$ rpki-client -vvf rpki.apnic.net/member_repository/A918235E/9690EE0C9ED311EC8F48B974C4F9AE02/qu_cqSXayY_a0YyFf58d5YagUbY.mft File: qu_cqSXayY_a0YyFf58d5YagUbY.mft (raw, json) Hash identifier: eWSTM6M6HQKI3EYaUTWvl9pvL0KAxKKm07dt8BgDvq0= Subject key identifier: AB:4D:01:C7:F5:1E:86:A6:03:DE:D8:7F:35:51:DE:ED:5D:91:48:D1 Authority key identifier: AA:EF:DC:A9:25:DA:C9:8F:DA:D1:8C:85:7F:9F:1D:E5:86:A0:51:B6 Certificate issuer: /CN=A918235E/serialNumber=AAEFDCA925DAC98FDAD18C857F9F1DE586A051B6 Certificate serial: 0387 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qu_cqSXayY_a0YyFf58d5YagUbY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918235E/9690EE0C9ED311EC8F48B974C4F9AE02/qu_cqSXayY_a0YyFf58d5YagUbY.mft Manifest number: 0382 Signing time: Fri 25 Apr 2025 00:37:22 +0000 Manifest this update: Fri 25 Apr 2025 00:37:21 +0000 Manifest next update: Fri 02 May 2025 00:37:21 +0000 Files and hashes: 1: qu_cqSXayY_a0YyFf58d5YagUbY.crl (hash: o/LOA9oZx9PmOGUMZoE3FyvoArfnwfnXOE75vUIgEBY=) 2: 48E696FE9ED611ECAC3B1777C4F9AE02.roa (hash: wh4KvNLBK6XFgoR8FRnF/jwZCf/huqxHy9C0SYykY04=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918235E/9690EE0C9ED311EC8F48B974C4F9AE02/qu_cqSXayY_a0YyFf58d5YagUbY.crl rsync://rpki.apnic.net/member_repository/A918235E/9690EE0C9ED311EC8F48B974C4F9AE02/qu_cqSXayY_a0YyFf58d5YagUbY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qu_cqSXayY_a0YyFf58d5YagUbY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:37:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 903 (0x387) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918235E, serialNumber=AAEFDCA925DAC98FDAD18C857F9F1DE586A051B6 Validity Not Before: Apr 25 00:37:21 2025 GMT Not After : May 2 00:37:21 2025 GMT Subject: CN=680ad941-fce7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:16:bd:ca:f3:be:2e:2f:cf:5b:cb:4b:dd:59: 5d:f7:df:3b:2b:3a:0c:2e:55:f4:1a:98:85:d8:2a: d0:23:1f:00:f0:5a:82:8e:23:79:b1:fc:dd:22:85: 32:bd:75:c9:15:85:c4:2e:99:b8:43:70:e4:98:35: 85:36:cd:af:42:b0:e7:27:d2:42:e3:c6:db:20:62: e0:a0:98:68:38:39:97:f0:f2:0c:a7:c2:c1:23:c3: 6f:86:f7:20:1b:3a:c5:13:87:01:99:c3:f3:13:21: e7:28:f6:76:89:76:ba:37:0c:88:13:52:dd:41:dc: 45:f2:99:f9:cf:a9:80:7a:0b:d6:b1:f4:a6:c0:df: 66:fa:a0:51:63:e8:46:ba:bd:23:d7:3f:2c:2a:5d: 1d:1b:5e:24:c2:54:41:8a:a9:48:35:ad:92:79:04: ae:89:fa:41:6f:b4:5b:33:a2:2a:c9:0c:53:52:c9: 18:66:f9:38:50:bf:71:d0:d5:aa:22:82:19:f8:8c: b4:ea:1f:5b:3a:01:72:c7:c7:14:8e:4f:c6:2e:7e: bb:47:83:80:bb:fe:67:a9:f2:b2:b3:61:53:7a:87: f2:a9:ed:19:25:a7:89:34:41:a1:77:74:07:f6:df: 41:56:b2:7b:75:97:55:5d:98:12:97:84:81:18:75: 6f:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:4D:01:C7:F5:1E:86:A6:03:DE:D8:7F:35:51:DE:ED:5D:91:48:D1 X509v3 Authority Key Identifier: keyid:AA:EF:DC:A9:25:DA:C9:8F:DA:D1:8C:85:7F:9F:1D:E5:86:A0:51:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918235E/9690EE0C9ED311EC8F48B974C4F9AE02/qu_cqSXayY_a0YyFf58d5YagUbY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qu_cqSXayY_a0YyFf58d5YagUbY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918235E/9690EE0C9ED311EC8F48B974C4F9AE02/qu_cqSXayY_a0YyFf58d5YagUbY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:44:71:31:cd:2c:04:20:8e:0e:55:b7:73:56:41:6f:b7:51: d9:9a:7e:ad:68:15:17:d3:cb:64:e9:48:48:aa:0c:db:55:5f: 1f:4e:13:30:c7:c7:91:41:8d:db:6c:af:91:06:43:2e:0e:f4: eb:0f:77:06:95:56:27:de:de:b6:f2:7a:0c:05:a2:ea:4c:15: 01:fb:0d:62:1a:43:b6:1d:34:da:e1:de:ca:27:58:72:8f:d4: e1:e5:bf:5a:7a:73:16:dd:ea:51:04:47:07:dd:18:f1:97:4d: 3b:ef:66:40:5f:cf:84:30:03:5d:f2:55:bb:05:a0:08:86:44: 78:27:03:2b:db:06:9a:f1:02:5c:32:c4:a7:44:e7:d0:6f:ce: e9:51:b1:f8:3c:78:c4:0b:21:55:bc:dc:d5:bc:73:cb:d8:1e: bf:05:65:18:ac:61:2e:b8:8e:24:d0:4e:e1:97:ca:9a:0a:9c: 03:30:23:44:27:6c:e6:d2:26:e0:d4:1c:2a:13:96:11:19:94: cf:4b:77:fe:19:94:ed:3f:93:a1:95:96:f4:88:c5:b4:6d:c4: 66:27:d1:25:00:89:2f:ed:03:1b:bf:38:1b:ac:dc:a2:56:91: 1a:1f:19:72:6e:8b:a6:1e:c0:45:66:1d:67:99:f6:ab:83:0a: a6:e8:8c:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA4cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODIzNUUxMTAvBgNVBAUTKEFBRUZEQ0E5MjVEQUM5OEZEQUQxOEM4NTdGOUYxREU1 ODZBMDUxQjYwHhcNMjUwNDI1MDAzNzIxWhcNMjUwNTAyMDAzNzIxWjAYMRYwFAYD VQQDEw02ODBhZDk0MS1mY2U3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwBa9yvO+Li/PW8tL3Vld9987KzoMLlX0GpiF2CrQIx8A8FqCjiN5sfzdIoUy vXXJFYXELpm4Q3DkmDWFNs2vQrDnJ9JC48bbIGLgoJhoODmX8PIMp8LBI8Nvhvcg GzrFE4cBmcPzEyHnKPZ2iXa6NwyIE1LdQdxF8pn5z6mAegvWsfSmwN9m+qBRY+hG ur0j1z8sKl0dG14kwlRBiqlINa2SeQSuifpBb7RbM6IqyQxTUskYZvk4UL9x0NWq IoIZ+Iy06h9bOgFyx8cUjk/GLn67R4OAu/5nqfKys2FTeofyqe0ZJaeJNEGhd3QH 9t9BVrJ7dZdVXZgSl4SBGHVv1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKtNAcf1 HoamA97YfzVR3u1dkUjRMB8GA1UdIwQYMBaAFKrv3Kkl2smP2tGMhX+fHeWGoFG2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjM1RS85NjkwRUUwQzlF RDMxMUVDOEY0OEI5NzRDNEY5QUUwMi9xdV9jcVNYYXlZX2EwWXlGZjU4ZDVZYWdV YlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3F1X2NxU1hheVlfYTBZeUZmNThkNVlhZ1ViWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MjM1RS85NjkwRUUwQzlFRDMxMUVDOEY0OEI5NzRDNEY5QUUwMi9xdV9jcVNYYXlZ X2EwWXlGZjU4ZDVZYWdVYlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAnRHExzSwEII4OVbdzVkFvt1HZmn6taBUX08tk6UhIqgzbVV8fThMw x8eRQY3bbK+RBkMuDvTrD3cGlVYn3t628noMBaLqTBUB+w1iGkO2HTTa4d7KJ1hy j9Th5b9aenMW3epRBEcH3Rjxl00772ZAX8+EMANd8lW7BaAIhkR4JwMr2waa8QJc MsSnROfQb87pUbH4PHjECyFVvNzVvHPL2B6/BWUYrGEuuI4k0E7hl8qaCpwDMCNE J2zm0ibg1BwqE5YRGZTPS3f+GZTtP5OhlZb0iMW0bcRmJ9ElAIkv7QMbvzgbrNyi VpEaHxlyboumHsBFZh1nmfargwqm6IwI -----END CERTIFICATE-----Generated at Sat Apr 26 13:36:34 2025 by rpki-client