$ rpki-client -vvf rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.mft File: QBtCmQbJDqA-z8YbFbpO8SOQM3k.mft (raw, json) Hash identifier: 8/r1UqVnyXsEiUIfE2aVE2SO5Zk9KbX+YGSl7JD6cIs= Subject key identifier: 58:72:92:11:62:73:E1:6D:3E:0C:F5:05:A7:E9:A7:04:BF:89:C4:34 Authority key identifier: 40:1B:42:99:06:C9:0E:A0:3E:CF:C6:1B:15:BA:4E:F1:23:90:33:79 Certificate issuer: /CN=A9157D7A/serialNumber=401B429906C90EA03ECFC61B15BA4EF123903379 Certificate serial: 073B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBtCmQbJDqA-z8YbFbpO8SOQM3k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.mft Manifest number: 06C3 Signing time: Thu 24 Apr 2025 22:35:35 +0000 Manifest this update: Thu 24 Apr 2025 22:35:34 +0000 Manifest next update: Thu 01 May 2025 22:35:34 +0000 Files and hashes: 1: QBtCmQbJDqA-z8YbFbpO8SOQM3k.crl (hash: ejLTCQ10GgQ6gke5Q6LH1f11FoYPqeFfNKkw5jArYXA=) 2: 2E96A63A690A11EF9525E980C4F9AE02.roa (hash: E8TJXB5p3Bk6Mywr/JoQzqnkHpychLbxDlvay8pE/5g=) 3: BF070AB6C1BC11EEBAB7F25EC4F9AE02.roa (hash: gHO3ucDCMpaAi01yTk9v+DmdcMeSIsp2IE197EC8p+s=) 4: C186DD80331A11EC8F33C209C4F9AE02.roa (hash: XtqW7baviXAU6XqPk4n9ZbDubsg33KGDVEvxGrKpGog=) 5: 03BA8B36824411EF94479387C4F9AE02.roa (hash: Zg67mtsRPmH+mIuPO6H9TG0Bz8V1VI6Op+1VjZiZR1s=) 6: 5FD09C68393C11EFB8A9065BC4F9AE02.roa (hash: L3oo3WwbXDM/suf25S9ZfGKmbEMta5yJxrHpRj7RBoA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.crl rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBtCmQbJDqA-z8YbFbpO8SOQM3k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:35:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1851 (0x73b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157D7A, serialNumber=401B429906C90EA03ECFC61B15BA4EF123903379 Validity Not Before: Apr 24 22:35:34 2025 GMT Not After : May 1 22:35:34 2025 GMT Subject: CN=680abcb6-5da1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:24:ee:11:96:65:f6:c3:8c:b0:50:c1:0a:48: 7c:9f:f6:a8:2e:47:99:82:50:a5:31:2a:25:f7:bd: 53:51:03:88:a2:7a:d4:a7:76:c1:aa:a0:72:c9:b9: 56:21:d8:87:04:58:96:97:99:93:4d:cd:2e:bf:e7: 2c:f2:f3:0b:0f:34:c8:7d:d9:8f:64:69:e3:69:da: 8a:31:c3:16:22:bb:a8:58:b3:cc:3d:8d:2f:8f:bb: a0:fd:38:42:87:6f:b5:4c:5e:4c:6e:b3:4f:d5:85: 40:ad:b9:da:73:b0:f9:a3:35:0c:72:6e:28:8a:18: 5e:f1:36:97:63:23:cf:9f:e3:17:55:77:44:19:3d: e7:6d:73:a6:3d:11:9b:1e:68:be:3d:0a:2a:78:9b: 83:25:80:30:97:4b:d5:96:7f:79:ae:e8:41:8b:57: d0:ad:09:63:1f:3b:5e:92:65:cf:47:78:3d:7e:f7: 32:57:17:2e:7b:36:a2:4a:ac:6b:4e:27:c1:dc:21: a3:b9:27:be:da:d1:83:db:fe:c1:86:1c:f7:6f:e1: d1:79:00:b5:2e:2b:ec:a9:56:04:46:5b:a5:8f:81: 3d:78:f2:3d:f1:69:b6:52:e7:70:d9:87:d9:af:b3: 8f:ba:6d:4e:eb:99:e1:e4:63:48:35:f9:45:56:82: 1f:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:72:92:11:62:73:E1:6D:3E:0C:F5:05:A7:E9:A7:04:BF:89:C4:34 X509v3 Authority Key Identifier: keyid:40:1B:42:99:06:C9:0E:A0:3E:CF:C6:1B:15:BA:4E:F1:23:90:33:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBtCmQbJDqA-z8YbFbpO8SOQM3k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:44:6b:c5:d5:30:06:02:d9:ab:97:a5:b0:40:bb:7d:19:86: 71:a2:81:70:0c:10:4b:b5:d7:c6:d8:bd:6a:ee:60:e1:a0:41: bd:f7:7e:59:ce:e4:ec:a1:6c:5c:d1:8a:0e:f1:15:e9:41:de: d6:0d:a0:3b:b5:2b:0b:97:ca:70:54:54:7e:09:56:2c:53:c9: ec:fc:76:97:18:9c:b3:d5:3c:b2:1d:e9:4d:e8:0f:17:0f:6d: 53:6e:b2:44:55:d9:50:7a:e6:d7:27:e8:40:b4:ee:7a:30:2f: 25:2b:a6:60:2d:21:8a:c5:12:21:64:f0:15:d5:01:5e:c8:11: 4b:35:14:a8:a0:9d:24:c9:ae:0e:30:48:0e:ce:7f:ab:86:63: ee:ff:07:05:1c:1e:bf:79:0b:4a:14:48:53:17:fb:6c:29:1f: 36:7a:c1:96:d0:a7:ec:91:02:09:89:e2:a5:e5:19:d4:15:ce: 41:c8:c4:c8:b2:f7:46:9f:ef:07:00:3d:7e:42:4b:98:25:ea: 35:4d:2d:0a:74:c1:f0:24:f0:60:bd:2d:3f:4f:7b:28:83:38: 2a:15:45:48:a3:ee:d2:a2:b6:3e:36:19:12:99:96:9d:65:1b: 52:7e:08:9a:e2:4b:c3:41:99:7a:c8:f8:46:e4:51:9d:c4:4c: 01:1d:0b:cc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBzswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdEN0ExMTAvBgNVBAUTKDQwMUI0Mjk5MDZDOTBFQTAzRUNGQzYxQjE1QkE0RUYx MjM5MDMzNzkwHhcNMjUwNDI0MjIzNTM0WhcNMjUwNTAxMjIzNTM0WjAYMRYwFAYD VQQDEw02ODBhYmNiNi01ZGExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyiTuEZZl9sOMsFDBCkh8n/aoLkeZglClMSol971TUQOIonrUp3bBqqByyblW IdiHBFiWl5mTTc0uv+cs8vMLDzTIfdmPZGnjadqKMcMWIruoWLPMPY0vj7ug/ThC h2+1TF5MbrNP1YVArbnac7D5ozUMcm4oihhe8TaXYyPPn+MXVXdEGT3nbXOmPRGb Hmi+PQoqeJuDJYAwl0vVln95ruhBi1fQrQljHztekmXPR3g9fvcyVxcuezaiSqxr TifB3CGjuSe+2tGD2/7Bhhz3b+HReQC1LivsqVYERlulj4E9ePI98Wm2Uudw2YfZ r7OPum1O65nh5GNINflFVoIfGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFhykhFi c+FtPgz1BafppwS/icQ0MB8GA1UdIwQYMBaAFEAbQpkGyQ6gPs/GGxW6TvEjkDN5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0Q3QS81RERDQ0NDNjk5 MTUxMUVCOTY3MjcyNDNDNEY5QUUwMi9RQnRDbVFiSkRxQS16OFliRmJwTzhTT1FN M2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FCdENtUWJKRHFBLXo4WWJGYnBPOFNPUU0zay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 N0Q3QS81RERDQ0NDNjk5MTUxMUVCOTY3MjcyNDNDNEY5QUUwMi9RQnRDbVFiSkRx QS16OFliRmJwTzhTT1FNM2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdRGvF1TAGAtmrl6WwQLt9GYZxooFwDBBLtdfG2L1q7mDhoEG9935Z zuTsoWxc0YoO8RXpQd7WDaA7tSsLl8pwVFR+CVYsU8ns/HaXGJyz1TyyHelN6A8X D21TbrJEVdlQeubXJ+hAtO56MC8lK6ZgLSGKxRIhZPAV1QFeyBFLNRSooJ0kya4O MEgOzn+rhmPu/wcFHB6/eQtKFEhTF/tsKR82esGW0KfskQIJieKl5RnUFc5ByMTI svdGn+8HAD1+QkuYJeo1TS0KdMHwJPBgvS0/T3sogzgqFUVIo+7SorY+NhkSmZad ZRtSfgia4kvDQZl6yPhG5FGdxEwBHQvM -----END CERTIFICATE-----Generated at Sat Apr 26 05:05:56 2025 by rpki-client