$ rpki-client -vvf rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/QJmwCEN2qeBM7XxnirxoWN2fhRo.mft File: QJmwCEN2qeBM7XxnirxoWN2fhRo.mft (raw, json) Hash identifier: wm93FPdIXPNlT2H0EOPt0bAQvNRbglur5cYmQGKK1wI= Subject key identifier: A4:58:E5:09:C9:18:23:A6:CE:B0:09:DC:5B:0B:8C:53:22:8A:B3:80 Authority key identifier: 40:99:B0:08:43:76:A9:E0:4C:ED:7C:67:8A:BC:68:58:DD:9F:85:1A Certificate issuer: /CN=A919BCD9/serialNumber=4099B0084376A9E04CED7C678ABC6858DD9F851A Certificate serial: 0C6D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJmwCEN2qeBM7XxnirxoWN2fhRo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/QJmwCEN2qeBM7XxnirxoWN2fhRo.mft Manifest number: 0C5F Signing time: Fri 30 May 2025 18:29:21 +0000 Manifest this update: Fri 30 May 2025 18:29:21 +0000 Manifest next update: Fri 06 Jun 2025 18:29:21 +0000 Files and hashes: 1: QJmwCEN2qeBM7XxnirxoWN2fhRo.crl (hash: A9wKZt0Zuqqb5RtU+ix23f2vfoyKhnV1AzrTNwBSlUI=) 2: E56CD3E8FF8311E9B1B99628C4F9AE02.roa (hash: t7Z6lzZf2rYamEN2YgdXmqrw8mN9RKxx+Hcob4AGplk=) 3: E4B59AA2FF8311E9B1B99628C4F9AE02.roa (hash: waZbL1P4NpHdHtHaU30SRx8sKqkEE7bIrM8wDlF6928=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/QJmwCEN2qeBM7XxnirxoWN2fhRo.crl rsync://rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/QJmwCEN2qeBM7XxnirxoWN2fhRo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJmwCEN2qeBM7XxnirxoWN2fhRo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 18:29:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3181 (0xc6d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919BCD9, serialNumber=4099B0084376A9E04CED7C678ABC6858DD9F851A Validity Not Before: May 30 18:29:21 2025 GMT Not After : Jun 6 18:29:21 2025 GMT Subject: CN=6839f901-c630 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:21:2a:2b:08:71:12:99:b9:42:b2:6b:6d:59: 5d:bb:a8:92:a2:b2:b4:b4:4e:5d:e2:74:7c:b2:a7: 7a:d8:c6:bd:5c:da:71:7e:b3:71:82:70:e6:2c:28: fb:a7:1d:3e:84:0b:10:27:53:a4:c7:8a:bd:b2:ac: 41:17:2d:70:7d:f8:a0:48:f9:a9:a5:b0:2d:fc:72: 5d:2d:ba:a2:88:2e:5c:de:fa:9a:75:be:a6:f1:3a: 57:67:6c:c9:e1:e5:ac:1f:09:2e:2e:df:02:12:da: b7:91:56:4a:05:6e:b1:e5:4e:c8:aa:99:b9:12:17: 2c:48:b9:82:e2:b5:58:90:b7:75:48:e1:a8:f6:42: c2:de:fd:aa:98:34:89:07:8c:7f:82:85:51:a8:95: 31:9b:bd:d6:2c:69:04:87:75:a1:8b:18:07:c9:98: 44:eb:15:9e:1a:5c:24:14:46:2a:93:aa:e9:d4:0f: 56:f7:01:0d:0f:82:81:98:5e:db:af:a8:e0:1c:e4: 3f:09:a9:be:e2:b3:fc:f9:b0:b0:81:5c:fa:8d:84: 27:48:32:c8:fd:6f:09:a6:45:55:0a:81:ad:1c:55: 79:ef:07:9a:3c:66:51:08:bf:17:3d:45:7d:20:a3: 50:99:86:20:a9:0d:70:71:3c:5e:db:e0:70:3f:ee: b8:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:58:E5:09:C9:18:23:A6:CE:B0:09:DC:5B:0B:8C:53:22:8A:B3:80 X509v3 Authority Key Identifier: keyid:40:99:B0:08:43:76:A9:E0:4C:ED:7C:67:8A:BC:68:58:DD:9F:85:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/QJmwCEN2qeBM7XxnirxoWN2fhRo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJmwCEN2qeBM7XxnirxoWN2fhRo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/QJmwCEN2qeBM7XxnirxoWN2fhRo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:3b:61:82:7f:49:ee:c2:a9:af:65:8f:c6:82:f8:eb:e0:d7: 12:c6:d9:ee:a7:bb:a6:21:6a:a9:04:59:ff:43:b3:f4:09:69: 19:3e:e1:3a:34:f7:d7:bf:19:ea:37:70:9d:c1:2d:ea:24:05: 86:13:41:a1:65:4e:09:2a:69:35:20:cf:48:74:07:22:42:71: e5:69:f6:de:0a:59:fc:21:bc:1b:4e:36:b2:07:41:6e:bd:1c: 6e:d4:e0:a4:07:33:8d:1b:36:3e:03:cf:ff:ff:21:f7:14:8c: 7e:1f:88:d1:31:f2:c9:c1:6c:ad:e4:80:11:61:23:09:21:e7: 40:fe:df:0f:a1:6a:6c:fe:2c:29:0a:f8:58:23:2e:e5:28:76: 6d:62:6a:57:50:81:3b:b5:ab:3b:2e:35:e8:d3:e0:66:0e:ea: 6e:a9:f9:7c:79:89:dd:bd:fc:30:31:8c:57:ff:72:23:9e:45: 21:cf:0e:a9:fc:1f:10:93:9a:86:00:dd:03:19:1c:2e:2f:23: c8:b8:15:9b:6f:0f:6a:99:d3:d7:8e:87:08:28:87:b9:d2:88: 17:d2:39:c5:c7:77:05:73:e7:58:30:d3:a3:bd:c1:b3:a9:dd: 31:1f:0b:96:4e:b5:68:ae:8a:2c:ee:8c:90:4d:a0:af:98:a7: f8:94:f9:1d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDG0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUJDRDkxMTAvBgNVBAUTKDQwOTlCMDA4NDM3NkE5RTA0Q0VEN0M2NzhBQkM2ODU4 REQ5Rjg1MUEwHhcNMjUwNTMwMTgyOTIxWhcNMjUwNjA2MTgyOTIxWjAYMRYwFAYD VQQDEw02ODM5ZjkwMS1jNjMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAviEqKwhxEpm5QrJrbVldu6iSorK0tE5d4nR8sqd62Ma9XNpxfrNxgnDmLCj7 px0+hAsQJ1Okx4q9sqxBFy1wffigSPmppbAt/HJdLbqiiC5c3vqadb6m8TpXZ2zJ 4eWsHwkuLt8CEtq3kVZKBW6x5U7Iqpm5EhcsSLmC4rVYkLd1SOGo9kLC3v2qmDSJ B4x/goVRqJUxm73WLGkEh3WhixgHyZhE6xWeGlwkFEYqk6rp1A9W9wEND4KBmF7b r6jgHOQ/Cam+4rP8+bCwgVz6jYQnSDLI/W8JpkVVCoGtHFV57weaPGZRCL8XPUV9 IKNQmYYgqQ1wcTxe2+BwP+64IwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKRY5QnJ GCOmzrAJ3FsLjFMiirOAMB8GA1UdIwQYMBaAFECZsAhDdqngTO18Z4q8aFjdn4Ua MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QkNEOS8xN0I3OEYxNkZG ODIxMUU5QjQwMkZDMjRDNEY5QUUwMi9RSm13Q0VOMnFlQk03WHhuaXJ4b1dOMmZo Um8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FKbXdDRU4ycWVCTTdYeG5pcnhvV04yZmhSby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QkNEOS8xN0I3OEYxNkZGODIxMUU5QjQwMkZDMjRDNEY5QUUwMi9RSm13Q0VOMnFl Qk03WHhuaXJ4b1dOMmZoUm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJO2GCf0nuwqmvZY/Ggvjr4NcSxtnup7umIWqpBFn/Q7P0CWkZPuE6 NPfXvxnqN3CdwS3qJAWGE0GhZU4JKmk1IM9IdAciQnHlafbeCln8IbwbTjayB0Fu vRxu1OCkBzONGzY+A8///yH3FIx+H4jRMfLJwWyt5IARYSMJIedA/t8PoWps/iwp CvhYIy7lKHZtYmpXUIE7tas7LjXo0+BmDupuqfl8eYndvfwwMYxX/3IjnkUhzw6p /B8Qk5qGAN0DGRwuLyPIuBWbbw9qmdPXjocIKIe50ogX0jnFx3cFc+dYMNOjvcGz qd0xHwuWTrVoroos7oyQTaCvmKf4lPkd -----END CERTIFICATE-----Generated at Sat May 31 16:57:43 2025 by rpki-client