$ rpki-client -vvf rpki.apnic.net/member_repository/A911B12B/08C27532DB6811ED96C49C3DC4F9AE02/qZhc3TeTLh02TExtddulA79yZ3w.mft File: qZhc3TeTLh02TExtddulA79yZ3w.mft (raw, json) Hash identifier: uH3h4L+H6/G4OrXUjc79a8UG1BhL2ZI48SwtXdHzUrs= Subject key identifier: 96:1D:E2:91:1F:6A:98:60:DE:5D:BB:E0:85:DF:71:12:C5:0F:E9:6C Authority key identifier: A9:98:5C:DD:37:93:2E:1D:36:4C:4C:6D:75:DB:A5:03:BF:72:67:7C Certificate issuer: /CN=A911B12B/serialNumber=A9985CDD37932E1D364C4C6D75DBA503BF72677C Certificate serial: 019A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZhc3TeTLh02TExtddulA79yZ3w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B12B/08C27532DB6811ED96C49C3DC4F9AE02/qZhc3TeTLh02TExtddulA79yZ3w.mft Manifest number: 0190 Signing time: Fri 25 Apr 2025 02:51:33 +0000 Manifest this update: Fri 25 Apr 2025 02:51:32 +0000 Manifest next update: Fri 02 May 2025 02:51:32 +0000 Files and hashes: 1: qZhc3TeTLh02TExtddulA79yZ3w.crl (hash: 1kTlOLeyuXQ9AxOwrwvAOsODozWOBcuBSfzE3tZQin4=) 2: 2048ADEADD5011EDA3ACE13CC4F9AE02.roa (hash: Ry5wENgivtIXCFgzf0QiO3bQmATycLuxi4WQf0WGYRQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B12B/08C27532DB6811ED96C49C3DC4F9AE02/qZhc3TeTLh02TExtddulA79yZ3w.crl rsync://rpki.apnic.net/member_repository/A911B12B/08C27532DB6811ED96C49C3DC4F9AE02/qZhc3TeTLh02TExtddulA79yZ3w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZhc3TeTLh02TExtddulA79yZ3w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:51:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 410 (0x19a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B12B, serialNumber=A9985CDD37932E1D364C4C6D75DBA503BF72677C Validity Not Before: Apr 25 02:51:32 2025 GMT Not After : May 2 02:51:32 2025 GMT Subject: CN=680af8b5-1e04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:3d:be:74:bf:cf:cc:c0:36:d1:28:47:fe:e2: d2:28:44:b5:9f:db:91:95:f0:46:26:db:d4:07:3e: 03:5b:43:f1:bc:2e:91:44:98:83:fd:a1:71:df:06: 6d:b0:98:a6:d6:67:62:7d:ca:3b:eb:9f:49:1a:f0: fd:19:be:b8:3d:15:66:f5:aa:34:ae:fa:7c:20:d0: 46:cd:a0:14:4e:8a:24:ad:c9:d8:10:3e:6f:6c:af: 25:7e:d4:eb:66:61:a4:15:93:fc:1d:12:ea:8a:9a: 0a:08:e4:c3:9d:0b:0f:eb:15:55:36:4a:6f:3d:e8: 34:59:0d:f1:ed:c6:e5:ba:4a:61:cf:88:a4:ab:27: 25:5f:47:bd:ee:59:b7:d8:1c:67:85:5e:9d:00:09: 02:6c:81:81:b7:4a:cf:9f:e7:2d:c3:a4:80:ec:49: a5:21:8a:6e:84:9b:12:4d:54:c6:67:53:c6:a6:9b: 08:79:7c:65:c7:fd:64:ef:97:43:36:a8:94:75:b6: 66:f9:df:57:49:95:c2:72:ef:8a:00:ba:cb:41:db: 29:a9:44:f6:a7:12:2e:11:ba:6f:b6:61:28:8f:fa: 7c:d2:00:84:3d:2f:a3:23:76:64:2d:69:45:eb:8f: e9:93:94:e1:62:39:30:75:d1:7c:7e:41:bf:ae:cc: b8:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:1D:E2:91:1F:6A:98:60:DE:5D:BB:E0:85:DF:71:12:C5:0F:E9:6C X509v3 Authority Key Identifier: keyid:A9:98:5C:DD:37:93:2E:1D:36:4C:4C:6D:75:DB:A5:03:BF:72:67:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B12B/08C27532DB6811ED96C49C3DC4F9AE02/qZhc3TeTLh02TExtddulA79yZ3w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZhc3TeTLh02TExtddulA79yZ3w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B12B/08C27532DB6811ED96C49C3DC4F9AE02/qZhc3TeTLh02TExtddulA79yZ3w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:71:9f:c8:16:e6:50:63:23:c2:12:5d:ef:eb:f3:c8:d8:d0: 69:3d:69:da:11:59:69:f9:0a:73:a9:2b:21:bd:58:92:ac:a3: ea:d2:6d:c9:c8:8e:81:ed:dc:a6:02:ea:f8:b7:90:43:5e:ea: 03:fc:8a:15:6c:d9:56:15:07:87:4b:2e:d5:bd:dc:9c:3b:b5: 88:4b:5a:86:7a:53:03:65:01:22:93:64:a9:94:5d:73:ad:94: 50:b4:da:49:f9:88:e1:fa:b8:2f:09:62:da:d6:1c:d2:7b:52: d8:31:e7:4f:8a:37:dd:9e:46:e7:6e:02:12:5f:44:e3:e3:40: 59:e9:f1:73:ef:f5:33:75:9c:dd:31:7a:19:e0:b7:64:ef:dd: 13:a1:d9:01:a9:28:0b:6f:53:27:d1:ed:11:34:7f:f4:aa:9d: d1:90:6b:9a:2a:c1:cb:df:ff:26:da:da:b7:56:bd:dd:f7:e9: 89:bf:96:c8:56:0a:8c:3d:c0:66:8d:4b:5a:2f:f6:a4:c6:09: 0c:a0:46:d5:ed:dd:e1:e2:d8:b7:08:74:6c:32:35:97:0b:4e: 07:aa:c0:d4:8d:ba:1c:f5:2b:fa:ed:0d:40:7f:23:97:71:04: 75:78:a7:5b:42:3c:60:77:97:51:f2:1f:83:1b:a5:f0:e7:8d: 68:9e:00:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUIxMkIxMTAvBgNVBAUTKEE5OTg1Q0REMzc5MzJFMUQzNjRDNEM2RDc1REJBNTAz QkY3MjY3N0MwHhcNMjUwNDI1MDI1MTMyWhcNMjUwNTAyMDI1MTMyWjAYMRYwFAYD VQQDEw02ODBhZjhiNS0xZTA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4T2+dL/PzMA20ShH/uLSKES1n9uRlfBGJtvUBz4DW0PxvC6RRJiD/aFx3wZt sJim1mdifco7659JGvD9Gb64PRVm9ao0rvp8INBGzaAUTookrcnYED5vbK8lftTr ZmGkFZP8HRLqipoKCOTDnQsP6xVVNkpvPeg0WQ3x7cblukphz4ikqyclX0e97lm3 2BxnhV6dAAkCbIGBt0rPn+ctw6SA7EmlIYpuhJsSTVTGZ1PGppsIeXxlx/1k75dD NqiUdbZm+d9XSZXCcu+KALrLQdspqUT2pxIuEbpvtmEoj/p80gCEPS+jI3ZkLWlF 64/pk5ThYjkwddF8fkG/rsy4NQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJYd4pEf aphg3l274IXfcRLFD+lsMB8GA1UdIwQYMBaAFKmYXN03ky4dNkxMbXXbpQO/cmd8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjEyQi8wOEMyNzUzMkRC NjgxMUVEOTZDNDlDM0RDNEY5QUUwMi9xWmhjM1RlVExoMDJURXh0ZGR1bEE3OXla M3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FaaGMzVGVUTGgwMlRFeHRkZHVsQTc5eVozdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QjEyQi8wOEMyNzUzMkRCNjgxMUVEOTZDNDlDM0RDNEY5QUUwMi9xWmhjM1RlVExo MDJURXh0ZGR1bEE3OXlaM3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUcZ/IFuZQYyPCEl3v6/PI2NBpPWnaEVlp+QpzqSshvViSrKPq0m3J yI6B7dymAur4t5BDXuoD/IoVbNlWFQeHSy7VvdycO7WIS1qGelMDZQEik2SplF1z rZRQtNpJ+Yjh+rgvCWLa1hzSe1LYMedPijfdnkbnbgISX0Tj40BZ6fFz7/UzdZzd MXoZ4Ldk790TodkBqSgLb1Mn0e0RNH/0qp3RkGuaKsHL3/8m2tq3Vr3d9+mJv5bI VgqMPcBmjUtaL/akxgkMoEbV7d3h4ti3CHRsMjWXC04HqsDUjboc9Sv67Q1AfyOX cQR1eKdbQjxgd5dR8h+DG6Xw541ongAq -----END CERTIFICATE-----Generated at Sat Apr 26 04:20:04 2025 by rpki-client