$ rpki-client -vvf rpki.apnic.net/member_repository/A9188A46/D64E5A7EDC8411EFB908503BC4F9AE02/qI7iP_jXCCjO28cB54yAdH_8Eco.mft File: qI7iP_jXCCjO28cB54yAdH_8Eco.mft (raw, json) Hash identifier: 0m3z7TGC7qzzO4kX8OUO12kgSB1TfEIELf5utj5umkY= Subject key identifier: 7C:FC:E2:AB:FD:36:E6:A8:B4:44:F4:59:2E:87:89:6F:FE:D3:34:25 Authority key identifier: A8:8E:E2:3F:F8:D7:08:28:CE:DB:C7:01:E7:8C:80:74:7F:FC:11:CA Certificate issuer: /CN=A9188A46/serialNumber=A88EE23FF8D70828CEDBC701E78C80747FFC11CA Certificate serial: 44 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qI7iP_jXCCjO28cB54yAdH_8Eco.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9188A46/D64E5A7EDC8411EFB908503BC4F9AE02/qI7iP_jXCCjO28cB54yAdH_8Eco.mft Manifest number: 42 Signing time: Sat 31 May 2025 07:02:07 +0000 Manifest this update: Sat 31 May 2025 07:02:06 +0000 Manifest next update: Sat 07 Jun 2025 07:02:06 +0000 Files and hashes: 1: qI7iP_jXCCjO28cB54yAdH_8Eco.crl (hash: G48SYYiMFDRWXVBw5XuAk3Rg1gUoUk2E++e/gvIecxU=) 2: F3964710DC9611EF9965F120C4F9AE02.roa (hash: m1p9gDbyX7TV/W36Rz61piz8WXiRToAGwtHk1Dx3J+0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9188A46/D64E5A7EDC8411EFB908503BC4F9AE02/qI7iP_jXCCjO28cB54yAdH_8Eco.crl rsync://rpki.apnic.net/member_repository/A9188A46/D64E5A7EDC8411EFB908503BC4F9AE02/qI7iP_jXCCjO28cB54yAdH_8Eco.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qI7iP_jXCCjO28cB54yAdH_8Eco.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:02:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68 (0x44) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9188A46, serialNumber=A88EE23FF8D70828CEDBC701E78C80747FFC11CA Validity Not Before: May 31 07:02:06 2025 GMT Not After : Jun 7 07:02:06 2025 GMT Subject: CN=683aa96e-a380 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:14:a9:8e:bf:c7:b1:dd:80:93:63:9e:9c:b2: ce:02:98:8d:84:aa:39:d2:19:8c:7f:9b:d2:77:ba: 19:32:52:84:00:cc:24:e8:c5:da:7e:b5:4e:24:d2: 51:19:17:b0:8a:17:94:56:f8:7e:ab:fc:a9:35:ec: 6c:cc:2d:9e:b3:0b:63:d2:4d:76:0b:9d:0b:e9:06: 74:3b:f4:58:d4:c1:36:d9:23:ae:82:b7:d5:41:57: 34:94:b9:6a:d3:f2:6f:8b:ab:87:22:df:1a:dc:95: be:4b:e5:df:e7:f4:4e:f9:d9:20:61:a9:02:1b:0e: 45:08:65:7b:26:04:51:24:66:54:e1:a6:34:e3:5c: cd:fa:b9:a5:3b:b1:47:36:65:44:80:d2:8c:71:ad: 86:82:ee:c2:87:4d:fe:d1:ba:b4:fa:a0:55:5d:6e: c3:bd:5f:32:b3:31:59:b3:19:35:c5:99:5b:aa:55: fd:09:bf:73:f2:4b:de:95:2a:21:ed:be:7e:d3:4d: d3:aa:25:83:7a:71:a5:ca:39:88:c0:82:c1:b6:4b: 4a:63:0a:81:dc:8d:7c:6c:13:ee:78:07:31:86:17: c1:67:70:82:5d:b5:14:db:ca:8f:6d:e5:e1:c2:9d: 71:2a:2e:d5:13:e9:ab:8f:96:f9:b2:53:96:95:98: 60:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:FC:E2:AB:FD:36:E6:A8:B4:44:F4:59:2E:87:89:6F:FE:D3:34:25 X509v3 Authority Key Identifier: keyid:A8:8E:E2:3F:F8:D7:08:28:CE:DB:C7:01:E7:8C:80:74:7F:FC:11:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9188A46/D64E5A7EDC8411EFB908503BC4F9AE02/qI7iP_jXCCjO28cB54yAdH_8Eco.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qI7iP_jXCCjO28cB54yAdH_8Eco.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188A46/D64E5A7EDC8411EFB908503BC4F9AE02/qI7iP_jXCCjO28cB54yAdH_8Eco.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:a6:5f:74:ae:eb:54:c2:ab:8d:bd:62:5c:d3:12:d2:89:9c: b8:a2:a3:dd:2b:35:c9:22:2b:e2:20:34:13:ac:13:e4:c8:82: d4:0a:24:6d:70:84:f5:ad:18:c9:63:90:1d:6d:41:62:f0:48: 54:f8:0c:df:06:cd:ad:12:d8:b1:43:a5:7d:31:f1:45:f7:14: 43:89:b4:a4:ff:22:af:96:c3:f4:a5:e2:36:3c:c2:4a:02:f3: 9d:cb:8a:4d:85:4f:54:ad:b7:18:c0:74:bf:2f:3b:c6:c6:bb: f8:b1:08:48:ac:95:ad:4d:f5:80:b7:f4:d2:13:7f:50:47:ed: d7:50:10:ad:72:f7:2c:2f:95:af:0b:d5:96:90:2c:d6:59:34: ea:54:46:27:76:d5:88:52:c3:73:ff:bd:f6:9b:00:9c:bd:b3: 53:f2:bc:f9:f8:64:d0:90:84:66:a8:68:db:12:fd:a1:14:f8: 58:e9:dd:9b:b2:3d:87:4c:a6:7d:c3:c6:26:ac:9b:68:c6:19: 78:20:02:ea:66:99:f2:fa:61:2a:f2:3a:8b:3f:df:f3:a1:f9: 09:96:38:ed:e4:38:40:1f:a5:7a:f7:df:75:d7:55:f7:74:8d: 83:4b:7f:c1:d6:f9:9c:c8:a7:7b:b1:39:81:1d:d5:d2:f3:bc: e1:26:f4:5e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 OEE0NjExMC8GA1UEBRMoQTg4RUUyM0ZGOEQ3MDgyOENFREJDNzAxRTc4QzgwNzQ3 RkZDMTFDQTAeFw0yNTA1MzEwNzAyMDZaFw0yNTA2MDcwNzAyMDZaMBgxFjAUBgNV BAMTDTY4M2FhOTZlLWEzODAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCsFKmOv8ex3YCTY56css4CmI2EqjnSGYx/m9J3uhkyUoQAzCToxdp+tU4k0lEZ F7CKF5RW+H6r/Kk17GzMLZ6zC2PSTXYLnQvpBnQ79FjUwTbZI66Ct9VBVzSUuWrT 8m+Lq4ci3xrclb5L5d/n9E752SBhqQIbDkUIZXsmBFEkZlThpjTjXM36uaU7sUc2 ZUSA0oxxrYaC7sKHTf7RurT6oFVdbsO9XzKzMVmzGTXFmVuqVf0Jv3PyS96VKiHt vn7TTdOqJYN6caXKOYjAgsG2S0pjCoHcjXxsE+54BzGGF8FncIJdtRTbyo9t5eHC nXEqLtUT6auPlvmyU5aVmGB7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUfPziq/02 5qi0RPRZLoeJb/7TNCUwHwYDVR0jBBgwFoAUqI7iP/jXCCjO28cB54yAdH/8Ecow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg4QTQ2L0Q2NEU1QTdFREM4 NDExRUZCOTA4NTAzQkM0RjlBRTAyL3FJN2lQX2pYQ0NqTzI4Y0I1NHlBZEhfOEVj by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcUk3aVBfalhDQ2pPMjhjQjU0eUFkSF84RWNvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg4 QTQ2L0Q2NEU1QTdFREM4NDExRUZCOTA4NTAzQkM0RjlBRTAyL3FJN2lQX2pYQ0Nq TzI4Y0I1NHlBZEhfOEVjby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAE+mX3Su61TCq429YlzTEtKJnLiio90rNckiK+IgNBOsE+TIgtQKJG1w hPWtGMljkB1tQWLwSFT4DN8Gza0S2LFDpX0x8UX3FEOJtKT/Iq+Ww/Sl4jY8wkoC 853Lik2FT1SttxjAdL8vO8bGu/ixCEisla1N9YC39NITf1BH7ddQEK1y9ywvla8L 1ZaQLNZZNOpURid21YhSw3P/vfabAJy9s1PyvPn4ZNCQhGaoaNsS/aEU+Fjp3Zuy PYdMpn3Dxiasm2jGGXggAupmmfL6YSryOos/3/Oh+QmWOO3kOEAfpXr333XXVfd0 jYNLf8HW+ZzIp3uxOYEd1dLzvOEm9F4= -----END CERTIFICATE-----Generated at Sat May 31 16:56:14 2025 by rpki-client