$ rpki-client -vvf rpki.apnic.net/member_repository/A9178C7A/AC45962E9C4011ED97008470C4F9AE02/QNuuLIMZi8b60lgpmII0VqN3Y6s.mft File: QNuuLIMZi8b60lgpmII0VqN3Y6s.mft (raw, json) Hash identifier: y2yPK+/BC0bNE+c62LxLhqa15mdgqWl1PGi7MnPF5Zc= Subject key identifier: 25:D2:CB:AF:09:50:59:F1:29:64:1C:CD:BD:11:96:03:9F:7A:65:4E Authority key identifier: 40:DB:AE:2C:83:19:8B:C6:FA:D2:58:29:98:82:34:56:A3:77:63:AB Certificate issuer: /CN=A9178C7A/serialNumber=40DBAE2C83198BC6FAD2582998823456A37763AB Certificate serial: 01BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QNuuLIMZi8b60lgpmII0VqN3Y6s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178C7A/AC45962E9C4011ED97008470C4F9AE02/QNuuLIMZi8b60lgpmII0VqN3Y6s.mft Manifest number: 01B7 Signing time: Sat 31 May 2025 02:49:54 +0000 Manifest this update: Sat 31 May 2025 02:49:53 +0000 Manifest next update: Sat 07 Jun 2025 02:49:53 +0000 Files and hashes: 1: QNuuLIMZi8b60lgpmII0VqN3Y6s.crl (hash: ZQeXAoPHpsjXMzRhaIs2IiTfCmy1bAeNickHPRuPIhs=) 2: 668242F49C4511EDB73A4379C4F9AE02.roa (hash: gmNihSedKpDGfcYPF1sadPjFdgvJvl9JTBA30x8f3SM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178C7A/AC45962E9C4011ED97008470C4F9AE02/QNuuLIMZi8b60lgpmII0VqN3Y6s.crl rsync://rpki.apnic.net/member_repository/A9178C7A/AC45962E9C4011ED97008470C4F9AE02/QNuuLIMZi8b60lgpmII0VqN3Y6s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QNuuLIMZi8b60lgpmII0VqN3Y6s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 02:49:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 443 (0x1bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178C7A, serialNumber=40DBAE2C83198BC6FAD2582998823456A37763AB Validity Not Before: May 31 02:49:53 2025 GMT Not After : Jun 7 02:49:53 2025 GMT Subject: CN=683a6e51-2347 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:0b:4b:b5:c5:5d:a5:aa:90:29:d9:9d:cc:0f: a7:22:40:b7:5d:ec:03:a5:0c:95:52:48:5a:b7:0f: 06:f9:c1:78:7d:f8:4b:df:8a:ae:f2:4f:23:7f:8e: 6f:32:8c:6f:19:33:67:9d:9b:25:5d:4e:0e:ea:2d: 8d:c7:39:1c:37:8d:b5:3f:be:88:fc:d3:4c:a4:19: f1:06:2b:fc:fb:76:b8:d6:6c:c5:e7:91:d2:77:a8: 2d:13:f3:f8:e9:25:5a:3a:d9:fd:f6:93:70:e2:6e: 1d:a8:9b:6a:d8:d2:ee:cb:45:c4:46:f1:cb:09:a5: 55:bf:c5:cc:97:dc:98:f2:e3:86:77:f6:28:a1:ce: c2:92:60:ee:5a:e2:3f:a8:a7:69:e9:5d:a5:e5:af: 46:f0:80:0a:82:25:56:ec:83:92:40:7c:16:75:1c: bc:cb:9f:ea:55:83:23:07:ec:56:fa:1f:63:83:c3: fb:e0:95:f5:ea:36:f3:96:3f:f4:9e:33:2e:91:d1: d3:5e:c0:29:72:ce:7d:e0:8c:08:74:11:9d:96:73: 4d:b7:01:23:af:0f:30:7a:cb:87:37:b9:a6:9c:9f: 87:aa:73:1a:97:46:24:bf:54:c0:a8:b0:a5:90:34: 03:ca:e3:b4:3b:00:c9:5c:49:7e:1c:19:76:9e:c8: 7a:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:D2:CB:AF:09:50:59:F1:29:64:1C:CD:BD:11:96:03:9F:7A:65:4E X509v3 Authority Key Identifier: keyid:40:DB:AE:2C:83:19:8B:C6:FA:D2:58:29:98:82:34:56:A3:77:63:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178C7A/AC45962E9C4011ED97008470C4F9AE02/QNuuLIMZi8b60lgpmII0VqN3Y6s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QNuuLIMZi8b60lgpmII0VqN3Y6s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178C7A/AC45962E9C4011ED97008470C4F9AE02/QNuuLIMZi8b60lgpmII0VqN3Y6s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:fa:40:44:56:21:5a:e3:02:2c:05:07:d0:66:84:e8:06:55: e7:8f:80:77:a0:a3:61:0f:77:ee:2c:2a:3a:d9:da:a2:25:3f: 98:8c:5e:8e:e0:2a:02:cf:b9:80:74:ad:b6:1e:42:e9:17:c7: c1:09:23:d0:2f:f9:21:22:af:7e:77:aa:d3:84:de:f6:9d:3c: 5b:3e:b3:12:de:e2:38:fe:b4:a2:63:2d:ff:5d:3f:08:89:58: 15:5a:0b:c1:f0:7c:4b:de:cb:4e:5e:51:78:0b:f0:ba:33:b3: c7:75:99:84:12:24:c2:fe:d5:1e:ee:ab:40:42:c7:5a:db:82: 77:59:2a:d8:8f:0f:d4:b8:6d:35:9b:90:0b:40:f9:77:e2:c3: fc:cc:ad:72:16:4c:fe:c9:bb:1c:d7:de:64:ca:4d:c0:79:de: 6f:73:eb:bc:23:08:9f:84:cc:fb:d3:dc:2e:c1:2a:10:d8:24: 1a:cd:9f:5c:57:1b:80:0b:78:1f:1c:81:f0:09:8f:14:33:73: 5b:41:3a:a2:fc:ed:95:90:92:ea:54:0d:c8:d9:ec:05:b4:42: 66:04:7b:c4:63:81:96:d4:93:d1:a8:c5:9f:dc:88:ab:37:50: 0f:d3:fd:fc:f8:12:52:37:d8:c8:08:1d:f5:71:7d:30:13:4b: 84:3f:ff:43 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzhDN0ExMTAvBgNVBAUTKDQwREJBRTJDODMxOThCQzZGQUQyNTgyOTk4ODIzNDU2 QTM3NzYzQUIwHhcNMjUwNTMxMDI0OTUzWhcNMjUwNjA3MDI0OTUzWjAYMRYwFAYD VQQDEw02ODNhNmU1MS0yMzQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4AtLtcVdpaqQKdmdzA+nIkC3XewDpQyVUkhatw8G+cF4ffhL34qu8k8jf45v MoxvGTNnnZslXU4O6i2NxzkcN421P76I/NNMpBnxBiv8+3a41mzF55HSd6gtE/P4 6SVaOtn99pNw4m4dqJtq2NLuy0XERvHLCaVVv8XMl9yY8uOGd/Yooc7CkmDuWuI/ qKdp6V2l5a9G8IAKgiVW7IOSQHwWdRy8y5/qVYMjB+xW+h9jg8P74JX16jbzlj/0 njMukdHTXsApcs594IwIdBGdlnNNtwEjrw8wesuHN7mmnJ+HqnMal0Ykv1TAqLCl kDQDyuO0OwDJXEl+HBl2nsh6LQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCXSy68J UFnxKWQczb0RlgOfemVOMB8GA1UdIwQYMBaAFEDbriyDGYvG+tJYKZiCNFajd2Or MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OEM3QS9BQzQ1OTYyRTlD NDAxMUVEOTcwMDg0NzBDNEY5QUUwMi9RTnV1TElNWmk4YjYwbGdwbUlJMFZxTjNZ NnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FOdXVMSU1aaThiNjBsZ3BtSUkwVnFOM1k2cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OEM3QS9BQzQ1OTYyRTlDNDAxMUVEOTcwMDg0NzBDNEY5QUUwMi9RTnV1TElNWmk4 YjYwbGdwbUlJMFZxTjNZNnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBf+kBEViFa4wIsBQfQZoToBlXnj4B3oKNhD3fuLCo62dqiJT+YjF6O 4CoCz7mAdK22HkLpF8fBCSPQL/khIq9+d6rThN72nTxbPrMS3uI4/rSiYy3/XT8I iVgVWgvB8HxL3stOXlF4C/C6M7PHdZmEEiTC/tUe7qtAQsda24J3WSrYjw/UuG01 m5ALQPl34sP8zK1yFkz+ybsc195kyk3Aed5vc+u8IwifhMz709wuwSoQ2CQazZ9c VxuAC3gfHIHwCY8UM3NbQTqi/O2VkJLqVA3I2ewFtEJmBHvEY4GW1JPRqMWf3Iir N1AP0/38+BJSN9jICB31cX0wE0uEP/9D -----END CERTIFICATE-----Generated at Sat May 31 17:03:27 2025 by rpki-client