$ rpki-client -vvf rpki.apnic.net/member_repository/A91160BB/41CD5D66209D11F0823D4847C4F9AE02/qbvtLXO41L4BFjc9V0g6CwGY6RQ.mft File: qbvtLXO41L4BFjc9V0g6CwGY6RQ.mft (raw, json) Hash identifier: upmkPmMuJfTZTwNOhk/l7CJmiFi71l3yiqAAn7MovPo= Subject key identifier: 30:82:6E:14:9D:DD:E6:9A:65:0E:CF:52:57:12:28:FD:AA:E4:91:DB Authority key identifier: A9:BB:ED:2D:73:B8:D4:BE:01:16:37:3D:57:48:3A:0B:01:98:E9:14 Certificate issuer: /CN=A91160BB/serialNumber=A9BBED2D73B8D4BE0116373D57483A0B0198E914 Certificate serial: 04 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbvtLXO41L4BFjc9V0g6CwGY6RQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91160BB/41CD5D66209D11F0823D4847C4F9AE02/qbvtLXO41L4BFjc9V0g6CwGY6RQ.mft Manifest number: 03 Signing time: Fri 25 Apr 2025 07:12:38 +0000 Manifest this update: Fri 25 Apr 2025 07:12:38 +0000 Manifest next update: Fri 02 May 2025 07:12:37 +0000 Files and hashes: 1: qbvtLXO41L4BFjc9V0g6CwGY6RQ.crl (hash: WBB0cQHDD3N7yM+Hawrf/AETZRWKCjlXdxpfhiAG+9o=) 2: B3AF09C0209D11F0B81D0B48C4F9AE02.roa (hash: hWtosufayWdgaVHIvvIcT7QIe+pwqrjTdl4WzVjv7Xg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91160BB/41CD5D66209D11F0823D4847C4F9AE02/qbvtLXO41L4BFjc9V0g6CwGY6RQ.crl rsync://rpki.apnic.net/member_repository/A91160BB/41CD5D66209D11F0823D4847C4F9AE02/qbvtLXO41L4BFjc9V0g6CwGY6RQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbvtLXO41L4BFjc9V0g6CwGY6RQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 07:12:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4 (0x4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91160BB, serialNumber=A9BBED2D73B8D4BE0116373D57483A0B0198E914 Validity Not Before: Apr 25 07:12:38 2025 GMT Not After : May 2 07:12:37 2025 GMT Subject: CN=680b35e6-821f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:18:b3:3a:f9:ac:f1:d3:bd:ee:ed:43:c8:4b: 08:ef:be:65:ce:56:85:24:ee:d3:54:84:2d:a1:37: 9a:b0:40:81:29:cc:1d:08:3d:53:d0:0a:4a:2e:9d: 3b:22:92:a9:58:f1:d9:47:7d:c7:b1:37:0d:5a:2c: 6e:8c:cd:a3:3d:1b:7d:e0:e1:7c:3d:8d:e1:e6:5b: 54:c7:7c:af:59:4e:62:e5:72:b2:9b:e4:b8:37:28: 95:49:93:31:df:b6:30:77:2b:7c:b3:3d:0f:33:aa: 19:68:58:f4:23:07:49:1a:cc:6f:62:c8:91:ee:df: 47:77:e2:98:08:5e:34:e4:a4:81:e9:3a:fc:46:c5: fe:4a:3d:7a:08:b1:a4:8b:bb:ff:36:aa:da:7c:44: 08:7f:1f:90:91:37:e2:d4:14:31:8f:f7:06:47:ff: 21:bd:7b:cb:09:3a:a8:15:04:57:aa:9a:04:1f:30: 84:53:8c:a2:cd:ba:91:fa:76:cd:bc:a5:be:fb:ba: 5f:4b:bb:5b:c6:e8:56:8a:fb:77:01:f9:d0:56:e1: 54:69:aa:1f:2d:14:16:93:25:bc:85:47:e8:d8:b4: e5:ac:c4:75:c4:7e:45:0f:89:b4:da:92:da:e0:01: 61:d6:f9:d6:1f:fa:73:b2:5e:f2:01:70:46:64:cd: 17:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:82:6E:14:9D:DD:E6:9A:65:0E:CF:52:57:12:28:FD:AA:E4:91:DB X509v3 Authority Key Identifier: keyid:A9:BB:ED:2D:73:B8:D4:BE:01:16:37:3D:57:48:3A:0B:01:98:E9:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91160BB/41CD5D66209D11F0823D4847C4F9AE02/qbvtLXO41L4BFjc9V0g6CwGY6RQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbvtLXO41L4BFjc9V0g6CwGY6RQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91160BB/41CD5D66209D11F0823D4847C4F9AE02/qbvtLXO41L4BFjc9V0g6CwGY6RQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:6d:4e:99:34:2d:f3:5d:55:d1:98:7b:1a:5a:bd:db:83:e3: e2:bc:75:a0:55:10:c1:b9:ee:a6:01:cb:ff:94:6d:17:38:da: 31:76:5b:3c:ff:af:9d:af:c8:69:59:1b:e3:86:1a:d4:c7:b5: 2f:c0:f3:3d:f8:62:85:9b:b8:63:8d:61:c4:f5:3e:ff:1f:71: 8a:a8:c7:23:e7:fc:77:4a:d8:af:2c:8c:ad:f7:1c:07:44:4e: be:a9:2f:ee:ea:d4:36:a5:8e:f2:eb:74:bd:c4:3a:a1:33:7a: 40:a7:08:23:7c:ef:a7:ca:64:18:4a:17:e4:e2:99:54:c8:cd: 51:e5:35:a8:dc:02:f0:2a:fb:b8:99:47:4c:1e:e2:73:33:79: fa:eb:78:ef:a0:a9:a0:c0:07:3c:1b:87:c2:4e:f2:ce:bb:1b: 72:79:ca:c0:72:3f:74:87:d9:01:89:fe:0e:f7:db:63:07:d6: d3:2b:cf:92:e4:42:0c:9b:ff:3c:22:ab:9a:70:e1:76:e5:8e: 53:cd:e3:89:a4:5b:28:68:85:1f:b6:69:3b:12:58:8e:72:09: a7:c0:1d:26:a4:f3:3c:06:4e:a1:f7:86:0e:c6:e6:49:69:bd: 94:10:0f:84:c6:e2:13:02:d7:f9:f2:23:db:5e:8c:a7:f1:4c: 60:4e:e9:03 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx NjBCQjExMC8GA1UEBRMoQTlCQkVEMkQ3M0I4RDRCRTAxMTYzNzNENTc0ODNBMEIw MTk4RTkxNDAeFw0yNTA0MjUwNzEyMzhaFw0yNTA1MDIwNzEyMzdaMBgxFjAUBgNV BAMTDTY4MGIzNWU2LTgyMWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDKGLM6+azx073u7UPISwjvvmXOVoUk7tNUhC2hN5qwQIEpzB0IPVPQCkounTsi kqlY8dlHfcexNw1aLG6MzaM9G33g4Xw9jeHmW1THfK9ZTmLlcrKb5Lg3KJVJkzHf tjB3K3yzPQ8zqhloWPQjB0kazG9iyJHu30d34pgIXjTkpIHpOvxGxf5KPXoIsaSL u/82qtp8RAh/H5CRN+LUFDGP9wZH/yG9e8sJOqgVBFeqmgQfMIRTjKLNupH6ds28 pb77ul9Lu1vG6FaK+3cB+dBW4VRpqh8tFBaTJbyFR+jYtOWsxHXEfkUPibTaktrg AWHW+dYf+nOyXvIBcEZkzReHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUMIJuFJ3d 5pplDs9SVxIo/arkkdswHwYDVR0jBBgwFoAUqbvtLXO41L4BFjc9V0g6CwGY6RQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE2MEJCLzQxQ0Q1RDY2MjA5 RDExRjA4MjNENDg0N0M0RjlBRTAyL3FidnRMWE80MUw0QkZqYzlWMGc2Q3dHWTZS US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcWJ2dExYTzQxTDRCRmpjOVYwZzZDd0dZNlJRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE2 MEJCLzQxQ0Q1RDY2MjA5RDExRjA4MjNENDg0N0M0RjlBRTAyL3FidnRMWE80MUw0 QkZqYzlWMGc2Q3dHWTZSUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIptTpk0LfNdVdGYexpavduD4+K8daBVEMG57qYBy/+UbRc42jF2Wzz/ r52vyGlZG+OGGtTHtS/A8z34YoWbuGONYcT1Pv8fcYqoxyPn/HdK2K8sjK33HAdE Tr6pL+7q1DaljvLrdL3EOqEzekCnCCN876fKZBhKF+TimVTIzVHlNajcAvAq+7iZ R0we4nMzefrreO+gqaDABzwbh8JO8s67G3J5ysByP3SH2QGJ/g7322MH1tMrz5Lk Qgyb/zwiq5pw4XbljlPN44mkWyhohR+2aTsSWI5yCafAHSak8zwGTqH3hg7G5klp vZQQD4TG4hMC1/nyI9tejKfxTGBO6QM= -----END CERTIFICATE-----Generated at Sat Apr 26 04:29:59 2025 by rpki-client