$ rpki-client -vvf rpki.apnic.net/member_repository/A915D6C2/F9C46FAC53A211EC9D5E615DC4F9AE02/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.mft File: QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.mft (raw, json) Hash identifier: HQLn+aDSDginlfoyCzl1jYeEJoUJ/GJRgbWve0iu590= Subject key identifier: 1C:07:90:83:93:0E:40:93:3D:79:BC:D4:A2:F6:C9:EB:61:DB:41:6E Authority key identifier: 42:B7:49:E1:EC:DB:E0:30:74:7F:8C:B5:74:7F:2D:73:A5:E4:24:54 Certificate issuer: /CN=A915D6C2/serialNumber=42B749E1ECDBE030747F8CB5747F2D73A5E42454 Certificate serial: 0452 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D6C2/F9C46FAC53A211EC9D5E615DC4F9AE02/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.mft Manifest number: 0447 Signing time: Fri 25 Apr 2025 00:02:19 +0000 Manifest this update: Fri 25 Apr 2025 00:02:18 +0000 Manifest next update: Fri 02 May 2025 00:02:18 +0000 Files and hashes: 1: QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.crl (hash: rbLqAFEsEVvAosRhMQuOK7o8OrRaNB+/IhNL64RkR6w=) 2: 58A4A3E2B73A11ED8A2A8964C4F9AE02.roa (hash: xz+NY0PKDA1h31JonPA24zzAghWJ7xvhqwh0rxa8hB0=) 3: 5808B946B73A11ED8A2A8964C4F9AE02.roa (hash: XeoWUyV8cBersz5ERZwPilXowKBP6ZkIQoJiUYARqzE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D6C2/F9C46FAC53A211EC9D5E615DC4F9AE02/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.crl rsync://rpki.apnic.net/member_repository/A915D6C2/F9C46FAC53A211EC9D5E615DC4F9AE02/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:02:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1106 (0x452) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D6C2, serialNumber=42B749E1ECDBE030747F8CB5747F2D73A5E42454 Validity Not Before: Apr 25 00:02:18 2025 GMT Not After : May 2 00:02:18 2025 GMT Subject: CN=680ad10a-afd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:3f:22:e6:97:25:40:df:93:5f:4b:4c:71:6b: 35:86:09:83:5b:49:1c:54:d4:cb:41:e2:67:e1:27: a2:40:60:42:1c:d3:f3:27:db:42:5e:c3:8f:dc:07: 32:fa:dc:10:5b:5d:72:d1:93:60:74:6f:15:23:f2: 88:5c:60:43:a9:ed:dd:8e:03:f7:27:e9:90:3c:d4: e9:89:ad:87:0b:b6:90:b3:b9:eb:38:c5:be:69:c4: 97:58:be:de:95:d7:4d:aa:12:a6:2d:d6:57:77:78: b4:18:24:20:d6:8c:75:a8:25:d5:f7:26:65:ae:6d: 44:94:b3:57:62:46:09:1d:40:a2:44:fb:a1:dd:8b: 9e:2d:0a:f3:d8:cc:e4:14:8c:73:a3:0d:9a:32:bb: 06:f5:a3:9f:6e:9e:c9:9e:7c:b6:49:0b:97:54:29: 83:05:af:03:24:5d:07:56:77:0c:fb:78:a4:7a:1b: 1f:02:94:71:8d:f2:88:a3:95:2f:79:f7:f4:7e:79: 33:52:94:67:f3:c6:91:30:50:7c:ec:00:5b:5a:df: 8d:c3:68:29:04:a0:f2:03:6a:4d:5e:ec:7e:c3:94: 04:f9:1e:13:56:ef:21:d0:a3:30:56:10:cf:dc:9b: 5d:63:48:81:4a:f9:1c:f8:04:a1:50:78:a9:32:ad: a7:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:07:90:83:93:0E:40:93:3D:79:BC:D4:A2:F6:C9:EB:61:DB:41:6E X509v3 Authority Key Identifier: keyid:42:B7:49:E1:EC:DB:E0:30:74:7F:8C:B5:74:7F:2D:73:A5:E4:24:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D6C2/F9C46FAC53A211EC9D5E615DC4F9AE02/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D6C2/F9C46FAC53A211EC9D5E615DC4F9AE02/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:38:2e:63:f6:3e:e8:78:c0:50:c7:f5:7f:d1:94:dd:09:ce: bc:74:95:a2:dc:b4:08:12:fa:ea:74:6f:ad:49:9f:6f:ed:32: f0:3b:6e:5d:63:c2:75:c8:b1:86:44:49:26:3b:da:5a:45:d1: 0c:2f:4f:50:10:cd:e2:14:bd:f4:b8:e0:b6:a7:3d:bd:9f:61: d6:11:16:31:cc:64:dd:0d:f2:21:82:7e:3f:29:e9:db:7a:c2: 55:e6:23:bc:53:20:66:9c:b7:6f:5b:bd:56:b8:31:8b:a9:16: 76:0e:af:b0:d8:78:49:11:b2:30:78:67:1b:cc:8b:19:cc:3e: d6:9a:ec:45:86:2d:7a:b6:d2:9c:72:0e:f5:f5:35:2e:e5:9d: e3:7b:4f:bf:21:34:39:5c:f6:aa:d2:f2:6b:8a:aa:14:ee:da: 45:03:ad:62:38:b6:ee:94:0f:2c:23:cf:84:5c:c4:6d:01:8a: 98:a8:77:01:27:c1:88:24:11:45:be:b6:a1:0a:fc:49:96:29: 46:22:4f:78:e2:5e:ae:9f:34:63:60:bb:b0:87:51:bc:dd:72: 67:a8:a4:76:df:c5:f4:68:4b:bf:33:21:92:75:56:c6:73:88: 3f:64:63:4b:96:1c:de:ee:92:88:7b:93:ad:d0:3e:d5:3c:a3: 16:75:07:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBFIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQ2QzIxMTAvBgNVBAUTKDQyQjc0OUUxRUNEQkUwMzA3NDdGOENCNTc0N0YyRDcz QTVFNDI0NTQwHhcNMjUwNDI1MDAwMjE4WhcNMjUwNTAyMDAwMjE4WjAYMRYwFAYD VQQDEw02ODBhZDEwYS1hZmQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwT8i5pclQN+TX0tMcWs1hgmDW0kcVNTLQeJn4SeiQGBCHNPzJ9tCXsOP3Acy +twQW11y0ZNgdG8VI/KIXGBDqe3djgP3J+mQPNTpia2HC7aQs7nrOMW+acSXWL7e lddNqhKmLdZXd3i0GCQg1ox1qCXV9yZlrm1ElLNXYkYJHUCiRPuh3YueLQrz2Mzk FIxzow2aMrsG9aOfbp7Jnny2SQuXVCmDBa8DJF0HVncM+3ikehsfApRxjfKIo5Uv eff0fnkzUpRn88aRMFB87ABbWt+Nw2gpBKDyA2pNXux+w5QE+R4TVu8h0KMwVhDP 3JtdY0iBSvkc+AShUHipMq2n3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBwHkIOT DkCTPXm81KL2yeth20FuMB8GA1UdIwQYMBaAFEK3SeHs2+AwdH+MtXR/LXOl5CRU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDZDMi9GOUM0NkZBQzUz QTIxMUVDOUQ1RTYxNURDNEY5QUUwMi9RcmRKNGV6YjREQjBmNHkxZEg4dGM2WGtK RlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FyZEo0ZXpiNERCMGY0eTFkSDh0YzZYa0pGUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDZDMi9GOUM0NkZBQzUzQTIxMUVDOUQ1RTYxNURDNEY5QUUwMi9RcmRKNGV6YjRE QjBmNHkxZEg4dGM2WGtKRlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdOC5j9j7oeMBQx/V/0ZTdCc68dJWi3LQIEvrqdG+tSZ9v7TLwO25d Y8J1yLGGREkmO9paRdEML09QEM3iFL30uOC2pz29n2HWERYxzGTdDfIhgn4/Kenb esJV5iO8UyBmnLdvW71WuDGLqRZ2Dq+w2HhJEbIweGcbzIsZzD7WmuxFhi16ttKc cg719TUu5Z3je0+/ITQ5XPaq0vJriqoU7tpFA61iOLbulA8sI8+EXMRtAYqYqHcB J8GIJBFFvrahCvxJlilGIk944l6unzRjYLuwh1G83XJnqKR238X0aEu/MyGSdVbG c4g/ZGNLlhze7pKIe5Ot0D7VPKMWdQct -----END CERTIFICATE-----Generated at Sat Apr 26 03:24:58 2025 by rpki-client