$ rpki-client -vvf rpki.apnic.net/member_repository/A914B45F/8CA20A1CAAD211EF9AA0EF80C4F9AE02/QRUiNGCj3frIOoL8YbK-nsYmwgw.mft File: QRUiNGCj3frIOoL8YbK-nsYmwgw.mft (raw, json) Hash identifier: Xg726/2J1qNnZgZxk0fc9vTgE8OnYwaTtu0pJ3PD0BU= Subject key identifier: B0:10:9C:04:4D:C0:8D:E7:A4:78:B5:9E:6B:EC:D6:55:AE:FF:52:00 Authority key identifier: 41:15:22:34:60:A3:DD:FA:C8:3A:82:FC:61:B2:BE:9E:C6:26:C2:0C Certificate issuer: /CN=A914B45F/serialNumber=4115223460A3DDFAC83A82FC61B2BE9EC626C20C Certificate serial: 4E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QRUiNGCj3frIOoL8YbK-nsYmwgw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B45F/8CA20A1CAAD211EF9AA0EF80C4F9AE02/QRUiNGCj3frIOoL8YbK-nsYmwgw.mft Manifest number: 4D Signing time: Thu 17 Apr 2025 03:15:00 +0000 Manifest this update: Thu 17 Apr 2025 03:15:00 +0000 Manifest next update: Thu 24 Apr 2025 03:15:00 +0000 Files and hashes: 1: QRUiNGCj3frIOoL8YbK-nsYmwgw.crl (hash: aBtlxJCQTNmcnqpK/LpbxGbwsDpo44yi0PIXK4GZ8yk=) 2: 2017BFC2B07211EF83629B37C4F9AE02.roa (hash: mN3+2+qtTy+oq/2mSPD3LwNlHAef4eKWai8tbwHg/2k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B45F/8CA20A1CAAD211EF9AA0EF80C4F9AE02/QRUiNGCj3frIOoL8YbK-nsYmwgw.crl rsync://rpki.apnic.net/member_repository/A914B45F/8CA20A1CAAD211EF9AA0EF80C4F9AE02/QRUiNGCj3frIOoL8YbK-nsYmwgw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QRUiNGCj3frIOoL8YbK-nsYmwgw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Apr 2025 03:14:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78 (0x4e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B45F, serialNumber=4115223460A3DDFAC83A82FC61B2BE9EC626C20C Validity Not Before: Apr 17 03:15:00 2025 GMT Not After : Apr 24 03:15:00 2025 GMT Subject: CN=68007234-9d19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:39:40:59:80:37:4d:d6:8e:4f:00:d9:0e:be: 43:8d:6e:d4:89:81:7d:22:a7:79:37:92:ab:ed:77: 48:c8:1d:a3:37:5f:49:82:52:cd:26:10:15:6f:3d: 57:85:18:1b:19:fc:69:93:f2:48:d9:b5:bb:e4:d9: 3e:49:ac:31:5a:ae:a8:17:bc:96:74:9a:7a:f0:4d: 60:31:1a:7f:88:26:e8:54:10:0e:41:e1:ca:46:f1: 6b:06:d2:f2:90:4a:78:cc:0c:80:45:5e:97:01:11: 08:d9:85:4b:82:b6:84:e6:32:a0:e5:2b:db:19:4c: 78:f2:19:1d:e2:27:c2:a0:1d:a8:a2:f5:ab:a1:87: 62:cd:1c:ef:5e:c1:01:5a:7f:58:8f:e3:73:64:14: f9:fe:a1:36:96:9b:bf:bb:0a:84:48:f5:d2:5a:df: e3:e7:fc:d2:c1:0d:52:f6:9c:14:f8:fd:b5:9e:a6: e0:ac:4d:4d:69:8b:67:8b:f8:25:a2:16:f5:e1:16: f7:62:a0:ce:62:9c:5c:11:ec:3b:87:7e:0c:78:54: 53:25:70:ac:24:7c:dc:d3:82:4f:e0:e8:cb:93:49: 46:c7:ae:b5:b2:bc:69:60:9d:a9:2e:63:b9:84:fe: e6:a3:ef:91:15:f3:70:80:45:b2:d2:09:25:4b:71: 22:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:10:9C:04:4D:C0:8D:E7:A4:78:B5:9E:6B:EC:D6:55:AE:FF:52:00 X509v3 Authority Key Identifier: keyid:41:15:22:34:60:A3:DD:FA:C8:3A:82:FC:61:B2:BE:9E:C6:26:C2:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B45F/8CA20A1CAAD211EF9AA0EF80C4F9AE02/QRUiNGCj3frIOoL8YbK-nsYmwgw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QRUiNGCj3frIOoL8YbK-nsYmwgw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B45F/8CA20A1CAAD211EF9AA0EF80C4F9AE02/QRUiNGCj3frIOoL8YbK-nsYmwgw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:b0:38:73:24:b1:a4:0c:cc:d9:b1:8f:08:62:04:1c:f7:c1: fe:f0:66:87:71:fb:5a:3a:19:7b:7e:44:03:3b:4b:bf:4d:01: 5f:11:5d:3c:a9:ab:b1:4f:fb:7e:8d:11:e9:25:54:7c:92:87: 40:f3:79:d3:ff:75:f6:46:93:9f:52:a7:06:fe:ab:7e:1b:c0: 17:f2:b8:8e:41:42:30:74:89:80:c2:af:dc:5c:44:49:35:99: 29:71:37:97:51:0a:65:5d:ea:4d:75:cc:7c:6a:db:d4:4f:03: 9d:47:f7:85:ed:12:06:0b:e8:b7:aa:de:ed:de:d9:4d:29:e6: 88:47:e1:b9:3c:a9:5e:bd:54:55:85:a3:6c:0d:fc:7c:02:eb: 2e:0c:b6:d2:7a:63:dc:cc:46:1a:8f:2c:0e:06:98:ed:55:c8: b0:fc:98:66:f2:ef:8e:8a:71:e8:05:65:15:d6:e0:ea:8a:f6: cf:0b:d7:94:e1:8d:60:42:cd:41:cd:70:9e:0f:19:c6:d1:f2: 04:96:14:c8:34:36:b2:91:43:3f:5f:41:55:57:bc:70:a9:aa: da:70:f3:a2:9b:8a:7d:f7:c8:0d:1d:5c:90:05:98:27:47:05: 4b:c6:db:d1:22:51:18:5f:38:aa:b8:bd:6d:3c:40:d1:49:d1: 2e:06:54:05 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 QjQ1RjExMC8GA1UEBRMoNDExNTIyMzQ2MEEzRERGQUM4M0E4MkZDNjFCMkJFOUVD NjI2QzIwQzAeFw0yNTA0MTcwMzE1MDBaFw0yNTA0MjQwMzE1MDBaMBgxFjAUBgNV BAMTDTY4MDA3MjM0LTlkMTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDDOUBZgDdN1o5PANkOvkONbtSJgX0ip3k3kqvtd0jIHaM3X0mCUs0mEBVvPVeF GBsZ/GmT8kjZtbvk2T5JrDFarqgXvJZ0mnrwTWAxGn+IJuhUEA5B4cpG8WsG0vKQ SnjMDIBFXpcBEQjZhUuCtoTmMqDlK9sZTHjyGR3iJ8KgHaii9auhh2LNHO9ewQFa f1iP43NkFPn+oTaWm7+7CoRI9dJa3+Pn/NLBDVL2nBT4/bWepuCsTU1pi2eL+CWi FvXhFvdioM5inFwR7DuHfgx4VFMlcKwkfNzTgk/g6MuTSUbHrrWyvGlgnakuY7mE /uaj75EV83CARbLSCSVLcSJbAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUsBCcBE3A jeekeLWea+zWVa7/UgAwHwYDVR0jBBgwFoAUQRUiNGCj3frIOoL8YbK+nsYmwgww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRCNDVGLzhDQTIwQTFDQUFE MjExRUY5QUEwRUY4MEM0RjlBRTAyL1FSVWlOR0NqM2ZySU9vTDhZYkstbnNZbXdn dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvUVJVaU5HQ2ozZnJJT29MOFliSy1uc1ltd2d3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRC NDVGLzhDQTIwQTFDQUFEMjExRUY5QUEwRUY4MEM0RjlBRTAyL1FSVWlOR0NqM2Zy SU9vTDhZYkstbnNZbXdndy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAL2wOHMksaQMzNmxjwhiBBz3wf7wZodx+1o6GXt+RAM7S79NAV8RXTyp q7FP+36NEeklVHySh0DzedP/dfZGk59Spwb+q34bwBfyuI5BQjB0iYDCr9xcREk1 mSlxN5dRCmVd6k11zHxq29RPA51H94XtEgYL6Leq3u3e2U0p5ohH4bk8qV69VFWF o2wN/HwC6y4MttJ6Y9zMRhqPLA4GmO1VyLD8mGby746KcegFZRXW4OqK9s8L15Th jWBCzUHNcJ4PGcbR8gSWFMg0NrKRQz9fQVVXvHCpqtpw86Kbin33yA0dXJAFmCdH BUvG29EiURhfOKq4vW08QNFJ0S4GVAU= -----END CERTIFICATE-----Generated at Fri Apr 18 20:32:29 2025 by rpki-client