$ rpki-client -vvf rpki.apnic.net/member_repository/A9146179/54E04716AA7C11EFA33BFD77C4F9AE02/QFAqSwwf9GgvUuNAZARERSh9S7g.mft File: QFAqSwwf9GgvUuNAZARERSh9S7g.mft (raw, json) Hash identifier: EwcBaH2g6NU3bMbEzl0+GPb23ecpDgbwR01jI/xTDcw= Subject key identifier: 89:19:E3:2A:2B:D9:AF:E2:ED:99:5B:21:5C:DF:F5:C9:9C:BE:5D:11 Authority key identifier: 40:50:2A:4B:0C:1F:F4:68:2F:52:E3:40:64:04:44:45:28:7D:4B:B8 Certificate issuer: /CN=A9146179/serialNumber=40502A4B0C1FF4682F52E34064044445287D4BB8 Certificate serial: 6C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFAqSwwf9GgvUuNAZARERSh9S7g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146179/54E04716AA7C11EFA33BFD77C4F9AE02/QFAqSwwf9GgvUuNAZARERSh9S7g.mft Manifest number: 6B Signing time: Sat 21 Jun 2025 05:58:14 +0000 Manifest this update: Sat 21 Jun 2025 05:58:14 +0000 Manifest next update: Sat 28 Jun 2025 05:58:14 +0000 Files and hashes: 1: QFAqSwwf9GgvUuNAZARERSh9S7g.crl (hash: uJkUtUNJJIQicd0VFPN/4QnINJjC7sdmHgSiUzgjTFA=) 2: D2158BC4AA7C11EF9A76A779C4F9AE02.roa (hash: LaPRc5QCE3D/egNmbBmNccMoDV83OnAl0IeSttB5Fwk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146179/54E04716AA7C11EFA33BFD77C4F9AE02/QFAqSwwf9GgvUuNAZARERSh9S7g.crl rsync://rpki.apnic.net/member_repository/A9146179/54E04716AA7C11EFA33BFD77C4F9AE02/QFAqSwwf9GgvUuNAZARERSh9S7g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFAqSwwf9GgvUuNAZARERSh9S7g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Jun 2025 05:58:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 108 (0x6c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146179, serialNumber=40502A4B0C1FF4682F52E34064044445287D4BB8 Validity Not Before: Jun 21 05:58:14 2025 GMT Not After : Jun 28 05:58:14 2025 GMT Subject: CN=685649f6-0b0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ee:a1:8c:b9:20:9c:50:22:50:db:a6:78:93: 4f:6d:ad:30:c9:01:08:d1:ec:3c:2f:5e:8c:fc:02: 98:e3:8a:28:5e:dd:13:70:d2:b8:3c:19:82:a6:a2: 57:99:fc:dd:5e:e4:b7:03:d6:0b:de:45:a1:7c:61: 5f:f9:72:df:01:3a:d0:40:9e:f5:e8:b2:b5:0d:9a: 39:c4:73:2b:ee:ac:cb:b0:b3:76:1e:26:bc:b5:44: cc:75:75:46:d7:ea:7a:17:2f:de:c2:2a:4e:fe:2a: 47:ee:a2:dd:37:10:df:ce:b4:86:0b:b8:62:d2:1a: da:71:00:4d:85:c9:a1:b2:a6:7c:2b:14:6c:26:26: 9b:95:8d:5e:c9:ea:c5:b5:45:35:38:3c:b8:d9:d1: 81:f5:d7:81:a0:bc:2e:8e:2f:a4:bc:ff:8d:2a:8e: 1b:22:a2:b2:fb:0f:b7:10:e8:15:61:2c:6d:f3:51: 0b:a0:18:ed:6e:51:63:aa:ad:fe:51:05:29:c3:f0: 5d:f8:69:ae:05:1a:0a:3d:9f:21:46:ec:36:b0:20: 56:61:ce:7e:2e:84:06:33:fc:9b:85:d9:fa:ea:00: f5:e5:aa:76:ec:ac:0e:c5:72:6d:f9:38:11:19:44: ae:f1:5c:84:33:ca:c4:08:b3:14:ba:0d:e4:e2:e9: 3f:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:19:E3:2A:2B:D9:AF:E2:ED:99:5B:21:5C:DF:F5:C9:9C:BE:5D:11 X509v3 Authority Key Identifier: keyid:40:50:2A:4B:0C:1F:F4:68:2F:52:E3:40:64:04:44:45:28:7D:4B:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146179/54E04716AA7C11EFA33BFD77C4F9AE02/QFAqSwwf9GgvUuNAZARERSh9S7g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFAqSwwf9GgvUuNAZARERSh9S7g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146179/54E04716AA7C11EFA33BFD77C4F9AE02/QFAqSwwf9GgvUuNAZARERSh9S7g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:2a:90:3f:02:14:8a:57:c1:bb:e2:c9:d5:a9:34:a9:11:aa: 12:a9:7e:e7:30:31:97:ea:3b:d0:d1:16:96:e8:6e:91:d9:9c: 41:cb:e7:86:a2:5b:22:cc:13:63:69:b5:90:3d:18:7c:bc:ac: 3d:2a:ff:23:be:fb:8b:a5:b3:24:3c:84:50:b4:f2:65:11:26: a7:27:d3:9c:1d:a4:31:23:b4:af:ba:4f:48:30:c8:8f:b3:a4: 39:40:d2:8c:c7:02:07:1a:1f:4f:87:0f:08:9b:62:a4:c1:d4: f7:07:57:a6:da:8a:17:e6:b8:36:1d:a7:3e:3e:27:3f:cb:83: b7:84:80:4c:20:f6:30:a8:7e:05:02:a3:79:c7:11:8a:60:45: f7:1d:df:9c:b8:b7:cf:fd:c8:76:d8:6f:4f:17:86:01:17:2b: 31:36:df:c8:8c:41:88:d8:a3:4b:22:fb:39:ef:8b:34:71:3d: ec:72:da:0a:ad:f2:23:55:f4:ad:d1:03:50:ea:4d:12:6c:08: ae:4f:8f:aa:06:c4:1b:29:79:fe:f0:65:2f:5a:9a:66:21:28: c5:6f:6a:e4:7f:c2:f3:b5:19:4a:9d:06:e7:5d:59:30:95:45: 49:6b:84:56:7f:13:41:4e:46:2c:d3:c4:20:23:c6:83:2f:18: f2:c6:8d:97 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NjE3OTExMC8GA1UEBRMoNDA1MDJBNEIwQzFGRjQ2ODJGNTJFMzQwNjQwNDQ0NDUy ODdENEJCODAeFw0yNTA2MjEwNTU4MTRaFw0yNTA2MjgwNTU4MTRaMBgxFjAUBgNV BAMTDTY4NTY0OWY2LTBiMGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC87qGMuSCcUCJQ26Z4k09trTDJAQjR7DwvXoz8Apjjiihe3RNw0rg8GYKmoleZ /N1e5LcD1gveRaF8YV/5ct8BOtBAnvXosrUNmjnEcyvurMuws3YeJry1RMx1dUbX 6noXL97CKk7+Kkfuot03EN/OtIYLuGLSGtpxAE2FyaGypnwrFGwmJpuVjV7J6sW1 RTU4PLjZ0YH114GgvC6OL6S8/40qjhsiorL7D7cQ6BVhLG3zUQugGO1uUWOqrf5R BSnD8F34aa4FGgo9nyFG7DawIFZhzn4uhAYz/JuF2frqAPXlqnbsrA7Fcm35OBEZ RK7xXIQzysQIsxS6DeTi6T8lAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUiRnjKivZ r+LtmVshXN/1yZy+XREwHwYDVR0jBBgwFoAUQFAqSwwf9GgvUuNAZARERSh9S7gw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ2MTc5LzU0RTA0NzE2QUE3 QzExRUZBMzNCRkQ3N0M0RjlBRTAyL1FGQXFTd3dmOUdndlV1TkFaQVJFUlNoOVM3 Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUUZBcVN3d2Y5R2d2VXVOQVpBUkVSU2g5UzdnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ2 MTc5LzU0RTA0NzE2QUE3QzExRUZBMzNCRkQ3N0M0RjlBRTAyL1FGQXFTd3dmOUdn dlV1TkFaQVJFUlNoOVM3Zy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFYqkD8CFIpXwbviydWpNKkRqhKpfucwMZfqO9DRFpbobpHZnEHL54ai WyLME2NptZA9GHy8rD0q/yO++4ulsyQ8hFC08mURJqcn05wdpDEjtK+6T0gwyI+z pDlA0ozHAgcaH0+HDwibYqTB1PcHV6baihfmuDYdpz4+Jz/Lg7eEgEwg9jCofgUC o3nHEYpgRfcd35y4t8/9yHbYb08XhgEXKzE238iMQYjYo0si+znvizRxPexy2gqt 8iNV9K3RA1DqTRJsCK5Pj6oGxBspef7wZS9ammYhKMVvauR/wvO1GUqdBuddWTCV RUlrhFZ/E0FORizTxCAjxoMvGPLGjZc= -----END CERTIFICATE-----Generated at Sun Jun 22 08:53:26 2025 by rpki-client