$ rpki-client -vvf rpki.apnic.net/member_repository/A9161A95/947618862BD911F0AB443122C4F9AE02/QRBhvlydJMUpvH1WmJtK0sE40SM.mft File: QRBhvlydJMUpvH1WmJtK0sE40SM.mft (raw, json) Hash identifier: NfzycDz3MKeV5Ntbn3n7cPIMkktRcBURjNBvOGdswzY= Subject key identifier: AA:78:DC:29:F4:C4:2B:FC:56:99:DB:13:8E:5A:6B:34:1E:C3:86:87 Authority key identifier: 41:10:61:BE:5C:9D:24:C5:29:BC:7D:56:98:9B:4A:D2:C1:38:D1:23 Certificate issuer: /CN=A9161A95/serialNumber=411061BE5C9D24C529BC7D56989B4AD2C138D123 Certificate serial: 14 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRBhvlydJMUpvH1WmJtK0sE40SM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161A95/947618862BD911F0AB443122C4F9AE02/QRBhvlydJMUpvH1WmJtK0sE40SM.mft Manifest number: 14 Signing time: Sun 15 Jun 2025 07:04:40 +0000 Manifest this update: Sun 15 Jun 2025 07:04:40 +0000 Manifest next update: Sun 22 Jun 2025 07:04:40 +0000 Files and hashes: 1: QRBhvlydJMUpvH1WmJtK0sE40SM.crl (hash: Oi+vjHJcwf0D8xobqgdx/lVJ5QvNEVa5NAz+HcXfjxY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161A95/947618862BD911F0AB443122C4F9AE02/QRBhvlydJMUpvH1WmJtK0sE40SM.crl rsync://rpki.apnic.net/member_repository/A9161A95/947618862BD911F0AB443122C4F9AE02/QRBhvlydJMUpvH1WmJtK0sE40SM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRBhvlydJMUpvH1WmJtK0sE40SM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20 (0x14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161A95, serialNumber=411061BE5C9D24C529BC7D56989B4AD2C138D123 Validity Not Before: Jun 15 07:04:40 2025 GMT Not After : Jun 22 07:04:40 2025 GMT Subject: CN=684e7088-2e6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:42:51:0c:63:69:d7:47:06:b8:53:95:0f:99: ce:74:f8:19:8f:e5:d0:f4:07:6b:88:1d:ed:5c:ba: ba:52:f5:a7:df:97:2a:af:9e:20:3c:70:98:a2:60: 78:7b:89:81:55:e6:c9:3b:95:4f:38:93:30:32:c8: 7e:c8:6d:ad:6d:2f:ce:9c:11:2a:1b:02:12:73:cd: b4:91:2f:4a:75:c4:e8:fb:d6:88:59:b6:88:81:fb: 88:a0:9e:b6:87:f7:01:70:04:5e:23:0a:27:af:24: 28:d8:b9:3f:d2:96:f6:c6:1b:ff:2d:00:91:f7:5d: cc:f5:1c:7f:34:da:fd:5f:dc:ff:1a:64:55:8b:fb: 7e:e2:eb:97:92:c7:c4:f8:87:1b:97:a1:02:3b:cf: 9e:a1:b1:90:8a:b2:4d:c4:87:a7:96:f6:8a:af:96: 50:ed:41:c7:f3:05:75:c0:06:6b:00:71:83:2d:87: be:32:51:31:1c:89:60:4b:4f:92:2f:aa:aa:01:f2: b7:e0:56:79:14:3b:58:9b:1f:79:86:fe:07:16:88: 53:6a:0e:4a:ae:e6:87:72:e1:f4:9e:5e:21:b4:1b: fe:0d:b1:37:41:1e:c6:40:ed:56:bb:90:4c:23:ed: 0d:6a:ef:9f:e4:4c:d2:db:04:be:fc:ab:b3:03:a5: 4f:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:78:DC:29:F4:C4:2B:FC:56:99:DB:13:8E:5A:6B:34:1E:C3:86:87 X509v3 Authority Key Identifier: keyid:41:10:61:BE:5C:9D:24:C5:29:BC:7D:56:98:9B:4A:D2:C1:38:D1:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161A95/947618862BD911F0AB443122C4F9AE02/QRBhvlydJMUpvH1WmJtK0sE40SM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRBhvlydJMUpvH1WmJtK0sE40SM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161A95/947618862BD911F0AB443122C4F9AE02/QRBhvlydJMUpvH1WmJtK0sE40SM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:22:b3:da:be:fa:b7:e2:43:5a:68:57:92:32:52:eb:ca:c4: e7:0a:a2:61:e6:67:17:f2:53:13:63:e5:64:a1:21:72:ab:65: 44:22:04:6b:70:13:db:90:4e:c9:fa:a4:9d:95:7a:c4:2d:a8: 95:3f:eb:18:af:a8:00:93:8c:9e:8f:9b:75:d2:32:0e:1c:b2: c2:7a:78:b6:cd:bd:89:2b:f1:4d:41:63:82:23:0e:75:99:a0: f6:87:6c:09:74:d3:7a:0b:11:f3:ba:20:fe:3d:3d:84:83:46: 28:24:61:a4:e8:38:02:78:58:c9:60:85:de:2c:e0:b2:54:1e: 37:79:65:c3:47:db:ad:dd:07:b1:3d:3a:6e:a5:60:86:45:e5: 1c:37:ed:11:eb:42:f6:58:42:41:d1:1b:ba:ce:3d:d4:f6:11: 0a:80:1a:00:3f:b1:ce:1f:c8:6a:fa:96:ab:fb:06:c1:14:9b: 22:9d:d5:39:c4:f3:1b:e2:ee:05:b8:92:c8:58:fa:b9:91:3e: f6:21:94:cd:6e:44:8a:ac:2d:9c:8a:5f:16:a0:b7:82:7b:83: 21:63:84:27:46:72:a8:d4:33:bc:37:5f:87:ff:48:ba:ab:a3: 04:de:99:d3:49:56:d5:90:fa:f7:98:b9:51:3e:0e:ea:b0:55: d9:c4:99:1e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 MUE5NTExMC8GA1UEBRMoNDExMDYxQkU1QzlEMjRDNTI5QkM3RDU2OTg5QjRBRDJD MTM4RDEyMzAeFw0yNTA2MTUwNzA0NDBaFw0yNTA2MjIwNzA0NDBaMBgxFjAUBgNV BAMTDTY4NGU3MDg4LTJlNmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDDQlEMY2nXRwa4U5UPmc50+BmP5dD0B2uIHe1curpS9afflyqvniA8cJiiYHh7 iYFV5sk7lU84kzAyyH7Iba1tL86cESobAhJzzbSRL0p1xOj71ohZtoiB+4ignraH 9wFwBF4jCievJCjYuT/SlvbGG/8tAJH3Xcz1HH802v1f3P8aZFWL+37i65eSx8T4 hxuXoQI7z56hsZCKsk3Eh6eW9oqvllDtQcfzBXXABmsAcYMth74yUTEciWBLT5Iv qqoB8rfgVnkUO1ibH3mG/gcWiFNqDkqu5ody4fSeXiG0G/4NsTdBHsZA7Va7kEwj 7Q1q75/kTNLbBL78q7MDpU93AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUqnjcKfTE K/xWmdsTjlprNB7DhocwHwYDVR0jBBgwFoAUQRBhvlydJMUpvH1WmJtK0sE40SMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYxQTk1Lzk0NzYxODg2MkJE OTExRjBBQjQ0MzEyMkM0RjlBRTAyL1FSQmh2bHlkSk1VcHZIMVdtSnRLMHNFNDBT TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUVJCaHZseWRKTVVwdkgxV21KdEswc0U0MFNNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYx QTk1Lzk0NzYxODg2MkJEOTExRjBBQjQ0MzEyMkM0RjlBRTAyL1FSQmh2bHlkSk1V cHZIMVdtSnRLMHNFNDBTTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACYis9q++rfiQ1poV5IyUuvKxOcKomHmZxfyUxNj5WShIXKrZUQiBGtw E9uQTsn6pJ2VesQtqJU/6xivqACTjJ6Pm3XSMg4cssJ6eLbNvYkr8U1BY4IjDnWZ oPaHbAl003oLEfO6IP49PYSDRigkYaToOAJ4WMlghd4s4LJUHjd5ZcNH263dB7E9 Om6lYIZF5Rw37RHrQvZYQkHRG7rOPdT2EQqAGgA/sc4fyGr6lqv7BsEUmyKd1TnE 8xvi7gW4kshY+rmRPvYhlM1uRIqsLZyKXxagt4J7gyFjhCdGcqjUM7w3X4f/SLqr owTemdNJVtWQ+veYuVE+DuqwVdnEmR4= -----END CERTIFICATE-----Generated at Sun Jun 15 10:10:50 2025 by rpki-client