$ rpki-client -vvf rpki.apnic.net/member_repository/A912087D/4C15858C28ED11ED8B597B40C4F9AE02/QqhNjAiJrcVYYGY5k7zKg2EnG_4.mft File: QqhNjAiJrcVYYGY5k7zKg2EnG_4.mft (raw, json) Hash identifier: q9rGBCzxLeXJNoH1e+97l0atWbyEVJSeICC8dUeRrzg= Subject key identifier: 88:CE:60:D9:06:1A:FA:BA:DC:E6:5E:1B:24:CA:6B:C3:7F:3D:48:BC Authority key identifier: 42:A8:4D:8C:08:89:AD:C5:58:60:66:39:93:BC:CA:83:61:27:1B:FE Certificate issuer: /CN=A912087D/serialNumber=42A84D8C0889ADC55860663993BCCA8361271BFE Certificate serial: 0220 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QqhNjAiJrcVYYGY5k7zKg2EnG_4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912087D/4C15858C28ED11ED8B597B40C4F9AE02/QqhNjAiJrcVYYGY5k7zKg2EnG_4.mft Manifest number: 021D Signing time: Mon 21 Apr 2025 01:35:15 +0000 Manifest this update: Mon 21 Apr 2025 01:35:15 +0000 Manifest next update: Mon 28 Apr 2025 01:35:15 +0000 Files and hashes: 1: QqhNjAiJrcVYYGY5k7zKg2EnG_4.crl (hash: iPNWzWpv3YlgaWoSpgvAwlTK2fP+162EBSDUQ3MB7OQ=) 2: 07E789A228F011ED94BE9345C4F9AE02.roa (hash: jWdCBukfmwdIx7AmCNNn8IWevCXBAGWSyySXEJZ9MpI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912087D/4C15858C28ED11ED8B597B40C4F9AE02/QqhNjAiJrcVYYGY5k7zKg2EnG_4.crl rsync://rpki.apnic.net/member_repository/A912087D/4C15858C28ED11ED8B597B40C4F9AE02/QqhNjAiJrcVYYGY5k7zKg2EnG_4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QqhNjAiJrcVYYGY5k7zKg2EnG_4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 01:35:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 544 (0x220) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912087D, serialNumber=42A84D8C0889ADC55860663993BCCA8361271BFE Validity Not Before: Apr 21 01:35:15 2025 GMT Not After : Apr 28 01:35:15 2025 GMT Subject: CN=6805a0d3-b530 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:cb:a0:d4:07:f3:f6:ee:11:58:05:25:b8:2e: 19:1a:e4:f3:53:73:47:7f:f3:ca:d8:0b:2f:86:26: 35:95:54:2a:da:36:37:fd:58:fb:3d:a6:b3:0b:e7: 08:f4:25:9c:50:9c:d2:d1:d2:6d:bc:fe:1f:41:dc: 6e:05:0d:92:75:69:d6:9a:03:c3:04:20:c8:6c:37: 7a:b9:0d:62:d6:f1:07:c0:f6:6c:9b:25:37:e1:3a: 34:99:ba:ba:56:98:a9:db:63:38:72:02:36:bf:22: 69:01:f3:87:ce:7f:22:b8:62:ee:14:15:95:a7:0c: e5:54:fa:36:72:f1:00:d9:48:c3:85:6f:5c:fd:64: fe:55:fa:56:79:ed:b9:60:7a:e2:ea:57:9e:9a:ca: a4:9b:83:fd:43:ce:2c:37:93:b9:a6:15:1b:81:70: 8e:c4:0e:c7:53:d2:39:df:47:88:c3:60:73:50:8e: a7:d5:32:29:de:ae:01:5f:6c:48:05:5c:23:f6:db: e2:c3:73:b1:64:18:14:56:99:45:18:18:36:f4:d9: 32:c4:4d:27:1d:74:94:1e:ed:a8:fb:15:71:5d:1a: ae:08:96:12:ff:13:85:b4:f4:ad:0e:82:fd:f2:e4: f8:90:a4:12:61:3a:58:04:d2:ff:bc:0a:3c:ca:98: 62:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:CE:60:D9:06:1A:FA:BA:DC:E6:5E:1B:24:CA:6B:C3:7F:3D:48:BC X509v3 Authority Key Identifier: keyid:42:A8:4D:8C:08:89:AD:C5:58:60:66:39:93:BC:CA:83:61:27:1B:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912087D/4C15858C28ED11ED8B597B40C4F9AE02/QqhNjAiJrcVYYGY5k7zKg2EnG_4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QqhNjAiJrcVYYGY5k7zKg2EnG_4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912087D/4C15858C28ED11ED8B597B40C4F9AE02/QqhNjAiJrcVYYGY5k7zKg2EnG_4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:2c:03:a8:e7:dd:f6:79:94:dd:b4:b4:c8:69:02:34:63:98: 98:8b:df:94:a0:71:2e:6b:b3:8e:7f:0a:23:64:fe:11:08:5a: 16:9d:e4:f9:5d:30:9f:0d:f6:4a:5c:8d:92:70:c7:4a:6d:34: f3:d1:ea:1a:c1:02:69:6c:30:d1:c8:d0:fc:ed:d2:32:11:d0: d4:c7:12:b9:1d:5c:a5:f8:30:1b:5d:fa:15:c1:e4:ef:2c:8a: 38:16:65:78:ad:e6:e4:17:5f:da:b2:43:98:dc:52:a2:3f:2b: 73:9a:61:65:f8:ed:e5:22:a8:be:6b:e7:07:82:3f:bb:77:33: 9d:c8:47:2d:db:2c:3d:98:71:c6:3f:b9:0a:a5:09:34:34:63: fc:49:9d:2f:10:4e:63:4a:5a:7c:97:f0:0c:1e:c8:87:81:35: d6:63:65:96:9d:3c:e8:77:25:05:37:aa:c5:1d:ab:fd:da:ab: 15:d4:12:62:ca:b6:cd:5b:9c:f9:ec:fe:13:21:72:a5:75:3e: 56:91:0d:14:c3:31:81:e0:e3:60:2f:1e:73:2e:9b:60:0c:5e: 1f:05:72:2d:a7:6a:64:5a:34:08:ff:da:bc:28:c8:e4:5b:ec: 9d:8e:7a:68:a6:c7:72:3a:b1:01:04:96:f3:f6:b8:1d:88:cd: f3:72:94:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAiAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjA4N0QxMTAvBgNVBAUTKDQyQTg0RDhDMDg4OUFEQzU1ODYwNjYzOTkzQkNDQTgz NjEyNzFCRkUwHhcNMjUwNDIxMDEzNTE1WhcNMjUwNDI4MDEzNTE1WjAYMRYwFAYD VQQDEw02ODA1YTBkMy1iNTMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzsug1Afz9u4RWAUluC4ZGuTzU3NHf/PK2AsvhiY1lVQq2jY3/Vj7PaazC+cI 9CWcUJzS0dJtvP4fQdxuBQ2SdWnWmgPDBCDIbDd6uQ1i1vEHwPZsmyU34To0mbq6 Vpip22M4cgI2vyJpAfOHzn8iuGLuFBWVpwzlVPo2cvEA2UjDhW9c/WT+VfpWee25 YHri6leemsqkm4P9Q84sN5O5phUbgXCOxA7HU9I530eIw2BzUI6n1TIp3q4BX2xI BVwj9tviw3OxZBgUVplFGBg29NkyxE0nHXSUHu2o+xVxXRquCJYS/xOFtPStDoL9 8uT4kKQSYTpYBNL/vAo8yphiIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIjOYNkG Gvq63OZeGyTKa8N/PUi8MB8GA1UdIwQYMBaAFEKoTYwIia3FWGBmOZO8yoNhJxv+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDg3RC80QzE1ODU4QzI4 RUQxMUVEOEI1OTdCNDBDNEY5QUUwMi9RcWhOakFpSnJjVllZR1k1azd6S2cyRW5H XzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FxaE5qQWlKcmNWWVlHWTVrN3pLZzJFbkdfNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDg3RC80QzE1ODU4QzI4RUQxMUVEOEI1OTdCNDBDNEY5QUUwMi9RcWhOakFpSnJj VllZR1k1azd6S2cyRW5HXzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGLAOo5932eZTdtLTIaQI0Y5iYi9+UoHEua7OOfwojZP4RCFoWneT5 XTCfDfZKXI2ScMdKbTTz0eoawQJpbDDRyND87dIyEdDUxxK5HVyl+DAbXfoVweTv LIo4FmV4rebkF1/askOY3FKiPytzmmFl+O3lIqi+a+cHgj+7dzOdyEct2yw9mHHG P7kKpQk0NGP8SZ0vEE5jSlp8l/AMHsiHgTXWY2WWnTzodyUFN6rFHav92qsV1BJi yrbNW5z57P4TIXKldT5WkQ0UwzGB4ONgLx5zLptgDF4fBXItp2pkWjQI/9q8KMjk W+ydjnpopsdyOrEBBJbz9rgdiM3zcpTA -----END CERTIFICATE-----Generated at Tue Apr 22 11:15:49 2025 by rpki-client