$ rpki-client -vvf rpki.apnic.net/member_repository/A912087D/4C15858C28ED11ED8B597B40C4F9AE02/QqhNjAiJrcVYYGY5k7zKg2EnG_4.mft File: QqhNjAiJrcVYYGY5k7zKg2EnG_4.mft (raw, json) Hash identifier: 50q64X1uRylu849Rwa1vXKGvP5zrbWLIs1rXpZXQmsA= Subject key identifier: A9:A3:4D:99:03:CF:2E:51:74:25:28:4C:4D:B6:D7:DF:F7:03:3C:5E Authority key identifier: 42:A8:4D:8C:08:89:AD:C5:58:60:66:39:93:BC:CA:83:61:27:1B:FE Certificate issuer: /CN=A912087D/serialNumber=42A84D8C0889ADC55860663993BCCA8361271BFE Certificate serial: 0226 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QqhNjAiJrcVYYGY5k7zKg2EnG_4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912087D/4C15858C28ED11ED8B597B40C4F9AE02/QqhNjAiJrcVYYGY5k7zKg2EnG_4.mft Manifest number: 0223 Signing time: Sat 03 May 2025 02:01:11 +0000 Manifest this update: Sat 03 May 2025 02:01:10 +0000 Manifest next update: Sat 10 May 2025 02:01:10 +0000 Files and hashes: 1: QqhNjAiJrcVYYGY5k7zKg2EnG_4.crl (hash: XvmXwoKwfGA1mhvPTbFqwDCeEJTKLYiVWYYQmhH4L2I=) 2: 07E789A228F011ED94BE9345C4F9AE02.roa (hash: jWdCBukfmwdIx7AmCNNn8IWevCXBAGWSyySXEJZ9MpI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912087D/4C15858C28ED11ED8B597B40C4F9AE02/QqhNjAiJrcVYYGY5k7zKg2EnG_4.crl rsync://rpki.apnic.net/member_repository/A912087D/4C15858C28ED11ED8B597B40C4F9AE02/QqhNjAiJrcVYYGY5k7zKg2EnG_4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QqhNjAiJrcVYYGY5k7zKg2EnG_4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 02:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 550 (0x226) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912087D, serialNumber=42A84D8C0889ADC55860663993BCCA8361271BFE Validity Not Before: May 3 02:01:10 2025 GMT Not After : May 10 02:01:10 2025 GMT Subject: CN=681578e6-156f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a7:a4:82:f9:1b:13:1e:e3:5a:0e:91:5e:c4: 86:48:b7:1f:d3:0d:b6:11:39:f0:0a:7a:41:e6:5c: 7e:84:65:75:e2:dd:34:de:dc:85:23:9c:5b:23:31: b4:1e:1d:39:12:e0:3d:86:f9:f4:67:2e:5f:9c:8e: 21:89:fc:67:3f:0f:15:91:fb:be:29:3b:11:7a:f0: 12:1c:4e:40:b8:ef:6f:1f:cb:fc:11:19:4d:9f:e1: 3b:a8:03:e5:0c:d1:b6:10:b6:56:fd:b0:0d:14:57: c4:25:75:28:ff:31:75:ab:e2:bc:ae:7e:17:84:a9: 32:1d:5b:6b:65:c6:65:5b:ad:c7:6d:cf:8c:f6:ae: 90:fe:bc:83:ff:71:00:ac:e9:70:aa:85:56:78:9b: ba:f5:7f:52:48:5e:99:f5:b9:74:3c:fa:7c:0d:ae: be:57:f5:69:03:f6:eb:69:a0:a2:52:d3:f1:61:60: 34:60:83:ce:a5:f2:c5:f3:c9:a8:db:38:42:27:72: b3:4b:a4:38:0f:87:b8:7e:6a:74:5e:e6:5e:a3:b4: 16:ee:75:5b:18:77:9b:c3:2a:00:03:b1:97:71:75: 89:1d:e8:9c:ec:98:50:76:f3:9d:f2:be:62:35:71: 65:cf:98:91:e8:af:16:e5:27:42:ec:32:89:96:47: 41:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:A3:4D:99:03:CF:2E:51:74:25:28:4C:4D:B6:D7:DF:F7:03:3C:5E X509v3 Authority Key Identifier: keyid:42:A8:4D:8C:08:89:AD:C5:58:60:66:39:93:BC:CA:83:61:27:1B:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912087D/4C15858C28ED11ED8B597B40C4F9AE02/QqhNjAiJrcVYYGY5k7zKg2EnG_4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QqhNjAiJrcVYYGY5k7zKg2EnG_4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912087D/4C15858C28ED11ED8B597B40C4F9AE02/QqhNjAiJrcVYYGY5k7zKg2EnG_4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:9d:d2:98:76:93:32:54:75:9b:17:af:79:0e:e7:b9:a5:72: 24:4a:8a:76:65:bc:76:78:d7:5e:e2:b3:98:88:66:de:c3:da: ec:ee:f3:d9:7b:f5:10:26:04:da:10:f6:47:ac:0c:da:77:e5: 3b:89:b0:e1:11:ae:ed:dd:94:15:2f:1b:ee:4f:22:98:03:57: 96:f2:48:71:be:bb:b9:06:f1:55:24:7b:02:02:75:fa:d1:3d: 24:80:ab:f6:a3:59:12:b1:63:91:5c:0c:fe:b5:bd:9f:eb:f2: 53:3a:aa:51:bf:92:da:06:8f:9f:f3:3d:3e:a2:01:d1:e8:2a: ad:a0:d0:dc:59:17:93:a4:76:69:b9:4b:bd:15:5a:02:d5:da: 5e:91:8c:3d:06:ea:79:f4:f2:4f:0a:e3:bf:d7:c3:4c:ef:d1: df:d4:84:77:c9:6e:1f:02:43:b5:52:25:b2:34:4d:52:c2:63: 18:e1:25:7d:ec:19:f1:cc:09:51:8a:8f:f6:95:2e:43:d0:76: e2:13:26:65:36:d7:8b:9f:d9:bb:5f:92:4b:3c:b5:b0:7d:1b: b9:7a:a1:d6:68:e5:d7:cf:2f:cb:66:0e:3e:0d:98:55:ae:96: 2f:7a:fa:2a:3e:38:cd:17:bb:4f:d9:3d:cb:10:24:65:fe:2d: 7c:fa:11:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAiYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjA4N0QxMTAvBgNVBAUTKDQyQTg0RDhDMDg4OUFEQzU1ODYwNjYzOTkzQkNDQTgz NjEyNzFCRkUwHhcNMjUwNTAzMDIwMTEwWhcNMjUwNTEwMDIwMTEwWjAYMRYwFAYD VQQDEw02ODE1NzhlNi0xNTZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArKekgvkbEx7jWg6RXsSGSLcf0w22ETnwCnpB5lx+hGV14t003tyFI5xbIzG0 Hh05EuA9hvn0Zy5fnI4hifxnPw8Vkfu+KTsRevASHE5AuO9vH8v8ERlNn+E7qAPl DNG2ELZW/bANFFfEJXUo/zF1q+K8rn4XhKkyHVtrZcZlW63Hbc+M9q6Q/ryD/3EA rOlwqoVWeJu69X9SSF6Z9bl0PPp8Da6+V/VpA/braaCiUtPxYWA0YIPOpfLF88mo 2zhCJ3KzS6Q4D4e4fmp0XuZeo7QW7nVbGHebwyoAA7GXcXWJHeic7JhQdvOd8r5i NXFlz5iR6K8W5SdC7DKJlkdBwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKmjTZkD zy5RdCUoTE2219/3AzxeMB8GA1UdIwQYMBaAFEKoTYwIia3FWGBmOZO8yoNhJxv+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDg3RC80QzE1ODU4QzI4 RUQxMUVEOEI1OTdCNDBDNEY5QUUwMi9RcWhOakFpSnJjVllZR1k1azd6S2cyRW5H XzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FxaE5qQWlKcmNWWVlHWTVrN3pLZzJFbkdfNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDg3RC80QzE1ODU4QzI4RUQxMUVEOEI1OTdCNDBDNEY5QUUwMi9RcWhOakFpSnJj VllZR1k1azd6S2cyRW5HXzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7ndKYdpMyVHWbF695Due5pXIkSop2Zbx2eNde4rOYiGbew9rs7vPZ e/UQJgTaEPZHrAzad+U7ibDhEa7t3ZQVLxvuTyKYA1eW8khxvru5BvFVJHsCAnX6 0T0kgKv2o1kSsWORXAz+tb2f6/JTOqpRv5LaBo+f8z0+ogHR6CqtoNDcWReTpHZp uUu9FVoC1dpekYw9Bup59PJPCuO/18NM79Hf1IR3yW4fAkO1UiWyNE1SwmMY4SV9 7BnxzAlRio/2lS5D0HbiEyZlNteLn9m7X5JLPLWwfRu5eqHWaOXXzy/LZg4+DZhV rpYvevoqPjjNF7tP2T3LECRl/i18+hHk -----END CERTIFICATE-----Generated at Sat May 3 04:35:18 2025 by rpki-client