$ rpki-client -vvf rpki.apnic.net/member_repository/A912D306/BCBD801C1D8D11E2B429B7EB08B02CD2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.mft File: QQ8P6Xvp2e0HVs1Ndja5P48jizE.mft (raw, json) Hash identifier: /xgi10vsp6ObfIiYQGIEtZX7AGZ8s39Nega0CZ3Z2Pg= Subject key identifier: 94:CA:34:E0:15:8D:DB:60:F4:86:8A:D0:93:0A:F9:D8:66:29:01:AD Authority key identifier: 41:0F:0F:E9:7B:E9:D9:ED:07:56:CD:4D:76:36:B9:3F:8F:23:8B:31 Certificate issuer: /CN=A912D306/serialNumber=410F0FE97BE9D9ED0756CD4D7636B93F8F238B31 Certificate serial: 348B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D306/BCBD801C1D8D11E2B429B7EB08B02CD2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.mft Manifest number: 3480 Signing time: Sat 26 Apr 2025 14:38:13 +0000 Manifest this update: Sat 26 Apr 2025 14:38:12 +0000 Manifest next update: Sat 03 May 2025 14:38:12 +0000 Files and hashes: 1: QQ8P6Xvp2e0HVs1Ndja5P48jizE.crl (hash: Ft/yBPGMOZVKFDwf3fqLTz/KrQdpXXp78pXEZjPTIRs=) 2: ABE8518A18DA11F08FC68386C4F9AE02.roa (hash: 1QZz1HDQ1jRfLspLePE9D1zwt8zFnYwF7eP5N5O/9vg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D306/BCBD801C1D8D11E2B429B7EB08B02CD2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.crl rsync://rpki.apnic.net/member_repository/A912D306/BCBD801C1D8D11E2B429B7EB08B02CD2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 14:38:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13451 (0x348b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D306, serialNumber=410F0FE97BE9D9ED0756CD4D7636B93F8F238B31 Validity Not Before: Apr 26 14:38:12 2025 GMT Not After : May 3 14:38:12 2025 GMT Subject: CN=680cefd4-d409 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:c3:16:55:d4:a3:c1:91:67:fe:f1:9d:8d:b3: 64:aa:1e:50:72:46:be:52:2a:3d:8b:2e:8a:89:ac: aa:57:37:c2:79:27:f1:a4:84:ed:c4:5c:c2:39:0d: a5:29:59:4a:31:94:5e:54:51:89:42:18:5f:76:60: 0c:00:11:e8:c7:7b:8f:93:dc:fd:ad:67:05:00:8b: 42:79:a2:07:02:9c:18:93:8a:01:2b:6d:31:7a:7e: a9:f4:66:ed:8d:dc:1f:9a:bd:c0:8f:59:0e:5e:65: 31:d8:98:58:23:52:ea:ad:6a:dd:97:91:5e:b4:86: 61:f6:c8:2f:97:25:5a:e9:53:be:d7:6b:0b:bc:a7: 36:12:8a:2a:6f:ed:f1:8f:70:99:a5:f2:76:70:94: 4e:47:b8:3d:4f:37:a4:59:fe:cf:5a:c9:4d:30:b0: 9f:6b:10:9d:25:ff:d8:56:b3:b1:53:fa:9a:59:3f: 1b:56:72:a3:2d:0f:af:c7:4f:71:0e:6e:31:66:a9: 5a:34:8f:46:ba:2f:54:b1:ff:6f:b1:7b:20:fa:ac: c3:10:b7:03:67:62:d9:0a:93:c9:18:1e:a6:85:38: 31:dd:7a:2b:dc:dc:4e:86:df:54:80:c2:f3:03:e4: 91:b5:91:90:96:18:1f:c6:be:50:20:bc:85:9d:9f: a7:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:CA:34:E0:15:8D:DB:60:F4:86:8A:D0:93:0A:F9:D8:66:29:01:AD X509v3 Authority Key Identifier: keyid:41:0F:0F:E9:7B:E9:D9:ED:07:56:CD:4D:76:36:B9:3F:8F:23:8B:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D306/BCBD801C1D8D11E2B429B7EB08B02CD2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D306/BCBD801C1D8D11E2B429B7EB08B02CD2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:86:3c:2f:09:f7:2b:1f:93:cc:2d:e4:77:a1:c3:35:8f:b3: d9:69:29:75:46:54:11:93:6a:d6:9d:32:cc:3a:a9:05:09:7c: 18:b8:a8:f6:54:4b:69:23:6c:a3:7d:db:5b:be:cd:dd:0f:45: 62:c7:16:f5:ba:2f:92:6a:a6:f0:91:75:83:b1:bd:04:94:07: b0:46:b2:ea:72:04:bb:19:31:c3:63:be:37:a5:b5:82:c4:20: a9:49:22:2c:ba:31:7e:bb:6f:b9:22:e2:65:52:b9:7f:92:1b: c6:fa:d8:f2:b3:5c:81:d2:8c:5a:d0:1d:8c:a7:ad:f3:fc:4a: d3:a5:df:12:0f:be:4e:bb:96:66:57:25:cb:98:b7:48:c7:b5: 20:69:d1:2e:1c:0b:39:32:81:de:c4:9b:07:16:f1:6e:c3:3e: 47:4a:71:92:4f:0c:b5:88:15:6f:8d:45:6b:92:f1:e3:e4:03: c1:93:dd:4c:54:02:e4:0f:f6:2f:f0:db:44:a7:ff:a7:6f:f5: 96:e4:4f:da:61:97:7d:e3:d0:e3:08:de:9d:db:41:d4:22:a4: 9f:ab:73:bb:53:04:7c:5d:8c:38:59:ee:01:64:3f:0f:91:77: 37:5e:a9:d0:96:b4:98:14:37:af:27:7b:67:77:f7:e6:8e:4b: 3f:4c:e4:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNIswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQzMDYxMTAvBgNVBAUTKDQxMEYwRkU5N0JFOUQ5RUQwNzU2Q0Q0RDc2MzZCOTNG OEYyMzhCMzEwHhcNMjUwNDI2MTQzODEyWhcNMjUwNTAzMTQzODEyWjAYMRYwFAYD VQQDEw02ODBjZWZkNC1kNDA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlcMWVdSjwZFn/vGdjbNkqh5Qcka+Uio9iy6KiayqVzfCeSfxpITtxFzCOQ2l KVlKMZReVFGJQhhfdmAMABHox3uPk9z9rWcFAItCeaIHApwYk4oBK20xen6p9Gbt jdwfmr3Aj1kOXmUx2JhYI1LqrWrdl5FetIZh9sgvlyVa6VO+12sLvKc2Eooqb+3x j3CZpfJ2cJROR7g9TzekWf7PWslNMLCfaxCdJf/YVrOxU/qaWT8bVnKjLQ+vx09x Dm4xZqlaNI9Gui9Usf9vsXsg+qzDELcDZ2LZCpPJGB6mhTgx3Xor3NxOht9UgMLz A+SRtZGQlhgfxr5QILyFnZ+n5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJTKNOAV jdtg9IaK0JMK+dhmKQGtMB8GA1UdIwQYMBaAFEEPD+l76dntB1bNTXY2uT+PI4sx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDMwNi9CQ0JEODAxQzFE OEQxMUUyQjQyOUI3RUIwOEIwMkNEMi9RUThQNlh2cDJlMEhWczFOZGphNVA0OGpp ekUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FROFA2WHZwMmUwSFZzMU5kamE1UDQ4aml6RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RDMwNi9CQ0JEODAxQzFEOEQxMUUyQjQyOUI3RUIwOEIwMkNEMi9RUThQNlh2cDJl MEhWczFOZGphNVA0OGppekUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRhjwvCfcrH5PMLeR3ocM1j7PZaSl1RlQRk2rWnTLMOqkFCXwYuKj2 VEtpI2yjfdtbvs3dD0Vixxb1ui+SaqbwkXWDsb0ElAewRrLqcgS7GTHDY743pbWC xCCpSSIsujF+u2+5IuJlUrl/khvG+tjys1yB0oxa0B2Mp63z/ErTpd8SD75Ou5Zm VyXLmLdIx7UgadEuHAs5MoHexJsHFvFuwz5HSnGSTwy1iBVvjUVrkvHj5APBk91M VALkD/Yv8NtEp/+nb/WW5E/aYZd949DjCN6d20HUIqSfq3O7UwR8XYw4We4BZD8P kXc3XqnQlrSYFDevJ3tnd/fmjks/TORw -----END CERTIFICATE-----Generated at Sat Apr 26 16:59:33 2025 by rpki-client