$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4475/832470DC18CF11EF8E3F2457C4F9AE02/QQQ9rBieIv9_Wu2BB6MjL0GQrz4.mft File: QQQ9rBieIv9_Wu2BB6MjL0GQrz4.mft (raw, json) Hash identifier: 4VC4H0AzrSLL6YGVQaK6OZQUvDQdA6sj6h2a4Uhj0Sc= Subject key identifier: AE:0C:62:71:E5:21:F2:F0:65:17:5E:14:37:6B:8D:81:94:A5:18:F2 Authority key identifier: 41:04:3D:AC:18:9E:22:FF:7F:5A:ED:81:07:A3:23:2F:41:90:AF:3E Certificate issuer: /CN=A91A4475/serialNumber=41043DAC189E22FF7F5AED8107A3232F4190AF3E Certificate serial: CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQQ9rBieIv9_Wu2BB6MjL0GQrz4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4475/832470DC18CF11EF8E3F2457C4F9AE02/QQQ9rBieIv9_Wu2BB6MjL0GQrz4.mft Manifest number: C5 Signing time: Sat 31 May 2025 05:25:39 +0000 Manifest this update: Sat 31 May 2025 05:25:39 +0000 Manifest next update: Sat 07 Jun 2025 05:25:39 +0000 Files and hashes: 1: QQQ9rBieIv9_Wu2BB6MjL0GQrz4.crl (hash: 4b3H7sqHllBaMygYbeJxtDYgGR6YOn2B0LQCIQ2W5JQ=) 2: 3F9C6E6619B811EF8628ED1FC4F9AE02.roa (hash: W33rXxSlvsCWhMMJptogBjvzdgDQoYwJi+V5ipdn5y8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4475/832470DC18CF11EF8E3F2457C4F9AE02/QQQ9rBieIv9_Wu2BB6MjL0GQrz4.crl rsync://rpki.apnic.net/member_repository/A91A4475/832470DC18CF11EF8E3F2457C4F9AE02/QQQ9rBieIv9_Wu2BB6MjL0GQrz4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQQ9rBieIv9_Wu2BB6MjL0GQrz4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 05:25:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 203 (0xcb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4475, serialNumber=41043DAC189E22FF7F5AED8107A3232F4190AF3E Validity Not Before: May 31 05:25:39 2025 GMT Not After : Jun 7 05:25:39 2025 GMT Subject: CN=683a92d3-822d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:17:9f:b2:4d:46:4f:e0:b6:8a:2e:ea:89:ed: b8:91:6e:92:42:6a:50:96:ad:9d:66:66:cf:88:90: 53:3c:a3:8b:e1:fb:be:ec:17:0d:a0:f2:f1:83:d9: e5:6f:a5:85:5e:2f:57:5b:17:ed:e2:3a:c4:bf:ea: 67:c0:53:8f:2d:46:2f:65:a7:4b:16:de:d5:3d:20: 6f:d0:ad:c8:97:d9:ec:de:68:f9:cf:bc:ee:5e:c5: 24:4c:d5:ed:a8:58:3f:2b:36:7a:ab:23:12:cd:7c: 7f:c8:51:2f:2e:48:e4:ad:2c:8b:26:f8:32:82:97: f5:d7:11:52:9e:e2:5b:96:48:04:63:bd:dd:07:42: 37:24:4c:eb:2a:bc:ee:a1:ea:ab:97:19:83:cd:b1: be:91:67:5c:e6:3f:86:9e:9d:77:87:7b:74:74:a2: fa:81:34:59:c9:e0:fc:3d:87:2e:2d:9f:42:e1:be: 9b:9e:72:6c:32:89:16:d8:fa:6d:5a:28:3f:dd:96: 8e:7a:17:30:9b:72:8c:6b:d9:21:d5:2a:17:94:95: 5d:a7:5c:fa:c0:ac:78:b5:14:dc:d6:be:0e:1a:3e: 47:09:6a:60:47:75:4e:cb:e1:43:3e:a0:6f:15:71: f4:62:1c:94:74:f7:2d:ac:f6:30:d8:c2:a5:c9:19: ab:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:0C:62:71:E5:21:F2:F0:65:17:5E:14:37:6B:8D:81:94:A5:18:F2 X509v3 Authority Key Identifier: keyid:41:04:3D:AC:18:9E:22:FF:7F:5A:ED:81:07:A3:23:2F:41:90:AF:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4475/832470DC18CF11EF8E3F2457C4F9AE02/QQQ9rBieIv9_Wu2BB6MjL0GQrz4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQQ9rBieIv9_Wu2BB6MjL0GQrz4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4475/832470DC18CF11EF8E3F2457C4F9AE02/QQQ9rBieIv9_Wu2BB6MjL0GQrz4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:32:cc:59:1f:68:d0:26:50:19:90:b9:a3:26:5e:97:c4:50: fb:4d:9f:0d:6d:06:a3:08:f3:b2:74:ec:44:df:69:c0:fe:9e: b4:11:1a:70:c9:02:2c:e5:83:ae:4d:b7:cb:f5:ef:2d:b3:e7: 35:b2:c4:2d:2d:96:38:62:a0:cd:cb:fb:20:5f:61:e3:87:4e: aa:57:48:d4:90:1a:77:62:4a:76:d4:ab:d1:07:7c:9c:c8:87: 51:58:e8:25:4e:ec:aa:8c:6b:39:65:54:29:43:e0:e0:c4:9f: 6f:5e:61:78:c0:b7:54:d7:fd:2e:a9:f0:3d:2d:dc:9e:d6:02: a0:39:1e:87:ca:51:da:70:27:66:e7:ed:56:c3:c9:b9:7e:15: 80:da:55:89:f9:41:07:4b:cd:46:e7:81:76:79:2b:56:c2:bf: f5:58:0c:57:8e:fd:e4:f2:3f:d7:f0:ce:c8:4a:3a:d2:df:c3: 5d:5d:78:8c:4a:3e:4a:f5:d9:24:f6:b1:56:17:f9:b8:73:a2: 92:e7:6c:f8:04:b0:40:61:87:d6:56:92:1e:6d:47:3f:10:93: 52:4b:e3:3c:2a:0b:c2:f7:44:49:1a:25:8d:17:14:90:b9:5f: 98:2e:ec:10:96:f4:cb:d6:3c:88:21:71:85:20:5d:d0:f7:a3: 80:dd:31:cd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ0NzUxMTAvBgNVBAUTKDQxMDQzREFDMTg5RTIyRkY3RjVBRUQ4MTA3QTMyMzJG NDE5MEFGM0UwHhcNMjUwNTMxMDUyNTM5WhcNMjUwNjA3MDUyNTM5WjAYMRYwFAYD VQQDEw02ODNhOTJkMy04MjJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1Refsk1GT+C2ii7qie24kW6SQmpQlq2dZmbPiJBTPKOL4fu+7BcNoPLxg9nl b6WFXi9XWxft4jrEv+pnwFOPLUYvZadLFt7VPSBv0K3Il9ns3mj5z7zuXsUkTNXt qFg/KzZ6qyMSzXx/yFEvLkjkrSyLJvgygpf11xFSnuJblkgEY73dB0I3JEzrKrzu oeqrlxmDzbG+kWdc5j+Gnp13h3t0dKL6gTRZyeD8PYcuLZ9C4b6bnnJsMokW2Ppt Wig/3ZaOehcwm3KMa9kh1SoXlJVdp1z6wKx4tRTc1r4OGj5HCWpgR3VOy+FDPqBv FXH0YhyUdPctrPYw2MKlyRmrJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK4MYnHl IfLwZRdeFDdrjYGUpRjyMB8GA1UdIwQYMBaAFEEEPawYniL/f1rtgQejIy9BkK8+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDQ3NS84MzI0NzBEQzE4 Q0YxMUVGOEUzRjI0NTdDNEY5QUUwMi9RUVE5ckJpZUl2OV9XdTJCQjZNakwwR1Fy ejQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FRUTlyQmllSXY5X1d1MkJCNk1qTDBHUXJ6NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDQ3NS84MzI0NzBEQzE4Q0YxMUVGOEUzRjI0NTdDNEY5QUUwMi9RUVE5ckJpZUl2 OV9XdTJCQjZNakwwR1FyejQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYMsxZH2jQJlAZkLmjJl6XxFD7TZ8NbQajCPOydOxE32nA/p60ERpw yQIs5YOuTbfL9e8ts+c1ssQtLZY4YqDNy/sgX2Hjh06qV0jUkBp3Ykp21KvRB3yc yIdRWOglTuyqjGs5ZVQpQ+DgxJ9vXmF4wLdU1/0uqfA9Ldye1gKgOR6HylHacCdm 5+1Ww8m5fhWA2lWJ+UEHS81G54F2eStWwr/1WAxXjv3k8j/X8M7ISjrS38NdXXiM Sj5K9dkk9rFWF/m4c6KS52z4BLBAYYfWVpIebUc/EJNSS+M8KgvC90RJGiWNFxSQ uV+YLuwQlvTL1jyIIXGFIF3Q96OA3THN -----END CERTIFICATE-----Generated at Sat May 31 17:56:22 2025 by rpki-client