$ rpki-client -vvf rpki.apnic.net/member_repository/A9135B24/3BA691A8F83D11E8B0EC3448C4F9AE02/qrLSCRHmfiw6NccByHZaaFtQDsc.mft File: qrLSCRHmfiw6NccByHZaaFtQDsc.mft (raw, json) Hash identifier: Ep3t8pUWZ61RZow2eHjERHogpnxgIv0YzyXFNKeKZZ0= Subject key identifier: EA:71:13:E1:CC:AD:21:1E:91:A8:75:30:50:2E:F7:35:69:C0:FA:29 Authority key identifier: AA:B2:D2:09:11:E6:7E:2C:3A:35:C7:01:C8:76:5A:68:5B:50:0E:C7 Certificate issuer: /CN=A9135B24/serialNumber=AAB2D20911E67E2C3A35C701C8765A685B500EC7 Certificate serial: 1182 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrLSCRHmfiw6NccByHZaaFtQDsc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135B24/3BA691A8F83D11E8B0EC3448C4F9AE02/qrLSCRHmfiw6NccByHZaaFtQDsc.mft Manifest number: 117B Signing time: Fri 04 Apr 2025 17:18:24 +0000 Manifest this update: Fri 04 Apr 2025 17:18:23 +0000 Manifest next update: Fri 11 Apr 2025 17:18:23 +0000 Files and hashes: 1: qrLSCRHmfiw6NccByHZaaFtQDsc.crl (hash: Vvi3JjlTYSSqtnI5UhryeZY1tkyZyhaFpvXvG0SNaG8=) 2: 5AC7F986F83E11E8B1FA8F4AC4F9AE02.roa (hash: iW6YjMpstfMKbZY59Tg1WeEsakFUmD2BPmWINCFK44U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135B24/3BA691A8F83D11E8B0EC3448C4F9AE02/qrLSCRHmfiw6NccByHZaaFtQDsc.crl rsync://rpki.apnic.net/member_repository/A9135B24/3BA691A8F83D11E8B0EC3448C4F9AE02/qrLSCRHmfiw6NccByHZaaFtQDsc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrLSCRHmfiw6NccByHZaaFtQDsc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 17:18:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4482 (0x1182) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135B24 Validity Not Before: Apr 4 17:18:23 2025 GMT Not After : Apr 11 17:18:23 2025 GMT Subject: CN=67f0145f-d586 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a0:78:59:43:7e:15:0b:36:bb:75:23:4f:c2: 41:f3:a7:fc:12:14:ca:e2:19:5b:05:41:4c:03:d2: 1c:ce:14:e8:ca:86:39:2f:a4:d4:92:fb:24:34:30: cd:b5:e7:15:e6:88:dc:b8:6e:5e:61:d8:5d:a5:83: 74:a4:55:ea:bf:97:97:b1:04:4b:c1:33:eb:16:d3: 75:82:1d:50:9a:66:b9:bb:f9:4e:38:7b:25:0f:4c: 2e:46:79:1d:94:16:59:a4:c0:91:61:d5:bd:be:83: c2:8b:e6:e6:1b:03:74:5c:e2:87:2f:32:fb:da:8d: c7:06:1e:e3:13:04:27:6c:4e:ae:90:d9:f9:4a:db: 01:ac:61:ee:9e:d6:03:4e:39:72:08:01:82:c8:44: f6:02:e4:83:b6:e7:fc:e3:0e:66:ff:4b:88:0b:17: 88:13:f2:0c:fa:26:54:1b:81:17:06:78:a5:4c:81: 90:81:5e:27:01:48:f7:90:27:4b:0e:16:d2:bc:fe: d2:5a:49:85:6e:34:02:79:25:6a:f9:61:77:d2:c9: 59:4b:76:9b:e4:b7:93:c5:7d:2b:77:4a:77:ff:f5: 4f:4f:88:43:86:c4:61:33:40:a5:fc:f6:06:5a:31: ba:1e:7a:f1:62:9f:2b:9b:ff:7a:9b:05:63:59:b6: 8b:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:71:13:E1:CC:AD:21:1E:91:A8:75:30:50:2E:F7:35:69:C0:FA:29 X509v3 Authority Key Identifier: keyid:AA:B2:D2:09:11:E6:7E:2C:3A:35:C7:01:C8:76:5A:68:5B:50:0E:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135B24/3BA691A8F83D11E8B0EC3448C4F9AE02/qrLSCRHmfiw6NccByHZaaFtQDsc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrLSCRHmfiw6NccByHZaaFtQDsc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135B24/3BA691A8F83D11E8B0EC3448C4F9AE02/qrLSCRHmfiw6NccByHZaaFtQDsc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:f6:6a:85:9a:02:17:39:77:60:e9:24:52:89:a9:da:4f:2e: d1:21:05:42:f2:cd:dc:6c:f9:8c:03:91:8e:8a:b3:4d:5d:e7: 7f:92:b0:59:54:41:50:0b:34:3d:9d:9f:00:9a:cc:88:ce:31: bb:90:f9:b5:0c:54:d5:63:51:d6:cf:a2:ad:66:99:be:fc:32: 8d:00:ab:f8:89:6f:23:8e:22:b3:64:1a:f1:1f:df:b8:28:1c: fd:3c:93:ed:4d:3e:ad:ce:7f:0e:d1:10:52:03:6e:51:a3:b4: dc:7f:6a:06:0d:0f:35:11:b4:ce:a4:89:6c:2e:1b:b0:07:f1: 31:10:28:fa:7b:3d:cf:35:f9:cf:ee:c4:e5:4e:02:b6:30:73: b9:79:db:4a:b9:b3:fc:f2:b5:8b:01:af:7b:4a:1c:2d:36:38: 96:1f:a5:0f:a8:1c:6e:84:f7:17:3c:c9:fc:1a:d8:28:b1:8f: 51:c4:5a:95:6a:4c:93:1f:21:5a:6c:50:c1:87:c6:13:15:5f: 4a:b8:0e:de:24:d0:af:ac:ec:f4:17:a4:9b:56:b4:81:91:b4: ce:81:93:0e:9b:bd:dc:f3:05:a7:c4:33:47:b5:d3:7f:4d:bf: 77:9b:28:cf:07:63:a6:e4:32:c9:f9:f0:4e:26:f2:21:3f:02: 19:ef:76:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEYIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzVCMjQxMTAvBgNVBAUTKEFBQjJEMjA5MTFFNjdFMkMzQTM1QzcwMUM4NzY1QTY4 NUI1MDBFQzcwHhcNMjUwNDA0MTcxODIzWhcNMjUwNDExMTcxODIzWjAYMRYwFAYD VQQDEw02N2YwMTQ1Zi1kNTg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtKB4WUN+FQs2u3UjT8JB86f8EhTK4hlbBUFMA9IczhToyoY5L6TUkvskNDDN tecV5ojcuG5eYdhdpYN0pFXqv5eXsQRLwTPrFtN1gh1Qmma5u/lOOHslD0wuRnkd lBZZpMCRYdW9voPCi+bmGwN0XOKHLzL72o3HBh7jEwQnbE6ukNn5StsBrGHuntYD TjlyCAGCyET2AuSDtuf84w5m/0uICxeIE/IM+iZUG4EXBnilTIGQgV4nAUj3kCdL DhbSvP7SWkmFbjQCeSVq+WF30slZS3ab5LeTxX0rd0p3//VPT4hDhsRhM0Cl/PYG WjG6HnrxYp8rm/96mwVjWbaLDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOpxE+HM rSEekah1MFAu9zVpwPopMB8GA1UdIwQYMBaAFKqy0gkR5n4sOjXHAch2WmhbUA7H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNUIyNC8zQkE2OTFBOEY4 M0QxMUU4QjBFQzM0NDhDNEY5QUUwMi9xckxTQ1JIbWZpdzZOY2NCeUhaYWFGdFFE c2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FyTFNDUkhtZml3Nk5jY0J5SFphYUZ0UURzYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NUIyNC8zQkE2OTFBOEY4M0QxMUU4QjBFQzM0NDhDNEY5QUUwMi9xckxTQ1JIbWZp dzZOY2NCeUhaYWFGdFFEc2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA39mqFmgIXOXdg6SRSianaTy7RIQVC8s3cbPmMA5GOirNNXed/krBZ VEFQCzQ9nZ8AmsyIzjG7kPm1DFTVY1HWz6KtZpm+/DKNAKv4iW8jjiKzZBrxH9+4 KBz9PJPtTT6tzn8O0RBSA25Ro7Tcf2oGDQ81EbTOpIlsLhuwB/ExECj6ez3PNfnP 7sTlTgK2MHO5edtKubP88rWLAa97ShwtNjiWH6UPqBxuhPcXPMn8GtgosY9RxFqV akyTHyFabFDBh8YTFV9KuA7eJNCvrOz0F6SbVrSBkbTOgZMOm73c8wWnxDNHtdN/ Tb93myjPB2Om5DLJ+fBOJvIhPwIZ73Zc -----END CERTIFICATE-----Generated at Sun Apr 6 02:29:42 2025 by rpki-client