$ rpki-client -vvf rpki.apnic.net/member_repository/A917FDF3/B3A852B2B5D911EAA6B88754C4F9AE02/qz22NdhTYB5LpVUAZxIB2Jb-za0.mft File: qz22NdhTYB5LpVUAZxIB2Jb-za0.mft (raw, json) Hash identifier: KakK/Oen7eZEeAnrkZ05d2fQuLzVJzSsD0orFU2RMaU= Subject key identifier: BB:0F:E7:9B:24:6B:C4:BB:30:5D:CD:54:7C:CA:0D:B1:C2:80:27:B8 Authority key identifier: AB:3D:B6:35:D8:53:60:1E:4B:A5:55:00:67:12:01:D8:96:FE:CD:AD Certificate issuer: /CN=A917FDF3/serialNumber=AB3DB635D853601E4BA55500671201D896FECDAD Certificate serial: 08AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qz22NdhTYB5LpVUAZxIB2Jb-za0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917FDF3/B3A852B2B5D911EAA6B88754C4F9AE02/qz22NdhTYB5LpVUAZxIB2Jb-za0.mft Manifest number: 08A7 Signing time: Thu 24 Apr 2025 20:24:31 +0000 Manifest this update: Thu 24 Apr 2025 20:24:31 +0000 Manifest next update: Thu 01 May 2025 20:24:31 +0000 Files and hashes: 1: qz22NdhTYB5LpVUAZxIB2Jb-za0.crl (hash: wuijVDSLrSmGsHOJ3kjQUh3OzvHvTmgiVWMXZfpNBwc=) 2: 0FE0AF42B5DB11EA9DA12556C4F9AE02.roa (hash: Fs5lIXhoeLDLVgaGXIOh275fjXBBfxZsCamTtOxAxUw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917FDF3/B3A852B2B5D911EAA6B88754C4F9AE02/qz22NdhTYB5LpVUAZxIB2Jb-za0.crl rsync://rpki.apnic.net/member_repository/A917FDF3/B3A852B2B5D911EAA6B88754C4F9AE02/qz22NdhTYB5LpVUAZxIB2Jb-za0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qz22NdhTYB5LpVUAZxIB2Jb-za0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:24:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2223 (0x8af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917FDF3, serialNumber=AB3DB635D853601E4BA55500671201D896FECDAD Validity Not Before: Apr 24 20:24:31 2025 GMT Not After : May 1 20:24:31 2025 GMT Subject: CN=680a9dff-b01a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:77:62:e4:6f:2f:cf:a6:96:88:66:b4:fd:62: a2:60:39:46:b7:cd:7d:c4:93:29:90:7b:71:e2:52: 1f:60:bc:67:40:4c:5e:50:34:b2:7b:47:4b:84:77: bb:60:9e:e3:9a:62:4f:35:f0:ce:a8:bd:f1:9d:ea: bf:6b:9a:cc:dd:5f:d6:44:32:c3:69:df:5b:ef:bb: f6:f0:a2:54:c9:73:7b:8d:69:f5:1a:f1:42:c7:89: d8:36:8d:7b:10:7b:46:9e:a6:36:0c:1f:df:3d:05: 91:80:71:be:7a:be:d4:eb:03:eb:31:a5:1c:f6:b3: 0b:cd:ce:5e:f5:c3:c5:1d:a9:d8:83:6b:52:19:25: f4:80:90:92:de:02:2b:2d:7c:8e:75:e5:1d:39:44: 63:bf:a1:e7:43:fc:d1:15:ff:79:67:4a:7d:e6:48: a8:20:40:f0:ee:1b:3e:f3:b7:40:14:11:48:6f:d7: c5:e3:97:4f:83:dc:41:5d:a3:db:6d:51:ee:ee:ff: bc:88:cc:aa:15:df:c5:c3:2b:d4:9b:d6:a9:9a:2a: 25:0f:e0:c4:5d:f3:65:bc:f7:c6:dd:7f:e3:7c:8d: ba:42:c5:74:53:2b:6c:13:1f:40:30:e2:42:7b:af: 9f:c0:85:b1:dd:bb:a5:ec:98:60:9b:f9:c2:a2:4c: cd:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:0F:E7:9B:24:6B:C4:BB:30:5D:CD:54:7C:CA:0D:B1:C2:80:27:B8 X509v3 Authority Key Identifier: keyid:AB:3D:B6:35:D8:53:60:1E:4B:A5:55:00:67:12:01:D8:96:FE:CD:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917FDF3/B3A852B2B5D911EAA6B88754C4F9AE02/qz22NdhTYB5LpVUAZxIB2Jb-za0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qz22NdhTYB5LpVUAZxIB2Jb-za0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FDF3/B3A852B2B5D911EAA6B88754C4F9AE02/qz22NdhTYB5LpVUAZxIB2Jb-za0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:e1:b4:a8:3a:1b:a5:dc:5a:a2:75:d4:50:22:67:6d:a8:9f: 92:1e:c5:21:bb:15:fe:18:2a:9e:03:66:95:fd:a5:13:2b:6b: d8:a8:1a:89:b8:cc:aa:75:3f:00:89:cc:90:40:fa:71:5e:d1: 3c:a0:9f:9d:51:51:1b:f7:f2:75:e1:45:e0:1f:d8:2d:2d:da: 76:42:10:9a:73:a6:38:0c:db:ad:35:04:c6:81:e6:a8:bb:fc: 38:49:9d:37:f8:3e:b1:c8:6b:ba:fa:03:31:2f:33:88:72:fe: 8f:56:67:f1:b0:f1:87:4f:1a:8f:bd:e9:02:7d:98:1e:02:ff: 19:df:9c:d8:d0:e8:2d:2f:6f:47:84:73:dd:48:50:77:1d:ca: 01:ee:26:c5:ca:bb:67:60:d4:6d:37:46:d4:ed:0b:6c:a8:c9: 36:18:b2:f9:68:8f:fe:1f:b3:2d:41:a3:de:81:71:f2:fc:12: fc:e9:b6:dc:dd:8b:54:8e:33:0b:93:90:62:9a:6e:a8:62:c4: b3:f5:31:91:be:87:a5:55:9e:da:16:95:58:81:5f:0a:fa:f6: 7a:77:15:8f:30:8d:f4:19:da:86:11:13:48:0a:cb:92:56:4f: cb:00:61:9b:de:f8:56:85:59:c7:d5:22:3e:28:3f:7c:6d:b7: ce:1a:3d:05 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCK8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0ZERjMxMTAvBgNVBAUTKEFCM0RCNjM1RDg1MzYwMUU0QkE1NTUwMDY3MTIwMUQ4 OTZGRUNEQUQwHhcNMjUwNDI0MjAyNDMxWhcNMjUwNTAxMjAyNDMxWjAYMRYwFAYD VQQDEw02ODBhOWRmZi1iMDFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA93di5G8vz6aWiGa0/WKiYDlGt819xJMpkHtx4lIfYLxnQExeUDSye0dLhHe7 YJ7jmmJPNfDOqL3xneq/a5rM3V/WRDLDad9b77v28KJUyXN7jWn1GvFCx4nYNo17 EHtGnqY2DB/fPQWRgHG+er7U6wPrMaUc9rMLzc5e9cPFHanYg2tSGSX0gJCS3gIr LXyOdeUdOURjv6HnQ/zRFf95Z0p95kioIEDw7hs+87dAFBFIb9fF45dPg9xBXaPb bVHu7v+8iMyqFd/FwyvUm9apmiolD+DEXfNlvPfG3X/jfI26QsV0UytsEx9AMOJC e6+fwIWx3bul7Jhgm/nCokzNrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLsP55sk a8S7MF3NVHzKDbHCgCe4MB8GA1UdIwQYMBaAFKs9tjXYU2AeS6VVAGcSAdiW/s2t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RkRGMy9CM0E4NTJCMkI1 RDkxMUVBQTZCODg3NTRDNEY5QUUwMi9xejIyTmRoVFlCNUxwVlVBWnhJQjJKYi16 YTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3F6MjJOZGhUWUI1THBWVUFaeElCMkpiLXphMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RkRGMy9CM0E4NTJCMkI1RDkxMUVBQTZCODg3NTRDNEY5QUUwMi9xejIyTmRoVFlC NUxwVlVBWnhJQjJKYi16YTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCt4bSoOhul3FqiddRQImdtqJ+SHsUhuxX+GCqeA2aV/aUTK2vYqBqJ uMyqdT8AicyQQPpxXtE8oJ+dUVEb9/J14UXgH9gtLdp2QhCac6Y4DNutNQTGgeao u/w4SZ03+D6xyGu6+gMxLzOIcv6PVmfxsPGHTxqPvekCfZgeAv8Z35zY0OgtL29H hHPdSFB3HcoB7ibFyrtnYNRtN0bU7QtsqMk2GLL5aI/+H7MtQaPegXHy/BL86bbc 3YtUjjMLk5Bimm6oYsSz9TGRvoelVZ7aFpVYgV8K+vZ6dxWPMI30GdqGERNICsuS Vk/LAGGb3vhWhVnH1SI+KD98bbfOGj0F -----END CERTIFICATE-----Generated at Sat Apr 26 04:19:04 2025 by rpki-client