$ rpki-client -vvf rpki.apnic.net/member_repository/A9131D5E/56DD48DED94711EB9A1A0D71C4F9AE02/QeLjUgZMov-eIcSENVrALkQHJY0.mft File: QeLjUgZMov-eIcSENVrALkQHJY0.mft (raw, json) Hash identifier: H6ZVkG18PLuhpx8uQoK/TA0RErDqEBCIeZIuKKfBAMk= Subject key identifier: BE:47:92:BB:54:39:C0:45:5A:E1:EF:6D:0C:3F:19:AF:57:77:8F:4F Authority key identifier: 41:E2:E3:52:06:4C:A2:FF:9E:21:C4:84:35:5A:C0:2E:44:07:25:8D Certificate issuer: /CN=A9131D5E/serialNumber=41E2E352064CA2FF9E21C484355AC02E4407258D Certificate serial: 057E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QeLjUgZMov-eIcSENVrALkQHJY0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131D5E/56DD48DED94711EB9A1A0D71C4F9AE02/QeLjUgZMov-eIcSENVrALkQHJY0.mft Manifest number: 0577 Signing time: Thu 24 Apr 2025 23:05:41 +0000 Manifest this update: Thu 24 Apr 2025 23:05:41 +0000 Manifest next update: Thu 01 May 2025 23:05:41 +0000 Files and hashes: 1: QeLjUgZMov-eIcSENVrALkQHJY0.crl (hash: tEkB682ayCctolFpSvEeRvzEDl69UJDnMYInLq7CVII=) 2: 9B41336A9ABB11EC9D11861FC4F9AE02.roa (hash: JjNvo6+sKFXJO5jB79ObwXmzISqdgMEQqhlFwLrXnJs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131D5E/56DD48DED94711EB9A1A0D71C4F9AE02/QeLjUgZMov-eIcSENVrALkQHJY0.crl rsync://rpki.apnic.net/member_repository/A9131D5E/56DD48DED94711EB9A1A0D71C4F9AE02/QeLjUgZMov-eIcSENVrALkQHJY0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QeLjUgZMov-eIcSENVrALkQHJY0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:05:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1406 (0x57e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131D5E, serialNumber=41E2E352064CA2FF9E21C484355AC02E4407258D Validity Not Before: Apr 24 23:05:41 2025 GMT Not After : May 1 23:05:41 2025 GMT Subject: CN=680ac3c5-039f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:1f:08:17:9a:1f:98:94:cc:a7:b1:30:73:a4: b2:a9:40:1e:e2:eb:96:a5:76:a6:61:06:28:fe:51: e3:8e:13:8d:dc:6f:0f:d9:bb:f8:8e:11:e6:9f:1f: 6f:6a:6d:23:b1:51:6d:17:66:13:f1:b9:78:e4:87: 83:70:b0:d2:e4:11:a4:ec:a4:74:19:c6:52:fc:08: 48:c9:54:22:63:69:94:76:f7:e2:2f:65:92:11:8a: fc:40:50:e7:66:53:2d:a0:ab:f8:71:ae:1b:a7:a4: f1:0d:93:50:45:09:dd:97:10:69:cf:df:4f:1c:0b: e9:20:a0:a0:5b:0c:47:73:bd:65:ce:3d:5c:50:e1: 00:ab:99:dc:98:da:7d:e7:59:88:a6:e9:98:a1:b0: bd:33:e4:7a:04:1a:73:01:69:a2:14:ed:91:71:aa: 71:27:c5:d9:2f:54:1b:10:c8:2d:8a:40:19:22:ce: 2f:50:e9:a8:83:f5:6c:37:9f:9f:52:c9:a7:90:7a: 96:90:46:48:c7:a4:87:ba:88:7a:60:10:11:02:0e: 73:86:9a:90:74:d2:66:d9:9d:29:55:5f:bf:c0:4d: a9:90:2a:f7:d5:78:5d:4a:06:b6:a1:4d:92:4d:f8: 1f:2a:a3:ed:4d:e1:68:0e:24:55:85:d9:bc:92:2f: e0:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:47:92:BB:54:39:C0:45:5A:E1:EF:6D:0C:3F:19:AF:57:77:8F:4F X509v3 Authority Key Identifier: keyid:41:E2:E3:52:06:4C:A2:FF:9E:21:C4:84:35:5A:C0:2E:44:07:25:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131D5E/56DD48DED94711EB9A1A0D71C4F9AE02/QeLjUgZMov-eIcSENVrALkQHJY0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QeLjUgZMov-eIcSENVrALkQHJY0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131D5E/56DD48DED94711EB9A1A0D71C4F9AE02/QeLjUgZMov-eIcSENVrALkQHJY0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:00:16:61:60:9d:c3:25:d6:00:b5:77:cf:0d:18:28:f7:84: 11:bd:79:af:ab:27:51:c3:57:13:4b:ca:b6:5d:fd:f8:be:68: f4:35:a2:ae:07:a2:1b:fb:a8:af:14:5a:ac:30:25:3c:d4:c3: 67:df:08:cf:96:27:b3:a3:5d:54:f4:53:1e:af:bb:3e:ac:cf: 52:3c:2f:05:40:37:e7:e4:23:6c:65:8c:29:33:5c:14:17:3e: f1:43:ae:6d:94:ce:1e:d5:3a:f0:c3:a2:df:dc:4a:d2:ee:3d: 78:65:f0:a9:27:fd:d4:bc:6f:63:ef:a2:38:25:b1:ab:e1:68: 82:3e:8f:04:5a:52:5a:c8:c3:00:77:05:93:43:a2:dc:e8:90: 33:94:6d:62:1e:d7:2d:97:e9:e1:db:e9:c0:ce:62:55:09:61: ea:5d:3c:80:ed:d2:ec:c7:d4:59:87:4c:6d:3e:b0:bb:d0:c1: 7d:59:75:c4:0d:94:ac:b2:0d:85:08:ac:3f:d5:a2:e7:59:db: f7:52:2a:a0:9a:50:10:48:da:f0:74:7e:3a:bd:f4:a1:93:41: 47:a0:7c:09:f3:31:e1:f5:5d:c2:a4:88:27:dd:5d:5e:2a:7e: c5:7c:2d:c3:df:e1:6d:ca:0c:9d:94:65:f0:8b:28:0f:fa:f5: f0:00:77:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBX4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzFENUUxMTAvBgNVBAUTKDQxRTJFMzUyMDY0Q0EyRkY5RTIxQzQ4NDM1NUFDMDJF NDQwNzI1OEQwHhcNMjUwNDI0MjMwNTQxWhcNMjUwNTAxMjMwNTQxWjAYMRYwFAYD VQQDEw02ODBhYzNjNS0wMzlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1h8IF5ofmJTMp7Ewc6SyqUAe4uuWpXamYQYo/lHjjhON3G8P2bv4jhHmnx9v am0jsVFtF2YT8bl45IeDcLDS5BGk7KR0GcZS/AhIyVQiY2mUdvfiL2WSEYr8QFDn ZlMtoKv4ca4bp6TxDZNQRQndlxBpz99PHAvpIKCgWwxHc71lzj1cUOEAq5ncmNp9 51mIpumYobC9M+R6BBpzAWmiFO2RcapxJ8XZL1QbEMgtikAZIs4vUOmog/VsN5+f UsmnkHqWkEZIx6SHuoh6YBARAg5zhpqQdNJm2Z0pVV+/wE2pkCr31XhdSga2oU2S TfgfKqPtTeFoDiRVhdm8ki/geQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL5HkrtU OcBFWuHvbQw/Ga9Xd49PMB8GA1UdIwQYMBaAFEHi41IGTKL/niHEhDVawC5EByWN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMUQ1RS81NkRENDhERUQ5 NDcxMUVCOUExQTBENzFDNEY5QUUwMi9RZUxqVWdaTW92LWVJY1NFTlZyQUxrUUhK WTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FlTGpVZ1pNb3YtZUljU0VOVnJBTGtRSEpZMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MUQ1RS81NkRENDhERUQ5NDcxMUVCOUExQTBENzFDNEY5QUUwMi9RZUxqVWdaTW92 LWVJY1NFTlZyQUxrUUhKWTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJABZhYJ3DJdYAtXfPDRgo94QRvXmvqydRw1cTS8q2Xf34vmj0NaKu B6Ib+6ivFFqsMCU81MNn3wjPliezo11U9FMer7s+rM9SPC8FQDfn5CNsZYwpM1wU Fz7xQ65tlM4e1Trww6Lf3ErS7j14ZfCpJ/3UvG9j76I4JbGr4WiCPo8EWlJayMMA dwWTQ6Lc6JAzlG1iHtctl+nh2+nAzmJVCWHqXTyA7dLsx9RZh0xtPrC70MF9WXXE DZSssg2FCKw/1aLnWdv3UiqgmlAQSNrwdH46vfShk0FHoHwJ8zHh9V3CpIgn3V1e Kn7FfC3D3+FtygydlGXwiygP+vXwAHeJ -----END CERTIFICATE-----Generated at Sat Apr 26 14:56:18 2025 by rpki-client