$ rpki-client -vvf rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.mft File: qbzKbTTT1fHv-Lvng9SXc4E-Xvg.mft (raw, json) Hash identifier: BZ7iexckyO09aHvxfJ5DwVuaDkLBMtQioBEG6XoxFo0= Subject key identifier: 2B:E8:3B:2A:5F:F2:A0:67:C4:1D:19:32:21:00:2D:A3:B8:62:55:9B Authority key identifier: A9:BC:CA:6D:34:D3:D5:F1:EF:F8:BB:E7:83:D4:97:73:81:3E:5E:F8 Certificate issuer: /CN=A9186E8A/serialNumber=A9BCCA6D34D3D5F1EFF8BBE783D49773813E5EF8 Certificate serial: 079D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.mft Manifest number: 076B Signing time: Thu 24 Apr 2025 21:35:43 +0000 Manifest this update: Thu 24 Apr 2025 21:35:43 +0000 Manifest next update: Thu 01 May 2025 21:35:43 +0000 Files and hashes: 1: qbzKbTTT1fHv-Lvng9SXc4E-Xvg.crl (hash: FIhplEwDW3nevfWLfwXKTUNrcc4Zr147bWr4SS67vJo=) 2: 5E6E0EFA1E7911F0A04A5366C4F9AE02.roa (hash: +ewFxwgws96qZb42iktranHuo6xk0cnwygWmXyUhbEc=) 3: 66C1BA862FBB11EB9B861059C4F9AE02.roa (hash: cMd/1qRqPVkWlIQVudOBbLGE1UfquRskjOxtjAtMCMY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.crl rsync://rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:35:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1949 (0x79d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186E8A, serialNumber=A9BCCA6D34D3D5F1EFF8BBE783D49773813E5EF8 Validity Not Before: Apr 24 21:35:43 2025 GMT Not After : May 1 21:35:43 2025 GMT Subject: CN=680aaeaf-ff52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:fd:eb:2b:90:aa:e2:b6:46:bf:dc:e2:59:5c: 32:99:ca:05:5c:cb:4f:fb:c0:c7:37:e7:01:d7:36: 29:09:72:2d:e1:18:d0:cc:12:4f:d0:b0:28:53:b2: f4:59:82:22:00:2b:12:09:c8:74:c1:da:2a:3a:ba: dc:1b:e5:6f:53:47:02:56:22:01:0e:34:69:cc:85: 17:31:79:fd:bd:0c:06:5e:43:51:ae:54:6f:c2:58: b5:f5:d1:fe:87:4a:85:20:a3:9b:2e:b7:e5:15:5e: 72:66:87:d8:f8:e2:70:93:1f:7c:00:9f:96:02:45: 58:5b:d5:80:54:16:01:a2:69:8b:85:29:33:47:aa: 32:08:4c:94:01:a0:6a:d7:82:c4:e7:6e:ea:8f:38: 29:7f:03:e4:3f:e4:47:82:93:41:5f:c9:5d:1b:50: 01:70:f0:ab:61:cb:9c:0c:e9:db:2f:53:8e:66:fa: 5c:a0:4d:06:e5:d9:d2:d2:8b:fd:39:48:c8:b4:8d: 00:64:20:a1:9d:d3:b1:69:7d:8f:71:d2:e0:02:fd: bf:97:38:ef:89:70:9e:9e:47:81:e9:a7:ba:ff:79: 8b:b3:b8:cd:5f:af:39:f6:91:91:fa:bf:b1:a1:6a: 7e:a3:fb:d7:ae:b5:14:e2:9f:ef:17:da:bc:96:51: 7d:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:E8:3B:2A:5F:F2:A0:67:C4:1D:19:32:21:00:2D:A3:B8:62:55:9B X509v3 Authority Key Identifier: keyid:A9:BC:CA:6D:34:D3:D5:F1:EF:F8:BB:E7:83:D4:97:73:81:3E:5E:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:df:95:70:62:b3:20:c6:b6:fb:c8:5c:f2:07:2a:af:43:bc: 65:9c:7f:30:f6:53:7b:e1:cf:07:4a:4a:32:db:0f:36:ab:9b: 34:61:92:54:8c:2a:66:81:c2:81:d7:23:47:47:0c:1c:5b:a6: 76:58:d0:89:98:52:99:4d:76:0b:f2:7d:e0:69:fd:fd:a1:e9: d2:78:e8:ca:57:09:09:b9:9e:f3:93:c3:09:48:ed:e6:71:72: f4:9d:53:65:46:31:e9:31:b3:77:14:da:7e:24:38:91:fd:e0: b7:94:9d:a0:ba:29:dd:7c:9e:fb:c0:93:be:91:62:20:2c:55: 8a:7e:ac:b7:e0:d8:b0:45:77:50:df:5f:76:98:cb:f3:8d:b7: 42:99:d8:63:4b:e7:b2:03:a6:46:6c:8f:fe:ae:78:5e:f8:dc: 61:58:6e:fd:40:10:02:fe:aa:76:d7:04:0f:7b:02:8d:a7:72: 79:4f:04:8a:da:be:a9:b3:55:e5:48:14:9d:e6:bb:86:9e:93: 3f:01:24:77:7f:ef:52:67:35:61:de:65:14:80:b0:2d:3d:18: 41:ad:a1:50:72:5a:d8:c7:a0:4d:52:72:69:c2:be:c4:c1:1d: be:cb:d3:74:f2:14:81:5f:e2:3b:c2:99:95:1a:1c:24:2a:ac: ca:54:a8:f9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB50wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODZFOEExMTAvBgNVBAUTKEE5QkNDQTZEMzREM0Q1RjFFRkY4QkJFNzgzRDQ5Nzcz ODEzRTVFRjgwHhcNMjUwNDI0MjEzNTQzWhcNMjUwNTAxMjEzNTQzWjAYMRYwFAYD VQQDEw02ODBhYWVhZi1mZjUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl/3rK5Cq4rZGv9ziWVwymcoFXMtP+8DHN+cB1zYpCXIt4RjQzBJP0LAoU7L0 WYIiACsSCch0wdoqOrrcG+VvU0cCViIBDjRpzIUXMXn9vQwGXkNRrlRvwli19dH+ h0qFIKObLrflFV5yZofY+OJwkx98AJ+WAkVYW9WAVBYBommLhSkzR6oyCEyUAaBq 14LE527qjzgpfwPkP+RHgpNBX8ldG1ABcPCrYcucDOnbL1OOZvpcoE0G5dnS0ov9 OUjItI0AZCChndOxaX2PcdLgAv2/lzjviXCenkeB6ae6/3mLs7jNX6859pGR+r+x oWp+o/vXrrUU4p/vF9q8llF98QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCvoOypf 8qBnxB0ZMiEALaO4YlWbMB8GA1UdIwQYMBaAFKm8ym0009Xx7/i754PUl3OBPl74 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkU4QS8zQjQ3NkU3QzJE RkYxMUVCODY4QTkxMzVDNEY5QUUwMi9xYnpLYlRUVDFmSHYtTHZuZzlTWGM0RS1Y dmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FiektiVFRUMWZIdi1Mdm5nOVNYYzRFLVh2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NkU4QS8zQjQ3NkU3QzJERkYxMUVCODY4QTkxMzVDNEY5QUUwMi9xYnpLYlRUVDFm SHYtTHZuZzlTWGM0RS1YdmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAy35VwYrMgxrb7yFzyByqvQ7xlnH8w9lN74c8HSkoy2w82q5s0YZJU jCpmgcKB1yNHRwwcW6Z2WNCJmFKZTXYL8n3gaf39oenSeOjKVwkJuZ7zk8MJSO3m cXL0nVNlRjHpMbN3FNp+JDiR/eC3lJ2guindfJ77wJO+kWIgLFWKfqy34NiwRXdQ 3192mMvzjbdCmdhjS+eyA6ZGbI/+rnhe+NxhWG79QBAC/qp21wQPewKNp3J5TwSK 2r6ps1XlSBSd5ruGnpM/ASR3f+9SZzVh3mUUgLAtPRhBraFQclrYx6BNUnJpwr7E wR2+y9N08hSBX+I7wpmVGhwkKqzKVKj5 -----END CERTIFICATE-----Generated at Sat Apr 26 04:37:32 2025 by rpki-client