$ rpki-client -vvf rpki.apnic.net/member_repository/A9195F49/9D3C749266A211ECBB7A0A3CC4F9AE02/qHH05sNy2xC2TfOZX6FR77OfmYs.mft File: qHH05sNy2xC2TfOZX6FR77OfmYs.mft (raw, json) Hash identifier: ZTROxk8Q2AtSKAall/ecKayvrMBbVOf2xjxt7mnLCLw= Subject key identifier: FE:CB:59:4D:8D:1B:FA:58:76:96:66:20:31:11:88:41:3E:95:89:D8 Authority key identifier: A8:71:F4:E6:C3:72:DB:10:B6:4D:F3:99:5F:A1:51:EF:B3:9F:99:8B Certificate issuer: /CN=A9195F49/serialNumber=A871F4E6C372DB10B64DF3995FA151EFB39F998B Certificate serial: 042F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qHH05sNy2xC2TfOZX6FR77OfmYs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9195F49/9D3C749266A211ECBB7A0A3CC4F9AE02/qHH05sNy2xC2TfOZX6FR77OfmYs.mft Manifest number: 0428 Signing time: Sat 31 May 2025 00:35:22 +0000 Manifest this update: Sat 31 May 2025 00:35:22 +0000 Manifest next update: Sat 07 Jun 2025 00:35:22 +0000 Files and hashes: 1: qHH05sNy2xC2TfOZX6FR77OfmYs.crl (hash: dIc1J3Nh+s//7cRlON2oanUkvmgIHBteodp58bGvzQY=) 2: 5FC75DCC66A511EC9C199341C4F9AE02.roa (hash: jsVFzS1V8/4nPs0LiSJz70mLYAraQYwRrwx0A1zMdZQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9195F49/9D3C749266A211ECBB7A0A3CC4F9AE02/qHH05sNy2xC2TfOZX6FR77OfmYs.crl rsync://rpki.apnic.net/member_repository/A9195F49/9D3C749266A211ECBB7A0A3CC4F9AE02/qHH05sNy2xC2TfOZX6FR77OfmYs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qHH05sNy2xC2TfOZX6FR77OfmYs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:35:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1071 (0x42f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9195F49, serialNumber=A871F4E6C372DB10B64DF3995FA151EFB39F998B Validity Not Before: May 31 00:35:22 2025 GMT Not After : Jun 7 00:35:22 2025 GMT Subject: CN=683a4eca-b8c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:da:75:dd:40:e2:8e:00:9f:25:67:26:0e:2e: 18:80:6d:3c:bb:9b:81:13:99:fd:d7:fb:bd:b3:f7: d0:c8:2c:82:40:de:7c:01:48:60:15:46:1c:ba:8e: a8:e7:f2:99:19:ef:a4:36:60:e1:3e:f5:f2:14:b2: ee:8f:8b:1b:76:54:19:23:f5:ba:ee:30:ae:65:73: e6:b2:ef:c7:a6:0b:03:b2:97:73:ce:e3:9e:38:03: 73:3f:c3:e4:e3:52:41:02:02:f8:26:d8:bc:f1:72: 16:3f:db:1b:0b:43:f3:f5:78:2a:64:89:2c:9e:d9: 6d:52:0b:94:b6:bb:d5:64:22:47:f9:f7:c1:f1:9c: 46:c8:5a:2b:fa:50:2a:71:11:0a:08:ed:0c:69:eb: 20:8a:92:09:2b:25:2a:a3:31:9e:af:13:01:2a:f3: 2d:36:05:04:be:6c:5e:d3:63:16:3e:74:95:6f:35: d9:7f:d4:31:73:92:2e:53:c0:0c:eb:45:74:04:66: 7c:6b:48:26:cc:0f:65:24:21:d4:10:f0:6e:b1:6e: d1:7b:eb:cf:fc:ca:9d:f1:13:63:82:4b:43:c7:93: fb:7d:40:8f:39:d3:06:47:ce:a2:8d:cd:5d:93:e7: b7:84:0d:c9:2b:77:72:4d:3b:bc:85:cd:e6:c0:95: b4:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:CB:59:4D:8D:1B:FA:58:76:96:66:20:31:11:88:41:3E:95:89:D8 X509v3 Authority Key Identifier: keyid:A8:71:F4:E6:C3:72:DB:10:B6:4D:F3:99:5F:A1:51:EF:B3:9F:99:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9195F49/9D3C749266A211ECBB7A0A3CC4F9AE02/qHH05sNy2xC2TfOZX6FR77OfmYs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qHH05sNy2xC2TfOZX6FR77OfmYs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195F49/9D3C749266A211ECBB7A0A3CC4F9AE02/qHH05sNy2xC2TfOZX6FR77OfmYs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:66:d3:7a:0d:00:52:6c:6d:d6:85:13:f2:ad:3a:dd:b6:2a: 4f:df:8d:19:3e:81:8b:a7:6c:93:d6:8f:b8:46:d1:d9:fc:07: 8a:53:63:a2:37:b7:bd:37:4c:0e:a5:34:28:b3:3e:ef:10:1a: 50:24:32:23:99:a6:ea:32:8f:2a:af:33:af:97:da:b6:a9:52: 3c:b5:b5:53:c5:d6:19:0a:e9:4a:de:16:f3:08:08:d2:ad:ab: 7c:99:a1:d5:ec:9e:92:8e:d1:bd:1a:31:82:c6:85:65:b9:a9: a9:49:5c:12:bf:67:5a:da:71:b3:f0:56:dd:fb:cf:65:93:bf: fb:2f:7b:2c:2a:12:59:d8:ff:15:7d:89:72:4b:44:d7:f5:05: 66:0d:c0:68:89:ca:1f:6e:67:4b:12:d9:5a:dd:2f:b7:89:8a: a9:0f:29:83:58:58:41:e5:14:1e:21:1e:f8:60:e2:d6:ab:eb: 03:fd:5a:c9:d7:23:a5:b5:37:c8:60:0b:7d:41:84:3f:15:af: e1:c0:83:52:53:ff:85:95:56:34:95:28:9c:8e:ed:5a:63:9f: 41:8a:50:84:91:dc:9d:b0:a0:43:b6:b8:01:f8:48:17:9a:bb: d9:3b:cb:f5:27:5f:ea:1b:8e:ab:af:e8:7f:9f:3d:8c:10:b5: 89:c5:ef:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBC8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTVGNDkxMTAvBgNVBAUTKEE4NzFGNEU2QzM3MkRCMTBCNjRERjM5OTVGQTE1MUVG QjM5Rjk5OEIwHhcNMjUwNTMxMDAzNTIyWhcNMjUwNjA3MDAzNTIyWjAYMRYwFAYD VQQDEw02ODNhNGVjYS1iOGMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy9p13UDijgCfJWcmDi4YgG08u5uBE5n91/u9s/fQyCyCQN58AUhgFUYcuo6o 5/KZGe+kNmDhPvXyFLLuj4sbdlQZI/W67jCuZXPmsu/HpgsDspdzzuOeOANzP8Pk 41JBAgL4Jti88XIWP9sbC0Pz9XgqZIksntltUguUtrvVZCJH+ffB8ZxGyFor+lAq cREKCO0MaesgipIJKyUqozGerxMBKvMtNgUEvmxe02MWPnSVbzXZf9Qxc5IuU8AM 60V0BGZ8a0gmzA9lJCHUEPBusW7Re+vP/Mqd8RNjgktDx5P7fUCPOdMGR86ijc1d k+e3hA3JK3dyTTu8hc3mwJW0kwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP7LWU2N G/pYdpZmIDERiEE+lYnYMB8GA1UdIwQYMBaAFKhx9ObDctsQtk3zmV+hUe+zn5mL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NUY0OS85RDNDNzQ5MjY2 QTIxMUVDQkI3QTBBM0NDNEY5QUUwMi9xSEgwNXNOeTJ4QzJUZk9aWDZGUjc3T2Zt WXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FISDA1c055MnhDMlRmT1pYNkZSNzdPZm1Zcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NUY0OS85RDNDNzQ5MjY2QTIxMUVDQkI3QTBBM0NDNEY5QUUwMi9xSEgwNXNOeTJ4 QzJUZk9aWDZGUjc3T2ZtWXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARZtN6DQBSbG3WhRPyrTrdtipP340ZPoGLp2yT1o+4RtHZ/AeKU2Oi N7e9N0wOpTQosz7vEBpQJDIjmabqMo8qrzOvl9q2qVI8tbVTxdYZCulK3hbzCAjS rat8maHV7J6SjtG9GjGCxoVluampSVwSv2da2nGz8Fbd+89lk7/7L3ssKhJZ2P8V fYlyS0TX9QVmDcBoicofbmdLEtla3S+3iYqpDymDWFhB5RQeIR74YOLWq+sD/VrJ 1yOltTfIYAt9QYQ/Fa/hwINSU/+FlVY0lSicju1aY59BilCEkdydsKBDtrgB+EgX mrvZO8v1J1/qG46rr+h/nz2MELWJxe9N -----END CERTIFICATE-----Generated at Sat May 31 15:51:49 2025 by rpki-client