$ rpki-client -vvf rpki.apnic.net/member_repository/A9111ED2/621E8610845011EA8047CE7DC4F9AE02/QMCQUT8kAYkgsVHapVRJwV3IS-s.mft File: QMCQUT8kAYkgsVHapVRJwV3IS-s.mft (raw, json) Hash identifier: hlJBjVHzHNOrPojFgYgJ6hwXKDCUQUo7eMHoXqhcrBk= Subject key identifier: CE:E3:64:1B:95:47:1F:0F:D3:AF:DD:BB:2C:27:90:4B:90:3D:D7:5C Authority key identifier: 40:C0:90:51:3F:24:01:89:20:B1:51:DA:A5:54:49:C1:5D:C8:4B:EB Certificate issuer: /CN=A9111ED2/serialNumber=40C090513F24018920B151DAA55449C15DC84BEB Certificate serial: 09A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QMCQUT8kAYkgsVHapVRJwV3IS-s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9111ED2/621E8610845011EA8047CE7DC4F9AE02/QMCQUT8kAYkgsVHapVRJwV3IS-s.mft Manifest number: 09A1 Signing time: Sun 20 Apr 2025 19:49:17 +0000 Manifest this update: Sun 20 Apr 2025 19:49:16 +0000 Manifest next update: Sun 27 Apr 2025 19:49:16 +0000 Files and hashes: 1: QMCQUT8kAYkgsVHapVRJwV3IS-s.crl (hash: TIp6cd77/t9C8iYvrd1bVk0l3pXhFqMC5PIzKZmxmBQ=) 2: 1E809CD0845111EAA961467EC4F9AE02.roa (hash: H/OVGlOkL0NhP3BGJyz6i1zChcNr+09N/UDEg/ELwo0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9111ED2/621E8610845011EA8047CE7DC4F9AE02/QMCQUT8kAYkgsVHapVRJwV3IS-s.crl rsync://rpki.apnic.net/member_repository/A9111ED2/621E8610845011EA8047CE7DC4F9AE02/QMCQUT8kAYkgsVHapVRJwV3IS-s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QMCQUT8kAYkgsVHapVRJwV3IS-s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 19:49:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2472 (0x9a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9111ED2, serialNumber=40C090513F24018920B151DAA55449C15DC84BEB Validity Not Before: Apr 20 19:49:16 2025 GMT Not After : Apr 27 19:49:16 2025 GMT Subject: CN=68054fbc-691a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:c6:79:14:e7:6f:f7:2d:0c:5a:66:be:96:73: e5:86:e5:00:08:0d:1c:aa:a6:42:94:dc:1d:95:c6: 5a:69:cf:31:c0:71:27:bf:66:15:de:05:7c:55:4f: 77:09:bc:56:b8:26:fd:d5:56:fd:7e:69:be:e1:e7: 73:8b:80:38:30:c3:46:fe:0a:b4:c4:48:a6:76:d5: 06:ac:f6:19:ec:3b:cb:02:b6:9f:51:f4:55:c9:53: 49:d7:a4:7c:58:7b:df:cc:6a:d3:aa:78:31:bb:30: 53:0e:15:49:a7:c2:c2:53:ab:0f:c3:5c:32:96:bc: 06:75:45:fb:16:63:13:91:ea:e0:e9:90:99:eb:d4: 24:86:0c:bf:41:54:b5:51:6c:cb:4c:2d:6e:dd:d9: 3b:bb:7d:c4:ee:ad:c6:48:1c:44:9e:c4:a4:59:3e: 36:44:9e:4c:66:4c:82:10:80:f0:57:bb:59:26:10: 21:9f:51:e7:de:19:49:9e:1c:69:77:e8:2b:38:35: 2c:d2:a9:07:4d:ab:89:fe:9c:05:2c:f9:e9:dc:de: b3:1b:c2:f3:56:d8:ac:b6:ab:c4:26:87:2b:8b:fb: df:47:86:6a:71:65:64:16:49:32:d4:3a:28:c6:8b: 02:04:d8:e5:f7:32:05:93:b4:22:a8:48:06:b3:c2: 43:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:E3:64:1B:95:47:1F:0F:D3:AF:DD:BB:2C:27:90:4B:90:3D:D7:5C X509v3 Authority Key Identifier: keyid:40:C0:90:51:3F:24:01:89:20:B1:51:DA:A5:54:49:C1:5D:C8:4B:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9111ED2/621E8610845011EA8047CE7DC4F9AE02/QMCQUT8kAYkgsVHapVRJwV3IS-s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QMCQUT8kAYkgsVHapVRJwV3IS-s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111ED2/621E8610845011EA8047CE7DC4F9AE02/QMCQUT8kAYkgsVHapVRJwV3IS-s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:43:36:9f:ef:24:83:78:1b:79:58:81:64:1f:76:f4:0a:82: 70:a8:39:75:9e:16:39:b3:69:1f:3e:a2:89:6b:f6:63:c4:1d: 82:19:9c:98:15:7e:1a:54:f9:69:33:9c:24:1c:9a:28:eb:10: 69:f0:e3:34:5f:41:ff:22:cd:aa:6d:d0:ef:2d:25:e7:97:47: ea:23:c7:81:91:e3:28:76:31:85:6b:c8:81:55:b9:f3:cc:75: ed:23:fd:15:27:2a:b4:a9:fd:4e:7c:64:7c:76:36:73:8e:0a: 01:dc:63:11:ae:98:0e:7d:b5:1d:15:27:f8:53:b5:69:f6:7d: 20:d0:71:e3:a9:f4:e5:81:db:0e:bd:8b:27:ff:ca:b6:d8:d1: de:b8:aa:f9:9b:a6:d5:34:37:92:96:75:0e:77:96:2c:8e:e5: 51:c0:81:86:17:8e:65:07:b4:ee:cb:11:1a:79:09:2e:8e:dc: 55:63:1e:d1:22:1d:0a:f9:0c:0a:d5:5a:f2:b5:93:37:84:3e: 86:7a:f1:61:30:b4:63:f5:64:2f:f5:67:d0:42:98:df:8b:e0: 65:61:c0:b1:35:c6:c5:22:53:64:83:14:ba:f0:af:c4:a9:25: ac:9e:6e:ba:ff:a9:6a:e8:b4:a5:b9:e8:fc:d9:44:62:b7:ef: ca:cd:f9:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCagwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTFFRDIxMTAvBgNVBAUTKDQwQzA5MDUxM0YyNDAxODkyMEIxNTFEQUE1NTQ0OUMx NURDODRCRUIwHhcNMjUwNDIwMTk0OTE2WhcNMjUwNDI3MTk0OTE2WjAYMRYwFAYD VQQDEw02ODA1NGZiYy02OTFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzMZ5FOdv9y0MWma+lnPlhuUACA0cqqZClNwdlcZaac8xwHEnv2YV3gV8VU93 CbxWuCb91Vb9fmm+4edzi4A4MMNG/gq0xEimdtUGrPYZ7DvLArafUfRVyVNJ16R8 WHvfzGrTqngxuzBTDhVJp8LCU6sPw1wylrwGdUX7FmMTkerg6ZCZ69Qkhgy/QVS1 UWzLTC1u3dk7u33E7q3GSBxEnsSkWT42RJ5MZkyCEIDwV7tZJhAhn1Hn3hlJnhxp d+grODUs0qkHTauJ/pwFLPnp3N6zG8LzVtistqvEJocri/vfR4ZqcWVkFkky1Doo xosCBNjl9zIFk7QiqEgGs8JD+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM7jZBuV Rx8P06/duywnkEuQPddcMB8GA1UdIwQYMBaAFEDAkFE/JAGJILFR2qVUScFdyEvr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMUVEMi82MjFFODYxMDg0 NTAxMUVBODA0N0NFN0RDNEY5QUUwMi9RTUNRVVQ4a0FZa2dzVkhhcFZSSndWM0lT LXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FNQ1FVVDhrQVlrZ3NWSGFwVlJKd1YzSVMtcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MUVEMi82MjFFODYxMDg0NTAxMUVBODA0N0NFN0RDNEY5QUUwMi9RTUNRVVQ4a0FZ a2dzVkhhcFZSSndWM0lTLXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgQzaf7ySDeBt5WIFkH3b0CoJwqDl1nhY5s2kfPqKJa/ZjxB2CGZyY FX4aVPlpM5wkHJoo6xBp8OM0X0H/Is2qbdDvLSXnl0fqI8eBkeModjGFa8iBVbnz zHXtI/0VJyq0qf1OfGR8djZzjgoB3GMRrpgOfbUdFSf4U7Vp9n0g0HHjqfTlgdsO vYsn/8q22NHeuKr5m6bVNDeSlnUOd5YsjuVRwIGGF45lB7TuyxEaeQkujtxVYx7R Ih0K+QwK1VrytZM3hD6GevFhMLRj9WQv9WfQQpjfi+BlYcCxNcbFIlNkgxS68K/E qSWsnm66/6lq6LSluej82URit+/KzflE -----END CERTIFICATE-----Generated at Tue Apr 22 06:22:19 2025 by rpki-client