$ rpki-client -vvf rpki.apnic.net/member_repository/A9171A5B/17E10102993B11E79ABB8181C4F9AE02/q30L1dKrXe4vHNaWuCm675d_eM4.mft File: q30L1dKrXe4vHNaWuCm675d_eM4.mft (raw, json) Hash identifier: jf4A+I50blGeaOaLxza7ZsKV/k2h9nQZzZ9zB873KGw= Subject key identifier: 81:0F:B3:0B:C1:9A:87:86:B7:56:83:AC:6B:B8:2F:0C:0A:4C:34:83 Authority key identifier: AB:7D:0B:D5:D2:AB:5D:EE:2F:1C:D6:96:B8:29:BA:EF:97:7F:78:CE Certificate issuer: /CN=A9171A5B/serialNumber=AB7D0BD5D2AB5DEE2F1CD696B829BAEF977F78CE Certificate serial: 18D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q30L1dKrXe4vHNaWuCm675d_eM4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171A5B/17E10102993B11E79ABB8181C4F9AE02/q30L1dKrXe4vHNaWuCm675d_eM4.mft Manifest number: 18B9 Signing time: Tue 10 Jun 2025 16:29:27 +0000 Manifest this update: Tue 10 Jun 2025 16:29:26 +0000 Manifest next update: Tue 17 Jun 2025 16:29:26 +0000 Files and hashes: 1: q30L1dKrXe4vHNaWuCm675d_eM4.crl (hash: iACwCMxYG9qb/Acjm67XuR6SAf3be+5qJmx/j9+Lajc=) 2: EC8BB4F2B2B411EF8B387C7CC4F9AE02.roa (hash: YcDZtKeRh1UHltnHTYosXa988+fvsMaT0V4n1NKi1tc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171A5B/17E10102993B11E79ABB8181C4F9AE02/q30L1dKrXe4vHNaWuCm675d_eM4.crl rsync://rpki.apnic.net/member_repository/A9171A5B/17E10102993B11E79ABB8181C4F9AE02/q30L1dKrXe4vHNaWuCm675d_eM4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q30L1dKrXe4vHNaWuCm675d_eM4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 16:29:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6354 (0x18d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171A5B, serialNumber=AB7D0BD5D2AB5DEE2F1CD696B829BAEF977F78CE Validity Not Before: Jun 10 16:29:26 2025 GMT Not After : Jun 17 16:29:26 2025 GMT Subject: CN=68485d66-c332 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:88:04:e1:7c:8a:38:90:55:df:ae:e4:d9:f8: ba:ed:53:22:b4:64:2a:04:f6:6c:ba:b5:5f:96:27: 2f:7b:ea:64:70:fd:d5:23:bb:f8:a6:e0:ca:07:56: e7:ed:8a:57:33:a3:29:f8:6d:69:2f:2f:ae:04:68: 3a:ce:bd:da:c3:1f:9d:b8:5a:83:91:18:0f:b1:ae: 40:ba:fb:84:6f:cb:47:74:21:4b:b5:cf:5c:25:17: df:5d:93:b1:4a:c4:57:33:47:66:81:ad:21:ca:58: a8:d2:d1:ae:bd:1d:03:8e:2b:5c:27:11:5e:bb:a2: 57:41:f3:8f:0d:3e:7b:ef:0d:60:fc:c3:91:b2:d4: 76:cb:7f:43:ca:8c:e0:4f:e7:35:8d:15:8b:fe:70: a8:ad:0a:26:b8:8a:b6:67:c1:87:b0:39:9c:dd:06: e9:70:cf:98:5e:78:82:d1:2c:cb:47:26:cb:aa:53: 84:e6:a9:86:88:32:5b:61:2c:1c:91:3d:bb:e3:7f: 2c:3c:8a:f4:b0:4c:be:9b:70:f1:74:2d:29:a4:8f: 8c:3a:e8:cf:b5:c4:9e:13:2e:df:4e:10:38:d0:f3: 18:43:44:ad:a3:ff:5e:ce:11:28:34:9f:91:98:b8: c8:80:e3:92:6e:6a:09:96:2f:d2:13:fd:9a:be:7e: 1d:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:0F:B3:0B:C1:9A:87:86:B7:56:83:AC:6B:B8:2F:0C:0A:4C:34:83 X509v3 Authority Key Identifier: keyid:AB:7D:0B:D5:D2:AB:5D:EE:2F:1C:D6:96:B8:29:BA:EF:97:7F:78:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171A5B/17E10102993B11E79ABB8181C4F9AE02/q30L1dKrXe4vHNaWuCm675d_eM4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q30L1dKrXe4vHNaWuCm675d_eM4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171A5B/17E10102993B11E79ABB8181C4F9AE02/q30L1dKrXe4vHNaWuCm675d_eM4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:c2:05:e7:3e:a8:61:f1:e1:49:2d:18:46:b3:a2:a3:f7:a7: 53:c8:f2:c7:4f:86:fa:4a:19:51:58:a2:9f:76:89:12:28:0d: 9c:49:a6:90:cd:36:2c:5e:4d:62:b3:f7:99:0f:77:c6:ac:7a: 3f:a6:0c:12:26:57:ac:7c:e5:3d:e9:09:2e:ee:47:08:3b:9a: 32:7e:88:d7:00:03:96:35:e5:98:79:dd:5a:34:a7:be:1b:2d: 60:27:34:59:60:4e:28:89:47:e3:e4:75:b7:3b:41:da:0c:fb: f3:b1:33:d1:8e:2a:d6:6d:b2:0c:80:63:be:51:76:e8:ac:4f: 74:86:37:e8:5d:5b:e7:0e:53:aa:5e:22:f1:54:8d:1c:6f:21: 59:f6:6e:a8:2e:db:8d:e7:e6:ec:fd:de:e2:c1:d1:73:b3:7c: da:8e:e3:31:ce:74:77:e2:00:51:e9:36:69:64:f3:2b:d6:b5: 3a:16:cb:37:86:cb:b8:e9:46:d7:12:d1:36:cb:77:9d:e3:a1: 6f:ef:9b:d1:79:59:5e:b0:f2:64:25:e3:c7:5b:71:65:dd:d4: 7b:65:45:fc:c5:27:cd:fe:ef:1c:72:73:e9:77:a4:84:78:fc: 4c:9d:f8:3b:ce:94:38:65:14:cc:cc:b8:c0:6d:d5:2e:3b:58: e6:d3:46:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGNIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzFBNUIxMTAvBgNVBAUTKEFCN0QwQkQ1RDJBQjVERUUyRjFDRDY5NkI4MjlCQUVG OTc3Rjc4Q0UwHhcNMjUwNjEwMTYyOTI2WhcNMjUwNjE3MTYyOTI2WjAYMRYwFAYD VQQDEw02ODQ4NWQ2Ni1jMzMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArYgE4XyKOJBV367k2fi67VMitGQqBPZsurVflicve+pkcP3VI7v4puDKB1bn 7YpXM6Mp+G1pLy+uBGg6zr3awx+duFqDkRgPsa5AuvuEb8tHdCFLtc9cJRffXZOx SsRXM0dmga0hylio0tGuvR0DjitcJxFeu6JXQfOPDT577w1g/MORstR2y39Dyozg T+c1jRWL/nCorQomuIq2Z8GHsDmc3QbpcM+YXniC0SzLRybLqlOE5qmGiDJbYSwc kT27438sPIr0sEy+m3DxdC0ppI+MOujPtcSeEy7fThA40PMYQ0Sto/9ezhEoNJ+R mLjIgOOSbmoJli/SE/2avn4dkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIEPswvB moeGt1aDrGu4LwwKTDSDMB8GA1UdIwQYMBaAFKt9C9XSq13uLxzWlrgpuu+Xf3jO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MUE1Qi8xN0UxMDEwMjk5 M0IxMUU3OUFCQjgxODFDNEY5QUUwMi9xMzBMMWRLclhlNHZITmFXdUNtNjc1ZF9l TTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3EzMEwxZEtyWGU0dkhOYVd1Q202NzVkX2VNNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MUE1Qi8xN0UxMDEwMjk5M0IxMUU3OUFCQjgxODFDNEY5QUUwMi9xMzBMMWRLclhl NHZITmFXdUNtNjc1ZF9lTTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBrwgXnPqhh8eFJLRhGs6Kj96dTyPLHT4b6ShlRWKKfdokSKA2cSaaQ zTYsXk1is/eZD3fGrHo/pgwSJlesfOU96Qku7kcIO5oyfojXAAOWNeWYed1aNKe+ Gy1gJzRZYE4oiUfj5HW3O0HaDPvzsTPRjirWbbIMgGO+UXborE90hjfoXVvnDlOq XiLxVI0cbyFZ9m6oLtuN5+bs/d7iwdFzs3zajuMxznR34gBR6TZpZPMr1rU6Fss3 hsu46UbXEtE2y3ed46Fv75vReVlesPJkJePHW3Fl3dR7ZUX8xSfN/u8ccnPpd6SE ePxMnfg7zpQ4ZRTMzLjAbdUuO1jm00YD -----END CERTIFICATE-----Generated at Thu Jun 12 04:50:51 2025 by rpki-client