$ rpki-client -vvf rpki.apnic.net/member_repository/A9167F95/7D33FD3812E711F0BDB9454DC4F9AE02/qDvPbbKI6WRw000Yr7PkqBJ5GGc.mft File: qDvPbbKI6WRw000Yr7PkqBJ5GGc.mft (raw, json) Hash identifier: UW9TM2+1fgko618rpal2+lPRcGQgG75SQaPUpYEl7qE= Subject key identifier: E2:13:89:A5:CE:DA:11:65:59:60:68:62:73:93:47:86:DB:95:FA:4A Authority key identifier: A8:3B:CF:6D:B2:88:E9:64:70:D3:4D:18:AF:B3:E4:A8:12:79:18:67 Certificate issuer: /CN=A9167F95/serialNumber=A83BCF6DB288E96470D34D18AFB3E4A812791867 Certificate serial: 20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qDvPbbKI6WRw000Yr7PkqBJ5GGc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167F95/7D33FD3812E711F0BDB9454DC4F9AE02/qDvPbbKI6WRw000Yr7PkqBJ5GGc.mft Manifest number: 1E Signing time: Sat 31 May 2025 07:28:32 +0000 Manifest this update: Sat 31 May 2025 07:28:32 +0000 Manifest next update: Sat 07 Jun 2025 07:28:32 +0000 Files and hashes: 1: qDvPbbKI6WRw000Yr7PkqBJ5GGc.crl (hash: w6t+hmvZB6ZXD8zMgxC5xN1OY0QbDON5z+NSf5T3Dew=) 2: CB67B90812E811F0B8DAD875C4F9AE02.roa (hash: ghA9EEgI0e+9HlkDLrK1eM2MR4ZuQ4ALmiWbqOT3M5E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167F95/7D33FD3812E711F0BDB9454DC4F9AE02/qDvPbbKI6WRw000Yr7PkqBJ5GGc.crl rsync://rpki.apnic.net/member_repository/A9167F95/7D33FD3812E711F0BDB9454DC4F9AE02/qDvPbbKI6WRw000Yr7PkqBJ5GGc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qDvPbbKI6WRw000Yr7PkqBJ5GGc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:28:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32 (0x20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167F95, serialNumber=A83BCF6DB288E96470D34D18AFB3E4A812791867 Validity Not Before: May 31 07:28:32 2025 GMT Not After : Jun 7 07:28:32 2025 GMT Subject: CN=683aafa0-0f13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:4d:82:d6:66:0d:ab:59:74:b9:90:2f:23:53: 34:6d:02:b0:f8:f8:76:f2:61:5c:45:39:5b:74:ea: 46:c9:6c:7c:40:72:05:08:8f:c7:ad:00:b8:c3:43: bd:85:7e:e8:67:d6:0c:6d:86:0f:88:38:6b:0a:59: 31:06:53:63:fd:ce:36:ce:f0:eb:7b:ee:88:17:25: 47:bc:43:38:3b:31:cf:e2:7f:54:d0:cf:3f:2e:74: e9:33:af:50:fb:72:b4:e4:2e:97:b9:28:a0:c6:45: 87:18:da:78:27:b1:a8:08:47:85:da:36:3e:c8:e4: 22:d5:7a:c1:fe:ca:49:cc:8c:c6:64:b3:74:3e:37: 42:a3:f9:47:7e:08:9f:96:8e:68:4f:0b:c9:8a:21: 0a:97:87:a0:58:b9:55:94:bc:a8:53:b6:77:db:87: fa:e8:48:a9:0b:df:98:b9:f9:5f:e3:aa:d5:27:9d: 55:36:2b:c8:b7:c3:49:d1:17:4b:99:82:3d:d0:11: 95:48:bd:af:60:2b:ef:80:f0:eb:35:c6:84:90:ce: 47:92:fc:e2:a2:ee:18:72:80:6c:ab:f0:53:27:3e: 3c:9f:f4:03:fc:29:e5:13:37:9b:9d:25:2d:47:aa: a1:19:a0:d1:59:da:b0:16:11:ed:1e:a7:6e:a5:2d: 56:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:13:89:A5:CE:DA:11:65:59:60:68:62:73:93:47:86:DB:95:FA:4A X509v3 Authority Key Identifier: keyid:A8:3B:CF:6D:B2:88:E9:64:70:D3:4D:18:AF:B3:E4:A8:12:79:18:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167F95/7D33FD3812E711F0BDB9454DC4F9AE02/qDvPbbKI6WRw000Yr7PkqBJ5GGc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qDvPbbKI6WRw000Yr7PkqBJ5GGc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167F95/7D33FD3812E711F0BDB9454DC4F9AE02/qDvPbbKI6WRw000Yr7PkqBJ5GGc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:61:cf:25:df:8f:4b:29:6e:45:32:b5:bb:1d:d2:18:7e:58: 22:54:0f:75:e3:69:c0:83:c2:2c:e8:2a:46:14:d3:1c:9a:6d: 30:96:c9:98:b0:75:68:67:84:6e:cf:b8:73:02:2f:95:d5:c3: cd:9c:e5:4f:cc:40:ef:06:84:a4:6f:a5:0b:a1:e0:07:6c:60: 19:89:9a:7e:3e:fb:83:c2:df:4c:3a:e8:58:b7:17:af:ce:de: bd:2d:1b:8a:38:c5:e6:8b:4f:5c:3e:34:81:a4:8e:29:04:50: 7b:8f:8b:ca:9a:30:c2:1c:c3:08:15:2f:7f:7d:94:8d:c9:20: ea:f7:84:20:54:eb:88:d0:d5:dd:83:20:2f:be:e5:c1:21:23: 5a:d1:d8:2e:e1:00:1f:29:49:a8:55:6f:54:e8:65:c5:e7:69: d3:e7:e2:fb:70:87:ee:79:0f:fd:6e:69:ea:28:5f:80:c0:e7: e9:47:84:3d:c4:5d:fe:0f:b2:e4:66:2a:3f:a9:df:f1:99:43: 8c:39:99:f0:a2:dd:28:02:1d:c1:55:f6:b5:ad:37:fd:2c:e7: 0c:3a:d9:5d:75:ce:ef:65:7e:bd:d5:92:d0:19:8d:3c:1a:a7: f0:57:4b:69:2c:56:66:1b:d5:4f:ce:8d:22:31:10:b3:3e:52: 2d:e2:3d:a6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 N0Y5NTExMC8GA1UEBRMoQTgzQkNGNkRCMjg4RTk2NDcwRDM0RDE4QUZCM0U0QTgx Mjc5MTg2NzAeFw0yNTA1MzEwNzI4MzJaFw0yNTA2MDcwNzI4MzJaMBgxFjAUBgNV BAMTDTY4M2FhZmEwLTBmMTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCcTYLWZg2rWXS5kC8jUzRtArD4+HbyYVxFOVt06kbJbHxAcgUIj8etALjDQ72F fuhn1gxthg+IOGsKWTEGU2P9zjbO8Ot77ogXJUe8Qzg7Mc/if1TQzz8udOkzr1D7 crTkLpe5KKDGRYcY2ngnsagIR4XaNj7I5CLVesH+yknMjMZks3Q+N0Kj+Ud+CJ+W jmhPC8mKIQqXh6BYuVWUvKhTtnfbh/roSKkL35i5+V/jqtUnnVU2K8i3w0nRF0uZ gj3QEZVIva9gK++A8Os1xoSQzkeS/OKi7hhygGyr8FMnPjyf9AP8KeUTN5udJS1H qqEZoNFZ2rAWEe0ep26lLVY7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU4hOJpc7a EWVZYGhic5NHhtuV+kowHwYDVR0jBBgwFoAUqDvPbbKI6WRw000Yr7PkqBJ5GGcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY3Rjk1LzdEMzNGRDM4MTJF NzExRjBCREI5NDU0REM0RjlBRTAyL3FEdlBiYktJNldSdzAwMFlyN1BrcUJKNUdH Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcUR2UGJiS0k2V1J3MDAwWXI3UGtxQko1R0djLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY3 Rjk1LzdEMzNGRDM4MTJFNzExRjBCREI5NDU0REM0RjlBRTAyL3FEdlBiYktJNldS dzAwMFlyN1BrcUJKNUdHYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGRhzyXfj0spbkUytbsd0hh+WCJUD3XjacCDwizoKkYU0xyabTCWyZiw dWhnhG7PuHMCL5XVw82c5U/MQO8GhKRvpQuh4AdsYBmJmn4++4PC30w66Fi3F6/O 3r0tG4o4xeaLT1w+NIGkjikEUHuPi8qaMMIcwwgVL399lI3JIOr3hCBU64jQ1d2D IC++5cEhI1rR2C7hAB8pSahVb1ToZcXnadPn4vtwh+55D/1uaeooX4DA5+lHhD3E Xf4PsuRmKj+p3/GZQ4w5mfCi3SgCHcFV9rWtN/0s5ww62V11zu9lfr3VktAZjTwa p/BXS2ksVmYb1U/OjSIxELM+Ui3iPaY= -----END CERTIFICATE-----Generated at Sat May 31 16:55:01 2025 by rpki-client