$ rpki-client -vvf rpki.apnic.net/member_repository/A9164860/6BEAE0887B3911EE9E91845FC4F9AE02/QP0nMwGov44nCXYsZPSuom0q4LQ.mft File: QP0nMwGov44nCXYsZPSuom0q4LQ.mft (raw, json) Hash identifier: zksWLjUQBaLwg+r0WGPRKs+3ihMDkvMBd8ts/Nsy6p0= Subject key identifier: 68:5D:6F:2A:05:A1:01:1B:34:7E:FE:9E:F3:E0:2A:CC:CD:DF:33:BB Authority key identifier: 40:FD:27:33:01:A8:BF:8E:27:09:76:2C:64:F4:AE:A2:6D:2A:E0:B4 Certificate issuer: /CN=A9164860/serialNumber=40FD273301A8BF8E2709762C64F4AEA26D2AE0B4 Certificate serial: 011D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QP0nMwGov44nCXYsZPSuom0q4LQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9164860/6BEAE0887B3911EE9E91845FC4F9AE02/QP0nMwGov44nCXYsZPSuom0q4LQ.mft Manifest number: 011A Signing time: Thu 24 Apr 2025 17:11:30 +0000 Manifest this update: Thu 24 Apr 2025 17:11:30 +0000 Manifest next update: Thu 01 May 2025 17:11:30 +0000 Files and hashes: 1: QP0nMwGov44nCXYsZPSuom0q4LQ.crl (hash: AFddLHmj2M2s9CUc4tVjYkqiZj+kxhqtDAUfvP1EQOM=) 2: 26BFE5FE841611EEB980955AC4F9AE02.roa (hash: mR7p6xLL+eywaq3IEYtE5q1FtrVRKFEpVD4lZkW4skg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9164860/6BEAE0887B3911EE9E91845FC4F9AE02/QP0nMwGov44nCXYsZPSuom0q4LQ.crl rsync://rpki.apnic.net/member_repository/A9164860/6BEAE0887B3911EE9E91845FC4F9AE02/QP0nMwGov44nCXYsZPSuom0q4LQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QP0nMwGov44nCXYsZPSuom0q4LQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:11:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 285 (0x11d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9164860, serialNumber=40FD273301A8BF8E2709762C64F4AEA26D2AE0B4 Validity Not Before: Apr 24 17:11:30 2025 GMT Not After : May 1 17:11:30 2025 GMT Subject: CN=680a70c2-bbb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:76:c0:8f:3d:c4:d9:ca:ee:de:65:3e:6b:ba: dc:93:80:36:2b:9c:7c:f2:4d:5b:a7:2d:68:19:35: 83:2a:f9:af:82:f8:8d:97:c2:25:38:6c:d1:df:ab: 2b:33:ef:d2:0e:5c:70:f8:86:56:9f:24:22:9c:00: 4e:6f:30:55:c7:5b:b8:11:03:f0:39:d9:db:70:2c: a2:e3:14:80:2a:b5:70:f1:93:e4:07:ae:78:d2:32: 39:f5:a6:5a:94:3d:a8:03:38:4d:3a:44:81:60:26: 89:8f:76:fc:e4:6d:95:77:74:74:a4:19:8a:c4:f8: eb:76:56:e4:df:c5:ab:cc:f2:6a:06:43:90:e1:a8: d3:5d:04:97:39:58:22:18:19:52:af:5d:17:85:7b: da:2f:ae:de:8a:7b:4e:a0:d9:aa:96:d3:84:64:e5: f3:9e:19:0a:cb:25:67:2d:0f:35:47:d0:db:6a:7b: b3:2b:ce:c5:4d:cf:4b:cd:54:78:da:f2:a6:53:0a: 95:c6:68:c2:8d:f2:9c:6e:35:d1:2e:30:ff:d2:2a: 51:3c:57:1e:89:a4:70:60:41:79:32:4c:07:ad:4d: 37:4c:cd:6e:7b:7b:5b:5d:38:1d:89:0a:95:dc:4f: 20:03:06:2b:4c:b3:51:ac:0f:12:7c:48:95:04:06: 39:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:5D:6F:2A:05:A1:01:1B:34:7E:FE:9E:F3:E0:2A:CC:CD:DF:33:BB X509v3 Authority Key Identifier: keyid:40:FD:27:33:01:A8:BF:8E:27:09:76:2C:64:F4:AE:A2:6D:2A:E0:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9164860/6BEAE0887B3911EE9E91845FC4F9AE02/QP0nMwGov44nCXYsZPSuom0q4LQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QP0nMwGov44nCXYsZPSuom0q4LQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164860/6BEAE0887B3911EE9E91845FC4F9AE02/QP0nMwGov44nCXYsZPSuom0q4LQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:f3:be:c2:33:9a:50:52:00:08:af:9e:c5:f2:f9:36:34:fd: f3:9e:f0:5a:b2:4e:d4:74:86:7a:fa:c5:6f:71:66:c7:ae:e1: 85:ec:a6:e2:51:7b:cd:03:98:d0:06:71:e2:ab:ab:30:4b:80: 0f:c5:ca:40:37:7e:ea:1b:59:37:fd:82:eb:c0:fc:1f:b8:c2: 1e:4a:7b:52:b8:38:ae:32:c1:61:a0:72:29:1f:44:40:99:43: e0:d6:e4:68:14:c7:a7:02:c5:b6:e5:7f:d8:93:12:06:77:ee: 94:29:29:00:81:f7:07:77:6f:5f:ff:b4:bb:31:e8:df:44:db: ff:9e:c0:5e:f1:24:75:83:25:bf:9c:5f:a3:fd:d5:25:28:bc: b1:87:e2:6f:ca:7b:0d:27:21:1f:1d:b6:48:43:20:f6:5b:cb: 8d:5f:a8:14:95:ba:5f:45:a7:b6:72:3b:6c:0a:2b:c0:d4:18: b9:de:20:b4:b4:0b:c5:d7:f3:02:db:5a:09:fe:9e:f2:f5:13: 4b:68:c5:0f:3c:ff:5e:32:31:a7:3e:8a:b3:8a:4c:a7:a5:53: 43:6c:f8:36:f3:ea:48:71:25:21:63:8e:46:64:e6:26:59:14: a9:82:65:a2:76:3b:f3:14:d3:b6:81:a1:97:cc:98:f0:8e:1b: f3:1f:92:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAR0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjQ4NjAxMTAvBgNVBAUTKDQwRkQyNzMzMDFBOEJGOEUyNzA5NzYyQzY0RjRBRUEy NkQyQUUwQjQwHhcNMjUwNDI0MTcxMTMwWhcNMjUwNTAxMTcxMTMwWjAYMRYwFAYD VQQDEw02ODBhNzBjMi1iYmIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw3bAjz3E2cru3mU+a7rck4A2K5x88k1bpy1oGTWDKvmvgviNl8IlOGzR36sr M+/SDlxw+IZWnyQinABObzBVx1u4EQPwOdnbcCyi4xSAKrVw8ZPkB6540jI59aZa lD2oAzhNOkSBYCaJj3b85G2Vd3R0pBmKxPjrdlbk38WrzPJqBkOQ4ajTXQSXOVgi GBlSr10XhXvaL67eintOoNmqltOEZOXznhkKyyVnLQ81R9DbanuzK87FTc9LzVR4 2vKmUwqVxmjCjfKcbjXRLjD/0ipRPFceiaRwYEF5MkwHrU03TM1ue3tbXTgdiQqV 3E8gAwYrTLNRrA8SfEiVBAY52wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGhdbyoF oQEbNH7+nvPgKszN3zO7MB8GA1UdIwQYMBaAFED9JzMBqL+OJwl2LGT0rqJtKuC0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDg2MC82QkVBRTA4ODdC MzkxMUVFOUU5MTg0NUZDNEY5QUUwMi9RUDBuTXdHb3Y0NG5DWFlzWlBTdW9tMHE0 TFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1FQMG5Nd0dvdjQ0bkNYWXNaUFN1b20wcTRMUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NDg2MC82QkVBRTA4ODdCMzkxMUVFOUU5MTg0NUZDNEY5QUUwMi9RUDBuTXdHb3Y0 NG5DWFlzWlBTdW9tMHE0TFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAn877CM5pQUgAIr57F8vk2NP3znvBask7UdIZ6+sVvcWbHruGF7Kbi UXvNA5jQBnHiq6swS4APxcpAN37qG1k3/YLrwPwfuMIeSntSuDiuMsFhoHIpH0RA mUPg1uRoFMenAsW25X/YkxIGd+6UKSkAgfcHd29f/7S7MejfRNv/nsBe8SR1gyW/ nF+j/dUlKLyxh+JvynsNJyEfHbZIQyD2W8uNX6gUlbpfRae2cjtsCivA1Bi53iC0 tAvF1/MC21oJ/p7y9RNLaMUPPP9eMjGnPoqzikynpVNDbPg28+pIcSUhY45GZOYm WRSpgmWidjvzFNO2gaGXzJjwjhvzH5L9 -----END CERTIFICATE-----Generated at Sat Apr 26 13:43:35 2025 by rpki-client