$ rpki-client -vvf rpki.apnic.net/member_repository/A91978DD/CC18D9D4E0B611E799A2B682C4F9AE02/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.mft File: Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.mft (raw, json) Hash identifier: wlMdiq5GWufnKKT0++yWLO7byWs/I9dTR/AUoYMy9rY= Subject key identifier: 69:32:55:35:37:1B:F5:8F:E5:44:8A:D6:2C:8E:AF:5F:CE:36:36:CD Authority key identifier: 43:D2:50:D5:C1:F6:09:ED:17:4D:FF:26:43:01:DB:45:BE:25:B1:B4 Certificate issuer: /CN=A91978DD/serialNumber=43D250D5C1F609ED174DFF264301DB45BE25B1B4 Certificate serial: 1733 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91978DD/CC18D9D4E0B611E799A2B682C4F9AE02/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.mft Manifest number: 172A Signing time: Fri 30 May 2025 16:48:26 +0000 Manifest this update: Fri 30 May 2025 16:48:25 +0000 Manifest next update: Fri 06 Jun 2025 16:48:25 +0000 Files and hashes: 1: Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.crl (hash: gOwFgTagAyjh5vte14ugwp3DPEMhS3RAoyiCwJFoU8g=) 2: 16ABD910E0C111E7BA64DE22C4F9AE02.roa (hash: Ooak6D5iQ2fJ6FZTf7sU2wRFg0kTNy2Wu4Ysho3zOO0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91978DD/CC18D9D4E0B611E799A2B682C4F9AE02/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.crl rsync://rpki.apnic.net/member_repository/A91978DD/CC18D9D4E0B611E799A2B682C4F9AE02/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 16:48:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5939 (0x1733) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91978DD, serialNumber=43D250D5C1F609ED174DFF264301DB45BE25B1B4 Validity Not Before: May 30 16:48:25 2025 GMT Not After : Jun 6 16:48:25 2025 GMT Subject: CN=6839e159-0974 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:85:4b:27:a1:4a:22:32:b7:cc:09:11:7e:22: 3f:e5:c4:ff:5d:e4:d6:04:80:87:31:d3:dc:68:7c: 41:8e:50:ac:cc:30:04:88:fa:c6:23:28:75:76:fd: 36:00:f2:83:86:f5:e0:78:e8:c5:89:34:62:ae:6f: 3d:9e:4f:54:38:b7:fc:07:1e:7f:ad:54:04:a9:16: b2:46:ef:89:fb:48:dc:e5:cb:94:6c:2c:a2:56:e8: bd:cd:b5:1d:0d:fb:40:ac:00:eb:e3:1a:e0:da:c5: 0b:84:8f:1e:97:21:56:82:4c:66:b1:1b:70:b5:5e: 51:39:b1:4a:b9:d6:f5:2a:c2:90:e3:ab:59:bb:2d: 56:91:af:1b:f9:cf:95:45:39:be:61:09:6a:63:f8: 3e:d9:4c:d3:2d:19:2e:90:24:d6:d4:2b:fd:15:76: c4:a6:77:87:19:e8:7e:2b:36:f4:31:e7:9f:08:6b: da:f1:2b:54:8c:1f:af:d9:96:f9:4c:9e:10:9a:0f: 0c:81:8b:02:71:cb:58:36:2f:80:2d:c4:97:e1:3c: 4f:e8:62:48:8e:8b:1c:f8:19:aa:e2:49:59:7e:83: 70:b7:16:1c:a5:11:1a:91:f6:80:3c:09:49:1d:3a: 09:0b:1d:f5:85:84:80:ce:d2:7b:5f:a0:bb:01:08: 37:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:32:55:35:37:1B:F5:8F:E5:44:8A:D6:2C:8E:AF:5F:CE:36:36:CD X509v3 Authority Key Identifier: keyid:43:D2:50:D5:C1:F6:09:ED:17:4D:FF:26:43:01:DB:45:BE:25:B1:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91978DD/CC18D9D4E0B611E799A2B682C4F9AE02/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91978DD/CC18D9D4E0B611E799A2B682C4F9AE02/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:b2:f0:58:f6:0f:e0:7d:38:66:0a:ea:fc:44:70:2e:5d:31: 4e:5b:68:43:f1:c5:6b:c1:6a:81:2b:e1:93:37:8d:88:62:17: 93:ca:21:d7:fc:32:63:5a:e6:97:83:04:ee:09:8a:a7:e8:04: c5:56:15:d9:c9:53:3a:7b:5d:f2:29:92:cf:9f:5e:0d:0b:ad: 03:16:40:3c:70:79:ac:a5:8c:a1:a3:68:7d:fc:28:85:20:74: cf:70:b9:ce:08:85:51:cc:82:92:e7:8a:e5:fa:8c:4e:1c:3e: 62:ec:e2:51:13:74:bd:4a:b9:6a:0b:b6:42:1f:1e:c2:0b:aa: e4:cd:30:ec:fd:fd:1b:5d:db:1c:d5:a2:c0:c8:30:5b:61:1a: 27:87:6b:df:96:91:dc:dd:10:c5:b4:50:2b:98:d6:52:44:7c: 2a:10:1a:ec:ac:1d:2e:ff:12:13:35:34:17:2f:c4:d7:89:32: 39:d4:90:3e:f2:94:05:e5:c6:c2:b7:37:f3:11:d8:46:4c:61: 0b:47:69:07:4c:9e:3d:36:ff:0f:1d:b9:65:75:a0:ee:6b:a0: 5e:d9:9f:4d:cc:54:0b:08:30:b1:9f:df:88:b9:6a:d3:0f:64: df:3e:aa:c5:8f:16:86:94:a7:10:62:6e:a3:46:09:8e:52:b5: 22:ed:44:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFzMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTc4REQxMTAvBgNVBAUTKDQzRDI1MEQ1QzFGNjA5RUQxNzRERkYyNjQzMDFEQjQ1 QkUyNUIxQjQwHhcNMjUwNTMwMTY0ODI1WhcNMjUwNjA2MTY0ODI1WjAYMRYwFAYD VQQDEw02ODM5ZTE1OS0wOTc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA14VLJ6FKIjK3zAkRfiI/5cT/XeTWBICHMdPcaHxBjlCszDAEiPrGIyh1dv02 APKDhvXgeOjFiTRirm89nk9UOLf8Bx5/rVQEqRayRu+J+0jc5cuUbCyiVui9zbUd DftArADr4xrg2sULhI8elyFWgkxmsRtwtV5RObFKudb1KsKQ46tZuy1Wka8b+c+V RTm+YQlqY/g+2UzTLRkukCTW1Cv9FXbEpneHGeh+Kzb0MeefCGva8StUjB+v2Zb5 TJ4Qmg8MgYsCcctYNi+ALcSX4TxP6GJIjosc+Bmq4klZfoNwtxYcpREakfaAPAlJ HToJCx31hYSAztJ7X6C7AQg3IQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGkyVTU3 G/WP5USK1iyOr1/ONjbNMB8GA1UdIwQYMBaAFEPSUNXB9gntF03/JkMB20W+JbG0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzhERC9DQzE4RDlENEUw QjYxMUU3OTlBMkI2ODJDNEY5QUUwMi9ROUpRMWNIMkNlMFhUZjhtUXdIYlJiNGxz YlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1E5SlExY0gyQ2UwWFRmOG1Rd0hiUmI0bHNiUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzhERC9DQzE4RDlENEUwQjYxMUU3OTlBMkI2ODJDNEY5QUUwMi9ROUpRMWNIMkNl MFhUZjhtUXdIYlJiNGxzYlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCnsvBY9g/gfThmCur8RHAuXTFOW2hD8cVrwWqBK+GTN42IYheTyiHX /DJjWuaXgwTuCYqn6ATFVhXZyVM6e13yKZLPn14NC60DFkA8cHmspYyho2h9/CiF IHTPcLnOCIVRzIKS54rl+oxOHD5i7OJRE3S9SrlqC7ZCHx7CC6rkzTDs/f0bXdsc 1aLAyDBbYRonh2vflpHc3RDFtFArmNZSRHwqEBrsrB0u/xITNTQXL8TXiTI51JA+ 8pQF5cbCtzfzEdhGTGELR2kHTJ49Nv8PHblldaDua6Be2Z9NzFQLCDCxn9+IuWrT D2TfPqrFjxaGlKcQYm6jRgmOUrUi7USq -----END CERTIFICATE-----Generated at Sat May 31 17:30:15 2025 by rpki-client