$ rpki-client -vvf rpki.apnic.net/member_repository/A9146179/54E04716AA7C11EFA33BFD77C4F9AE02/QFAqSwwf9GgvUuNAZARERSh9S7g.mft File: QFAqSwwf9GgvUuNAZARERSh9S7g.mft (raw, json) Hash identifier: eINwrkFXflH3n9IKOb9xg1q9T8G3kiYhAqzjYoOQQvY= Subject key identifier: 8D:EF:A5:25:38:ED:2A:FB:5F:61:39:32:9E:DA:AB:C1:CF:7B:E8:34 Authority key identifier: 40:50:2A:4B:0C:1F:F4:68:2F:52:E3:40:64:04:44:45:28:7D:4B:B8 Certificate issuer: /CN=A9146179/serialNumber=40502A4B0C1FF4682F52E34064044445287D4BB8 Certificate serial: 50 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFAqSwwf9GgvUuNAZARERSh9S7g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146179/54E04716AA7C11EFA33BFD77C4F9AE02/QFAqSwwf9GgvUuNAZARERSh9S7g.mft Manifest number: 4F Signing time: Fri 25 Apr 2025 06:16:10 +0000 Manifest this update: Fri 25 Apr 2025 06:16:10 +0000 Manifest next update: Fri 02 May 2025 06:16:10 +0000 Files and hashes: 1: QFAqSwwf9GgvUuNAZARERSh9S7g.crl (hash: k42ithu4GP3X5jPtiv3QIQwNRdoDvpsVJM7at7PIwSQ=) 2: D2158BC4AA7C11EF9A76A779C4F9AE02.roa (hash: LaPRc5QCE3D/egNmbBmNccMoDV83OnAl0IeSttB5Fwk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146179/54E04716AA7C11EFA33BFD77C4F9AE02/QFAqSwwf9GgvUuNAZARERSh9S7g.crl rsync://rpki.apnic.net/member_repository/A9146179/54E04716AA7C11EFA33BFD77C4F9AE02/QFAqSwwf9GgvUuNAZARERSh9S7g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFAqSwwf9GgvUuNAZARERSh9S7g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:16:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 80 (0x50) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146179, serialNumber=40502A4B0C1FF4682F52E34064044445287D4BB8 Validity Not Before: Apr 25 06:16:10 2025 GMT Not After : May 2 06:16:10 2025 GMT Subject: CN=680b28aa-1294 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:11:bb:61:78:fd:25:b1:ef:7e:44:75:e3:7b: f3:e7:81:78:b2:bb:36:bd:29:b8:98:60:3a:9a:43: c1:bc:86:c4:52:3e:7f:63:c9:6e:fb:e8:69:a1:dc: 4f:1c:e0:32:f3:71:d9:7d:a5:90:e6:23:84:c4:21: ea:d2:66:3f:90:68:e5:4c:c7:5e:51:dd:62:d4:ca: c3:dd:48:9b:7c:73:0a:b5:e8:53:70:92:4d:da:50: f5:18:0d:fa:12:3a:5f:a2:26:70:5a:c9:26:15:a4: cb:0b:52:7b:51:02:29:10:4b:1a:89:48:55:b2:bc: b9:09:99:d5:11:ed:31:3d:d5:fe:2a:bc:d0:e4:38: 1d:b0:e8:f1:c4:f7:54:e5:78:de:b8:38:14:81:6a: a7:db:26:ee:d1:12:dd:ee:3d:94:31:1a:cf:27:f9: 6e:1c:9c:a3:4f:67:cf:0c:6b:be:94:a6:f7:99:7d: df:e6:f4:8f:4a:53:94:98:ea:e5:a2:af:3a:63:78: 76:45:9e:b4:e2:52:99:2e:8a:70:f8:bc:1c:60:da: 9b:52:22:c8:68:9d:fa:10:86:f3:3a:02:1a:9e:c6: d7:02:b0:9f:a9:45:ae:cf:e5:48:a2:b5:53:8c:1b: d2:cb:28:bd:74:b4:fe:e9:d2:76:50:28:14:ab:4d: 0a:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:EF:A5:25:38:ED:2A:FB:5F:61:39:32:9E:DA:AB:C1:CF:7B:E8:34 X509v3 Authority Key Identifier: keyid:40:50:2A:4B:0C:1F:F4:68:2F:52:E3:40:64:04:44:45:28:7D:4B:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146179/54E04716AA7C11EFA33BFD77C4F9AE02/QFAqSwwf9GgvUuNAZARERSh9S7g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFAqSwwf9GgvUuNAZARERSh9S7g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146179/54E04716AA7C11EFA33BFD77C4F9AE02/QFAqSwwf9GgvUuNAZARERSh9S7g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:55:ee:aa:72:e1:b1:4c:2f:89:23:cd:98:c7:d4:be:1c:f5: 5c:48:7b:63:50:48:84:7b:55:bd:97:9a:6e:62:bd:97:4f:92: 91:8b:c6:e0:07:37:7c:44:e5:f7:c1:5f:cf:61:3b:54:a2:86: b0:d1:ac:e6:a4:54:a3:f4:9f:ef:59:fb:1a:3c:74:a2:ac:05: 73:1a:20:09:47:18:d5:5a:39:99:b8:67:05:51:f9:49:78:c3: cf:78:0f:b0:3d:23:24:32:82:60:9a:3a:9a:4f:5a:7c:47:bc: d9:ed:38:0a:36:a4:37:ec:a1:b2:63:ca:14:fe:46:37:a0:a3: 2f:3a:11:49:9b:3a:11:d9:4a:a7:db:9a:3b:ca:cd:32:c0:4f: 33:a9:40:06:81:79:06:08:98:b7:87:e9:7b:f6:bd:6d:b6:b7: ce:37:a0:ff:8b:b6:04:e4:0b:f3:0f:24:a4:14:d5:5c:f8:62: 3d:2a:d2:f7:c4:03:86:08:e7:0c:a1:0a:58:7e:fb:f4:a4:4c: ca:1a:79:26:36:e0:db:a7:c1:95:88:46:14:ec:75:57:a0:9a: ca:c2:e4:0e:16:eb:bf:59:89:09:80:cd:a6:29:8b:98:41:12: 8c:7c:fa:f7:a5:c2:57:24:e6:8d:ff:75:f5:43:ba:17:cf:8e: 4f:e8:d3:f2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NjE3OTExMC8GA1UEBRMoNDA1MDJBNEIwQzFGRjQ2ODJGNTJFMzQwNjQwNDQ0NDUy ODdENEJCODAeFw0yNTA0MjUwNjE2MTBaFw0yNTA1MDIwNjE2MTBaMBgxFjAUBgNV BAMTDTY4MGIyOGFhLTEyOTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCoEbtheP0lse9+RHXje/PngXiyuza9KbiYYDqaQ8G8hsRSPn9jyW776Gmh3E8c 4DLzcdl9pZDmI4TEIerSZj+QaOVMx15R3WLUysPdSJt8cwq16FNwkk3aUPUYDfoS Ol+iJnBaySYVpMsLUntRAikQSxqJSFWyvLkJmdUR7TE91f4qvNDkOB2w6PHE91Tl eN64OBSBaqfbJu7REt3uPZQxGs8n+W4cnKNPZ88Ma76UpveZfd/m9I9KU5SY6uWi rzpjeHZFnrTiUpkuinD4vBxg2ptSIshonfoQhvM6AhqextcCsJ+pRa7P5UiitVOM G9LLKL10tP7p0nZQKBSrTQoJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUje+lJTjt KvtfYTkyntqrwc976DQwHwYDVR0jBBgwFoAUQFAqSwwf9GgvUuNAZARERSh9S7gw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ2MTc5LzU0RTA0NzE2QUE3 QzExRUZBMzNCRkQ3N0M0RjlBRTAyL1FGQXFTd3dmOUdndlV1TkFaQVJFUlNoOVM3 Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUUZBcVN3d2Y5R2d2VXVOQVpBUkVSU2g5UzdnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ2 MTc5LzU0RTA0NzE2QUE3QzExRUZBMzNCRkQ3N0M0RjlBRTAyL1FGQXFTd3dmOUdn dlV1TkFaQVJFUlNoOVM3Zy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAG9V7qpy4bFML4kjzZjH1L4c9VxIe2NQSIR7Vb2Xmm5ivZdPkpGLxuAH N3xE5ffBX89hO1SihrDRrOakVKP0n+9Z+xo8dKKsBXMaIAlHGNVaOZm4ZwVR+Ul4 w894D7A9IyQygmCaOppPWnxHvNntOAo2pDfsobJjyhT+Rjegoy86EUmbOhHZSqfb mjvKzTLATzOpQAaBeQYImLeH6Xv2vW22t843oP+LtgTkC/MPJKQU1Vz4Yj0q0vfE A4YI5wyhClh++/SkTMoaeSY24NunwZWIRhTsdVegmsrC5A4W679ZiQmAzaYpi5hB Eox8+velwlck5o3/dfVDuhfPjk/o0/I= -----END CERTIFICATE-----Generated at Sat Apr 26 05:28:34 2025 by rpki-client