$ rpki-client -vvf rpki.apnic.net/member_repository/A914B45F/8CA20A1CAAD211EF9AA0EF80C4F9AE02/QRUiNGCj3frIOoL8YbK-nsYmwgw.mft File: QRUiNGCj3frIOoL8YbK-nsYmwgw.mft (raw, json) Hash identifier: 9lUBCNiHFlAxoyOOK4VtiusF0xSxv3gLQy8GIkkRdOQ= Subject key identifier: 8C:CC:C1:BE:EC:F3:CB:20:1F:01:11:0E:35:4E:7C:F0:85:25:DB:30 Authority key identifier: 41:15:22:34:60:A3:DD:FA:C8:3A:82:FC:61:B2:BE:9E:C6:26:C2:0C Certificate issuer: /CN=A914B45F/serialNumber=4115223460A3DDFAC83A82FC61B2BE9EC626C20C Certificate serial: 52 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QRUiNGCj3frIOoL8YbK-nsYmwgw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B45F/8CA20A1CAAD211EF9AA0EF80C4F9AE02/QRUiNGCj3frIOoL8YbK-nsYmwgw.mft Manifest number: 51 Signing time: Fri 25 Apr 2025 03:22:46 +0000 Manifest this update: Fri 25 Apr 2025 03:22:45 +0000 Manifest next update: Fri 02 May 2025 03:22:45 +0000 Files and hashes: 1: QRUiNGCj3frIOoL8YbK-nsYmwgw.crl (hash: CmnYartd7rN40T/elp4tt+2rt6Uu6NMJUsNnoPhHUlk=) 2: 2017BFC2B07211EF83629B37C4F9AE02.roa (hash: mN3+2+qtTy+oq/2mSPD3LwNlHAef4eKWai8tbwHg/2k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B45F/8CA20A1CAAD211EF9AA0EF80C4F9AE02/QRUiNGCj3frIOoL8YbK-nsYmwgw.crl rsync://rpki.apnic.net/member_repository/A914B45F/8CA20A1CAAD211EF9AA0EF80C4F9AE02/QRUiNGCj3frIOoL8YbK-nsYmwgw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QRUiNGCj3frIOoL8YbK-nsYmwgw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:22:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 82 (0x52) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B45F, serialNumber=4115223460A3DDFAC83A82FC61B2BE9EC626C20C Validity Not Before: Apr 25 03:22:45 2025 GMT Not After : May 2 03:22:45 2025 GMT Subject: CN=680b0006-79e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:9d:d7:1e:60:3e:1e:6a:99:b4:45:83:37:fc: 09:08:ba:e8:32:36:fc:fc:e5:20:45:68:80:67:1a: 10:33:2e:81:c1:11:cd:6e:e9:de:22:03:f8:29:c4: 4a:49:77:ee:0f:4b:38:7b:fe:07:da:ab:62:af:b3: a1:0a:a8:1a:95:9f:01:e5:fe:2f:d0:1e:d1:22:68: 66:3b:47:5d:38:8c:61:47:10:33:cd:21:37:57:37: 1d:38:cc:a9:ef:da:47:6c:7d:49:39:81:14:3f:b1: df:e1:75:f6:48:b6:b8:30:db:74:77:a8:11:dd:a4: 6e:b9:e7:7e:9d:12:6e:fd:b6:44:a9:0d:cf:df:2d: 64:71:67:b4:5b:4d:91:d4:e0:6d:0f:d1:51:ce:92: db:21:ae:3d:52:2c:e0:2e:d6:20:62:9f:ae:81:9a: bc:54:4f:43:7f:ce:c7:06:21:93:19:0f:d0:b7:a6: 2b:dc:bf:a7:74:71:67:3d:70:60:12:cd:6e:7a:4a: 41:2c:05:65:25:70:83:fb:b7:da:0a:30:e8:ae:30: 02:f1:3a:b3:42:34:7f:1f:db:8a:75:9b:d6:38:99: 64:0a:e7:48:38:02:27:6e:c5:ea:f9:c0:d2:7d:4e: c7:2f:92:1c:19:26:5b:c7:d4:3f:68:25:d0:c9:94: 1b:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:CC:C1:BE:EC:F3:CB:20:1F:01:11:0E:35:4E:7C:F0:85:25:DB:30 X509v3 Authority Key Identifier: keyid:41:15:22:34:60:A3:DD:FA:C8:3A:82:FC:61:B2:BE:9E:C6:26:C2:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B45F/8CA20A1CAAD211EF9AA0EF80C4F9AE02/QRUiNGCj3frIOoL8YbK-nsYmwgw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QRUiNGCj3frIOoL8YbK-nsYmwgw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B45F/8CA20A1CAAD211EF9AA0EF80C4F9AE02/QRUiNGCj3frIOoL8YbK-nsYmwgw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:45:e3:24:5d:ce:68:23:73:c3:7a:13:69:f7:4b:c6:01:00: fa:4e:d9:39:74:ef:5d:0b:02:33:c4:69:0c:9a:90:1c:c9:dd: cc:65:43:5a:ed:02:4e:f0:c5:87:1e:65:82:f4:1b:e8:2f:b0: fb:a4:f5:53:23:83:fc:8a:10:76:7a:3c:b4:76:3b:ca:70:b7: cf:38:a6:e0:c8:18:88:d5:33:09:95:c2:c4:85:9a:e7:0d:4b: 82:74:a9:16:b2:09:33:e3:1d:03:d3:fa:f5:7a:85:4e:67:8e: 80:83:b8:cf:67:51:13:8e:7d:3e:87:4f:8b:9f:ce:fc:99:4c: ef:c5:88:9d:f1:46:76:e5:fe:9f:d6:4b:68:2e:5d:b5:61:9e: 26:eb:88:1b:15:36:79:ea:f3:55:11:f9:9e:ff:6c:8f:17:e9: 77:8b:52:d2:42:db:4f:bf:a5:0a:74:33:11:14:e1:93:86:53: bd:e4:3f:52:75:48:0b:dd:6b:99:60:e6:96:6b:5c:65:7f:d0: f8:eb:5e:33:5f:d0:72:2f:c3:84:28:ee:81:66:8a:84:83:14: a6:3e:3c:c7:ed:94:6e:59:28:f6:0b:c4:81:c4:d2:73:a1:6b: 12:ae:15:0d:f3:ad:35:ce:71:2f:b3:1c:cb:d9:db:7c:52:dc: cc:8b:41:91 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 QjQ1RjExMC8GA1UEBRMoNDExNTIyMzQ2MEEzRERGQUM4M0E4MkZDNjFCMkJFOUVD NjI2QzIwQzAeFw0yNTA0MjUwMzIyNDVaFw0yNTA1MDIwMzIyNDVaMBgxFjAUBgNV BAMTDTY4MGIwMDA2LTc5ZTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCyndceYD4eapm0RYM3/AkIuugyNvz85SBFaIBnGhAzLoHBEc1u6d4iA/gpxEpJ d+4PSzh7/gfaq2Kvs6EKqBqVnwHl/i/QHtEiaGY7R104jGFHEDPNITdXNx04zKnv 2kdsfUk5gRQ/sd/hdfZItrgw23R3qBHdpG65536dEm79tkSpDc/fLWRxZ7RbTZHU 4G0P0VHOktshrj1SLOAu1iBin66BmrxUT0N/zscGIZMZD9C3pivcv6d0cWc9cGAS zW56SkEsBWUlcIP7t9oKMOiuMALxOrNCNH8f24p1m9Y4mWQK50g4Aiduxer5wNJ9 TscvkhwZJlvH1D9oJdDJlBtTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUjMzBvuzz yyAfAREONU588IUl2zAwHwYDVR0jBBgwFoAUQRUiNGCj3frIOoL8YbK+nsYmwgww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRCNDVGLzhDQTIwQTFDQUFE MjExRUY5QUEwRUY4MEM0RjlBRTAyL1FSVWlOR0NqM2ZySU9vTDhZYkstbnNZbXdn dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvUVJVaU5HQ2ozZnJJT29MOFliSy1uc1ltd2d3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRC NDVGLzhDQTIwQTFDQUFEMjExRUY5QUEwRUY4MEM0RjlBRTAyL1FSVWlOR0NqM2Zy SU9vTDhZYkstbnNZbXdndy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFRF4yRdzmgjc8N6E2n3S8YBAPpO2Tl0710LAjPEaQyakBzJ3cxlQ1rt Ak7wxYceZYL0G+gvsPuk9VMjg/yKEHZ6PLR2O8pwt884puDIGIjVMwmVwsSFmucN S4J0qRayCTPjHQPT+vV6hU5njoCDuM9nUROOfT6HT4ufzvyZTO/FiJ3xRnbl/p/W S2guXbVhnibriBsVNnnq81UR+Z7/bI8X6XeLUtJC20+/pQp0MxEU4ZOGU73kP1J1 SAvda5lg5pZrXGV/0PjrXjNf0HIvw4Qo7oFmioSDFKY+PMftlG5ZKPYLxIHE0nOh axKuFQ3zrTXOcS+zHMvZ23xS3MyLQZE= -----END CERTIFICATE-----Generated at Sat Apr 26 12:31:15 2025 by rpki-client