$ rpki-client -vvf rpki.apnic.net/member_repository/A919960D/BD0B64C68DDA11ED873A7487C4F9AE02/QgBM9ryh-lZCT17qJPYqkrJc3s8.mft File: QgBM9ryh-lZCT17qJPYqkrJc3s8.mft (raw, json) Hash identifier: pR/BUMhUCdF6TCw8Mg/BEJ82NJlHFxHOkE02FBDBx5E= Subject key identifier: D2:8B:47:53:62:6A:FB:98:95:A6:8F:61:72:36:EB:C3:26:81:4E:70 Authority key identifier: 42:00:4C:F6:BC:A1:FA:56:42:4F:5E:EA:24:F6:2A:92:B2:5C:DE:CF Certificate issuer: /CN=A919960D/serialNumber=42004CF6BCA1FA56424F5EEA24F62A92B25CDECF Certificate serial: 01B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QgBM9ryh-lZCT17qJPYqkrJc3s8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919960D/BD0B64C68DDA11ED873A7487C4F9AE02/QgBM9ryh-lZCT17qJPYqkrJc3s8.mft Manifest number: 01B1 Signing time: Fri 25 Apr 2025 02:22:20 +0000 Manifest this update: Fri 25 Apr 2025 02:22:20 +0000 Manifest next update: Fri 02 May 2025 02:22:20 +0000 Files and hashes: 1: QgBM9ryh-lZCT17qJPYqkrJc3s8.crl (hash: bYM+ETXC4AeLcL/3yK9ZSXsviBUrlsisFYjgwI1yvw0=) 2: BE9174768DDE11ED97AFDA82C4F9AE02.roa (hash: fFAFWp3SGDiligAO05H4p9el//2m+rPWPKenlyAVezU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919960D/BD0B64C68DDA11ED873A7487C4F9AE02/QgBM9ryh-lZCT17qJPYqkrJc3s8.crl rsync://rpki.apnic.net/member_repository/A919960D/BD0B64C68DDA11ED873A7487C4F9AE02/QgBM9ryh-lZCT17qJPYqkrJc3s8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QgBM9ryh-lZCT17qJPYqkrJc3s8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:22:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 437 (0x1b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919960D, serialNumber=42004CF6BCA1FA56424F5EEA24F62A92B25CDECF Validity Not Before: Apr 25 02:22:20 2025 GMT Not After : May 2 02:22:20 2025 GMT Subject: CN=680af1dc-1083 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b9:7c:94:e6:f4:da:6b:67:46:a9:84:be:db: 02:d7:92:20:24:f2:34:e8:db:be:90:d9:82:d4:a7: e2:87:a5:d1:d0:86:0d:63:fe:64:7d:cd:ee:24:ba: 76:93:d4:c9:f2:41:bb:05:bb:5e:e6:e3:19:f1:d3: 81:bd:19:75:ac:f5:73:15:a4:3f:90:7f:86:84:61: be:44:ab:45:49:d8:4b:f0:9c:61:2c:38:52:b2:60: 29:75:3d:c4:7b:0c:cd:86:0a:b5:e6:b0:89:fe:62: 2e:c3:ba:9e:4e:9b:ca:c1:0c:92:6a:31:f1:96:4a: 9a:1e:2c:e7:6b:75:c0:b4:22:fb:b3:7c:7d:5c:2d: e2:cf:de:34:40:65:04:10:e5:8e:a7:e9:65:d6:27: dc:7b:60:2f:d5:c1:5f:9b:0f:3a:1e:3f:4a:d8:f4: 77:93:55:e0:13:df:f3:90:a2:bd:f6:5e:e2:d1:8f: 27:d9:92:ed:8a:50:6c:64:21:39:e7:0c:8d:96:36: 11:2a:b0:e4:0c:42:b4:54:1c:ad:7c:2d:0f:5c:96: b6:c5:7c:0d:eb:71:57:1e:37:6a:fc:52:af:f8:c8: 0c:10:a8:f0:00:d1:14:30:e4:5a:f6:59:ff:b3:92: 55:4c:b3:ac:98:56:5b:87:a4:6e:c4:34:6a:d8:67: a9:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:8B:47:53:62:6A:FB:98:95:A6:8F:61:72:36:EB:C3:26:81:4E:70 X509v3 Authority Key Identifier: keyid:42:00:4C:F6:BC:A1:FA:56:42:4F:5E:EA:24:F6:2A:92:B2:5C:DE:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919960D/BD0B64C68DDA11ED873A7487C4F9AE02/QgBM9ryh-lZCT17qJPYqkrJc3s8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QgBM9ryh-lZCT17qJPYqkrJc3s8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919960D/BD0B64C68DDA11ED873A7487C4F9AE02/QgBM9ryh-lZCT17qJPYqkrJc3s8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:dd:2e:9e:6e:13:86:f0:19:12:57:e3:6b:bf:12:4a:76:04: c0:a6:88:fe:82:ac:9f:f4:d5:f4:a9:14:05:fb:56:aa:b5:a0: 3d:53:36:12:fc:89:8a:bf:1b:36:11:2a:f5:9d:73:7d:19:46: 4a:dd:19:6e:c0:d3:d2:2f:a3:f2:5a:35:c2:12:41:d4:2c:5e: ea:2e:ea:05:78:21:b2:2f:0a:15:13:55:2a:f2:23:1d:b0:06: 90:1b:8d:6e:a1:8a:68:dd:0c:f0:37:c7:7f:15:6d:e2:34:bc: 72:74:28:ae:04:58:e2:f8:e5:41:9a:c8:45:05:30:f4:79:ae: e9:4a:25:fd:b6:89:72:c6:97:08:c5:28:41:b3:3f:3f:a7:3e: 23:ca:ad:d6:03:d2:11:2e:42:da:0d:cd:31:81:a3:6d:48:75: 43:b6:8b:08:57:d3:41:0c:6f:83:22:d4:96:c8:c9:e4:07:cd: 79:5c:0d:72:25:0f:85:c5:09:41:e1:92:1d:ca:9d:31:21:2e: 40:14:10:e5:7e:ed:d7:ce:fe:fb:7b:de:cb:85:0d:67:15:83: f8:d6:a7:65:19:4c:58:55:91:a8:7e:28:ed:30:19:c8:86:f5: df:94:8c:28:f6:dd:ee:3b:f3:19:57:d5:96:4a:40:70:6b:c1: 96:aa:d3:29 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTk2MEQxMTAvBgNVBAUTKDQyMDA0Q0Y2QkNBMUZBNTY0MjRGNUVFQTI0RjYyQTky QjI1Q0RFQ0YwHhcNMjUwNDI1MDIyMjIwWhcNMjUwNTAyMDIyMjIwWjAYMRYwFAYD VQQDEw02ODBhZjFkYy0xMDgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs7l8lOb02mtnRqmEvtsC15IgJPI06Nu+kNmC1Kfih6XR0IYNY/5kfc3uJLp2 k9TJ8kG7Bbte5uMZ8dOBvRl1rPVzFaQ/kH+GhGG+RKtFSdhL8JxhLDhSsmApdT3E ewzNhgq15rCJ/mIuw7qeTpvKwQySajHxlkqaHizna3XAtCL7s3x9XC3iz940QGUE EOWOp+ll1ifce2Av1cFfmw86Hj9K2PR3k1XgE9/zkKK99l7i0Y8n2ZLtilBsZCE5 5wyNljYRKrDkDEK0VBytfC0PXJa2xXwN63FXHjdq/FKv+MgMEKjwANEUMORa9ln/ s5JVTLOsmFZbh6RuxDRq2GepqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNKLR1Ni avuYlaaPYXI268MmgU5wMB8GA1UdIwQYMBaAFEIATPa8ofpWQk9e6iT2KpKyXN7P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTYwRC9CRDBCNjRDNjhE REExMUVEODczQTc0ODdDNEY5QUUwMi9RZ0JNOXJ5aC1sWkNUMTdxSlBZcWtySmMz czguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FnQk05cnloLWxaQ1QxN3FKUFlxa3JKYzNzOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTYwRC9CRDBCNjRDNjhEREExMUVEODczQTc0ODdDNEY5QUUwMi9RZ0JNOXJ5aC1s WkNUMTdxSlBZcWtySmMzczgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBx3S6ebhOG8BkSV+NrvxJKdgTApoj+gqyf9NX0qRQF+1aqtaA9UzYS /ImKvxs2ESr1nXN9GUZK3RluwNPSL6PyWjXCEkHULF7qLuoFeCGyLwoVE1Uq8iMd sAaQG41uoYpo3QzwN8d/FW3iNLxydCiuBFji+OVBmshFBTD0ea7pSiX9tolyxpcI xShBsz8/pz4jyq3WA9IRLkLaDc0xgaNtSHVDtosIV9NBDG+DItSWyMnkB815XA1y JQ+FxQlB4ZIdyp0xIS5AFBDlfu3Xzv77e97LhQ1nFYP41qdlGUxYVZGofijtMBnI hvXflIwo9t3uO/MZV9WWSkBwa8GWqtMp -----END CERTIFICATE-----Generated at Sat Apr 26 17:06:49 2025 by rpki-client