$ rpki-client -vvf rpki.apnic.net/member_repository/A912968B/FC1D2736E12A11EE8684C217C4F9AE02/QuZl4REE2M0IP7GdPG81XHYoxEU.mft File: QuZl4REE2M0IP7GdPG81XHYoxEU.mft (raw, json) Hash identifier: cWJrntT5wsObFW7gf4AfPXCUt40aQuHBSv0ifv+Xi1Y= Subject key identifier: 48:FF:B8:F8:D3:D8:8E:38:03:2A:D2:EB:BB:D5:4B:CD:26:12:3A:D0 Authority key identifier: 42:E6:65:E1:11:04:D8:CD:08:3F:B1:9D:3C:6F:35:5C:76:28:C4:45 Certificate issuer: /CN=A912968B/serialNumber=42E665E11104D8CD083FB19D3C6F355C7628C445 Certificate serial: CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QuZl4REE2M0IP7GdPG81XHYoxEU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912968B/FC1D2736E12A11EE8684C217C4F9AE02/QuZl4REE2M0IP7GdPG81XHYoxEU.mft Manifest number: CB Signing time: Fri 11 Apr 2025 08:28:00 +0000 Manifest this update: Fri 11 Apr 2025 08:28:00 +0000 Manifest next update: Fri 18 Apr 2025 08:28:00 +0000 Files and hashes: 1: QuZl4REE2M0IP7GdPG81XHYoxEU.crl (hash: 6sJRIMwud4zmHmegVK1JTlkXDUzfRF9VHPx+ergKgyk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912968B/FC1D2736E12A11EE8684C217C4F9AE02/QuZl4REE2M0IP7GdPG81XHYoxEU.crl rsync://rpki.apnic.net/member_repository/A912968B/FC1D2736E12A11EE8684C217C4F9AE02/QuZl4REE2M0IP7GdPG81XHYoxEU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QuZl4REE2M0IP7GdPG81XHYoxEU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 08:27:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 207 (0xcf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912968B, serialNumber=42E665E11104D8CD083FB19D3C6F355C7628C445 Validity Not Before: Apr 11 08:28:00 2025 GMT Not After : Apr 18 08:28:00 2025 GMT Subject: CN=67f8d290-0848 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:00:0c:95:76:4e:eb:81:8d:6a:19:b9:15:67: 3a:c4:d3:65:40:c6:cd:8e:8a:ce:7e:70:df:4f:fc: e8:a6:a0:85:84:6e:b1:d3:4f:61:96:4c:e1:1f:33: 39:12:8f:ac:da:74:b5:65:97:25:16:53:df:91:75: 54:2d:8f:f7:e9:89:ae:8a:74:fb:d8:1a:2a:28:13: 21:f6:e0:a4:49:aa:7e:59:73:82:54:6a:26:b5:d6: ea:09:fb:19:fa:fe:42:61:09:bb:98:eb:a9:3a:5a: 2d:8f:57:0f:34:45:db:d2:03:bc:36:4b:19:99:a9: 51:ee:43:0e:4f:e1:b8:b8:b3:e5:32:48:1d:c5:06: 86:a9:b7:f8:a6:32:4a:d2:6b:c4:f8:d8:68:0b:c6: 0f:89:86:f4:2d:b6:c5:04:6a:20:49:03:d6:a6:1e: 5a:db:e4:10:dc:8b:2a:0a:20:5a:71:4b:9f:b1:93: 5a:68:57:27:da:57:73:4e:90:62:21:eb:23:8a:29: e1:78:f3:fc:2a:30:9b:cf:c3:aa:e9:60:36:79:b9: da:07:55:9d:a1:da:10:d9:5a:ee:5e:70:5e:20:d9: 90:f3:8e:a6:ea:f7:b9:6a:86:9d:9d:41:0e:d9:5b: d5:fd:9f:67:26:81:a8:ae:54:99:70:de:4b:eb:19: 42:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:FF:B8:F8:D3:D8:8E:38:03:2A:D2:EB:BB:D5:4B:CD:26:12:3A:D0 X509v3 Authority Key Identifier: keyid:42:E6:65:E1:11:04:D8:CD:08:3F:B1:9D:3C:6F:35:5C:76:28:C4:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912968B/FC1D2736E12A11EE8684C217C4F9AE02/QuZl4REE2M0IP7GdPG81XHYoxEU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QuZl4REE2M0IP7GdPG81XHYoxEU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912968B/FC1D2736E12A11EE8684C217C4F9AE02/QuZl4REE2M0IP7GdPG81XHYoxEU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:6f:66:c1:f7:64:05:2a:e9:ba:a4:37:b9:93:94:1b:4b:22: cc:fb:f0:76:cd:7c:6d:72:20:bf:0d:c7:8c:b5:36:14:3f:69: ef:eb:a6:aa:2c:e2:ec:ca:83:59:12:22:0b:77:3b:8f:e9:1b: cd:2a:57:df:bd:a9:71:26:44:f1:4d:0a:4a:6e:85:36:80:d6: 9f:2c:5b:d1:e1:87:1d:cc:9a:1b:0e:d5:84:68:79:22:29:6e: 17:1c:9c:5f:f2:22:70:38:69:1a:ff:05:ba:bb:52:18:ae:6c: f7:aa:93:67:a8:1b:bb:d2:0e:bb:37:a8:07:87:30:c2:ff:fd: 64:4e:cf:b0:ac:a9:8f:03:e8:28:bf:1f:a4:e3:10:35:e4:3b: 9f:52:4b:33:1c:29:18:8b:c0:e9:d3:28:24:3f:27:7d:1b:20: a0:82:b0:78:ee:bc:7d:dd:3c:47:64:e8:c5:cb:27:4f:90:c3: e5:70:7b:f4:d3:9d:32:46:1f:9f:5d:31:66:a7:70:88:b9:20: 96:80:a4:52:23:d5:ff:c5:d3:bb:18:1c:a1:5e:12:80:7f:df: fd:db:ee:52:5b:75:a4:1d:82:37:2d:4f:86:e1:e9:50:dc:74: 7e:e2:1b:b2:7d:af:19:f8:7e:cd:0a:22:26:0f:89:6b:59:44: ad:19:b4:a4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAM8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjk2OEIxMTAvBgNVBAUTKDQyRTY2NUUxMTEwNEQ4Q0QwODNGQjE5RDNDNkYzNTVD NzYyOEM0NDUwHhcNMjUwNDExMDgyODAwWhcNMjUwNDE4MDgyODAwWjAYMRYwFAYD VQQDEw02N2Y4ZDI5MC0wODQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzAAMlXZO64GNahm5FWc6xNNlQMbNjorOfnDfT/zopqCFhG6x009hlkzhHzM5 Eo+s2nS1ZZclFlPfkXVULY/36YmuinT72BoqKBMh9uCkSap+WXOCVGomtdbqCfsZ +v5CYQm7mOupOlotj1cPNEXb0gO8NksZmalR7kMOT+G4uLPlMkgdxQaGqbf4pjJK 0mvE+NhoC8YPiYb0LbbFBGogSQPWph5a2+QQ3IsqCiBacUufsZNaaFcn2ldzTpBi IesjiinhePP8KjCbz8Oq6WA2ebnaB1WdodoQ2VruXnBeINmQ846m6ve5aoadnUEO 2VvV/Z9nJoGorlSZcN5L6xlClwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEj/uPjT 2I44AyrS67vVS80mEjrQMB8GA1UdIwQYMBaAFELmZeERBNjNCD+xnTxvNVx2KMRF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTY4Qi9GQzFEMjczNkUx MkExMUVFODY4NEMyMTdDNEY5QUUwMi9RdVpsNFJFRTJNMElQN0dkUEc4MVhIWW94 RVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1F1Wmw0UkVFMk0wSVA3R2RQRzgxWEhZb3hFVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OTY4Qi9GQzFEMjczNkUxMkExMUVFODY4NEMyMTdDNEY5QUUwMi9RdVpsNFJFRTJN MElQN0dkUEc4MVhIWW94RVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0b2bB92QFKum6pDe5k5QbSyLM+/B2zXxtciC/DceMtTYUP2nv66aq LOLsyoNZEiILdzuP6RvNKlffvalxJkTxTQpKboU2gNafLFvR4YcdzJobDtWEaHki KW4XHJxf8iJwOGka/wW6u1IYrmz3qpNnqBu70g67N6gHhzDC//1kTs+wrKmPA+go vx+k4xA15DufUkszHCkYi8Dp0ygkPyd9GyCggrB47rx93TxHZOjFyydPkMPlcHv0 050yRh+fXTFmp3CIuSCWgKRSI9X/xdO7GByhXhKAf9/92+5SW3WkHYI3LU+G4elQ 3HR+4huyfa8Z+H7NCiImD4lrWUStGbSk -----END CERTIFICATE-----Generated at Sat Apr 12 19:16:49 2025 by rpki-client