$ rpki-client -vvf rpki.apnic.net/member_repository/A919E8DB/B48E25F4B76311EF82DD8F33C4F9AE02/QGGGPd9D57OxiePJwyF7wSuzXyE.mft File: QGGGPd9D57OxiePJwyF7wSuzXyE.mft (raw, json) Hash identifier: dBpjeaJn2jNO2Ff1Cp4a0jePtSVjMR081yxET938AE8= Subject key identifier: 29:9C:38:18:11:E0:CD:D1:3F:B3:EE:E5:F1:1B:1E:6A:14:80:D4:10 Authority key identifier: 40:61:86:3D:DF:43:E7:B3:B1:89:E3:C9:C3:21:7B:C1:2B:B3:5F:21 Certificate issuer: /CN=A919E8DB/serialNumber=4061863DDF43E7B3B189E3C9C3217BC12BB35F21 Certificate serial: 5E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QGGGPd9D57OxiePJwyF7wSuzXyE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919E8DB/B48E25F4B76311EF82DD8F33C4F9AE02/QGGGPd9D57OxiePJwyF7wSuzXyE.mft Manifest number: 54 Signing time: Fri 25 Apr 2025 06:23:50 +0000 Manifest this update: Fri 25 Apr 2025 06:23:50 +0000 Manifest next update: Fri 02 May 2025 06:23:50 +0000 Files and hashes: 1: QGGGPd9D57OxiePJwyF7wSuzXyE.crl (hash: uHaufQS9VrmB7DdP0IslwMDu0pNK8M2Jop1M8bXfktw=) 2: DCAA44D6BF2A11EFBAAF1F16C4F9AE02.roa (hash: fSJH1SOLPO4NysKX51na/qXDmlPOAQyyNuZ41eZmd8c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919E8DB/B48E25F4B76311EF82DD8F33C4F9AE02/QGGGPd9D57OxiePJwyF7wSuzXyE.crl rsync://rpki.apnic.net/member_repository/A919E8DB/B48E25F4B76311EF82DD8F33C4F9AE02/QGGGPd9D57OxiePJwyF7wSuzXyE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QGGGPd9D57OxiePJwyF7wSuzXyE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:23:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 94 (0x5e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919E8DB, serialNumber=4061863DDF43E7B3B189E3C9C3217BC12BB35F21 Validity Not Before: Apr 25 06:23:50 2025 GMT Not After : May 2 06:23:50 2025 GMT Subject: CN=680b2a76-44d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:a1:23:41:d0:22:b8:01:f4:7e:95:37:30:91: 08:85:9d:35:07:53:85:26:b5:58:22:6f:f4:0d:b7: 92:c1:70:35:7a:d3:24:79:db:55:a5:ae:bd:47:59: f9:2c:06:33:be:56:c2:da:0c:9c:86:6b:3a:50:cc: fd:8a:6d:9b:eb:70:e6:5b:bc:3c:97:34:7d:37:04: b7:46:dc:0c:a9:cc:09:7b:af:25:04:30:5d:a2:c5: 1c:22:39:82:9f:4c:e9:39:33:6f:bc:99:f2:7e:c5: fa:ea:25:8c:9d:fe:e6:b9:3a:7c:7e:66:dc:c0:e6: 44:be:4b:c6:56:9b:48:a7:a7:13:a7:73:81:e3:36: 43:c7:02:cb:87:94:86:a8:cd:a1:d8:b6:fa:19:e2: e4:c5:a1:48:51:ad:ab:5b:85:c4:f2:bf:53:22:c0: 84:92:2c:0e:5f:d3:b1:66:ae:d8:44:74:d8:40:31: 39:93:6a:0b:b1:e3:65:18:1e:28:ad:fe:fa:fe:39: 3a:76:29:34:e1:24:c2:ff:87:1f:1e:48:6f:29:d2: 16:f5:1f:2e:56:81:21:91:22:70:de:39:c7:d6:d7: 09:21:90:83:be:67:ab:19:1d:3b:4b:85:a4:d8:39: 3d:ce:a4:0c:4b:c6:00:90:9a:48:6c:e9:38:a8:df: 56:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:9C:38:18:11:E0:CD:D1:3F:B3:EE:E5:F1:1B:1E:6A:14:80:D4:10 X509v3 Authority Key Identifier: keyid:40:61:86:3D:DF:43:E7:B3:B1:89:E3:C9:C3:21:7B:C1:2B:B3:5F:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919E8DB/B48E25F4B76311EF82DD8F33C4F9AE02/QGGGPd9D57OxiePJwyF7wSuzXyE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QGGGPd9D57OxiePJwyF7wSuzXyE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E8DB/B48E25F4B76311EF82DD8F33C4F9AE02/QGGGPd9D57OxiePJwyF7wSuzXyE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:82:2a:73:c4:13:cc:a0:43:b7:f6:23:ec:e8:c6:7e:e8:d6: 5e:e5:32:b5:39:3b:1b:5a:37:b1:b3:23:8e:cc:83:f8:da:e5: 5c:4c:ed:03:46:ad:f9:0c:87:40:07:02:82:08:c1:24:a7:c8: d9:c0:17:a5:8a:ce:d0:3b:9d:24:8c:88:aa:ca:4e:a4:96:de: 28:42:0e:11:1d:fa:89:f4:ee:12:c1:bf:17:94:71:29:37:ae: 8b:09:8f:af:61:0f:c7:52:2d:a9:b4:fe:c9:fb:47:3c:3e:16: 39:a5:ec:54:18:e3:0b:24:28:7f:44:c3:41:76:bf:b4:16:d5: 81:ef:87:cb:e9:2c:d3:3b:2b:48:6d:67:7b:3e:0f:13:92:38: 21:67:a0:aa:3f:f8:5a:ab:62:a8:46:c4:12:4f:61:9b:61:5b: 84:32:1e:57:01:44:55:cc:84:95:fb:47:7c:73:1c:2a:56:b7: 91:c2:47:08:8e:95:2a:0c:bc:b2:13:4e:21:ab:90:f2:90:83: c2:1d:bc:c3:81:c6:04:1a:04:d7:dc:1d:3c:ab:cd:22:3e:35: 0e:0a:5c:05:0f:00:d0:42:e5:53:5e:0d:32:ce:e9:50:66:24: 49:80:48:91:c4:26:f8:4d:c1:4d:a7:85:15:ec:ab:29:53:45: c3:94:7d:2f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 RThEQjExMC8GA1UEBRMoNDA2MTg2M0RERjQzRTdCM0IxODlFM0M5QzMyMTdCQzEy QkIzNUYyMTAeFw0yNTA0MjUwNjIzNTBaFw0yNTA1MDIwNjIzNTBaMBgxFjAUBgNV BAMTDTY4MGIyYTc2LTQ0ZDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCjoSNB0CK4AfR+lTcwkQiFnTUHU4UmtVgib/QNt5LBcDV60yR521Wlrr1HWfks BjO+VsLaDJyGazpQzP2KbZvrcOZbvDyXNH03BLdG3AypzAl7ryUEMF2ixRwiOYKf TOk5M2+8mfJ+xfrqJYyd/ua5Onx+ZtzA5kS+S8ZWm0inpxOnc4HjNkPHAsuHlIao zaHYtvoZ4uTFoUhRratbhcTyv1MiwISSLA5f07FmrthEdNhAMTmTagux42UYHiit /vr+OTp2KTThJML/hx8eSG8p0hb1Hy5WgSGRInDeOcfW1wkhkIO+Z6sZHTtLhaTY OT3OpAxLxgCQmkhs6Tio31bBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUKZw4GBHg zdE/s+7l8RseahSA1BAwHwYDVR0jBBgwFoAUQGGGPd9D57OxiePJwyF7wSuzXyEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlFOERCL0I0OEUyNUY0Qjc2 MzExRUY4MkREOEYzM0M0RjlBRTAyL1FHR0dQZDlENTdPeGllUEp3eUY3d1N1elh5 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUUdHR1BkOUQ1N094aWVQSnd5Rjd3U3V6WHlFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlF OERCL0I0OEUyNUY0Qjc2MzExRUY4MkREOEYzM0M0RjlBRTAyL1FHR0dQZDlENTdP eGllUEp3eUY3d1N1elh5RS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAACCKnPEE8ygQ7f2I+zoxn7o1l7lMrU5OxtaN7GzI47Mg/ja5VxM7QNG rfkMh0AHAoIIwSSnyNnAF6WKztA7nSSMiKrKTqSW3ihCDhEd+on07hLBvxeUcSk3 rosJj69hD8dSLam0/sn7Rzw+Fjml7FQY4wskKH9Ew0F2v7QW1YHvh8vpLNM7K0ht Z3s+DxOSOCFnoKo/+FqrYqhGxBJPYZthW4QyHlcBRFXMhJX7R3xzHCpWt5HCRwiO lSoMvLITTiGrkPKQg8IdvMOBxgQaBNfcHTyrzSI+NQ4KXAUPANBC5VNeDTLO6VBm JEmASJHEJvhNwU2nhRXsqylTRcOUfS8= -----END CERTIFICATE-----Generated at Sat Apr 26 17:19:19 2025 by rpki-client