$ rpki-client -vvf rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.mft File: QAHwzRnduZQstaOVZ-w2k74lxqA.mft (raw, json) Hash identifier: eogO5ZBUPEhU1gXnWttqI7Gu2UX/V3srliEq+odBaGo= Subject key identifier: E0:56:19:7E:0D:74:5A:BA:7F:2E:C0:78:71:8F:AF:CD:44:FC:6B:B6 Authority key identifier: 40:01:F0:CD:19:DD:B9:94:2C:B5:A3:95:67:EC:36:93:BE:25:C6:A0 Certificate issuer: /CN=A91F96DB/serialNumber=4001F0CD19DDB9942CB5A39567EC3693BE25C6A0 Certificate serial: 03B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QAHwzRnduZQstaOVZ-w2k74lxqA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.mft Manifest number: 03AB Signing time: Fri 25 Apr 2025 00:28:51 +0000 Manifest this update: Fri 25 Apr 2025 00:28:50 +0000 Manifest next update: Fri 02 May 2025 00:28:50 +0000 Files and hashes: 1: QAHwzRnduZQstaOVZ-w2k74lxqA.crl (hash: j0NrhJ1mG1xHw/UWtsD3crf+Z4g13mZdJmClldaiqXI=) 2: F91B41A40C5811EFB9F63337C4F9AE02.roa (hash: qOMt8gV+qKOqfr/cX53ygmFqRFWIxLXDn07p9oOee54=) 3: 0ECA16060C5911EFA8601E42C4F9AE02.roa (hash: vlEni3UTKg6N69bA/qO6bko6oc0V7Y603/5krA0YD5s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.crl rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QAHwzRnduZQstaOVZ-w2k74lxqA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:28:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 947 (0x3b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F96DB, serialNumber=4001F0CD19DDB9942CB5A39567EC3693BE25C6A0 Validity Not Before: Apr 25 00:28:50 2025 GMT Not After : May 2 00:28:50 2025 GMT Subject: CN=680ad743-c4ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:eb:f7:29:24:94:d3:8d:94:65:ba:cd:9f:88: 52:9d:24:7b:72:ea:76:24:f4:d8:e5:1c:8b:d2:13: 98:3d:fb:98:e3:e1:6b:6a:f6:95:19:62:91:8b:1e: 15:be:26:9b:a5:ed:eb:d0:95:ce:65:32:c2:95:76: b4:3c:42:e3:27:dc:d6:fc:63:78:f4:6b:54:5a:fa: 66:25:cc:f6:cb:91:33:8a:46:fb:59:9f:3c:c9:72: 39:6e:8b:0b:46:32:c4:9b:2c:1d:eb:49:91:5f:82: b3:41:62:22:16:5d:37:49:76:13:14:6d:67:b5:12: 3a:af:38:93:b3:42:84:04:28:f1:2e:90:77:b3:fe: a1:65:6a:ba:c0:30:8f:c5:d8:da:ef:96:11:10:ef: 11:39:30:6c:b5:34:27:f0:32:93:ba:5d:77:89:a9: 02:65:47:e6:6a:4c:0b:83:25:b3:ce:b1:21:4a:b8: 25:69:a2:2f:1e:b8:98:55:bb:25:0f:ac:6b:e2:62: e2:34:41:4b:1e:44:e5:23:06:0c:57:92:2a:6a:4b: f7:1d:b3:8f:91:84:d9:cb:49:f4:f3:0b:09:3b:10: fb:73:8a:b2:41:ac:87:de:8c:d5:6e:f6:a4:44:ef: 0e:6f:e5:3a:6e:08:39:02:56:bf:b9:85:dd:4c:55: 54:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:56:19:7E:0D:74:5A:BA:7F:2E:C0:78:71:8F:AF:CD:44:FC:6B:B6 X509v3 Authority Key Identifier: keyid:40:01:F0:CD:19:DD:B9:94:2C:B5:A3:95:67:EC:36:93:BE:25:C6:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QAHwzRnduZQstaOVZ-w2k74lxqA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:7f:79:86:b9:b7:88:e2:5b:dd:30:a8:f2:6a:f4:b4:9f:24: ee:ed:4a:88:68:02:ea:c2:19:f0:ab:aa:0e:27:f2:31:80:0b: 42:63:61:30:e3:25:73:82:f5:92:11:6d:54:0f:88:00:25:57: 9a:53:43:17:ed:46:f2:8d:5f:62:a9:0d:93:9f:02:5f:f4:4b: 06:60:f6:d1:79:79:f3:b6:5a:d8:58:a4:2d:be:45:a4:5f:a6: 5e:9e:cd:0c:21:f8:a5:02:62:93:58:59:4d:a2:db:c3:36:54: d2:43:90:8d:c3:98:e8:55:bb:8c:7e:b3:d3:6a:86:39:37:d9: 28:f5:b6:34:be:fd:fb:2d:8d:e4:95:76:c0:18:47:12:f4:e9: 93:c5:f6:50:ec:5e:63:91:09:e1:9a:0c:4a:cf:a1:f0:f6:3e: e0:d9:e9:9f:a0:c2:f0:92:18:ac:3f:e7:27:62:26:0e:e0:75: 63:30:f6:9b:aa:d3:89:2f:36:0a:27:e6:97:4d:86:32:ca:cc: 6b:91:f9:0f:86:eb:13:ed:d9:b0:05:d5:a9:e1:a0:d3:d8:de: 31:db:68:a4:8d:7a:82:d1:3f:02:bb:25:d9:d6:9c:05:16:07: 12:0a:48:3c:2d:e2:a1:70:df:88:6d:a9:d4:70:41:e9:54:23: 02:34:bf:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA7MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjk2REIxMTAvBgNVBAUTKDQwMDFGMENEMTlEREI5OTQyQ0I1QTM5NTY3RUMzNjkz QkUyNUM2QTAwHhcNMjUwNDI1MDAyODUwWhcNMjUwNTAyMDAyODUwWjAYMRYwFAYD VQQDEw02ODBhZDc0My1jNGVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4uv3KSSU042UZbrNn4hSnSR7cup2JPTY5RyL0hOYPfuY4+FravaVGWKRix4V viabpe3r0JXOZTLClXa0PELjJ9zW/GN49GtUWvpmJcz2y5Ezikb7WZ88yXI5bosL RjLEmywd60mRX4KzQWIiFl03SXYTFG1ntRI6rziTs0KEBCjxLpB3s/6hZWq6wDCP xdja75YREO8ROTBstTQn8DKTul13iakCZUfmakwLgyWzzrEhSrglaaIvHriYVbsl D6xr4mLiNEFLHkTlIwYMV5Iqakv3HbOPkYTZy0n08wsJOxD7c4qyQayH3ozVbvak RO8Ob+U6bgg5Ala/uYXdTFVU8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOBWGX4N dFq6fy7AeHGPr81E/Gu2MB8GA1UdIwQYMBaAFEAB8M0Z3bmULLWjlWfsNpO+Jcag MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOTZEQi9BODY0RDBFQThF M0QxMUVDQTg3QUJGMTZDNEY5QUUwMi9RQUh3elJuZHVaUXN0YU9WWi13Mms3NGx4 cUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FBSHd6Um5kdVpRc3RhT1ZaLXcyazc0bHhxQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OTZEQi9BODY0RDBFQThFM0QxMUVDQTg3QUJGMTZDNEY5QUUwMi9RQUh3elJuZHVa UXN0YU9WWi13Mms3NGx4cUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCsf3mGubeI4lvdMKjyavS0nyTu7UqIaALqwhnwq6oOJ/IxgAtCY2Ew 4yVzgvWSEW1UD4gAJVeaU0MX7UbyjV9iqQ2TnwJf9EsGYPbReXnztlrYWKQtvkWk X6Zens0MIfilAmKTWFlNotvDNlTSQ5CNw5joVbuMfrPTaoY5N9ko9bY0vv37LY3k lXbAGEcS9OmTxfZQ7F5jkQnhmgxKz6Hw9j7g2emfoMLwkhisP+cnYiYO4HVjMPab qtOJLzYKJ+aXTYYyysxrkfkPhusT7dmwBdWp4aDT2N4x22ikjXqC0T8CuyXZ1pwF FgcSCkg8LeKhcN+IbanUcEHpVCMCNL83 -----END CERTIFICATE-----Generated at Sat Apr 26 05:13:00 2025 by rpki-client