$ rpki-client -vvf rpki.apnic.net/member_repository/A918DB4E/77E7F9A00CE511EAA20DDD82C4F9AE02/QnWN4MwM9iwq7uk-Du5nkDpQLMw.mft File: QnWN4MwM9iwq7uk-Du5nkDpQLMw.mft (raw, json) Hash identifier: xzYgNMLsIKi6ndAc3iFLG7TFpYZv4prwfwME7VvKhRE= Subject key identifier: EC:C1:69:78:11:FB:93:27:18:41:30:31:7F:BA:0B:75:33:8C:5A:FB Authority key identifier: 42:75:8D:E0:CC:0C:F6:2C:2A:EE:E9:3E:0E:EE:67:90:3A:50:2C:CC Certificate issuer: /CN=A918DB4E/serialNumber=42758DE0CC0CF62C2AEEE93E0EEE67903A502CCC Certificate serial: 0C6C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QnWN4MwM9iwq7uk-Du5nkDpQLMw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918DB4E/77E7F9A00CE511EAA20DDD82C4F9AE02/QnWN4MwM9iwq7uk-Du5nkDpQLMw.mft Manifest number: 0C46 Signing time: Fri 30 May 2025 18:50:27 +0000 Manifest this update: Fri 30 May 2025 18:50:26 +0000 Manifest next update: Fri 06 Jun 2025 18:50:26 +0000 Files and hashes: 1: QnWN4MwM9iwq7uk-Du5nkDpQLMw.crl (hash: IVCRc9CSIxxdA6g+xz8X3RuNXlAK/41v8MjyXKFHoE4=) 2: CF3CF4A2DECD11EFA34A7C66C4F9AE02.roa (hash: WhFdwVA+Rqc9T4Pe4wg3jXjmM2B3Qv4g2BycMdAzMjs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918DB4E/77E7F9A00CE511EAA20DDD82C4F9AE02/QnWN4MwM9iwq7uk-Du5nkDpQLMw.crl rsync://rpki.apnic.net/member_repository/A918DB4E/77E7F9A00CE511EAA20DDD82C4F9AE02/QnWN4MwM9iwq7uk-Du5nkDpQLMw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QnWN4MwM9iwq7uk-Du5nkDpQLMw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 18:50:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3180 (0xc6c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918DB4E, serialNumber=42758DE0CC0CF62C2AEEE93E0EEE67903A502CCC Validity Not Before: May 30 18:50:26 2025 GMT Not After : Jun 6 18:50:26 2025 GMT Subject: CN=6839fdf2-13e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:a9:88:48:e7:a7:a2:2a:ad:d8:b9:1e:65:ed: 13:64:a7:1f:3b:1f:f9:7c:7c:f2:13:91:8e:21:d1: 5c:05:70:46:c9:1e:77:49:e9:83:a7:04:69:69:d5: 88:4c:22:2a:1c:64:82:c3:0e:bd:08:de:d9:de:f1: aa:d1:d0:19:d2:7e:4b:57:88:13:ac:10:c3:33:d4: a1:1e:27:7e:c4:ba:95:2d:7c:32:c9:7c:22:24:f2: 6b:d8:e3:05:d4:92:0a:08:73:3d:59:6c:cb:67:22: 14:26:55:3d:da:3d:33:28:43:ff:ab:af:c4:7b:c0: 1c:67:15:24:e0:55:1d:aa:82:b0:db:26:52:e4:ab: 0e:a7:14:4d:0e:d3:32:7f:e3:fc:b4:6d:13:ec:72: a1:58:8c:5a:ce:c3:bd:f1:be:af:82:c7:19:4d:f6: 85:91:74:38:42:eb:eb:ae:7f:7d:3c:a8:75:c0:ec: b0:3c:c5:14:7e:1c:da:f1:2a:4c:e2:63:f3:41:c6: c2:20:67:33:27:5a:ab:32:7b:14:ac:a1:6e:8e:0f: 13:20:f9:29:ae:cb:86:2b:be:93:39:8f:71:3b:9f: 01:1b:2b:e7:ff:e9:52:92:4a:08:b1:11:df:bf:4e: 51:36:24:37:b4:e5:61:43:6f:82:d9:ce:0e:33:c4: b3:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:C1:69:78:11:FB:93:27:18:41:30:31:7F:BA:0B:75:33:8C:5A:FB X509v3 Authority Key Identifier: keyid:42:75:8D:E0:CC:0C:F6:2C:2A:EE:E9:3E:0E:EE:67:90:3A:50:2C:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918DB4E/77E7F9A00CE511EAA20DDD82C4F9AE02/QnWN4MwM9iwq7uk-Du5nkDpQLMw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QnWN4MwM9iwq7uk-Du5nkDpQLMw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918DB4E/77E7F9A00CE511EAA20DDD82C4F9AE02/QnWN4MwM9iwq7uk-Du5nkDpQLMw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:54:d5:c6:2d:e7:c1:0f:52:ae:ad:5f:97:bc:a0:eb:e0:d3: de:ef:12:ee:73:c1:a8:8c:3c:70:f7:41:c4:be:56:09:0f:04: 4d:77:51:f2:78:09:f8:55:13:09:7f:89:2d:7d:43:ff:ce:a5: e6:01:34:f1:af:e3:5e:e6:c1:b2:34:f1:8a:99:1e:4d:a0:9b: 8f:6c:2f:d5:7e:c0:47:24:1a:35:bf:8e:f0:88:63:d9:58:90: f6:42:45:fa:05:98:3d:f0:26:23:97:90:83:50:ea:51:c6:e2: 89:d7:8a:04:42:5c:01:97:82:d9:24:a4:44:06:ec:b9:db:fe: 03:6d:a0:cd:bc:35:4b:36:a6:d9:1f:ff:85:b6:2d:b0:e1:c7: 58:aa:01:ce:91:3a:d3:b0:d7:c6:c0:bc:f5:7e:28:bb:42:0d: 84:c1:1f:23:ec:7a:4d:b1:23:f5:99:a7:01:e4:e6:f3:21:f9: e9:a0:2d:0a:19:7d:22:67:93:02:6d:be:07:fa:9e:10:b0:4d: d4:6a:3b:09:ee:b3:69:45:d1:b7:f0:25:27:19:f5:aa:a5:83: 24:23:03:5b:60:17:1a:24:54:08:b8:4e:62:c2:1e:8d:56:c9: 14:9d:fc:72:16:0e:f8:a5:6f:b1:d0:ee:16:5b:ce:57:ba:ec: 11:84:2f:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDGwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OERCNEUxMTAvBgNVBAUTKDQyNzU4REUwQ0MwQ0Y2MkMyQUVFRTkzRTBFRUU2Nzkw M0E1MDJDQ0MwHhcNMjUwNTMwMTg1MDI2WhcNMjUwNjA2MTg1MDI2WjAYMRYwFAYD VQQDEw02ODM5ZmRmMi0xM2UyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9amISOenoiqt2LkeZe0TZKcfOx/5fHzyE5GOIdFcBXBGyR53SemDpwRpadWI TCIqHGSCww69CN7Z3vGq0dAZ0n5LV4gTrBDDM9ShHid+xLqVLXwyyXwiJPJr2OMF 1JIKCHM9WWzLZyIUJlU92j0zKEP/q6/Ee8AcZxUk4FUdqoKw2yZS5KsOpxRNDtMy f+P8tG0T7HKhWIxazsO98b6vgscZTfaFkXQ4Quvrrn99PKh1wOywPMUUfhza8SpM 4mPzQcbCIGczJ1qrMnsUrKFujg8TIPkprsuGK76TOY9xO58BGyvn/+lSkkoIsRHf v05RNiQ3tOVhQ2+C2c4OM8Sz8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOzBaXgR +5MnGEEwMX+6C3UzjFr7MB8GA1UdIwQYMBaAFEJ1jeDMDPYsKu7pPg7uZ5A6UCzM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4REI0RS83N0U3RjlBMDBD RTUxMUVBQTIwREREODJDNEY5QUUwMi9RbldONE13TTlpd3E3dWstRHU1bmtEcFFM TXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FuV040TXdNOWl3cTd1ay1EdTVua0RwUUxNdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 REI0RS83N0U3RjlBMDBDRTUxMUVBQTIwREREODJDNEY5QUUwMi9RbldONE13TTlp d3E3dWstRHU1bmtEcFFMTXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnVNXGLefBD1KurV+XvKDr4NPe7xLuc8GojDxw90HEvlYJDwRNd1Hy eAn4VRMJf4ktfUP/zqXmATTxr+Ne5sGyNPGKmR5NoJuPbC/VfsBHJBo1v47wiGPZ WJD2QkX6BZg98CYjl5CDUOpRxuKJ14oEQlwBl4LZJKREBuy52/4DbaDNvDVLNqbZ H/+Fti2w4cdYqgHOkTrTsNfGwLz1fii7Qg2EwR8j7HpNsSP1macB5ObzIfnpoC0K GX0iZ5MCbb4H+p4QsE3UajsJ7rNpRdG38CUnGfWqpYMkIwNbYBcaJFQIuE5iwh6N VskUnfxyFg74pW+x0O4WW85XuuwRhC+6 -----END CERTIFICATE-----Generated at Sat May 31 16:35:47 2025 by rpki-client