$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE309/BDB42F36724611EB8AEDDC58C4F9AE02/QQmhbhhypDGvWRhmVbtg1TN8pIU.mft File: QQmhbhhypDGvWRhmVbtg1TN8pIU.mft (raw, json) Hash identifier: F4yvXXfO9NABxXV3RGiXXGSqIUWzltEqNMjurIBTK8E= Subject key identifier: 8E:9D:B2:17:8A:E9:4C:72:DC:B4:DA:15:AE:BD:3B:43:6C:46:F5:41 Authority key identifier: 41:09:A1:6E:18:72:A4:31:AF:59:18:66:55:BB:60:D5:33:7C:A4:85 Certificate issuer: /CN=A91AE309/serialNumber=4109A16E1872A431AF59186655BB60D5337CA485 Certificate serial: 067C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQmhbhhypDGvWRhmVbtg1TN8pIU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE309/BDB42F36724611EB8AEDDC58C4F9AE02/QQmhbhhypDGvWRhmVbtg1TN8pIU.mft Manifest number: 0677 Signing time: Thu 24 Apr 2025 22:06:14 +0000 Manifest this update: Thu 24 Apr 2025 22:06:13 +0000 Manifest next update: Thu 01 May 2025 22:06:13 +0000 Files and hashes: 1: QQmhbhhypDGvWRhmVbtg1TN8pIU.crl (hash: GpFMK8LDWZtvvtieMAS0Y2232Y03r2JH9W2fEYKJqu4=) 2: E036A33A724711EBAC3F0059C4F9AE02.roa (hash: f7Qn0qXwPKUSx1AKDqHdBuBm3lykdUVyid+XDevm250=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE309/BDB42F36724611EB8AEDDC58C4F9AE02/QQmhbhhypDGvWRhmVbtg1TN8pIU.crl rsync://rpki.apnic.net/member_repository/A91AE309/BDB42F36724611EB8AEDDC58C4F9AE02/QQmhbhhypDGvWRhmVbtg1TN8pIU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQmhbhhypDGvWRhmVbtg1TN8pIU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:06:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1660 (0x67c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE309, serialNumber=4109A16E1872A431AF59186655BB60D5337CA485 Validity Not Before: Apr 24 22:06:13 2025 GMT Not After : May 1 22:06:13 2025 GMT Subject: CN=680ab5d5-19ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:50:75:d5:1f:0f:55:f3:9d:eb:42:f3:97:93: 5f:71:a0:3b:82:f9:e2:5b:86:44:c3:f1:fa:e3:a4: d5:f6:52:28:ef:8e:76:91:05:c9:43:83:ea:61:26: 2a:81:a1:93:a3:82:6d:ab:72:9e:ec:dc:fd:34:10: b9:9f:c0:ea:06:71:53:27:c1:4a:0c:69:d7:13:00: 4a:34:57:5e:cb:c1:51:ad:68:9f:94:f9:93:c6:c8: f9:34:f8:b6:c5:aa:63:37:00:fa:1f:eb:31:02:c6: 3c:38:05:48:62:ec:48:4e:3c:29:10:18:53:74:91: 7d:e1:eb:db:d7:0c:d1:4c:ea:b9:00:6d:28:90:63: 85:27:b9:a7:d8:16:26:7d:9b:54:bc:44:89:6f:b4: 5b:3e:53:8c:35:fd:3b:f1:80:1a:53:89:12:a9:9a: fe:db:81:47:c1:2f:b6:5d:34:c4:97:d4:b5:6c:65: 88:d7:a0:83:29:5d:c8:6e:54:0b:00:82:9e:d7:e2: cb:95:07:0e:42:22:f7:51:5a:12:f1:4d:fd:3b:d2: 10:98:8d:a5:ae:1d:8f:d7:2c:ff:9e:55:4a:a7:28: 58:c5:59:d3:a1:d4:f8:73:0f:65:1b:cb:c4:ff:eb: 38:11:4b:77:13:85:88:0d:e1:86:ab:ee:f8:1f:cb: f8:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:9D:B2:17:8A:E9:4C:72:DC:B4:DA:15:AE:BD:3B:43:6C:46:F5:41 X509v3 Authority Key Identifier: keyid:41:09:A1:6E:18:72:A4:31:AF:59:18:66:55:BB:60:D5:33:7C:A4:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE309/BDB42F36724611EB8AEDDC58C4F9AE02/QQmhbhhypDGvWRhmVbtg1TN8pIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQmhbhhypDGvWRhmVbtg1TN8pIU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE309/BDB42F36724611EB8AEDDC58C4F9AE02/QQmhbhhypDGvWRhmVbtg1TN8pIU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:ac:0c:49:ab:e2:f4:43:34:55:68:ba:b9:ef:e8:f4:60:09: 31:1d:34:1a:bb:a8:5e:1e:41:df:61:84:45:2b:6f:8c:5e:05: 60:7a:e2:24:03:c4:70:2f:ef:d0:41:7c:4a:00:ed:9a:d5:92: 17:e6:f4:ad:48:67:12:c1:28:e2:89:7a:f1:7c:3f:6e:19:b4: fb:df:f4:4e:98:3e:6a:7d:fb:4a:e4:d8:04:b1:f8:5e:75:94: 78:6e:4d:4b:c4:9a:27:66:11:20:64:cf:ed:38:1a:45:22:d4: e8:ea:d5:82:34:1e:78:06:a9:98:a6:45:98:12:43:79:d1:0b: 9c:3b:49:ab:07:a2:f9:96:1d:7a:23:d4:9f:85:6c:e3:1f:f2: da:31:1c:90:b6:f9:03:e9:7c:28:8c:4f:4f:79:02:a7:fe:7c: 91:4b:a7:c3:87:7d:8f:9a:5d:d0:be:c1:65:6f:ed:8d:33:a0: b1:23:e8:f1:0e:d0:16:90:d8:4b:ab:09:5c:f7:a3:d8:39:13: 90:66:40:35:98:76:fe:64:6f:53:6f:b9:8d:ff:ee:07:4b:44: f8:48:8e:4e:06:50:c7:30:fa:d5:39:86:65:1f:ae:ee:f8:eb: 32:8c:92:fb:06:3f:f6:d7:69:e4:d8:24:69:9e:1a:ef:6d:46: 23:11:db:9d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBnwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUUzMDkxMTAvBgNVBAUTKDQxMDlBMTZFMTg3MkE0MzFBRjU5MTg2NjU1QkI2MEQ1 MzM3Q0E0ODUwHhcNMjUwNDI0MjIwNjEzWhcNMjUwNTAxMjIwNjEzWjAYMRYwFAYD VQQDEw02ODBhYjVkNS0xOWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtFB11R8PVfOd60Lzl5NfcaA7gvniW4ZEw/H646TV9lIo7452kQXJQ4PqYSYq gaGTo4Jtq3Ke7Nz9NBC5n8DqBnFTJ8FKDGnXEwBKNFdey8FRrWiflPmTxsj5NPi2 xapjNwD6H+sxAsY8OAVIYuxITjwpEBhTdJF94evb1wzRTOq5AG0okGOFJ7mn2BYm fZtUvESJb7RbPlOMNf078YAaU4kSqZr+24FHwS+2XTTEl9S1bGWI16CDKV3IblQL AIKe1+LLlQcOQiL3UVoS8U39O9IQmI2lrh2P1yz/nlVKpyhYxVnTodT4cw9lG8vE /+s4EUt3E4WIDeGGq+74H8v49wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI6dsheK 6Uxy3LTaFa69O0NsRvVBMB8GA1UdIwQYMBaAFEEJoW4YcqQxr1kYZlW7YNUzfKSF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTMwOS9CREI0MkYzNjcy NDYxMUVCOEFFRERDNThDNEY5QUUwMi9RUW1oYmhoeXBER3ZXUmhtVmJ0ZzFUTjhw SVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FRbWhiaGh5cERHdldSaG1WYnRnMVROOHBJVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RTMwOS9CREI0MkYzNjcyNDYxMUVCOEFFRERDNThDNEY5QUUwMi9RUW1oYmhoeXBE R3ZXUmhtVmJ0ZzFUTjhwSVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlrAxJq+L0QzRVaLq57+j0YAkxHTQau6heHkHfYYRFK2+MXgVgeuIk A8RwL+/QQXxKAO2a1ZIX5vStSGcSwSjiiXrxfD9uGbT73/ROmD5qfftK5NgEsfhe dZR4bk1LxJonZhEgZM/tOBpFItTo6tWCNB54BqmYpkWYEkN50QucO0mrB6L5lh16 I9SfhWzjH/LaMRyQtvkD6XwojE9PeQKn/nyRS6fDh32Pml3QvsFlb+2NM6CxI+jx DtAWkNhLqwlc96PYOROQZkA1mHb+ZG9Tb7mN/+4HS0T4SI5OBlDHMPrVOYZlH67u +OsyjJL7Bj/212nk2CRpnhrvbUYjEdud -----END CERTIFICATE-----Generated at Sat Apr 26 04:31:23 2025 by rpki-client