$ rpki-client -vvf rpki.apnic.net/member_repository/A91580E4/5C0C955008BC11F0BEB4F552C4F9AE02/QuOGLXRTXCypqrN6cZW1keruIeU.mft File: QuOGLXRTXCypqrN6cZW1keruIeU.mft (raw, json) Hash identifier: SQKwDXkZZWoI/rMY3VXmgZss/f1xoTVMKDl0GqEeWAw= Subject key identifier: 62:01:1A:07:60:95:F3:07:71:48:3B:AC:1A:B3:BC:10:76:58:77:63 Authority key identifier: 42:E3:86:2D:74:53:5C:2C:A9:AA:B3:7A:71:95:B5:91:EA:EE:21:E5 Certificate issuer: /CN=A91580E4/serialNumber=42E3862D74535C2CA9AAB37A7195B591EAEE21E5 Certificate serial: 13 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QuOGLXRTXCypqrN6cZW1keruIeU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91580E4/5C0C955008BC11F0BEB4F552C4F9AE02/QuOGLXRTXCypqrN6cZW1keruIeU.mft Manifest number: 12 Signing time: Fri 25 Apr 2025 07:02:11 +0000 Manifest this update: Fri 25 Apr 2025 07:02:11 +0000 Manifest next update: Fri 02 May 2025 07:02:11 +0000 Files and hashes: 1: QuOGLXRTXCypqrN6cZW1keruIeU.crl (hash: Vuguqjay5Vx/V7dUVF19lVk024Mf4wrlcDROv+1diJ0=) 2: E78F55A408BC11F09C4FB471C4F9AE02.roa (hash: voOUCH7zRGxksu2fNV8QOYiL4kmVMcLs8S+aobdc9H8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91580E4/5C0C955008BC11F0BEB4F552C4F9AE02/QuOGLXRTXCypqrN6cZW1keruIeU.crl rsync://rpki.apnic.net/member_repository/A91580E4/5C0C955008BC11F0BEB4F552C4F9AE02/QuOGLXRTXCypqrN6cZW1keruIeU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QuOGLXRTXCypqrN6cZW1keruIeU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 07:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19 (0x13) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91580E4, serialNumber=42E3862D74535C2CA9AAB37A7195B591EAEE21E5 Validity Not Before: Apr 25 07:02:11 2025 GMT Not After : May 2 07:02:11 2025 GMT Subject: CN=680b3373-17f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:13:5b:ad:fd:18:78:2a:42:a6:77:67:4e:b0: 74:c5:3a:02:59:9f:10:4d:4a:67:ae:05:e1:46:5f: b4:fe:59:fa:a6:da:2b:2b:db:41:f5:82:58:e0:27: 82:57:aa:8f:8f:b5:14:4e:71:bd:5f:ea:88:60:6e: f3:e2:31:d8:af:15:b7:bd:fd:46:c4:99:b3:01:e5: fe:cf:a2:43:76:94:53:3b:7b:78:75:8a:d3:eb:f7: b4:e0:ec:0b:4f:f8:47:93:8a:d9:93:29:df:99:9e: 92:a0:06:61:29:bf:94:03:b3:ef:12:3b:7e:cc:e1: 79:d4:a1:92:05:15:8f:d2:02:69:9f:d8:14:e1:c1: 03:50:4c:28:b7:19:e0:8b:ac:72:f0:73:96:05:9c: 67:59:6e:d1:43:14:53:da:51:67:58:54:8a:01:ae: b3:71:96:fc:44:34:9f:b9:af:cd:f2:4c:78:16:17: f0:ee:be:c4:fc:35:a7:8a:ed:3c:93:ca:8a:86:31: a1:5d:25:2f:6b:d6:62:e0:62:c7:07:9a:2a:44:13: 91:6b:a2:e0:44:ab:79:14:6b:02:9d:15:a7:f4:9b: 2c:ca:21:cf:ab:61:1a:36:c1:d5:71:43:a4:f8:8d: 1e:34:26:43:05:eb:8e:76:f4:1c:1b:64:7e:5b:21: c2:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:01:1A:07:60:95:F3:07:71:48:3B:AC:1A:B3:BC:10:76:58:77:63 X509v3 Authority Key Identifier: keyid:42:E3:86:2D:74:53:5C:2C:A9:AA:B3:7A:71:95:B5:91:EA:EE:21:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91580E4/5C0C955008BC11F0BEB4F552C4F9AE02/QuOGLXRTXCypqrN6cZW1keruIeU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QuOGLXRTXCypqrN6cZW1keruIeU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91580E4/5C0C955008BC11F0BEB4F552C4F9AE02/QuOGLXRTXCypqrN6cZW1keruIeU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:b1:49:eb:8d:d9:0a:bf:b3:21:29:7d:d6:94:44:ee:97:47: 7e:27:58:cc:18:25:8b:10:c0:17:8a:58:a8:2e:7c:3b:ae:42: d6:d9:86:ac:cf:8f:53:d8:a7:4e:97:53:ff:19:36:78:ae:88: 20:1e:c1:36:cc:35:6a:c0:60:ee:74:63:d6:99:9b:7d:cb:92: 07:cd:cb:c7:26:e1:ab:bb:da:39:24:97:ce:32:97:b1:b8:51: 84:dc:24:7f:76:bd:2d:ed:e6:17:70:ba:8c:6b:e5:32:10:d9: f7:9c:79:b7:b0:89:46:d8:d1:61:45:cc:77:af:0c:56:c7:0b: b7:d4:ac:0e:35:ad:23:d0:8e:f9:10:12:d7:d6:9c:70:2b:85: 89:bc:a0:ba:d1:95:0c:59:3e:92:e4:c3:0f:2d:00:15:ca:e6: ad:6b:45:e7:27:7e:85:1b:cd:84:e7:78:06:e9:37:f9:6c:f4: e2:b0:7f:0d:26:c2:7c:74:79:3c:76:49:c8:98:4b:e8:b4:24: 9e:2a:de:42:6d:db:3e:9f:e5:56:53:8b:96:58:80:ef:82:dd: 68:18:d4:8c:59:0f:8d:f9:1d:c3:29:86:72:58:66:1a:2d:97: b5:c9:ff:87:25:f3:94:44:d1:8c:18:8c:3c:d1:5a:35:80:60: 70:50:ff:89 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 ODBFNDExMC8GA1UEBRMoNDJFMzg2MkQ3NDUzNUMyQ0E5QUFCMzdBNzE5NUI1OTFF QUVFMjFFNTAeFw0yNTA0MjUwNzAyMTFaFw0yNTA1MDIwNzAyMTFaMBgxFjAUBgNV BAMTDTY4MGIzMzczLTE3ZjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDoE1ut/Rh4KkKmd2dOsHTFOgJZnxBNSmeuBeFGX7T+Wfqm2isr20H1gljgJ4JX qo+PtRROcb1f6ohgbvPiMdivFbe9/UbEmbMB5f7PokN2lFM7e3h1itPr97Tg7AtP +EeTitmTKd+ZnpKgBmEpv5QDs+8SO37M4XnUoZIFFY/SAmmf2BThwQNQTCi3GeCL rHLwc5YFnGdZbtFDFFPaUWdYVIoBrrNxlvxENJ+5r83yTHgWF/DuvsT8NaeK7TyT yoqGMaFdJS9r1mLgYscHmipEE5FrouBEq3kUawKdFaf0myzKIc+rYRo2wdVxQ6T4 jR40JkMF64529BwbZH5bIcJTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUYgEaB2CV 8wdxSDusGrO8EHZYd2MwHwYDVR0jBBgwFoAUQuOGLXRTXCypqrN6cZW1keruIeUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU4MEU0LzVDMEM5NTUwMDhC QzExRjBCRUI0RjU1MkM0RjlBRTAyL1F1T0dMWFJUWEN5cHFyTjZjWlcxa2VydUll VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUXVPR0xYUlRYQ3lwcXJONmNaVzFrZXJ1SWVVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU4 MEU0LzVDMEM5NTUwMDhCQzExRjBCRUI0RjU1MkM0RjlBRTAyL1F1T0dMWFJUWEN5 cHFyTjZjWlcxa2VydUllVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAImxSeuN2Qq/syEpfdaURO6XR34nWMwYJYsQwBeKWKgufDuuQtbZhqzP j1PYp06XU/8ZNniuiCAewTbMNWrAYO50Y9aZm33LkgfNy8cm4au72jkkl84yl7G4 UYTcJH92vS3t5hdwuoxr5TIQ2fecebewiUbY0WFFzHevDFbHC7fUrA41rSPQjvkQ EtfWnHArhYm8oLrRlQxZPpLkww8tABXK5q1rRecnfoUbzYTneAbpN/ls9OKwfw0m wnx0eTx2SciYS+i0JJ4q3kJt2z6f5VZTi5ZYgO+C3WgY1IxZD435HcMphnJYZhot l7XJ/4cl85RE0YwYjDzRWjWAYHBQ/4k= -----END CERTIFICATE-----Generated at Sat Apr 26 15:19:08 2025 by rpki-client