$ rpki-client -vvf rpki.apnic.net/member_repository/A9113B62/2E8A754AC6E811EFBB520B0DC4F9AE02/QadeBX4lBV8UqJ9TDHjiI7Hw9ZA.mft File: QadeBX4lBV8UqJ9TDHjiI7Hw9ZA.mft (raw, json) Hash identifier: WQM/hxbtfAsu+35g+3RMS4UtYlcjSe9ZVuiD/MV56j4= Subject key identifier: B8:AB:EB:CE:31:FF:79:5C:1C:F0:F0:33:92:CE:26:3E:EE:3B:5E:9A Authority key identifier: 41:A7:5E:05:7E:25:05:5F:14:A8:9F:53:0C:78:E2:23:B1:F0:F5:90 Certificate issuer: /CN=A9113B62/serialNumber=41A75E057E25055F14A89F530C78E223B1F0F590 Certificate serial: 3E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QadeBX4lBV8UqJ9TDHjiI7Hw9ZA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9113B62/2E8A754AC6E811EFBB520B0DC4F9AE02/QadeBX4lBV8UqJ9TDHjiI7Hw9ZA.mft Manifest number: 3D Signing time: Fri 25 Apr 2025 06:28:18 +0000 Manifest this update: Fri 25 Apr 2025 06:28:17 +0000 Manifest next update: Fri 02 May 2025 06:28:17 +0000 Files and hashes: 1: QadeBX4lBV8UqJ9TDHjiI7Hw9ZA.crl (hash: Vj5lj5prEdThUKmtHw3xFtJwwnlLMa6bdY29dZQotco=) 2: B8EBF604C6E911EFA1D4BA2BC4F9AE02.roa (hash: WSip5oZr/nzKqOFRarIzVKDUM0vv09DRdF9A4kj+F5w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9113B62/2E8A754AC6E811EFBB520B0DC4F9AE02/QadeBX4lBV8UqJ9TDHjiI7Hw9ZA.crl rsync://rpki.apnic.net/member_repository/A9113B62/2E8A754AC6E811EFBB520B0DC4F9AE02/QadeBX4lBV8UqJ9TDHjiI7Hw9ZA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QadeBX4lBV8UqJ9TDHjiI7Hw9ZA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62 (0x3e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9113B62, serialNumber=41A75E057E25055F14A89F530C78E223B1F0F590 Validity Not Before: Apr 25 06:28:17 2025 GMT Not After : May 2 06:28:17 2025 GMT Subject: CN=680b2b81-4966 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:7b:ee:1d:ac:d7:e2:01:46:1b:13:0b:83:f7: 47:d0:f5:75:42:49:f6:fb:32:95:06:f1:93:e4:b6: be:6d:d7:0b:13:ae:cb:64:4e:86:5f:68:86:69:b8: d3:73:69:3c:56:9c:e0:f0:6e:37:ea:46:21:de:a5: d7:8b:85:cf:43:9b:95:47:5d:5c:9a:53:cb:f7:44: df:7a:66:18:4f:fb:97:3f:7c:48:23:cb:15:bc:44: a4:22:5c:6c:c7:11:41:3d:78:8f:7a:07:6a:bc:f4: f2:84:c1:73:67:19:83:d6:9a:fa:62:2e:c8:0f:3d: 9b:ac:02:d8:f6:2b:ee:70:b0:e5:1b:71:57:44:03: 79:50:e1:d0:4d:ff:b7:24:f9:1c:c1:78:6b:31:cd: 7e:39:e3:9c:c2:70:a3:74:6f:35:4b:ef:62:d4:01: ae:7e:2d:26:fc:e1:c2:cb:02:30:8b:c3:6b:10:d2: b3:74:f7:06:5b:45:2a:a6:a3:9b:34:86:e1:c6:27: 29:31:26:bb:e9:04:ce:76:fb:2f:11:8f:73:14:72: 12:94:80:a5:bb:06:f1:a8:10:f7:23:63:1f:a4:25: d6:c3:43:86:0b:7d:49:c2:d0:1c:dc:1a:2e:3e:af: 07:d9:3e:46:3c:63:d7:07:40:43:9b:ea:60:c6:f5: 14:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:AB:EB:CE:31:FF:79:5C:1C:F0:F0:33:92:CE:26:3E:EE:3B:5E:9A X509v3 Authority Key Identifier: keyid:41:A7:5E:05:7E:25:05:5F:14:A8:9F:53:0C:78:E2:23:B1:F0:F5:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9113B62/2E8A754AC6E811EFBB520B0DC4F9AE02/QadeBX4lBV8UqJ9TDHjiI7Hw9ZA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QadeBX4lBV8UqJ9TDHjiI7Hw9ZA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113B62/2E8A754AC6E811EFBB520B0DC4F9AE02/QadeBX4lBV8UqJ9TDHjiI7Hw9ZA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:c9:2a:10:91:04:bf:9b:da:20:1d:c9:e6:da:58:6d:08:5c: 1d:06:a9:39:26:ea:69:d4:83:9b:f6:ed:44:dd:f1:e8:8c:f2: ee:1a:a0:ff:cf:a5:27:26:78:e8:f0:21:60:80:90:8e:e7:c4: 59:af:a6:95:57:5e:b5:ab:21:ae:87:9f:7e:e6:89:19:e8:be: 10:10:8e:0d:70:a9:ce:12:08:ef:94:f4:c8:a7:d6:42:27:bd: 4f:cd:3f:ca:ff:da:de:1e:c5:63:02:5a:6f:5f:0a:b4:d4:5b: d0:7d:6a:87:f7:3d:4b:5b:81:a9:cd:60:7a:0c:54:7b:d4:40: ad:e3:12:9a:f2:41:3c:ad:4b:1b:88:2b:b0:a3:2d:98:24:24: 3f:10:54:34:f6:53:db:2b:43:7a:ea:d1:d5:8e:02:2d:a5:b1: 94:04:47:93:6e:6f:b7:a1:2f:ae:0c:ee:c3:8d:7c:0c:06:97: d8:41:eb:57:05:73:ce:e9:e0:36:6d:ae:65:bf:db:b4:cf:73: 7a:7f:d8:9a:56:39:44:d9:03:71:cd:a2:c2:37:06:56:3a:22: 43:0e:fa:51:83:7f:cc:f4:f3:fa:87:40:af:87:88:5d:17:27: a5:3e:ef:c8:b0:aa:e9:53:c8:f4:cb:ac:e9:26:7b:98:7a:11: 9e:37:cf:5b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx M0I2MjExMC8GA1UEBRMoNDFBNzVFMDU3RTI1MDU1RjE0QTg5RjUzMEM3OEUyMjNC MUYwRjU5MDAeFw0yNTA0MjUwNjI4MTdaFw0yNTA1MDIwNjI4MTdaMBgxFjAUBgNV BAMTDTY4MGIyYjgxLTQ5NjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDke+4drNfiAUYbEwuD90fQ9XVCSfb7MpUG8ZPktr5t1wsTrstkToZfaIZpuNNz aTxWnODwbjfqRiHepdeLhc9Dm5VHXVyaU8v3RN96ZhhP+5c/fEgjyxW8RKQiXGzH EUE9eI96B2q89PKEwXNnGYPWmvpiLsgPPZusAtj2K+5wsOUbcVdEA3lQ4dBN/7ck +RzBeGsxzX4545zCcKN0bzVL72LUAa5+LSb84cLLAjCLw2sQ0rN09wZbRSqmo5s0 huHGJykxJrvpBM52+y8Rj3MUchKUgKW7BvGoEPcjYx+kJdbDQ4YLfUnC0BzcGi4+ rwfZPkY8Y9cHQEOb6mDG9RQ5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUuKvrzjH/ eVwc8PAzks4mPu47XpowHwYDVR0jBBgwFoAUQadeBX4lBV8UqJ9TDHjiI7Hw9ZAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEzQjYyLzJFOEE3NTRBQzZF ODExRUZCQjUyMEIwREM0RjlBRTAyL1FhZGVCWDRsQlY4VXFKOVRESGppSTdIdzla QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUWFkZUJYNGxCVjhVcUo5VERIamlJN0h3OVpBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEz QjYyLzJFOEE3NTRBQzZFODExRUZCQjUyMEIwREM0RjlBRTAyL1FhZGVCWDRsQlY4 VXFKOVRESGppSTdIdzlaQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAI3JKhCRBL+b2iAdyebaWG0IXB0GqTkm6mnUg5v27UTd8eiM8u4aoP/P pScmeOjwIWCAkI7nxFmvppVXXrWrIa6Hn37miRnovhAQjg1wqc4SCO+U9Min1kIn vU/NP8r/2t4exWMCWm9fCrTUW9B9aof3PUtbganNYHoMVHvUQK3jEpryQTytSxuI K7CjLZgkJD8QVDT2U9srQ3rq0dWOAi2lsZQER5Nub7ehL64M7sONfAwGl9hB61cF c87p4DZtrmW/27TPc3p/2JpWOUTZA3HNosI3BlY6IkMO+lGDf8z08/qHQK+HiF0X J6U+78iwqulTyPTLrOkme5h6EZ43z1s= -----END CERTIFICATE-----Generated at Sat Apr 26 15:07:44 2025 by rpki-client