$ rpki-client -vvf rpki.apnic.net/member_repository/A912968B/FC1D2736E12A11EE8684C217C4F9AE02/QuZl4REE2M0IP7GdPG81XHYoxEU.mft File: QuZl4REE2M0IP7GdPG81XHYoxEU.mft (raw, json) Hash identifier: CHZ4bPHkbaGrRPDCm3+pN/OC+spNKW9wj/si1eVGRJ8= Subject key identifier: 61:34:34:C7:13:47:9A:D9:17:83:76:6D:7F:AE:23:D8:E7:C8:ED:CB Authority key identifier: 42:E6:65:E1:11:04:D8:CD:08:3F:B1:9D:3C:6F:35:5C:76:28:C4:45 Certificate issuer: /CN=A912968B/serialNumber=42E665E11104D8CD083FB19D3C6F355C7628C445 Certificate serial: D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QuZl4REE2M0IP7GdPG81XHYoxEU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912968B/FC1D2736E12A11EE8684C217C4F9AE02/QuZl4REE2M0IP7GdPG81XHYoxEU.mft Manifest number: D2 Signing time: Fri 25 Apr 2025 04:41:04 +0000 Manifest this update: Fri 25 Apr 2025 04:41:04 +0000 Manifest next update: Fri 02 May 2025 04:41:04 +0000 Files and hashes: 1: QuZl4REE2M0IP7GdPG81XHYoxEU.crl (hash: RCrdTmWOhEWdv3Rlyaq49stsRaURPRJwFCFMJbc+WBk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912968B/FC1D2736E12A11EE8684C217C4F9AE02/QuZl4REE2M0IP7GdPG81XHYoxEU.crl rsync://rpki.apnic.net/member_repository/A912968B/FC1D2736E12A11EE8684C217C4F9AE02/QuZl4REE2M0IP7GdPG81XHYoxEU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QuZl4REE2M0IP7GdPG81XHYoxEU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:41:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 214 (0xd6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912968B, serialNumber=42E665E11104D8CD083FB19D3C6F355C7628C445 Validity Not Before: Apr 25 04:41:04 2025 GMT Not After : May 2 04:41:04 2025 GMT Subject: CN=680b1260-5290 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:82:70:8e:64:3d:7d:ee:56:27:ce:a7:c5:17: 6c:b1:d7:92:d5:fa:f8:41:d0:23:c3:5a:2e:c1:6f: 9c:79:6a:bc:27:cc:f6:d0:f8:09:ff:cc:80:9f:cd: 54:1e:5f:7c:77:c1:42:6c:21:37:25:78:80:27:45: 00:16:f4:2a:8c:30:20:a8:2a:29:8c:e7:8c:f3:53: a4:1e:f2:09:0b:95:e2:c6:cd:e8:51:a6:f6:e4:44: ab:8f:0e:76:0b:a3:36:d4:d3:ea:d7:81:8b:fb:19: e2:83:2f:85:cf:8c:59:24:3a:af:01:39:7e:2b:92: 16:3d:d8:21:7c:41:ac:94:24:ab:e6:5a:08:9b:03: 84:bf:21:b6:13:a8:71:f4:b5:3e:49:38:ca:53:0c: 90:bd:4e:e5:97:16:c7:09:65:16:37:88:49:36:0d: 58:b7:ce:1f:8f:f2:4f:d5:dc:ca:6f:f1:92:e5:df: d6:bb:7d:3c:44:25:6c:cb:43:54:57:5d:50:95:4e: 57:d8:7c:7a:c5:00:91:dd:1e:50:0d:5f:a9:51:04: f9:8c:25:9a:40:d4:08:90:a0:b8:fe:fe:44:aa:78: 37:ac:34:da:b6:a5:e0:e1:96:6e:0f:a8:ba:ae:c4: 89:bb:bd:bb:64:36:3c:01:f9:c0:c6:e6:80:2a:fb: 70:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:34:34:C7:13:47:9A:D9:17:83:76:6D:7F:AE:23:D8:E7:C8:ED:CB X509v3 Authority Key Identifier: keyid:42:E6:65:E1:11:04:D8:CD:08:3F:B1:9D:3C:6F:35:5C:76:28:C4:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912968B/FC1D2736E12A11EE8684C217C4F9AE02/QuZl4REE2M0IP7GdPG81XHYoxEU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QuZl4REE2M0IP7GdPG81XHYoxEU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912968B/FC1D2736E12A11EE8684C217C4F9AE02/QuZl4REE2M0IP7GdPG81XHYoxEU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:27:cc:77:34:78:f5:7b:bd:33:f5:c5:03:f6:c9:e7:48:42: 99:ea:6c:de:a5:23:05:6e:11:9f:e0:f2:e4:78:08:db:32:f1: 71:e5:61:49:2e:5d:a4:5a:06:5c:13:92:4d:aa:28:aa:a2:73: d2:b1:1d:85:2a:8f:8e:e6:9f:24:5e:93:05:aa:91:5a:3d:81: b1:29:a4:a4:d7:92:52:9a:74:2c:54:2f:fa:a6:8c:c0:35:05: fe:71:85:c6:8c:4e:2e:13:c3:54:03:56:0a:9a:cc:d0:23:32: 6e:4a:e8:8e:4c:22:1a:f6:de:f0:1f:dd:de:d3:db:d9:2e:45: 82:de:be:27:19:df:19:41:57:e4:fa:e7:5f:18:2e:63:80:bf: bb:12:5b:3b:b3:36:33:00:97:0c:d4:07:1c:14:ea:3a:08:33: 06:26:af:03:c2:b2:de:13:35:7e:ce:b4:3f:e1:62:e1:5a:d8: 42:97:7e:7d:34:7d:02:19:25:94:74:e3:0f:16:c0:f9:4f:00: 6a:99:ab:2f:e9:98:82:aa:11:4f:5f:0c:75:c2:00:cc:38:84: e5:38:74:9f:ab:a8:76:ff:d1:00:34:30:73:65:ce:a2:fe:62: 52:d5:10:7d:48:1a:26:28:25:84:97:69:80:64:2d:9f:6e:46: 3b:3a:9b:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjk2OEIxMTAvBgNVBAUTKDQyRTY2NUUxMTEwNEQ4Q0QwODNGQjE5RDNDNkYzNTVD NzYyOEM0NDUwHhcNMjUwNDI1MDQ0MTA0WhcNMjUwNTAyMDQ0MTA0WjAYMRYwFAYD VQQDEw02ODBiMTI2MC01MjkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxoJwjmQ9fe5WJ86nxRdssdeS1fr4QdAjw1ouwW+ceWq8J8z20PgJ/8yAn81U Hl98d8FCbCE3JXiAJ0UAFvQqjDAgqCopjOeM81OkHvIJC5Xixs3oUab25ESrjw52 C6M21NPq14GL+xnigy+Fz4xZJDqvATl+K5IWPdghfEGslCSr5loImwOEvyG2E6hx 9LU+STjKUwyQvU7llxbHCWUWN4hJNg1Yt84fj/JP1dzKb/GS5d/Wu308RCVsy0NU V11QlU5X2Hx6xQCR3R5QDV+pUQT5jCWaQNQIkKC4/v5Eqng3rDTatqXg4ZZuD6i6 rsSJu727ZDY8AfnAxuaAKvtwMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGE0NMcT R5rZF4N2bX+uI9jnyO3LMB8GA1UdIwQYMBaAFELmZeERBNjNCD+xnTxvNVx2KMRF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTY4Qi9GQzFEMjczNkUx MkExMUVFODY4NEMyMTdDNEY5QUUwMi9RdVpsNFJFRTJNMElQN0dkUEc4MVhIWW94 RVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1F1Wmw0UkVFMk0wSVA3R2RQRzgxWEhZb3hFVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OTY4Qi9GQzFEMjczNkUxMkExMUVFODY4NEMyMTdDNEY5QUUwMi9RdVpsNFJFRTJN MElQN0dkUEc4MVhIWW94RVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBpJ8x3NHj1e70z9cUD9snnSEKZ6mzepSMFbhGf4PLkeAjbMvFx5WFJ Ll2kWgZcE5JNqiiqonPSsR2FKo+O5p8kXpMFqpFaPYGxKaSk15JSmnQsVC/6pozA NQX+cYXGjE4uE8NUA1YKmszQIzJuSuiOTCIa9t7wH93e09vZLkWC3r4nGd8ZQVfk +udfGC5jgL+7Els7szYzAJcM1AccFOo6CDMGJq8DwrLeEzV+zrQ/4WLhWthCl359 NH0CGSWUdOMPFsD5TwBqmasv6ZiCqhFPXwx1wgDMOITlOHSfq6h2/9EANDBzZc6i /mJS1RB9SBomKCWEl2mAZC2fbkY7Opto -----END CERTIFICATE-----Generated at Sat Apr 26 15:06:10 2025 by rpki-client