$ rpki-client -vvf rpki.apnic.net/member_repository/A9167003/26A6B05832BB11EFA83D612FC4F9AE02/qPwGNuaBhkdVSHlN36RpC__UzLY.mft File: qPwGNuaBhkdVSHlN36RpC__UzLY.mft (raw, json) Hash identifier: tMEd0z3rdZApngwJdUeaBTVkioZintEHcVv3TTjkiP8= Subject key identifier: B6:10:69:2A:5D:8F:8A:4B:E1:80:A6:0C:5A:92:2D:41:BC:41:A4:99 Authority key identifier: A8:FC:06:36:E6:81:86:47:55:48:79:4D:DF:A4:69:0B:FF:D4:CC:B6 Certificate issuer: /CN=A9167003/serialNumber=A8FC0636E68186475548794DDFA4690BFFD4CCB6 Certificate serial: B4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qPwGNuaBhkdVSHlN36RpC__UzLY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167003/26A6B05832BB11EFA83D612FC4F9AE02/qPwGNuaBhkdVSHlN36RpC__UzLY.mft Manifest number: B2 Signing time: Tue 03 Jun 2025 05:48:24 +0000 Manifest this update: Tue 03 Jun 2025 05:48:24 +0000 Manifest next update: Tue 10 Jun 2025 05:48:24 +0000 Files and hashes: 1: qPwGNuaBhkdVSHlN36RpC__UzLY.crl (hash: QYDtTuFEy66ySYuRPUKY7TVilIHyGqi5TLEHh3sD+xc=) 2: 85C3AC9A39E511EF99FD7A11C4F9AE02.roa (hash: B8Xb2sYgtypSv3e1Q/ixe1JBQsd2MMr7LDz0OuJS7tw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167003/26A6B05832BB11EFA83D612FC4F9AE02/qPwGNuaBhkdVSHlN36RpC__UzLY.crl rsync://rpki.apnic.net/member_repository/A9167003/26A6B05832BB11EFA83D612FC4F9AE02/qPwGNuaBhkdVSHlN36RpC__UzLY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qPwGNuaBhkdVSHlN36RpC__UzLY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 05:48:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 180 (0xb4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167003, serialNumber=A8FC0636E68186475548794DDFA4690BFFD4CCB6 Validity Not Before: Jun 3 05:48:24 2025 GMT Not After : Jun 10 05:48:24 2025 GMT Subject: CN=683e8ca8-2649 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:73:d4:ae:5c:b2:48:62:4e:d0:33:07:20:61: 6a:d3:19:66:55:0c:bd:75:e4:fc:1c:eb:6a:63:b8: 0c:df:fb:a0:cc:78:e8:ea:0f:9e:d9:4c:51:17:4e: 02:01:a6:af:25:7d:27:e9:59:67:0b:23:d8:97:a2: a1:bf:26:94:d1:1a:df:a6:08:9c:21:b4:95:3e:87: cd:4e:0a:37:a4:9c:d3:16:72:08:21:c7:fd:58:55: f4:99:3e:e0:1a:ec:e6:d8:73:26:4e:92:2c:ff:37: 57:c9:7c:09:24:4f:c9:b5:0e:fd:d4:4c:32:f7:65: 7e:1d:de:2a:5a:62:62:6a:4b:b6:e9:f5:42:2d:51: bf:da:c5:5b:9a:c8:56:38:d0:61:5b:f1:44:26:71: cf:e2:df:12:37:90:3b:1a:e2:af:64:10:f7:8c:c9: b3:1c:80:09:12:fd:4a:04:85:31:1f:e0:99:2e:bb: 92:56:6d:37:5d:6f:ee:00:cc:34:c2:ef:28:b2:12: a8:94:2d:e7:ae:75:98:db:d7:0f:ea:46:d6:95:07: ed:53:ca:4f:e8:a7:73:3a:33:39:7f:b5:7a:d9:ed: 8f:03:c8:80:58:7a:7f:de:f2:76:e5:4a:54:8e:d6: 8b:8e:72:1f:98:53:b4:48:24:cd:2e:a2:5e:57:33: 3f:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:10:69:2A:5D:8F:8A:4B:E1:80:A6:0C:5A:92:2D:41:BC:41:A4:99 X509v3 Authority Key Identifier: keyid:A8:FC:06:36:E6:81:86:47:55:48:79:4D:DF:A4:69:0B:FF:D4:CC:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167003/26A6B05832BB11EFA83D612FC4F9AE02/qPwGNuaBhkdVSHlN36RpC__UzLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qPwGNuaBhkdVSHlN36RpC__UzLY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167003/26A6B05832BB11EFA83D612FC4F9AE02/qPwGNuaBhkdVSHlN36RpC__UzLY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:bd:3f:7f:28:bd:39:32:3b:b4:9d:56:de:61:af:e2:c6:d5: 18:58:c3:9c:2f:df:3c:02:73:6b:2c:bf:0b:bd:f8:08:95:ae: 4c:9a:4f:b3:2e:8c:4a:71:cc:9e:a4:82:fc:f4:15:a2:3d:1c: a4:80:10:bf:a6:4e:9c:81:a7:65:26:92:e8:79:0b:4c:96:19: bb:97:31:49:91:d8:ef:be:d4:1c:d3:ec:41:58:20:93:9b:05: 90:96:33:45:b0:4d:7c:7a:f2:db:c0:75:ed:cc:38:24:31:81: f3:fc:fe:8c:a3:aa:c2:7b:bb:18:63:09:fd:fe:1c:70:1b:ba: a4:e8:9c:e4:ee:02:22:dc:da:90:f0:7c:cf:20:7b:0f:36:e8: 7d:1f:39:46:ab:5d:8f:58:dc:fe:ec:2d:a9:27:40:67:53:5a: 05:63:ad:01:a9:04:33:06:73:36:34:85:6a:d3:3e:d3:32:67: 56:9b:7e:70:3b:23:39:2a:2a:2e:cd:d4:b0:9e:59:ca:bf:4e: d3:de:68:cf:9e:7b:ae:07:07:58:d4:e3:e8:22:49:49:d9:51: 38:4a:a1:d6:f9:f1:11:cc:7b:db:6a:0f:8f:35:8b:8f:6f:12: b1:2d:5f:02:74:59:9e:df:d4:9d:df:39:eb:1e:8e:ec:0a:4d: c8:f8:0e:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjcwMDMxMTAvBgNVBAUTKEE4RkMwNjM2RTY4MTg2NDc1NTQ4Nzk0RERGQTQ2OTBC RkZENENDQjYwHhcNMjUwNjAzMDU0ODI0WhcNMjUwNjEwMDU0ODI0WjAYMRYwFAYD VQQDEw02ODNlOGNhOC0yNjQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3HPUrlyySGJO0DMHIGFq0xlmVQy9deT8HOtqY7gM3/ugzHjo6g+e2UxRF04C AaavJX0n6VlnCyPYl6KhvyaU0RrfpgicIbSVPofNTgo3pJzTFnIIIcf9WFX0mT7g Guzm2HMmTpIs/zdXyXwJJE/JtQ791Ewy92V+Hd4qWmJiaku26fVCLVG/2sVbmshW ONBhW/FEJnHP4t8SN5A7GuKvZBD3jMmzHIAJEv1KBIUxH+CZLruSVm03XW/uAMw0 wu8oshKolC3nrnWY29cP6kbWlQftU8pP6KdzOjM5f7V62e2PA8iAWHp/3vJ25UpU jtaLjnIfmFO0SCTNLqJeVzM/kQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLYQaSpd j4pL4YCmDFqSLUG8QaSZMB8GA1UdIwQYMBaAFKj8BjbmgYZHVUh5Td+kaQv/1My2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NzAwMy8yNkE2QjA1ODMy QkIxMUVGQTgzRDYxMkZDNEY5QUUwMi9xUHdHTnVhQmhrZFZTSGxOMzZScENfX1V6 TFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3FQd0dOdWFCaGtkVlNIbE4zNlJwQ19fVXpMWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NzAwMy8yNkE2QjA1ODMyQkIxMUVGQTgzRDYxMkZDNEY5QUUwMi9xUHdHTnVhQmhr ZFZTSGxOMzZScENfX1V6TFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAyvT9/KL05Mju0nVbeYa/ixtUYWMOcL988AnNrLL8LvfgIla5Mmk+z LoxKccyepIL89BWiPRykgBC/pk6cgadlJpLoeQtMlhm7lzFJkdjvvtQc0+xBWCCT mwWQljNFsE18evLbwHXtzDgkMYHz/P6Mo6rCe7sYYwn9/hxwG7qk6Jzk7gIi3NqQ 8HzPIHsPNuh9HzlGq12PWNz+7C2pJ0BnU1oFY60BqQQzBnM2NIVq0z7TMmdWm35w OyM5KiouzdSwnlnKv07T3mjPnnuuBwdY1OPoIklJ2VE4SqHW+fERzHvbag+PNYuP bxKxLV8CdFme39Sd3znrHo7sCk3I+A7o -----END CERTIFICATE-----Generated at Tue Jun 3 23:43:07 2025 by rpki-client