$ rpki-client -vvf rpki.apnic.net/member_repository/A91808E1/F90F9E887E8111ECB8873A7FC4F9AE02/QJ0BHok_2Mjws-isFGkqp7udAlk.mft File: QJ0BHok_2Mjws-isFGkqp7udAlk.mft (raw, json) Hash identifier: 1wJAZhHLTlt58WG5zhG18dNxQGNhvM3w0iWa18sxZfc= Subject key identifier: AD:89:66:CB:B0:AC:36:CA:22:47:20:61:BC:56:33:5B:09:A2:20:BE Authority key identifier: 40:9D:01:1E:89:3F:D8:C8:F0:B3:E8:AC:14:69:2A:A7:BB:9D:02:59 Certificate issuer: /CN=A91808E1/serialNumber=409D011E893FD8C8F0B3E8AC14692AA7BB9D0259 Certificate serial: 03DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJ0BHok_2Mjws-isFGkqp7udAlk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91808E1/F90F9E887E8111ECB8873A7FC4F9AE02/QJ0BHok_2Mjws-isFGkqp7udAlk.mft Manifest number: 03D6 Signing time: Fri 25 Apr 2025 00:20:43 +0000 Manifest this update: Fri 25 Apr 2025 00:20:43 +0000 Manifest next update: Fri 02 May 2025 00:20:43 +0000 Files and hashes: 1: QJ0BHok_2Mjws-isFGkqp7udAlk.crl (hash: i1YTc5/vQ0D6U8MyMf2MtAX9jiI5q6aFiz/U5om++hg=) 2: E7FE45667E8311ECA552B67FC4F9AE02.roa (hash: OijvdKYC8DjMphaEyFQ4TM5tLnVnkQ/IOeHSMr/fpgg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91808E1/F90F9E887E8111ECB8873A7FC4F9AE02/QJ0BHok_2Mjws-isFGkqp7udAlk.crl rsync://rpki.apnic.net/member_repository/A91808E1/F90F9E887E8111ECB8873A7FC4F9AE02/QJ0BHok_2Mjws-isFGkqp7udAlk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJ0BHok_2Mjws-isFGkqp7udAlk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:20:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 987 (0x3db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91808E1, serialNumber=409D011E893FD8C8F0B3E8AC14692AA7BB9D0259 Validity Not Before: Apr 25 00:20:43 2025 GMT Not After : May 2 00:20:43 2025 GMT Subject: CN=680ad55b-6540 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:bf:f3:bc:0f:d3:6c:7b:0a:a8:80:c2:11:75: e8:bb:ef:47:c0:6b:93:10:6f:b6:89:c9:9d:ea:f1: 38:79:c1:52:29:5d:57:75:b0:3a:52:59:b9:c1:85: 1a:bf:56:24:3b:8b:d1:ab:4f:6c:e5:b2:16:ac:de: a4:1e:99:5b:7f:30:2d:c1:63:28:0a:86:84:d0:90: 41:37:21:f0:1c:d1:1f:34:65:98:fa:a6:fc:75:25: dc:15:c5:37:03:a1:ad:96:06:28:7c:25:9e:c5:a2: d9:fd:de:06:d9:ab:bb:b1:ee:04:04:cd:06:ad:d2: 0d:ee:a3:ab:1d:bb:48:55:b8:14:25:d0:c8:84:75: 39:ad:88:16:d3:fb:6d:35:c0:e0:35:0b:55:a9:87: 11:1f:5a:10:af:06:f6:20:b3:5d:03:c4:10:d7:bc: e3:70:d4:1c:c0:19:d5:7e:ab:98:93:12:0b:b8:5a: 08:04:cf:8a:34:1d:75:2d:84:7e:91:56:c9:ea:f4: 91:cb:6a:21:20:b3:5c:db:2f:aa:06:aa:e8:d8:75: f8:a5:95:1b:c1:39:9c:8e:11:5a:72:ee:6c:18:12: c8:e2:a7:ef:cb:9d:d0:10:84:8c:dd:c9:33:8a:77: 66:6a:3c:57:7f:ab:24:39:9e:f8:e8:c3:bc:ba:b9: 2e:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:89:66:CB:B0:AC:36:CA:22:47:20:61:BC:56:33:5B:09:A2:20:BE X509v3 Authority Key Identifier: keyid:40:9D:01:1E:89:3F:D8:C8:F0:B3:E8:AC:14:69:2A:A7:BB:9D:02:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91808E1/F90F9E887E8111ECB8873A7FC4F9AE02/QJ0BHok_2Mjws-isFGkqp7udAlk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJ0BHok_2Mjws-isFGkqp7udAlk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91808E1/F90F9E887E8111ECB8873A7FC4F9AE02/QJ0BHok_2Mjws-isFGkqp7udAlk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:d7:d4:bb:41:e2:48:53:d3:69:c9:10:6f:8d:be:f6:8d:50: 73:bc:cb:02:23:3d:a3:91:f5:bb:53:e9:b3:be:2f:8d:59:02: df:39:3f:bc:86:0e:f1:57:66:aa:64:9c:e6:97:e8:74:ca:3f: e6:8a:3c:8c:dc:65:67:c6:22:77:a4:f5:0b:bd:57:50:38:28: 99:2e:87:bd:92:cf:0e:74:48:d2:ed:24:8a:34:66:dc:18:ac: 2a:fd:6f:72:46:16:a5:39:93:51:90:7f:e8:57:2f:8f:99:3c: cc:36:cc:7d:fa:2a:6a:2d:8a:37:99:df:19:a0:f0:1e:d6:67: 93:9b:93:3f:42:0f:58:4d:0c:e6:6e:5c:1e:e8:1a:d7:20:3c: 5f:a2:33:0c:f3:2a:07:eb:aa:9f:3a:50:f3:7a:08:0e:fc:16: 53:6c:c4:ec:d7:cd:4d:81:3a:d0:62:30:b5:b9:27:25:54:78: 63:47:62:bc:24:d1:56:fb:e6:58:7c:6a:be:60:c8:cb:d2:ff: bc:5c:b8:d5:d6:87:ee:dc:7d:36:c2:0e:3c:c3:48:85:27:9a: 47:21:1e:9a:1e:7c:b1:a6:21:8c:6e:18:36:58:53:3e:e9:c2: ae:81:96:fc:60:f0:21:35:a6:b2:8f:35:bf:c8:df:e3:e7:ed: b9:ed:fe:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA9swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODA4RTExMTAvBgNVBAUTKDQwOUQwMTFFODkzRkQ4QzhGMEIzRThBQzE0NjkyQUE3 QkI5RDAyNTkwHhcNMjUwNDI1MDAyMDQzWhcNMjUwNTAyMDAyMDQzWjAYMRYwFAYD VQQDEw02ODBhZDU1Yi02NTQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3L/zvA/TbHsKqIDCEXXou+9HwGuTEG+2icmd6vE4ecFSKV1XdbA6Ulm5wYUa v1YkO4vRq09s5bIWrN6kHplbfzAtwWMoCoaE0JBBNyHwHNEfNGWY+qb8dSXcFcU3 A6GtlgYofCWexaLZ/d4G2au7se4EBM0GrdIN7qOrHbtIVbgUJdDIhHU5rYgW0/tt NcDgNQtVqYcRH1oQrwb2ILNdA8QQ17zjcNQcwBnVfquYkxILuFoIBM+KNB11LYR+ kVbJ6vSRy2ohILNc2y+qBqro2HX4pZUbwTmcjhFacu5sGBLI4qfvy53QEISM3ckz indmajxXf6skOZ746MO8urkuuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK2JZsuw rDbKIkcgYbxWM1sJoiC+MB8GA1UdIwQYMBaAFECdAR6JP9jI8LPorBRpKqe7nQJZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDhFMS9GOTBGOUU4ODdF ODExMUVDQjg4NzNBN0ZDNEY5QUUwMi9RSjBCSG9rXzJNandzLWlzRkdrcXA3dWRB bGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FKMEJIb2tfMk1qd3MtaXNGR2txcDd1ZEFsay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDhFMS9GOTBGOUU4ODdFODExMUVDQjg4NzNBN0ZDNEY5QUUwMi9RSjBCSG9rXzJN andzLWlzRkdrcXA3dWRBbGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAV19S7QeJIU9NpyRBvjb72jVBzvMsCIz2jkfW7U+mzvi+NWQLfOT+8 hg7xV2aqZJzml+h0yj/mijyM3GVnxiJ3pPULvVdQOCiZLoe9ks8OdEjS7SSKNGbc GKwq/W9yRhalOZNRkH/oVy+PmTzMNsx9+ipqLYo3md8ZoPAe1meTm5M/Qg9YTQzm blwe6BrXIDxfojMM8yoH66qfOlDzeggO/BZTbMTs181NgTrQYjC1uSclVHhjR2K8 JNFW++ZYfGq+YMjL0v+8XLjV1ofu3H02wg48w0iFJ5pHIR6aHnyxpiGMbhg2WFM+ 6cKugZb8YPAhNaayjzW/yN/j5+257f57 -----END CERTIFICATE-----Generated at Sat Apr 26 17:08:52 2025 by rpki-client