$ rpki-client -vvf rpki.apnic.net/member_repository/A9146179/54E04716AA7C11EFA33BFD77C4F9AE02/QFAqSwwf9GgvUuNAZARERSh9S7g.mft File: QFAqSwwf9GgvUuNAZARERSh9S7g.mft (raw, json) Hash identifier: fes3Dr1T6UnBil2ncnz21niLglOVPpBKjuSlpHWYhhI= Subject key identifier: F5:A1:63:4E:99:2B:4F:49:57:CC:D5:6C:E3:CE:61:FD:0D:1B:F5:9F Authority key identifier: 40:50:2A:4B:0C:1F:F4:68:2F:52:E3:40:64:04:44:45:28:7D:4B:B8 Certificate issuer: /CN=A9146179/serialNumber=40502A4B0C1FF4682F52E34064044445287D4BB8 Certificate serial: 42 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFAqSwwf9GgvUuNAZARERSh9S7g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146179/54E04716AA7C11EFA33BFD77C4F9AE02/QFAqSwwf9GgvUuNAZARERSh9S7g.mft Manifest number: 41 Signing time: Sat 29 Mar 2025 06:46:13 +0000 Manifest this update: Sat 29 Mar 2025 06:46:13 +0000 Manifest next update: Sat 05 Apr 2025 06:46:13 +0000 Files and hashes: 1: QFAqSwwf9GgvUuNAZARERSh9S7g.crl (hash: aZQ7m81Vl0mXHZPfGrFF8rEKftUAFFOp8lIJ5WDTXRY=) 2: D2158BC4AA7C11EF9A76A779C4F9AE02.roa (hash: LaPRc5QCE3D/egNmbBmNccMoDV83OnAl0IeSttB5Fwk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146179/54E04716AA7C11EFA33BFD77C4F9AE02/QFAqSwwf9GgvUuNAZARERSh9S7g.crl rsync://rpki.apnic.net/member_repository/A9146179/54E04716AA7C11EFA33BFD77C4F9AE02/QFAqSwwf9GgvUuNAZARERSh9S7g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFAqSwwf9GgvUuNAZARERSh9S7g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 05:08:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66 (0x42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146179 Validity Not Before: Mar 29 06:46:13 2025 GMT Not After : Apr 5 06:46:13 2025 GMT Subject: CN=67e79735-26ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:ec:c2:1c:17:fa:77:3b:15:ac:b7:ea:a5:c7: 95:c9:db:84:69:a5:c5:8e:29:6d:c3:bc:fc:67:97: 0f:1c:de:31:0c:07:42:fa:e3:c9:0b:65:ac:c7:3f: 57:be:a2:e2:64:ae:ec:99:45:ad:10:62:21:94:cc: e5:42:19:35:7d:7c:17:c0:45:43:2b:0f:88:48:89: 8f:89:54:b2:81:bc:f0:ea:a5:cd:c9:5e:10:cb:67: 1d:dc:8c:95:20:a8:7e:2c:62:da:38:68:c8:4d:1b: 15:37:3c:07:e7:48:32:70:0a:8f:e0:ce:f5:b5:c9: bb:4d:d7:b9:0c:90:af:81:79:34:f8:ed:0f:ed:65: 00:1a:87:6a:1a:fd:72:8b:54:30:5d:f5:30:71:d3: e2:17:68:85:89:f6:19:c0:d0:fa:e7:46:1e:f0:84: c4:63:61:fd:93:b9:b0:cd:a3:33:88:5d:56:6e:67: 74:1d:9c:f9:e2:6d:80:42:39:20:83:b6:43:9a:56: 1a:a0:73:81:31:b3:c4:ed:f2:2d:c4:70:7b:27:2e: bd:fb:9a:47:85:f8:84:f1:5f:8d:23:35:f4:fd:cb: 7a:d5:87:7f:4b:e7:d8:ca:c0:99:46:77:51:5d:cc: 79:ad:b3:8c:86:24:be:c9:69:33:5d:4c:d5:03:5d: e0:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:A1:63:4E:99:2B:4F:49:57:CC:D5:6C:E3:CE:61:FD:0D:1B:F5:9F X509v3 Authority Key Identifier: keyid:40:50:2A:4B:0C:1F:F4:68:2F:52:E3:40:64:04:44:45:28:7D:4B:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146179/54E04716AA7C11EFA33BFD77C4F9AE02/QFAqSwwf9GgvUuNAZARERSh9S7g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFAqSwwf9GgvUuNAZARERSh9S7g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146179/54E04716AA7C11EFA33BFD77C4F9AE02/QFAqSwwf9GgvUuNAZARERSh9S7g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:ba:af:05:7e:50:08:f3:59:80:18:b5:7a:a1:e3:7f:c5:62: 93:92:a4:99:e5:d9:07:d5:57:ee:1c:21:88:e7:9c:c6:bf:e4: 00:58:c8:f6:40:a4:23:30:7e:68:d5:f6:a5:1d:af:27:da:ef: 0b:47:c3:a3:73:87:65:10:9c:ba:0c:c5:92:8a:f4:7d:12:0e: b2:92:24:c0:44:c0:c5:e5:05:b8:bc:13:17:1c:53:b5:8f:d0: 8f:41:c8:48:e6:f5:9f:13:d9:af:33:ce:55:4c:df:8f:78:a2: 0c:1d:e0:bd:30:6a:92:8b:02:6f:75:e8:e0:eb:62:ba:7f:2c: 81:d7:05:bf:da:11:ea:a2:80:84:8e:a6:2a:56:25:5c:4f:73: 8f:36:b0:21:ab:57:84:63:23:c0:b4:49:cb:3b:42:bc:95:43: 47:a8:b6:4c:25:55:05:7f:22:5b:3f:50:6f:d8:e5:b4:73:33: 84:12:d3:35:6a:0a:f9:77:26:97:9b:38:11:d3:1c:ec:88:a0: e6:81:77:2b:d0:56:da:f6:cd:1c:5a:21:06:b4:2f:92:bd:7e: 77:92:42:ea:4d:27:9c:f8:4e:99:ae:86:9e:47:c5:36:00:75: f6:f0:17:3d:d4:d9:c2:47:bc:eb:2d:27:92:52:15:44:36:8c: d1:33:ec:46 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NjE3OTExMC8GA1UEBRMoNDA1MDJBNEIwQzFGRjQ2ODJGNTJFMzQwNjQwNDQ0NDUy ODdENEJCODAeFw0yNTAzMjkwNjQ2MTNaFw0yNTA0MDUwNjQ2MTNaMBgxFjAUBgNV BAMTDTY3ZTc5NzM1LTI2ZWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDQ7MIcF/p3OxWst+qlx5XJ24RppcWOKW3DvPxnlw8c3jEMB0L648kLZazHP1e+ ouJkruyZRa0QYiGUzOVCGTV9fBfARUMrD4hIiY+JVLKBvPDqpc3JXhDLZx3cjJUg qH4sYto4aMhNGxU3PAfnSDJwCo/gzvW1ybtN17kMkK+BeTT47Q/tZQAah2oa/XKL VDBd9TBx0+IXaIWJ9hnA0PrnRh7whMRjYf2TubDNozOIXVZuZ3QdnPnibYBCOSCD tkOaVhqgc4Exs8Tt8i3EcHsnLr37mkeF+ITxX40jNfT9y3rVh39L59jKwJlGd1Fd zHmts4yGJL7JaTNdTNUDXeBRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU9aFjTpkr T0lXzNVs485h/Q0b9Z8wHwYDVR0jBBgwFoAUQFAqSwwf9GgvUuNAZARERSh9S7gw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ2MTc5LzU0RTA0NzE2QUE3 QzExRUZBMzNCRkQ3N0M0RjlBRTAyL1FGQXFTd3dmOUdndlV1TkFaQVJFUlNoOVM3 Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUUZBcVN3d2Y5R2d2VXVOQVpBUkVSU2g5UzdnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ2 MTc5LzU0RTA0NzE2QUE3QzExRUZBMzNCRkQ3N0M0RjlBRTAyL1FGQXFTd3dmOUdn dlV1TkFaQVJFUlNoOVM3Zy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGm6rwV+UAjzWYAYtXqh43/FYpOSpJnl2QfVV+4cIYjnnMa/5ABYyPZA pCMwfmjV9qUdryfa7wtHw6Nzh2UQnLoMxZKK9H0SDrKSJMBEwMXlBbi8ExccU7WP 0I9ByEjm9Z8T2a8zzlVM3494ogwd4L0wapKLAm916ODrYrp/LIHXBb/aEeqigISO pipWJVxPc482sCGrV4RjI8C0Scs7QryVQ0eotkwlVQV/Ils/UG/Y5bRzM4QS0zVq Cvl3JpebOBHTHOyIoOaBdyvQVtr2zRxaIQa0L5K9fneSQupNJ5z4Tpmuhp5HxTYA dfbwFz3U2cJHvOstJ5JSFUQ2jNEz7EY= -----END CERTIFICATE-----Generated at Fri Apr 4 22:27:03 2025 by rpki-client