$ rpki-client -vvf rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/Qb--vmNSH7BO2BI8aOXAza9dBc0.mft File: Qb--vmNSH7BO2BI8aOXAza9dBc0.mft (raw, json) Hash identifier: zp9g17WbfUXz/4k+tLFIDi5Lb+HSIPNyX3CBL6Wi1tc= Subject key identifier: 48:60:79:96:F2:00:97:4C:78:10:87:02:B6:61:84:88:55:91:FC:18 Authority key identifier: 41:BF:BE:BE:63:52:1F:B0:4E:D8:12:3C:68:E5:C0:CD:AF:5D:05:CD Certificate issuer: /CN=A9170982/serialNumber=41BFBEBE63521FB04ED8123C68E5C0CDAF5D05CD Certificate serial: 0390 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qb--vmNSH7BO2BI8aOXAza9dBc0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/Qb--vmNSH7BO2BI8aOXAza9dBc0.mft Manifest number: 0384 Signing time: Thu 19 Jun 2025 00:43:08 +0000 Manifest this update: Thu 19 Jun 2025 00:43:08 +0000 Manifest next update: Thu 26 Jun 2025 00:43:08 +0000 Files and hashes: 1: Qb--vmNSH7BO2BI8aOXAza9dBc0.crl (hash: 4N5lIdGXuIyJjJQzhkXLh8qW0bhFXiQk05liZBXMEeE=) 2: EE8EAEDC377F11EE92674430C4F9AE02.roa (hash: XUINDcHIDNHHzShIR5UbuMY4rtr/62wcaswBNnwgnig=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/Qb--vmNSH7BO2BI8aOXAza9dBc0.crl rsync://rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/Qb--vmNSH7BO2BI8aOXAza9dBc0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qb--vmNSH7BO2BI8aOXAza9dBc0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 00:43:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 912 (0x390) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170982, serialNumber=41BFBEBE63521FB04ED8123C68E5C0CDAF5D05CD Validity Not Before: Jun 19 00:43:08 2025 GMT Not After : Jun 26 00:43:08 2025 GMT Subject: CN=68535d1c-f1c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:69:4e:72:6e:a8:64:98:22:ec:78:05:19:2c: c4:bf:ca:bc:c6:76:cb:d8:81:93:b6:0e:68:28:16: c3:70:c3:b2:7e:5e:d7:a6:11:76:f9:63:cc:22:6a: cd:bd:2f:cd:18:3d:79:88:bd:b2:55:3c:07:2b:fd: 19:aa:ce:fa:1c:36:b1:cb:5d:8e:fb:96:e1:ca:89: c8:5a:92:28:54:3a:aa:3b:aa:c2:e8:41:97:5d:90: 15:18:7f:65:f3:93:f4:d2:ec:21:43:76:b5:d3:74: a2:5a:65:78:b0:51:d3:86:cf:60:97:ea:8f:9f:59: 9f:c7:03:63:b4:7e:91:66:68:64:9a:ac:96:22:55: 2e:64:d6:39:3a:b9:2f:33:51:ea:b4:9c:9e:87:e8: 30:09:94:0e:7a:f2:22:49:c4:22:ba:35:48:04:5e: 73:f4:90:e6:bb:e3:0b:6a:1f:9f:76:a4:87:1d:06: 75:f1:56:f1:d5:13:c8:48:a7:14:29:b3:51:e4:93: ba:d3:b2:31:46:18:9b:95:bd:91:02:34:5d:82:cb: 28:b6:a0:3e:87:f8:cc:22:4d:ff:3c:39:83:d8:ca: 33:47:73:8c:c8:6d:71:a0:df:af:41:66:49:59:fa: 3f:f2:b1:c8:0d:9e:9a:76:91:57:a8:72:ba:71:16: d3:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:60:79:96:F2:00:97:4C:78:10:87:02:B6:61:84:88:55:91:FC:18 X509v3 Authority Key Identifier: keyid:41:BF:BE:BE:63:52:1F:B0:4E:D8:12:3C:68:E5:C0:CD:AF:5D:05:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/Qb--vmNSH7BO2BI8aOXAza9dBc0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qb--vmNSH7BO2BI8aOXAza9dBc0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/Qb--vmNSH7BO2BI8aOXAza9dBc0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:b8:7a:5f:2f:c2:0e:4f:99:7b:21:e8:62:06:aa:5d:60:33: d8:ee:d4:9d:82:5b:90:29:22:cd:04:b4:c2:b5:f7:a2:86:b2: 60:4c:f4:20:6d:96:bd:5e:21:d1:2c:dc:95:ba:e1:15:3c:24: c5:40:b1:37:11:f7:a2:62:83:64:b4:85:e5:b9:ef:f5:f9:50: 66:68:5f:b4:17:2c:f7:e5:cd:49:72:61:5c:bd:5b:df:cb:d1: 53:24:12:d5:64:60:db:9c:2e:1e:33:77:11:f2:10:b7:36:20: 47:ae:d3:a3:2f:34:8a:e4:a4:c2:7a:70:b5:cd:73:b4:b5:c5: 9e:42:74:c8:65:b9:49:d5:c7:52:98:03:6c:20:15:a7:1e:66: 5c:21:38:71:39:18:18:bc:da:61:3e:47:8b:a8:e4:fa:01:b1: 61:19:62:64:73:98:6c:da:75:6a:47:66:e6:7e:22:e9:8e:a6: 8e:44:2a:05:db:7b:50:72:1f:bf:2c:84:cb:9f:de:67:09:d3: c2:3e:38:f0:30:dc:06:5a:74:b4:71:2d:21:ad:af:2d:fd:0f: db:12:18:9e:50:12:a8:7f:9c:9b:96:41:d6:ce:9c:4d:8f:5d: e1:78:d2:42:6e:c6:be:b9:27:f3:79:10:2c:ca:f8:c3:2c:ed: 50:24:24:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA5AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzA5ODIxMTAvBgNVBAUTKDQxQkZCRUJFNjM1MjFGQjA0RUQ4MTIzQzY4RTVDMENE QUY1RDA1Q0QwHhcNMjUwNjE5MDA0MzA4WhcNMjUwNjI2MDA0MzA4WjAYMRYwFAYD VQQDEw02ODUzNWQxYy1mMWM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtGlOcm6oZJgi7HgFGSzEv8q8xnbL2IGTtg5oKBbDcMOyfl7XphF2+WPMImrN vS/NGD15iL2yVTwHK/0Zqs76HDaxy12O+5bhyonIWpIoVDqqO6rC6EGXXZAVGH9l 85P00uwhQ3a103SiWmV4sFHThs9gl+qPn1mfxwNjtH6RZmhkmqyWIlUuZNY5Orkv M1HqtJyeh+gwCZQOevIiScQiujVIBF5z9JDmu+MLah+fdqSHHQZ18Vbx1RPISKcU KbNR5JO607IxRhiblb2RAjRdgssotqA+h/jMIk3/PDmD2MozR3OMyG1xoN+vQWZJ Wfo/8rHIDZ6adpFXqHK6cRbT/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEhgeZby AJdMeBCHArZhhIhVkfwYMB8GA1UdIwQYMBaAFEG/vr5jUh+wTtgSPGjlwM2vXQXN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDk4Mi9DRjIwNUM2MEFD MTMxMUVDQjc3NkIyMDlDNEY5QUUwMi9RYi0tdm1OU0g3Qk8yQkk4YU9YQXphOWRC YzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1FiLS12bU5TSDdCTzJCSThhT1hBemE5ZEJjMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDk4Mi9DRjIwNUM2MEFDMTMxMUVDQjc3NkIyMDlDNEY5QUUwMi9RYi0tdm1OU0g3 Qk8yQkk4YU9YQXphOWRCYzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOuHpfL8IOT5l7IehiBqpdYDPY7tSdgluQKSLNBLTCtfeihrJgTPQg bZa9XiHRLNyVuuEVPCTFQLE3EfeiYoNktIXlue/1+VBmaF+0Fyz35c1JcmFcvVvf y9FTJBLVZGDbnC4eM3cR8hC3NiBHrtOjLzSK5KTCenC1zXO0tcWeQnTIZblJ1cdS mANsIBWnHmZcIThxORgYvNphPkeLqOT6AbFhGWJkc5hs2nVqR2bmfiLpjqaORCoF 23tQch+/LITLn95nCdPCPjjwMNwGWnS0cS0hra8t/Q/bEhieUBKof5yblkHWzpxN j13heNJCbsa+uSfzeRAsyvjDLO1QJCQA -----END CERTIFICATE-----Generated at Thu Jun 19 22:37:04 2025 by rpki-client