$ rpki-client -vvf rpki.apnic.net/member_repository/A9194A58/4EACE490AE4311E7881C6416C4F9AE02/QL0lotYDGHPlXfzdrTpI97z4jIs.mft File: QL0lotYDGHPlXfzdrTpI97z4jIs.mft (raw, json) Hash identifier: FC59DBy6/5jxxkjUEOjJySblJsiWnOrBGnjYDHfHH44= Subject key identifier: DA:0F:D2:5B:0F:93:AE:8C:3B:CA:50:0E:54:1E:4F:DF:25:36:C8:57 Authority key identifier: 40:BD:25:A2:D6:03:18:73:E5:5D:FC:DD:AD:3A:48:F7:BC:F8:8C:8B Certificate issuer: /CN=A9194A58/serialNumber=40BD25A2D6031873E55DFCDDAD3A48F7BCF88C8B Certificate serial: 182C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QL0lotYDGHPlXfzdrTpI97z4jIs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194A58/4EACE490AE4311E7881C6416C4F9AE02/QL0lotYDGHPlXfzdrTpI97z4jIs.mft Manifest number: 1821 Signing time: Thu 24 Apr 2025 16:33:09 +0000 Manifest this update: Thu 24 Apr 2025 16:33:08 +0000 Manifest next update: Thu 01 May 2025 16:33:08 +0000 Files and hashes: 1: QL0lotYDGHPlXfzdrTpI97z4jIs.crl (hash: D1sLrtlLR+cQG6i5BLqQGgyDEUy0Zje27ptQ7RitbXs=) 2: 42D0E9A4AFD911E7B8A7E96CC4F9AE02.roa (hash: WFmZvmOIKNk0az+zKPBYrOXakumFbE34A1nRoyLlGgY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194A58/4EACE490AE4311E7881C6416C4F9AE02/QL0lotYDGHPlXfzdrTpI97z4jIs.crl rsync://rpki.apnic.net/member_repository/A9194A58/4EACE490AE4311E7881C6416C4F9AE02/QL0lotYDGHPlXfzdrTpI97z4jIs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QL0lotYDGHPlXfzdrTpI97z4jIs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:33:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6188 (0x182c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194A58, serialNumber=40BD25A2D6031873E55DFCDDAD3A48F7BCF88C8B Validity Not Before: Apr 24 16:33:08 2025 GMT Not After : May 1 16:33:08 2025 GMT Subject: CN=680a67c4-5bab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:30:13:44:88:a8:b3:69:07:17:45:c9:cb:25: a3:19:3f:a0:4f:33:f7:35:2a:98:0e:57:35:47:40: 5c:01:50:e0:6d:c3:e8:d7:e3:09:9f:d0:b4:72:3a: 9c:37:e1:ca:75:62:03:c8:d3:77:90:cd:c3:8f:c3: ff:bc:9f:38:d5:e3:b6:fe:80:7d:c1:f3:3f:a0:36: 02:d2:75:d1:72:b7:92:aa:2c:5f:49:96:ca:07:23: 81:cb:a8:2b:8e:a3:76:3f:8f:66:cf:46:fd:64:15: b3:5c:d1:e5:cd:58:6b:f0:02:86:0e:ec:e1:d3:5b: 2f:15:17:78:2c:29:38:6c:bc:c8:8a:98:15:ff:59: cf:0f:57:b7:20:3b:57:bc:9c:61:a1:34:d1:0a:ae: 90:04:bf:7d:ad:4c:0b:41:93:ee:98:b8:3b:44:a9: 70:ab:ca:4b:07:f2:82:7a:13:c1:e7:86:28:ba:9c: 33:bb:94:5b:34:0f:eb:86:ea:1a:d7:1e:07:c5:5b: 70:a2:06:e4:7e:73:1a:a0:91:0b:3f:d4:44:d1:16: e1:86:ba:82:51:e9:6c:a0:f7:ff:25:ef:46:bd:8f: ad:0c:cd:b1:69:a4:f2:a4:65:b2:8c:d1:34:fa:f7: d2:3d:89:dc:ae:84:67:ad:2b:7a:3f:62:28:70:4d: 8b:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:0F:D2:5B:0F:93:AE:8C:3B:CA:50:0E:54:1E:4F:DF:25:36:C8:57 X509v3 Authority Key Identifier: keyid:40:BD:25:A2:D6:03:18:73:E5:5D:FC:DD:AD:3A:48:F7:BC:F8:8C:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194A58/4EACE490AE4311E7881C6416C4F9AE02/QL0lotYDGHPlXfzdrTpI97z4jIs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QL0lotYDGHPlXfzdrTpI97z4jIs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194A58/4EACE490AE4311E7881C6416C4F9AE02/QL0lotYDGHPlXfzdrTpI97z4jIs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:48:7c:b5:87:d5:47:80:48:4d:d9:ce:cc:2f:f7:b0:f6:9c: 4b:6e:4d:01:10:19:2e:50:f6:50:43:b0:08:fe:65:86:d1:ac: af:aa:64:9b:58:44:ac:73:3e:f3:65:5f:41:5d:ea:3e:92:d4: 7e:0d:7e:64:fd:74:51:1c:4b:8a:ff:e2:7a:2a:3b:61:ce:bd: e7:e0:a4:05:57:b4:8a:7d:cd:4b:21:a9:ec:60:20:9e:30:b3: 93:cc:d3:72:30:5c:b4:d4:22:85:b6:df:d1:81:89:9b:04:42: 2f:78:3f:25:20:83:c5:11:f1:ee:2f:a1:fb:47:c1:54:16:a6: ac:8f:d7:98:37:e0:76:a6:64:79:89:f9:e5:cb:ce:f9:02:59: bb:f8:fb:82:47:c6:bf:d9:3d:9e:de:9f:09:f3:4c:05:ba:11: 53:58:2c:83:3a:36:68:6f:63:94:83:ba:8c:96:62:4f:91:91: 57:7b:b5:af:0e:11:46:83:77:d2:f3:9a:50:51:5e:36:0a:e7: 4c:41:58:10:8f:13:78:54:05:bf:7b:a7:a5:e9:6b:5b:01:0e: 8d:f8:8f:32:8e:39:13:4b:29:a9:25:3d:c4:3d:d1:2d:d4:92: 5a:c3:76:d1:cf:0f:43:d7:79:fb:20:bb:2c:5f:ff:fa:e0:0d: 08:fb:10:6c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGCwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTRBNTgxMTAvBgNVBAUTKDQwQkQyNUEyRDYwMzE4NzNFNTVERkNEREFEM0E0OEY3 QkNGODhDOEIwHhcNMjUwNDI0MTYzMzA4WhcNMjUwNTAxMTYzMzA4WjAYMRYwFAYD VQQDEw02ODBhNjdjNC01YmFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqzATRIios2kHF0XJyyWjGT+gTzP3NSqYDlc1R0BcAVDgbcPo1+MJn9C0cjqc N+HKdWIDyNN3kM3Dj8P/vJ841eO2/oB9wfM/oDYC0nXRcreSqixfSZbKByOBy6gr jqN2P49mz0b9ZBWzXNHlzVhr8AKGDuzh01svFRd4LCk4bLzIipgV/1nPD1e3IDtX vJxhoTTRCq6QBL99rUwLQZPumLg7RKlwq8pLB/KCehPB54Youpwzu5RbNA/rhuoa 1x4HxVtwogbkfnMaoJELP9RE0RbhhrqCUelsoPf/Je9GvY+tDM2xaaTypGWyjNE0 +vfSPYncroRnrSt6P2IocE2LlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNoP0lsP k66MO8pQDlQeT98lNshXMB8GA1UdIwQYMBaAFEC9JaLWAxhz5V383a06SPe8+IyL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEE1OC80RUFDRTQ5MEFF NDMxMUU3ODgxQzY0MTZDNEY5QUUwMi9RTDBsb3RZREdIUGxYZnpkclRwSTk3ejRq SXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FMMGxvdFlER0hQbFhmemRyVHBJOTd6NGpJcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NEE1OC80RUFDRTQ5MEFFNDMxMUU3ODgxQzY0MTZDNEY5QUUwMi9RTDBsb3RZREdI UGxYZnpkclRwSTk3ejRqSXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCASHy1h9VHgEhN2c7ML/ew9pxLbk0BEBkuUPZQQ7AI/mWG0ayvqmSb WESscz7zZV9BXeo+ktR+DX5k/XRRHEuK/+J6Kjthzr3n4KQFV7SKfc1LIansYCCe MLOTzNNyMFy01CKFtt/RgYmbBEIveD8lIIPFEfHuL6H7R8FUFqasj9eYN+B2pmR5 ifnly875Alm7+PuCR8a/2T2e3p8J80wFuhFTWCyDOjZob2OUg7qMlmJPkZFXe7Wv DhFGg3fS85pQUV42CudMQVgQjxN4VAW/e6el6WtbAQ6N+I8yjjkTSympJT3EPdEt 1JJaw3bRzw9D13n7ILssX//64A0I+xBs -----END CERTIFICATE-----Generated at Sat Apr 26 05:55:00 2025 by rpki-client