$ rpki-client -vvf rpki.apnic.net/member_repository/A9142127/20F4443A546D11EABDD3C117C4F9AE02/QVAn2MkpjpfaBcDEPc2Lr1IXQXU.mft File: QVAn2MkpjpfaBcDEPc2Lr1IXQXU.mft (raw, json) Hash identifier: a3ZyoYO8PVxBGTaoR2nD7zyy86eCoJGxkA8DlYK/E5Q= Subject key identifier: 16:A7:59:4F:92:C1:AE:A8:20:D4:7D:CB:8A:43:6D:68:CB:66:D3:28 Authority key identifier: 41:50:27:D8:C9:29:8E:97:DA:05:C0:C4:3D:CD:8B:AF:52:17:41:75 Certificate issuer: /CN=A9142127/serialNumber=415027D8C9298E97DA05C0C43DCD8BAF52174175 Certificate serial: 0ADB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVAn2MkpjpfaBcDEPc2Lr1IXQXU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142127/20F4443A546D11EABDD3C117C4F9AE02/QVAn2MkpjpfaBcDEPc2Lr1IXQXU.mft Manifest number: 0ACB Signing time: Thu 12 Jun 2025 19:19:09 +0000 Manifest this update: Thu 12 Jun 2025 19:19:09 +0000 Manifest next update: Thu 19 Jun 2025 19:19:09 +0000 Files and hashes: 1: QVAn2MkpjpfaBcDEPc2Lr1IXQXU.crl (hash: xAmjuE76wprYND3bmzkpOQLaU7ss1nJD9bD3sytH9DE=) 2: 7B3737EE546E11EAAA4CF919C4F9AE02.roa (hash: XMZdqD9gB3JqFRbYSCLRYPYkSAmXVoSI5VBqXbHS+f0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142127/20F4443A546D11EABDD3C117C4F9AE02/QVAn2MkpjpfaBcDEPc2Lr1IXQXU.crl rsync://rpki.apnic.net/member_repository/A9142127/20F4443A546D11EABDD3C117C4F9AE02/QVAn2MkpjpfaBcDEPc2Lr1IXQXU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVAn2MkpjpfaBcDEPc2Lr1IXQXU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 19:19:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2779 (0xadb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142127, serialNumber=415027D8C9298E97DA05C0C43DCD8BAF52174175 Validity Not Before: Jun 12 19:19:09 2025 GMT Not After : Jun 19 19:19:09 2025 GMT Subject: CN=684b282d-ed3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:44:fb:66:61:bc:55:02:26:43:3e:ec:0f:49: f8:e9:57:06:94:e1:7d:d5:f7:89:f8:c1:af:98:42: d4:d8:e2:80:78:98:40:bf:68:c8:7b:79:df:b1:e5: b6:41:2a:42:04:fe:36:41:31:eb:eb:16:24:89:e9: 65:b4:0a:49:32:ea:b5:9f:d3:ee:4b:cd:a4:5a:7e: 3c:28:26:56:40:ba:56:38:08:68:a7:8c:07:a3:99: 4d:39:28:0f:6b:c4:87:55:86:0e:49:39:c2:b1:33: 4c:4d:82:5f:cf:d6:23:55:00:18:ce:03:42:ff:5f: c5:6c:0f:a7:dc:41:06:13:04:77:64:f7:c3:3d:93: c1:02:c8:6a:59:78:89:fc:a6:b2:a5:d8:62:f1:9a: f0:d3:9a:ab:ae:16:2d:fe:2d:fc:d9:cb:88:ae:37: df:9e:b5:77:f8:e2:30:7b:37:82:57:91:53:a0:e7: f7:59:a1:f5:69:ae:34:41:ef:89:e8:70:c6:5d:85: e4:64:67:d3:d8:4a:58:0a:34:74:02:05:5b:0f:c3: 0c:00:a3:fb:4d:c5:4c:5d:13:18:e4:47:3e:38:c3: ef:cc:e1:72:5d:21:e5:95:11:f4:c9:4f:3d:c0:13: 58:36:63:5a:f8:51:7b:0f:0e:09:5a:d2:b9:f6:82: 4e:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:A7:59:4F:92:C1:AE:A8:20:D4:7D:CB:8A:43:6D:68:CB:66:D3:28 X509v3 Authority Key Identifier: keyid:41:50:27:D8:C9:29:8E:97:DA:05:C0:C4:3D:CD:8B:AF:52:17:41:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142127/20F4443A546D11EABDD3C117C4F9AE02/QVAn2MkpjpfaBcDEPc2Lr1IXQXU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVAn2MkpjpfaBcDEPc2Lr1IXQXU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142127/20F4443A546D11EABDD3C117C4F9AE02/QVAn2MkpjpfaBcDEPc2Lr1IXQXU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:2e:85:c9:66:2d:c4:81:c6:3d:c7:5c:6f:3f:f6:97:8a:3f: b2:c9:cb:26:8a:1d:3f:80:8d:bd:c2:1e:aa:28:14:2a:91:03: 1e:3f:72:a5:36:f2:0f:39:51:7f:5d:29:b4:05:9e:a7:4c:dd: a3:c8:6b:28:6b:ac:52:2f:0b:3a:b2:d6:43:ea:77:61:84:e6: 3b:e4:b1:e6:ac:1a:ee:97:52:0b:90:40:a5:37:54:4c:1c:4e: 94:ff:30:06:12:d9:fe:d8:93:25:75:fc:8e:63:3d:e6:70:ae: 9f:e1:85:0e:19:b1:b0:d3:44:17:71:26:8f:9d:60:a4:1f:9a: cf:a6:8e:2a:91:2f:36:78:80:75:75:d7:4a:82:d3:68:b7:4f: 58:08:73:22:22:c4:16:4d:63:4d:28:93:75:f6:99:31:4c:b8: d7:04:dd:c3:51:9c:3c:d7:95:06:c8:78:0f:f4:85:78:e7:d3: cd:8e:73:da:87:b9:33:79:92:6f:bd:56:ae:ac:17:a2:36:bf: 59:81:cc:3d:d5:64:a3:e2:f4:1b:41:83:6a:8e:86:71:7d:51: 64:52:7c:39:7b:fe:3f:71:ce:b4:f2:46:ea:08:ba:ca:59:41: 4c:ca:d8:0b:23:64:f6:e9:5a:0d:4f:b1:bb:69:21:52:d9:4c: df:70:fe:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCtswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDIxMjcxMTAvBgNVBAUTKDQxNTAyN0Q4QzkyOThFOTdEQTA1QzBDNDNEQ0Q4QkFG NTIxNzQxNzUwHhcNMjUwNjEyMTkxOTA5WhcNMjUwNjE5MTkxOTA5WjAYMRYwFAYD VQQDEw02ODRiMjgyZC1lZDNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwET7ZmG8VQImQz7sD0n46VcGlOF91feJ+MGvmELU2OKAeJhAv2jIe3nfseW2 QSpCBP42QTHr6xYkielltApJMuq1n9PuS82kWn48KCZWQLpWOAhop4wHo5lNOSgP a8SHVYYOSTnCsTNMTYJfz9YjVQAYzgNC/1/FbA+n3EEGEwR3ZPfDPZPBAshqWXiJ /Kaypdhi8Zrw05qrrhYt/i382cuIrjffnrV3+OIwezeCV5FToOf3WaH1aa40Qe+J 6HDGXYXkZGfT2EpYCjR0AgVbD8MMAKP7TcVMXRMY5Ec+OMPvzOFyXSHllRH0yU89 wBNYNmNa+FF7Dw4JWtK59oJO0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBanWU+S wa6oINR9y4pDbWjLZtMoMB8GA1UdIwQYMBaAFEFQJ9jJKY6X2gXAxD3Ni69SF0F1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjEyNy8yMEY0NDQzQTU0 NkQxMUVBQkREM0MxMTdDNEY5QUUwMi9RVkFuMk1rcGpwZmFCY0RFUGMyTHIxSVhR WFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FWQW4yTWtwanBmYUJjREVQYzJMcjFJWFFYVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjEyNy8yMEY0NDQzQTU0NkQxMUVBQkREM0MxMTdDNEY5QUUwMi9RVkFuMk1rcGpw ZmFCY0RFUGMyTHIxSVhRWFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCgLoXJZi3EgcY9x1xvP/aXij+yycsmih0/gI29wh6qKBQqkQMeP3Kl NvIPOVF/XSm0BZ6nTN2jyGsoa6xSLws6stZD6ndhhOY75LHmrBrul1ILkEClN1RM HE6U/zAGEtn+2JMldfyOYz3mcK6f4YUOGbGw00QXcSaPnWCkH5rPpo4qkS82eIB1 dddKgtNot09YCHMiIsQWTWNNKJN19pkxTLjXBN3DUZw815UGyHgP9IV459PNjnPa h7kzeZJvvVaurBeiNr9Zgcw91WSj4vQbQYNqjoZxfVFkUnw5e/4/cc608kbqCLrK WUFMytgLI2T26VoNT7G7aSFS2UzfcP48 -----END CERTIFICATE-----Generated at Sat Jun 14 18:05:46 2025 by rpki-client