$ rpki-client -vvf rpki.apnic.net/member_repository/A9186D9F/A936E4402E0411EF86F29D79C4F9AE02/Q_dCP5PWuglpQFn7I974Uo0mSZ0.mft File: Q_dCP5PWuglpQFn7I974Uo0mSZ0.mft (raw, json) Hash identifier: RILS/9QXRCkl68Y6qVQK5CtDEtK9E3We4niQ+lI8oMw= Subject key identifier: 2A:C0:1B:4E:FB:F7:89:B8:AE:91:3C:FA:D9:BE:4C:24:C0:D4:70:B6 Authority key identifier: 43:F7:42:3F:93:D6:BA:09:69:40:59:FB:23:DE:F8:52:8D:26:49:9D Certificate issuer: /CN=A9186D9F/serialNumber=43F7423F93D6BA09694059FB23DEF8528D26499D Certificate serial: B5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q_dCP5PWuglpQFn7I974Uo0mSZ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186D9F/A936E4402E0411EF86F29D79C4F9AE02/Q_dCP5PWuglpQFn7I974Uo0mSZ0.mft Manifest number: B3 Signing time: Sun 01 Jun 2025 05:41:44 +0000 Manifest this update: Sun 01 Jun 2025 05:41:44 +0000 Manifest next update: Sun 08 Jun 2025 05:41:44 +0000 Files and hashes: 1: Q_dCP5PWuglpQFn7I974Uo0mSZ0.crl (hash: RH/xTxbZ8SLFuiJJ2An0KJBl7FbKeAreAtSdLZWQY8Q=) 2: 17EA0C7A38DF11EF8EEDB25EC4F9AE02.roa (hash: sflqoJJiQSUE3/D/FoYHXfA8MjGPanF4iuCvuWOV/9c=) 3: A63A2DFA2F5411EF9A12027FC4F9AE02.roa (hash: 3L8GR/TKBQutwByYr9Yt28Y5Yf6Lgn2PEAhMb4FmV9A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186D9F/A936E4402E0411EF86F29D79C4F9AE02/Q_dCP5PWuglpQFn7I974Uo0mSZ0.crl rsync://rpki.apnic.net/member_repository/A9186D9F/A936E4402E0411EF86F29D79C4F9AE02/Q_dCP5PWuglpQFn7I974Uo0mSZ0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q_dCP5PWuglpQFn7I974Uo0mSZ0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 02:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 181 (0xb5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186D9F, serialNumber=43F7423F93D6BA09694059FB23DEF8528D26499D Validity Not Before: Jun 1 05:41:44 2025 GMT Not After : Jun 8 05:41:44 2025 GMT Subject: CN=683be818-3cfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:1e:f5:cd:5e:5e:17:73:cb:8a:05:04:08:cd: c8:fa:86:37:29:3f:7e:e8:7f:b1:f9:d4:27:e9:0c: 66:ed:d6:aa:02:54:bb:75:2c:73:d3:cb:60:bc:6a: 66:22:bc:bf:25:a8:f6:93:06:33:af:65:8d:92:36: 34:42:19:be:18:12:b4:13:7b:2f:33:b3:9b:6d:55: b5:a5:aa:ad:5c:23:b8:f9:1e:0f:9c:fb:93:f9:9d: 93:6e:79:a3:51:ba:b0:8f:3e:7b:6d:a1:33:90:17: 54:2d:19:7e:75:86:d7:7c:fc:fe:9f:3f:5b:0c:3e: 1f:fe:9a:21:96:7f:8b:f5:22:20:7e:53:80:ce:b8: e9:32:86:bd:c4:0d:4a:85:63:62:d1:ca:c4:4f:1f: 06:7c:77:17:dc:7b:6c:fd:fe:b9:71:93:a9:7b:12: 24:70:dc:29:90:f9:c2:bf:b6:38:dd:7b:3f:40:3d: 54:d6:eb:71:6e:ac:39:ff:a0:54:5e:2e:53:15:76: 35:20:eb:32:18:99:8c:c4:ad:94:46:9c:df:b6:a9: 04:3a:85:57:f0:99:8c:42:26:21:b7:76:26:dc:f9: 41:b6:a3:c0:15:2d:db:b1:00:97:39:1f:53:97:14: 6e:db:f0:fe:eb:3e:7f:d0:17:c2:c0:46:34:1c:59: 94:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:C0:1B:4E:FB:F7:89:B8:AE:91:3C:FA:D9:BE:4C:24:C0:D4:70:B6 X509v3 Authority Key Identifier: keyid:43:F7:42:3F:93:D6:BA:09:69:40:59:FB:23:DE:F8:52:8D:26:49:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186D9F/A936E4402E0411EF86F29D79C4F9AE02/Q_dCP5PWuglpQFn7I974Uo0mSZ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q_dCP5PWuglpQFn7I974Uo0mSZ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186D9F/A936E4402E0411EF86F29D79C4F9AE02/Q_dCP5PWuglpQFn7I974Uo0mSZ0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:f6:3d:53:56:5e:4c:8b:c6:f2:09:92:85:a3:cb:74:90:e9: 08:56:48:3c:bc:34:b7:24:30:12:bd:ae:d5:73:b7:03:1d:9e: de:a4:6d:f3:47:81:69:f3:e6:4a:cc:0f:91:1b:b7:5c:d3:87: d2:23:e1:64:65:7a:78:16:33:c2:19:bf:1b:a8:4e:74:d7:b3: 79:ee:e8:7c:f8:7a:46:c1:c0:e9:24:d1:12:f3:74:52:94:70: 10:d9:c1:08:e0:be:05:37:9b:fd:1b:2d:d2:9c:d2:4c:de:4a: 3d:20:f6:01:11:19:8a:fb:67:97:05:af:08:2e:5d:fc:85:97: 26:bd:14:f0:69:b9:65:15:e1:ad:ef:7a:6d:0d:bd:d9:2a:80: 0b:b4:ed:fd:92:0b:f3:54:c2:cd:25:f6:e4:a5:17:e2:5a:9f: 41:95:a1:3b:ec:36:37:a5:1e:20:66:5b:3f:38:c9:6d:27:5b: c2:63:ee:2b:35:a3:eb:6f:2e:4a:a6:59:bc:64:6f:45:f8:18: b4:54:dd:20:e1:d0:b6:fb:39:6c:9e:28:0c:bb:78:18:b2:01: ab:2e:37:ad:36:43:d3:7c:dc:45:45:d5:71:fe:ec:10:6c:c7: 79:11:aa:23:ea:99:04:57:36:22:c1:4b:fd:35:42:a8:19:c9: b7:83:dc:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODZEOUYxMTAvBgNVBAUTKDQzRjc0MjNGOTNENkJBMDk2OTQwNTlGQjIzREVGODUy OEQyNjQ5OUQwHhcNMjUwNjAxMDU0MTQ0WhcNMjUwNjA4MDU0MTQ0WjAYMRYwFAYD VQQDEw02ODNiZTgxOC0zY2ZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0h71zV5eF3PLigUECM3I+oY3KT9+6H+x+dQn6Qxm7daqAlS7dSxz08tgvGpm Iry/Jaj2kwYzr2WNkjY0Qhm+GBK0E3svM7ObbVW1paqtXCO4+R4PnPuT+Z2Tbnmj Ubqwjz57baEzkBdULRl+dYbXfPz+nz9bDD4f/pohln+L9SIgflOAzrjpMoa9xA1K hWNi0crETx8GfHcX3Hts/f65cZOpexIkcNwpkPnCv7Y43Xs/QD1U1utxbqw5/6BU Xi5TFXY1IOsyGJmMxK2URpzftqkEOoVX8JmMQiYht3Ym3PlBtqPAFS3bsQCXOR9T lxRu2/D+6z5/0BfCwEY0HFmUtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCrAG077 94m4rpE8+tm+TCTA1HC2MB8GA1UdIwQYMBaAFEP3Qj+T1roJaUBZ+yPe+FKNJkmd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkQ5Ri9BOTM2RTQ0MDJF MDQxMUVGODZGMjlENzlDNEY5QUUwMi9RX2RDUDVQV3VnbHBRRm43STk3NFVvMG1T WjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1FfZENQNVBXdWdscFFGbjdJOTc0VW8wbVNaMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NkQ5Ri9BOTM2RTQ0MDJFMDQxMUVGODZGMjlENzlDNEY5QUUwMi9RX2RDUDVQV3Vn bHBRRm43STk3NFVvMG1TWjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBX9j1TVl5Mi8byCZKFo8t0kOkIVkg8vDS3JDASva7Vc7cDHZ7epG3z R4Fp8+ZKzA+RG7dc04fSI+FkZXp4FjPCGb8bqE5017N57uh8+HpGwcDpJNES83RS lHAQ2cEI4L4FN5v9Gy3SnNJM3ko9IPYBERmK+2eXBa8ILl38hZcmvRTwabllFeGt 73ptDb3ZKoALtO39kgvzVMLNJfbkpRfiWp9BlaE77DY3pR4gZls/OMltJ1vCY+4r NaPrby5Kplm8ZG9F+Bi0VN0g4dC2+zlsnigMu3gYsgGrLjetNkPTfNxFRdVx/uwQ bMd5Eaoj6pkEVzYiwUv9NUKoGcm3g9zc -----END CERTIFICATE-----Generated at Sun Jun 1 11:21:23 2025 by rpki-client