$ rpki-client -vvf rpki.apnic.net/member_repository/A9135B24/3BA691A8F83D11E8B0EC3448C4F9AE02/qrLSCRHmfiw6NccByHZaaFtQDsc.mft File: qrLSCRHmfiw6NccByHZaaFtQDsc.mft (raw, json) Hash identifier: Rv8mgia+xMJuC5kBz/Up2rby5FdHays7Lb1HKzU7C3k= Subject key identifier: 25:EA:3E:88:DE:3F:7B:BA:60:CA:03:C8:41:8F:57:53:61:D1:7F:E5 Authority key identifier: AA:B2:D2:09:11:E6:7E:2C:3A:35:C7:01:C8:76:5A:68:5B:50:0E:C7 Certificate issuer: /CN=A9135B24/serialNumber=AAB2D20911E67E2C3A35C701C8765A685B500EC7 Certificate serial: 118C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrLSCRHmfiw6NccByHZaaFtQDsc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135B24/3BA691A8F83D11E8B0EC3448C4F9AE02/qrLSCRHmfiw6NccByHZaaFtQDsc.mft Manifest number: 1185 Signing time: Thu 24 Apr 2025 17:13:27 +0000 Manifest this update: Thu 24 Apr 2025 17:13:27 +0000 Manifest next update: Thu 01 May 2025 17:13:27 +0000 Files and hashes: 1: qrLSCRHmfiw6NccByHZaaFtQDsc.crl (hash: 22hmYaCSxxNM97vuPS9GI0ZyatptbwySogI5p895Fnk=) 2: 5AC7F986F83E11E8B1FA8F4AC4F9AE02.roa (hash: iW6YjMpstfMKbZY59Tg1WeEsakFUmD2BPmWINCFK44U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135B24/3BA691A8F83D11E8B0EC3448C4F9AE02/qrLSCRHmfiw6NccByHZaaFtQDsc.crl rsync://rpki.apnic.net/member_repository/A9135B24/3BA691A8F83D11E8B0EC3448C4F9AE02/qrLSCRHmfiw6NccByHZaaFtQDsc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrLSCRHmfiw6NccByHZaaFtQDsc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:13:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4492 (0x118c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135B24, serialNumber=AAB2D20911E67E2C3A35C701C8765A685B500EC7 Validity Not Before: Apr 24 17:13:27 2025 GMT Not After : May 1 17:13:27 2025 GMT Subject: CN=680a7137-6053 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:e3:7a:35:e4:90:4d:58:ba:52:52:7e:2c:8e: 83:48:8d:fe:7b:f3:4f:1d:46:95:1e:ac:f3:db:ae: d6:51:56:70:fd:64:de:e7:4b:cc:ad:48:d1:58:92: f8:65:57:12:c7:23:0f:f4:54:9a:e3:41:c1:b3:51: 7d:7a:34:0b:04:d9:0a:69:25:5c:51:7b:21:ef:b0: 38:d2:8c:d5:75:c7:7c:44:2a:44:65:08:a8:c0:87: 32:f1:5f:0d:54:85:ac:f2:00:9c:2d:aa:0b:88:df: 12:66:64:f8:c4:33:4a:6a:59:5b:c8:99:ab:da:f9: de:c0:c7:28:b8:30:ff:01:16:81:4b:57:14:7d:4b: c9:60:a1:cb:5a:f2:f1:78:29:60:f2:29:ca:22:52: 54:bf:59:b3:92:44:ea:9b:c9:2d:24:8c:b2:f6:01: 1e:fd:fd:f0:fc:d1:98:5c:3b:40:cf:6b:ca:c9:70: f2:62:fe:07:9d:7c:c5:46:56:36:a4:c2:ee:48:35: 23:1a:62:f5:19:bc:c6:b8:d0:f1:de:ea:69:54:88: 2e:f8:51:23:b0:91:3c:e9:16:5c:5b:50:02:20:68: c7:4f:0b:fb:6b:74:89:6b:69:7b:24:35:76:a0:6e: 6a:c6:04:c7:6b:d0:b6:cd:3e:28:a9:aa:13:fc:42: 94:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:EA:3E:88:DE:3F:7B:BA:60:CA:03:C8:41:8F:57:53:61:D1:7F:E5 X509v3 Authority Key Identifier: keyid:AA:B2:D2:09:11:E6:7E:2C:3A:35:C7:01:C8:76:5A:68:5B:50:0E:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135B24/3BA691A8F83D11E8B0EC3448C4F9AE02/qrLSCRHmfiw6NccByHZaaFtQDsc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrLSCRHmfiw6NccByHZaaFtQDsc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135B24/3BA691A8F83D11E8B0EC3448C4F9AE02/qrLSCRHmfiw6NccByHZaaFtQDsc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c6:da:8c:76:2b:e2:b3:b9:e6:6c:cd:f1:85:18:f4:6a:96:8e: 90:46:0c:f4:ab:d0:39:82:17:14:0b:73:5b:cd:2f:ac:e1:de: 52:6d:75:ea:21:9b:35:8a:f6:3e:a8:17:99:83:16:14:e8:18: 08:01:e3:4a:0b:2d:b9:45:e7:9a:26:a4:07:fd:42:ad:6a:f8: 64:3b:b3:68:06:8a:bc:63:26:db:16:82:ba:98:d8:53:4c:eb: e0:ad:1f:b5:4b:db:07:35:88:82:06:ca:43:3c:b4:d4:0a:c5: e5:16:d5:41:cc:7e:04:c4:34:7b:0f:71:55:f1:11:c2:6b:be: 3b:ae:3c:84:e4:f3:1d:58:a8:6a:3f:5c:dd:40:c7:c1:81:9a: c5:2c:f0:0b:8b:83:6c:06:27:09:2d:fc:0e:ee:b5:60:b1:7d: ec:f7:ca:2a:37:16:9b:65:da:41:75:fc:07:04:56:cd:fb:02: 36:33:b3:22:6a:32:84:be:d5:48:f0:fa:71:4a:ed:0e:b0:7e: 4e:f1:6d:cd:58:05:65:48:59:d7:89:47:bf:62:ae:18:fa:dd: 78:46:53:ad:93:81:5c:87:c4:02:21:bc:4f:f2:87:dd:2c:e1: ac:c7:9f:a7:33:d0:31:b8:1b:60:67:0a:14:73:16:2e:4e:4d: 96:fd:9e:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEYwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzVCMjQxMTAvBgNVBAUTKEFBQjJEMjA5MTFFNjdFMkMzQTM1QzcwMUM4NzY1QTY4 NUI1MDBFQzcwHhcNMjUwNDI0MTcxMzI3WhcNMjUwNTAxMTcxMzI3WjAYMRYwFAYD VQQDEw02ODBhNzEzNy02MDUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz+N6NeSQTVi6UlJ+LI6DSI3+e/NPHUaVHqzz267WUVZw/WTe50vMrUjRWJL4 ZVcSxyMP9FSa40HBs1F9ejQLBNkKaSVcUXsh77A40ozVdcd8RCpEZQiowIcy8V8N VIWs8gCcLaoLiN8SZmT4xDNKallbyJmr2vnewMcouDD/ARaBS1cUfUvJYKHLWvLx eClg8inKIlJUv1mzkkTqm8ktJIyy9gEe/f3w/NGYXDtAz2vKyXDyYv4HnXzFRlY2 pMLuSDUjGmL1GbzGuNDx3uppVIgu+FEjsJE86RZcW1ACIGjHTwv7a3SJa2l7JDV2 oG5qxgTHa9C2zT4oqaoT/EKUQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCXqPoje P3u6YMoDyEGPV1Nh0X/lMB8GA1UdIwQYMBaAFKqy0gkR5n4sOjXHAch2WmhbUA7H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNUIyNC8zQkE2OTFBOEY4 M0QxMUU4QjBFQzM0NDhDNEY5QUUwMi9xckxTQ1JIbWZpdzZOY2NCeUhaYWFGdFFE c2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FyTFNDUkhtZml3Nk5jY0J5SFphYUZ0UURzYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NUIyNC8zQkE2OTFBOEY4M0QxMUU4QjBFQzM0NDhDNEY5QUUwMi9xckxTQ1JIbWZp dzZOY2NCeUhaYWFGdFFEc2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDG2ox2K+KzueZszfGFGPRqlo6QRgz0q9A5ghcUC3NbzS+s4d5SbXXq IZs1ivY+qBeZgxYU6BgIAeNKCy25ReeaJqQH/UKtavhkO7NoBoq8YybbFoK6mNhT TOvgrR+1S9sHNYiCBspDPLTUCsXlFtVBzH4ExDR7D3FV8RHCa747rjyE5PMdWKhq P1zdQMfBgZrFLPALi4NsBicJLfwO7rVgsX3s98oqNxabZdpBdfwHBFbN+wI2M7Mi ajKEvtVI8PpxSu0OsH5O8W3NWAVlSFnXiUe/Yq4Y+t14RlOtk4Fch8QCIbxP8ofd LOGsx5+nM9AxuBtgZwoUcxYuTk2W/Z4t -----END CERTIFICATE-----Generated at Sat Apr 26 16:34:47 2025 by rpki-client