$ rpki-client -vvf rpki.apnic.net/member_repository/A91840A8/67907734A19611EB8200CF09C4F9AE02/QL0p_yZodz0y7qDscGYCir7gy54.mft File: QL0p_yZodz0y7qDscGYCir7gy54.mft (raw, json) Hash identifier: YuctsiVZvOqO4YLoRHMrh7gbl5tsulqZFunNDXEj4Zc= Subject key identifier: FB:90:6F:37:83:AC:A1:4F:75:C6:B3:1C:A2:B8:E8:59:39:D3:4F:44 Authority key identifier: 40:BD:29:FF:26:68:77:3D:32:EE:A0:EC:70:66:02:8A:BE:E0:CB:9E Certificate issuer: /CN=A91840A8/serialNumber=40BD29FF2668773D32EEA0EC7066028ABEE0CB9E Certificate serial: 0600 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QL0p_yZodz0y7qDscGYCir7gy54.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91840A8/67907734A19611EB8200CF09C4F9AE02/QL0p_yZodz0y7qDscGYCir7gy54.mft Manifest number: 0600 Signing time: Thu 24 Apr 2025 22:41:13 +0000 Manifest this update: Thu 24 Apr 2025 22:41:13 +0000 Manifest next update: Thu 01 May 2025 22:41:13 +0000 Files and hashes: 1: QL0p_yZodz0y7qDscGYCir7gy54.crl (hash: KmfMF7rG1Hg5JRwmtt2ZZkFvlfeuwLW2F2bRxSSUJEE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91840A8/67907734A19611EB8200CF09C4F9AE02/QL0p_yZodz0y7qDscGYCir7gy54.crl rsync://rpki.apnic.net/member_repository/A91840A8/67907734A19611EB8200CF09C4F9AE02/QL0p_yZodz0y7qDscGYCir7gy54.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QL0p_yZodz0y7qDscGYCir7gy54.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:41:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1536 (0x600) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91840A8, serialNumber=40BD29FF2668773D32EEA0EC7066028ABEE0CB9E Validity Not Before: Apr 24 22:41:13 2025 GMT Not After : May 1 22:41:13 2025 GMT Subject: CN=680abe09-c874 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:23:3b:ee:c9:de:c1:e0:46:e1:16:2e:04:da: 88:81:30:6f:37:a9:c5:32:27:60:79:31:f5:dc:ed: be:cd:8f:b3:e5:96:28:c0:14:24:4c:9c:ff:98:9a: 5c:ac:ee:d2:3b:ce:9e:50:0e:cd:ba:cc:4c:d8:e1: e9:75:38:12:39:78:29:ee:db:35:7f:e9:23:47:a7: 98:88:9c:75:fa:f2:a0:bd:03:88:94:3c:59:26:a4: 38:41:c2:18:1b:fe:8f:7b:9f:14:db:43:5d:54:ac: f7:f1:df:c4:6b:18:43:58:75:91:1c:de:5b:cc:ee: 73:1a:84:a0:40:fc:65:ae:7f:45:69:23:7f:26:e2: c9:ed:f8:c6:08:e8:fa:b3:33:68:02:2e:6b:1d:39: 14:3c:ee:8e:b0:97:4a:bc:26:b0:b0:7d:f8:99:5e: 43:de:9a:74:e3:88:41:71:3c:8d:93:b9:d4:2b:50: 4a:df:7e:f5:74:96:3c:20:42:3e:a7:66:70:33:4a: b4:e2:64:8f:3b:32:c2:06:09:bd:26:ee:83:e0:74: 09:74:59:80:70:d6:e2:59:57:37:96:ac:19:3e:b0: e4:94:92:df:bb:ba:15:cb:16:ff:a6:12:e6:f0:15: 78:a8:d4:08:e9:e2:1a:7f:77:b4:b7:7c:2f:0f:17: 47:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:90:6F:37:83:AC:A1:4F:75:C6:B3:1C:A2:B8:E8:59:39:D3:4F:44 X509v3 Authority Key Identifier: keyid:40:BD:29:FF:26:68:77:3D:32:EE:A0:EC:70:66:02:8A:BE:E0:CB:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91840A8/67907734A19611EB8200CF09C4F9AE02/QL0p_yZodz0y7qDscGYCir7gy54.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QL0p_yZodz0y7qDscGYCir7gy54.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91840A8/67907734A19611EB8200CF09C4F9AE02/QL0p_yZodz0y7qDscGYCir7gy54.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:d7:73:3a:5a:36:7a:fc:5f:9d:da:76:8b:55:de:90:d7:d5: a8:7f:ff:70:9b:a9:e2:fd:a6:b9:77:d3:b8:bf:94:dc:91:36: 03:09:c9:cd:67:76:4f:bf:61:11:8b:cf:5b:c5:07:fd:4f:56: 07:90:f9:25:08:81:47:da:e8:22:3f:9f:bc:9d:3b:6b:04:3b: 32:a7:f8:5c:e0:a1:b6:31:5e:82:19:8a:ab:b2:1e:ec:ac:f7: d1:66:51:f3:51:20:37:da:c1:39:52:6c:43:34:63:62:6e:ef: b7:4c:64:31:2f:cd:7d:bd:a4:a6:f5:d6:6e:58:1f:a5:8f:83: cf:9e:d4:b7:1c:38:51:37:6f:c1:cb:a7:88:be:f7:e1:49:c6: 96:a7:e5:74:6b:8d:a9:42:b6:21:58:9a:14:b1:fe:6a:0e:59: 93:9e:7b:ea:48:a9:89:b7:b0:f2:20:63:5f:3f:f4:82:ab:b3: 26:d3:0a:75:8c:48:55:d2:bd:9b:80:7f:69:6e:fc:22:58:50: 65:20:f2:2e:4b:70:fb:0d:8d:a8:04:2e:5a:cd:b2:88:20:44: 77:40:0d:9f:d9:d8:c1:1b:2f:a9:f8:e6:ce:5b:ba:42:ba:38: 00:90:e7:26:d7:88:bb:91:79:34:12:ac:df:20:cd:d2:13:5f: ba:53:f8:56 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBgAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQwQTgxMTAvBgNVBAUTKDQwQkQyOUZGMjY2ODc3M0QzMkVFQTBFQzcwNjYwMjhB QkVFMENCOUUwHhcNMjUwNDI0MjI0MTEzWhcNMjUwNTAxMjI0MTEzWjAYMRYwFAYD VQQDEw02ODBhYmUwOS1jODc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtyM77sneweBG4RYuBNqIgTBvN6nFMidgeTH13O2+zY+z5ZYowBQkTJz/mJpc rO7SO86eUA7NusxM2OHpdTgSOXgp7ts1f+kjR6eYiJx1+vKgvQOIlDxZJqQ4QcIY G/6Pe58U20NdVKz38d/EaxhDWHWRHN5bzO5zGoSgQPxlrn9FaSN/JuLJ7fjGCOj6 szNoAi5rHTkUPO6OsJdKvCawsH34mV5D3pp044hBcTyNk7nUK1BK3371dJY8IEI+ p2ZwM0q04mSPOzLCBgm9Ju6D4HQJdFmAcNbiWVc3lqwZPrDklJLfu7oVyxb/phLm 8BV4qNQI6eIaf3e0t3wvDxdHfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPuQbzeD rKFPdcazHKK46Fk5009EMB8GA1UdIwQYMBaAFEC9Kf8maHc9Mu6g7HBmAoq+4Mue MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDBBOC82NzkwNzczNEEx OTYxMUVCODIwMENGMDlDNEY5QUUwMi9RTDBwX3lab2R6MHk3cURzY0dZQ2lyN2d5 NTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1FMMHBfeVpvZHoweTdxRHNjR1lDaXI3Z3k1NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDBBOC82NzkwNzczNEExOTYxMUVCODIwMENGMDlDNEY5QUUwMi9RTDBwX3lab2R6 MHk3cURzY0dZQ2lyN2d5NTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBi13M6WjZ6/F+d2naLVd6Q19Wof/9wm6ni/aa5d9O4v5TckTYDCcnN Z3ZPv2ERi89bxQf9T1YHkPklCIFH2ugiP5+8nTtrBDsyp/hc4KG2MV6CGYqrsh7s rPfRZlHzUSA32sE5UmxDNGNibu+3TGQxL819vaSm9dZuWB+lj4PPntS3HDhRN2/B y6eIvvfhScaWp+V0a42pQrYhWJoUsf5qDlmTnnvqSKmJt7DyIGNfP/SCq7Mm0wp1 jEhV0r2bgH9pbvwiWFBlIPIuS3D7DY2oBC5azbKIIER3QA2f2djBGy+p+ObOW7pC ujgAkOcm14i7kXk0EqzfIM3SE1+6U/hW -----END CERTIFICATE-----Generated at Sat Apr 26 12:38:47 2025 by rpki-client