:ba:93:d1:4f:40:5d:7c:5e:ba:4e:4e:f7:15:46: a4:c0:de:a2:71:45:ec:ef:4a:95:ee:27:3f:e0:14: 7e:fd:6f:93:16:82:d3:29:3f:73:4e:dd:32:38:8e: 1c:08:c1:fc:67:67:ca:63:6a:95:70:cc:50:32:82: 43:68:66:05:b9:43:4b:54:8f:14:e6:86:5d:b7:9e: d0:49:50:83:ed:c6:6a:e6:c7:10:eb:44:79:f5:78: d2:a0:9a:4e:df:eb:d9:dd:2a:a1:c3:c1:f6:dc:4a: 1e:df:d1:50:7c:9d:bb:8e:b4:a6:a9:cc:08:41:13: 54:d3:c3:6d:bd:24:a8:a5:11:80:82:6e:92:02:c3: 51:7b:bb:c9:33:f9:0c:7e:f6:17:68:98:dc:55:df: e2:ab:85:0a:d2:17:20:16:2d:f8:1b:b5:af:6c:e3: 49:07:e8:84:ed:85:bc:60:96:1d:5e:ad:ea:6b:12: 92:4c:e8:a7:d0:54:87:56:a2:7f:c1:c8:32:b8:20: 83:82:de:9d:7f:ec:69:cc:c9:b9:53:0d:b7:a6:50: 02:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:22:24:A6:A6:A4:DA:5F:8B:7C:5D:2C:A3:D8:F6:25:5F:F9:30:0D X509v3 Authority Key Identifier: keyid:41:10:61:BE:5C:9D:24:C5:29:BC:7D:56:98:9B:4A:D2:C1:38:D1:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161A95/947618862BD911F0AB443122C4F9AE02/QRBhvlydJMUpvH1WmJtK0sE40SM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRBhvlydJMUpvH1WmJtK0sE40SM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161A95/947618862BD911F0AB443122C4F9AE02/QRBhvlydJMUpvH1WmJtK0sE40SM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:ff:d3:77:b4:64:05:39:c8:37:7a:48:fd:2d:30:a6:86:1e: 4b:2e:19:5e:92:05:d0:68:b5:3d:08:18:f8:c3:10:84:06:04: 71:2a:65:a8:5e:ff:9d:e1:ff:85:ec:eb:c2:47:23:7e:05:5e: 30:fb:6a:bb:a0:91:8a:7c:3f:84:a3:88:da:4e:a4:ca:d7:40: ec:89:ce:7b:a5:27:26:bb:d5:1a:c1:ea:c5:d3:99:43:c1:31: 85:41:b6:16:7e:78:e1:29:1e:39:8c:b1:fd:32:ed:77:1a:cc: bb:ed:9d:e7:d9:29:80:df:02:e0:77:85:31:87:8a:ac:2c:3e: 92:ed:06:04:be:d9:e1:4a:1e:05:2a:e7:3d:07:9e:db:02:82: da:6a:ad:99:95:66:69:d4:9b:2c:5a:6a:16:c5:7a:a1:8c:04: 20:16:21:0e:df:88:49:82:80:3d:68:a6:c5:82:bc:52:11:6f: c1:51:39:d6:c5:0c:c5:a8:63:ef:f4:b1:33:af:48:81:ca:10: 65:a2:6a:7e:6b:00:94:94:03:14:75:ba:3a:30:5d:bc:de:a7: b0:8e:e9:1d:d9:ba:56:3c:d6:2c:7b:69:51:a7:87:2a:f1:d2: f3:ef:83:c2:25:4b:93:23:ff:e4:3c:6f:c1:8a:3e:87:ee:5f: 97:48:b8:fd -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 MUE5NTExMC8GA1UEBRMoNDExMDYxQkU1QzlEMjRDNTI5QkM3RDU2OTg5QjRBRDJD MTM4RDEyMzAeFw0yNTA1MzEwNzM5MjRaFw0yNTA2MDcwNzM5MjRaMBgxFjAUBgNV BAMTDTY4M2FiMjJkLWU5ZjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDhvcpefKLpzE2Kl+rLf26TEVxm+5sKzyKKPtq/M7RfK/3wEBz59qY5ASdjf2K6 k9FPQF18XrpOTvcVRqTA3qJxRezvSpXuJz/gFH79b5MWgtMpP3NO3TI4jhwIwfxn Z8pjapVwzFAygkNoZgW5Q0tUjxTmhl23ntBJUIPtxmrmxxDrRHn1eNKgmk7f69nd KqHDwfbcSh7f0VB8nbuOtKapzAhBE1TTw229JKilEYCCbpICw1F7u8kz+Qx+9hdo mNxV3+KrhQrSFyAWLfgbta9s40kH6ITthbxglh1ereprEpJM6KfQVIdWon/ByDK4 IIOC3p1/7GnMyblTDbemUAJdAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUQCIkpqak 2l+LfF0so9j2JV/5MA0wHwYDVR0jBBgwFoAUQRBhvlydJMUpvH1WmJtK0sE40SMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYxQTk1Lzk0NzYxODg2MkJE OTExRjBBQjQ0MzEyMkM0RjlBRTAyL1FSQmh2bHlkSk1VcHZIMVdtSnRLMHNFNDBT TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUVJCaHZseWRKTVVwdkgxV21KdEswc0U0MFNNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYx QTk1Lzk0NzYxODg2MkJEOTExRjBBQjQ0MzEyMkM0RjlBRTAyL1FSQmh2bHlkSk1V cHZIMVdtSnRLMHNFNDBTTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGf/03e0ZAU5yDd6SP0tMKaGHksuGV6SBdBotT0IGPjDEIQGBHEqZahe /53h/4Xs68JHI34FXjD7arugkYp8P4SjiNpOpMrXQOyJznulJya71RrB6sXTmUPB MYVBthZ+eOEpHjmMsf0y7XcazLvtnefZKYDfAuB3hTGHiqwsPpLtBgS+2eFKHgUq 5z0HntsCgtpqrZmVZmnUmyxaahbFeqGMBCAWIQ7fiEmCgD1opsWCvFIRb8FROdbF DMWoY+/0sTOvSIHKEGWian5rAJSUAxR1ujowXbzep7CO6R3ZulY81ix7aVGnhyrx 0vPvg8IlS5Mj/+Q8b8GKPofuX5dIuP0= -----END CERTIFICATE-----Generated at Sat May 31 17:31:57 2025 by rpki-client