$ rpki-client -vvf rpki.apnic.net/member_repository/A9132F27/84098F5CBB6C11EEA680AE6DC4F9AE02/QgxcRJT5_6t6haNwv8Pklcz6S6M.mft File: QgxcRJT5_6t6haNwv8Pklcz6S6M.mft (raw, json) Hash identifier: yIIxAZdL5yGQNLVD1zWwd4U6OSAxwTERrPiVLbJW2OQ= Subject key identifier: 1F:27:9A:3A:E0:47:8C:B9:70:B6:E6:14:51:5B:99:D5:57:6F:23:52 Authority key identifier: 42:0C:5C:44:94:F9:FF:AB:7A:85:A3:70:BF:C3:E4:95:CC:FA:4B:A3 Certificate issuer: /CN=A9132F27/serialNumber=420C5C4494F9FFAB7A85A370BFC3E495CCFA4BA3 Certificate serial: EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QgxcRJT5_6t6haNwv8Pklcz6S6M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9132F27/84098F5CBB6C11EEA680AE6DC4F9AE02/QgxcRJT5_6t6haNwv8Pklcz6S6M.mft Manifest number: EA Signing time: Fri 25 Apr 2025 04:25:31 +0000 Manifest this update: Fri 25 Apr 2025 04:25:31 +0000 Manifest next update: Fri 02 May 2025 04:25:31 +0000 Files and hashes: 1: QgxcRJT5_6t6haNwv8Pklcz6S6M.crl (hash: HfFS1/Ob62hNX9grD623ptJopek8dghjC3TOsqZBoIA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9132F27/84098F5CBB6C11EEA680AE6DC4F9AE02/QgxcRJT5_6t6haNwv8Pklcz6S6M.crl rsync://rpki.apnic.net/member_repository/A9132F27/84098F5CBB6C11EEA680AE6DC4F9AE02/QgxcRJT5_6t6haNwv8Pklcz6S6M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QgxcRJT5_6t6haNwv8Pklcz6S6M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:25:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 234 (0xea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9132F27, serialNumber=420C5C4494F9FFAB7A85A370BFC3E495CCFA4BA3 Validity Not Before: Apr 25 04:25:31 2025 GMT Not After : May 2 04:25:31 2025 GMT Subject: CN=680b0ebb-e0b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:cd:34:d9:86:74:54:36:d6:71:95:de:4b:58: cd:5b:4d:b2:c7:15:c1:7f:17:5d:88:81:dd:5f:47: 4e:aa:9a:5c:d5:85:8b:05:db:00:b5:ab:76:a4:bc: d3:54:b2:21:df:ef:08:8f:92:97:0e:82:4c:bb:ad: 06:83:3d:b1:2d:ff:aa:fd:99:10:db:cb:88:11:02: 73:7b:81:28:bf:e2:1c:72:04:9a:f4:06:0d:53:ee: cf:3b:7d:50:5d:0e:de:93:f7:43:e6:6d:22:a9:80: a3:a6:35:ab:33:ce:23:54:a1:56:31:ae:70:63:d3: 5e:76:d5:dd:08:06:53:74:5c:58:99:41:89:49:38: fb:5e:eb:d5:43:19:bc:fc:0e:45:8c:84:83:61:2e: fa:02:c0:86:8f:7b:59:7a:6d:2f:e8:e0:64:51:eb: c6:28:b9:8c:42:33:21:e7:a6:9b:8c:cd:f2:cb:7a: 9d:8d:a7:4e:37:41:30:f5:4c:74:a0:15:ec:b6:f1: 9a:c2:84:39:71:18:86:7f:d0:f5:7f:8b:b6:5e:11: d5:a7:8c:b2:c9:39:e7:9a:5d:94:c4:94:0a:00:e1: b4:19:d8:96:4c:36:69:cc:b9:72:0c:51:a8:fc:80: a9:2c:73:06:6b:9d:35:65:2c:df:08:bd:e0:06:57: a5:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:27:9A:3A:E0:47:8C:B9:70:B6:E6:14:51:5B:99:D5:57:6F:23:52 X509v3 Authority Key Identifier: keyid:42:0C:5C:44:94:F9:FF:AB:7A:85:A3:70:BF:C3:E4:95:CC:FA:4B:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9132F27/84098F5CBB6C11EEA680AE6DC4F9AE02/QgxcRJT5_6t6haNwv8Pklcz6S6M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QgxcRJT5_6t6haNwv8Pklcz6S6M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132F27/84098F5CBB6C11EEA680AE6DC4F9AE02/QgxcRJT5_6t6haNwv8Pklcz6S6M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:28:41:98:d8:5e:b9:88:fc:45:6e:02:ad:cf:f7:85:12:c1: 34:26:c1:84:a7:c0:50:3d:7a:e9:d3:14:82:ba:4a:3d:e0:13: 8a:71:d5:b4:69:8c:d7:90:e1:99:b3:fa:4d:d2:6b:0f:0d:1c: aa:b5:34:80:45:38:12:5e:78:8a:4a:c7:c1:05:64:03:5d:4a: 25:4a:9c:a7:ff:b6:ed:d0:b3:67:11:7c:6f:aa:17:5f:dd:56: 0a:d6:5f:c2:d9:b6:66:57:c2:d6:5e:ff:00:ef:cd:e3:5a:e4: 91:aa:a7:d8:df:e3:b4:80:bb:73:14:5a:57:39:cf:19:80:24: d9:5d:49:c0:b3:e2:93:a2:1c:80:3c:b6:2f:0c:84:5b:1c:0c: c9:6e:10:ba:60:27:c2:5b:6b:61:b6:c5:05:bd:6c:b7:5f:65: bf:55:bf:00:43:5b:0d:11:a8:28:32:a3:21:96:e5:b5:00:f9: 94:ea:f4:28:62:64:71:89:8a:2f:72:b4:86:4a:09:ad:39:c0: 06:fb:a4:12:98:20:4d:01:58:93:4f:40:9a:be:08:b9:e5:d8: a4:f9:b4:38:1a:55:e8:3d:60:6c:b2:d2:c9:17:2c:9f:65:2f: e9:08:29:68:0b:d4:f5:df:73:68:a5:ef:d3:8d:40:f5:e2:6b: 28:8f:7f:bb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzJGMjcxMTAvBgNVBAUTKDQyMEM1QzQ0OTRGOUZGQUI3QTg1QTM3MEJGQzNFNDk1 Q0NGQTRCQTMwHhcNMjUwNDI1MDQyNTMxWhcNMjUwNTAyMDQyNTMxWjAYMRYwFAYD VQQDEw02ODBiMGViYi1lMGIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxM002YZ0VDbWcZXeS1jNW02yxxXBfxddiIHdX0dOqppc1YWLBdsAtat2pLzT VLIh3+8Ij5KXDoJMu60Ggz2xLf+q/ZkQ28uIEQJze4Eov+IccgSa9AYNU+7PO31Q XQ7ek/dD5m0iqYCjpjWrM84jVKFWMa5wY9NedtXdCAZTdFxYmUGJSTj7XuvVQxm8 /A5FjISDYS76AsCGj3tZem0v6OBkUevGKLmMQjMh56abjM3yy3qdjadON0Ew9Ux0 oBXstvGawoQ5cRiGf9D1f4u2XhHVp4yyyTnnml2UxJQKAOG0GdiWTDZpzLlyDFGo /ICpLHMGa501ZSzfCL3gBlelewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB8nmjrg R4y5cLbmFFFbmdVXbyNSMB8GA1UdIwQYMBaAFEIMXESU+f+reoWjcL/D5JXM+kuj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMkYyNy84NDA5OEY1Q0JC NkMxMUVFQTY4MEFFNkRDNEY5QUUwMi9RZ3hjUkpUNV82dDZoYU53djhQa2xjejZT Nk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FneGNSSlQ1XzZ0NmhhTnd2OFBrbGN6NlM2TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MkYyNy84NDA5OEY1Q0JCNkMxMUVFQTY4MEFFNkRDNEY5QUUwMi9RZ3hjUkpUNV82 dDZoYU53djhQa2xjejZTNk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6KEGY2F65iPxFbgKtz/eFEsE0JsGEp8BQPXrp0xSCuko94BOKcdW0 aYzXkOGZs/pN0msPDRyqtTSARTgSXniKSsfBBWQDXUolSpyn/7bt0LNnEXxvqhdf 3VYK1l/C2bZmV8LWXv8A783jWuSRqqfY3+O0gLtzFFpXOc8ZgCTZXUnAs+KTohyA PLYvDIRbHAzJbhC6YCfCW2thtsUFvWy3X2W/Vb8AQ1sNEagoMqMhluW1APmU6vQo YmRxiYovcrSGSgmtOcAG+6QSmCBNAViTT0Cavgi55dik+bQ4GlXoPWBsstLJFyyf ZS/pCCloC9T133Nope/TjUD14msoj3+7 -----END CERTIFICATE-----Generated at Sat Apr 26 04:34:04 2025 by rpki-client