$ rpki-client -vvf rpki.apnic.net/member_repository/A9111C49/7A7F1972DFF111EDB0CAEB69C4F9AE02/QQ2OaEMYGHdLMLGb5c71PUcZCyw.mft File: QQ2OaEMYGHdLMLGb5c71PUcZCyw.mft (raw, json) Hash identifier: B5Pn95QNyCggfO+TNwnXSeCYSjkVs9B45bjU+FFRxZo= Subject key identifier: 69:4D:AB:85:C0:EB:38:47:06:E4:59:65:6E:1B:1E:18:4C:A6:3C:A0 Authority key identifier: 41:0D:8E:68:43:18:18:77:4B:30:B1:9B:E5:CE:F5:3D:47:19:0B:2C Certificate issuer: /CN=A9111C49/serialNumber=410D8E68431818774B30B19BE5CEF53D47190B2C Certificate serial: 0177 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQ2OaEMYGHdLMLGb5c71PUcZCyw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9111C49/7A7F1972DFF111EDB0CAEB69C4F9AE02/QQ2OaEMYGHdLMLGb5c71PUcZCyw.mft Manifest number: 0173 Signing time: Thu 03 Apr 2025 03:08:42 +0000 Manifest this update: Thu 03 Apr 2025 03:08:42 +0000 Manifest next update: Thu 10 Apr 2025 03:08:41 +0000 Files and hashes: 1: QQ2OaEMYGHdLMLGb5c71PUcZCyw.crl (hash: Xmw6nu+AhVI/wPr9xUxg7zr4NKT5I/Sfd0b25R6nFNI=) 2: 5BE1A39CDFF411EDAF183A6BC4F9AE02.roa (hash: kSko0IDUfwmI+eYoz/fG8AvnBwnpICm84IEH409J6Ko=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9111C49/7A7F1972DFF111EDB0CAEB69C4F9AE02/QQ2OaEMYGHdLMLGb5c71PUcZCyw.crl rsync://rpki.apnic.net/member_repository/A9111C49/7A7F1972DFF111EDB0CAEB69C4F9AE02/QQ2OaEMYGHdLMLGb5c71PUcZCyw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQ2OaEMYGHdLMLGb5c71PUcZCyw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 03:08:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 375 (0x177) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9111C49 Validity Not Before: Apr 3 03:08:42 2025 GMT Not After : Apr 10 03:08:41 2025 GMT Subject: CN=67edfbba-33b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:e0:5c:f9:e6:37:5c:7a:8c:ba:8b:fc:33:50: 82:24:e2:1e:01:48:bd:10:db:6b:43:5b:d5:17:c3: 02:fe:39:fb:a8:e4:3d:b3:79:69:63:ac:20:9a:57: 10:dd:5c:94:b3:02:1c:ea:6e:65:27:46:0f:35:3b: 3c:9c:b9:52:e3:1d:b7:13:d2:40:34:be:5b:1c:78: 88:15:12:2a:49:76:1c:b3:6e:cb:a9:c0:51:ef:6e: 8b:5b:13:f9:03:c2:33:d4:aa:6e:4e:01:d1:85:70: 10:10:5d:a2:9e:73:aa:e6:b1:e7:9b:c2:1e:98:94: 50:a4:0c:2f:d3:ac:28:ea:0f:ec:eb:a8:93:b1:fb: bc:c8:a8:94:e8:4c:35:2c:f2:c5:18:90:de:31:43: 42:69:df:62:0c:59:1d:d1:22:f7:80:f1:b8:9c:c0: 02:0d:68:31:a7:c8:25:74:1a:af:66:ca:57:41:54: 46:3a:93:e2:5c:cc:a7:e0:e0:4d:52:ab:6c:39:27: 7d:3d:52:e8:cf:44:d2:f7:cd:de:e1:fe:31:a5:73: 12:50:d0:c6:ed:09:3e:f7:fc:7f:57:0f:d6:55:5c: 0b:13:77:2d:0d:1a:15:45:71:50:42:96:ee:27:06: 78:47:05:94:86:9d:44:ae:64:65:c8:9d:50:c9:08: 90:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:4D:AB:85:C0:EB:38:47:06:E4:59:65:6E:1B:1E:18:4C:A6:3C:A0 X509v3 Authority Key Identifier: keyid:41:0D:8E:68:43:18:18:77:4B:30:B1:9B:E5:CE:F5:3D:47:19:0B:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9111C49/7A7F1972DFF111EDB0CAEB69C4F9AE02/QQ2OaEMYGHdLMLGb5c71PUcZCyw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQ2OaEMYGHdLMLGb5c71PUcZCyw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111C49/7A7F1972DFF111EDB0CAEB69C4F9AE02/QQ2OaEMYGHdLMLGb5c71PUcZCyw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:9c:19:f5:b6:63:67:11:a9:ee:13:eb:87:6d:6f:d6:24:94: e9:f0:61:ef:de:9d:c7:dd:61:cb:12:4a:17:b9:f4:4d:4c:b4: eb:f8:f7:5b:bc:24:b8:d7:42:c2:a6:4e:a8:9e:4b:ad:49:f3: 0b:cd:13:9a:56:5a:41:24:41:7f:40:b5:11:be:7a:2d:05:2c: c5:24:94:80:ff:67:7e:9e:6c:12:cc:0e:2f:53:c9:28:95:20: a2:36:a6:d3:61:6b:59:f5:97:28:66:d0:97:2a:7a:8d:eb:44: f6:11:94:28:a7:f3:5e:ab:fe:88:91:14:4d:d4:5d:ac:95:90: d8:c6:f0:10:22:6c:6e:fa:65:2e:59:40:e2:78:55:49:87:4d: 7a:56:1b:90:f3:91:49:c1:26:fd:ce:a1:22:41:04:e3:a0:a8: 9c:fb:16:33:9f:a0:3a:41:61:68:5c:d2:ea:20:64:45:72:b6: e6:24:0c:b5:11:c5:ba:e8:18:b9:fe:1a:b7:7b:56:a8:60:67: d5:f4:06:5b:49:b1:5a:b8:af:27:94:05:03:ad:2a:73:18:bd: 41:f7:2f:61:15:46:c1:9c:43:36:51:21:b4:e5:45:16:e7:b0: 3f:25:8e:b7:0c:ba:59:33:cb:e3:df:c9:d4:fb:e8:38:31:3e: 1f:8f:46:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTFDNDkxMTAvBgNVBAUTKDQxMEQ4RTY4NDMxODE4Nzc0QjMwQjE5QkU1Q0VGNTNE NDcxOTBCMkMwHhcNMjUwNDAzMDMwODQyWhcNMjUwNDEwMDMwODQxWjAYMRYwFAYD VQQDEw02N2VkZmJiYS0zM2IzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxuBc+eY3XHqMuov8M1CCJOIeAUi9ENtrQ1vVF8MC/jn7qOQ9s3lpY6wgmlcQ 3VyUswIc6m5lJ0YPNTs8nLlS4x23E9JANL5bHHiIFRIqSXYcs27LqcBR726LWxP5 A8Iz1KpuTgHRhXAQEF2innOq5rHnm8IemJRQpAwv06wo6g/s66iTsfu8yKiU6Ew1 LPLFGJDeMUNCad9iDFkd0SL3gPG4nMACDWgxp8gldBqvZspXQVRGOpPiXMyn4OBN UqtsOSd9PVLoz0TS983e4f4xpXMSUNDG7Qk+9/x/Vw/WVVwLE3ctDRoVRXFQQpbu JwZ4RwWUhp1ErmRlyJ1QyQiQqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGlNq4XA 6zhHBuRZZW4bHhhMpjygMB8GA1UdIwQYMBaAFEENjmhDGBh3SzCxm+XO9T1HGQss MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMUM0OS83QTdGMTk3MkRG RjExMUVEQjBDQUVCNjlDNEY5QUUwMi9RUTJPYUVNWUdIZExNTEdiNWM3MVBVY1pD eXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FRMk9hRU1ZR0hkTE1MR2I1YzcxUFVjWkN5dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MUM0OS83QTdGMTk3MkRGRjExMUVEQjBDQUVCNjlDNEY5QUUwMi9RUTJPYUVNWUdI ZExNTEdiNWM3MVBVY1pDeXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCvnBn1tmNnEanuE+uHbW/WJJTp8GHv3p3H3WHLEkoXufRNTLTr+Pdb vCS410LCpk6onkutSfMLzROaVlpBJEF/QLURvnotBSzFJJSA/2d+nmwSzA4vU8ko lSCiNqbTYWtZ9ZcoZtCXKnqN60T2EZQop/Neq/6IkRRN1F2slZDYxvAQImxu+mUu WUDieFVJh016VhuQ85FJwSb9zqEiQQTjoKic+xYzn6A6QWFoXNLqIGRFcrbmJAy1 EcW66Bi5/hq3e1aoYGfV9AZbSbFauK8nlAUDrSpzGL1B9y9hFUbBnEM2USG05UUW 57A/JY63DLpZM8vj38nU++g4MT4fj0aH -----END CERTIFICATE-----Generated at Fri Apr 4 21:51:58 2025 by rpki-client