$ rpki-client -vvf rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/Qb--vmNSH7BO2BI8aOXAza9dBc0.mft File: Qb--vmNSH7BO2BI8aOXAza9dBc0.mft (raw, json) Hash identifier: QMt0yLBGN/4qCCoqSdGeOWvbmHW1+7jgwTyaYfwsaq4= Subject key identifier: 76:E5:AB:18:9B:B2:D0:78:9B:05:4B:31:6C:20:60:40:E4:2D:43:C9 Authority key identifier: 41:BF:BE:BE:63:52:1F:B0:4E:D8:12:3C:68:E5:C0:CD:AF:5D:05:CD Certificate issuer: /CN=A9170982/serialNumber=41BFBEBE63521FB04ED8123C68E5C0CDAF5D05CD Certificate serial: 036D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qb--vmNSH7BO2BI8aOXAza9dBc0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/Qb--vmNSH7BO2BI8aOXAza9dBc0.mft Manifest number: 0361 Signing time: Wed 09 Apr 2025 00:41:22 +0000 Manifest this update: Wed 09 Apr 2025 00:41:22 +0000 Manifest next update: Wed 16 Apr 2025 00:41:22 +0000 Files and hashes: 1: Qb--vmNSH7BO2BI8aOXAza9dBc0.crl (hash: kaB0L0i8r9a03ibwF0hXSmoKcGBjRyNW332Lx4ZvJmY=) 2: EE8EAEDC377F11EE92674430C4F9AE02.roa (hash: XUINDcHIDNHHzShIR5UbuMY4rtr/62wcaswBNnwgnig=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/Qb--vmNSH7BO2BI8aOXAza9dBc0.crl rsync://rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/Qb--vmNSH7BO2BI8aOXAza9dBc0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qb--vmNSH7BO2BI8aOXAza9dBc0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 16 Apr 2025 00:41:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 877 (0x36d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170982 Validity Not Before: Apr 9 00:41:22 2025 GMT Not After : Apr 16 00:41:22 2025 GMT Subject: CN=67f5c232-5655 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:3a:d9:c8:75:b3:c6:20:d4:75:5c:b9:83:5d: e5:5f:2f:a1:c3:e8:90:5c:a9:d5:8f:2b:20:1a:dc: 7a:a7:f9:9e:24:4b:8a:93:dc:76:4b:b1:b9:cb:af: 4a:cb:d3:34:26:60:12:c9:67:96:b1:84:97:14:0c: bc:24:7f:53:5f:16:fa:c6:46:ab:d6:89:34:ef:07: 42:9b:69:78:88:59:d9:ab:e2:77:5e:76:1d:58:5d: df:b9:8a:f2:e6:9b:ce:56:ae:be:db:1f:07:44:2b: c4:67:a5:9f:61:2d:3c:a8:39:dc:d6:02:61:a2:25: 48:c4:c8:c8:4c:0c:09:46:e0:42:37:8e:d4:83:29: 2c:35:46:64:86:83:05:71:22:6a:a6:af:32:6b:6c: 1f:0f:d7:80:e5:10:03:c0:94:1b:6f:85:47:a0:7a: 8d:2b:84:fd:d4:09:3e:61:cd:34:1f:29:ba:4c:67: 0f:a0:06:40:da:e7:97:70:59:fe:60:b2:6d:70:08: 23:13:78:cc:c3:52:e4:b0:aa:02:ca:3a:d7:0b:de: d9:3b:40:3b:36:79:45:e4:37:90:f9:06:3d:a6:6f: 12:0d:2f:42:85:7c:c8:25:4d:f5:30:8c:69:71:39: 38:e2:7e:97:59:1c:ae:f9:5f:46:8d:0c:0f:5d:66: a0:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:E5:AB:18:9B:B2:D0:78:9B:05:4B:31:6C:20:60:40:E4:2D:43:C9 X509v3 Authority Key Identifier: keyid:41:BF:BE:BE:63:52:1F:B0:4E:D8:12:3C:68:E5:C0:CD:AF:5D:05:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/Qb--vmNSH7BO2BI8aOXAza9dBc0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qb--vmNSH7BO2BI8aOXAza9dBc0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/Qb--vmNSH7BO2BI8aOXAza9dBc0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:7e:c8:d0:6e:11:20:61:23:d9:20:20:87:4e:b0:3e:28:60: cd:44:bc:8d:7e:2d:a9:c1:12:b7:e7:f2:b2:f0:ab:93:fb:01: 9a:37:bf:2c:49:29:03:a2:aa:61:33:af:bb:e8:55:0c:45:b6: a4:3d:f5:a1:86:dc:66:00:e4:89:64:23:9c:ef:bc:0e:7f:d0: 55:ff:3f:40:39:af:aa:f3:d4:4c:25:23:70:39:82:5c:c4:f3: 43:ab:af:c0:23:db:89:56:06:6d:c9:69:79:14:27:af:12:ab: 3a:d6:51:ff:92:5f:50:1d:99:f9:bc:a4:b0:0c:3c:b3:c8:8a: 5b:89:05:db:be:e7:86:04:ee:31:94:25:36:43:b9:8f:5a:dc: d6:ec:02:61:b5:70:d5:d8:78:e9:22:ba:b2:0c:08:7b:fb:05: cb:fb:d5:44:2e:9a:d6:3a:66:19:a4:9c:41:5c:a9:f2:13:38: c5:ab:ea:92:41:b7:79:cc:ae:56:e9:d9:0d:8a:7b:da:1d:fa: 3d:91:4d:70:ba:42:e9:ac:99:74:d8:0e:2d:73:dd:90:97:df: 20:a1:f1:d3:41:b1:b6:d9:69:c6:58:a8:63:a7:3e:71:8e:a1: e3:0a:60:88:61:dd:bd:e1:60:8b:30:73:a1:c0:d4:87:0a:8a: d0:16:3f:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA20wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzA5ODIxMTAvBgNVBAUTKDQxQkZCRUJFNjM1MjFGQjA0RUQ4MTIzQzY4RTVDMENE QUY1RDA1Q0QwHhcNMjUwNDA5MDA0MTIyWhcNMjUwNDE2MDA0MTIyWjAYMRYwFAYD VQQDEw02N2Y1YzIzMi01NjU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApTrZyHWzxiDUdVy5g13lXy+hw+iQXKnVjysgGtx6p/meJEuKk9x2S7G5y69K y9M0JmASyWeWsYSXFAy8JH9TXxb6xkar1ok07wdCm2l4iFnZq+J3XnYdWF3fuYry 5pvOVq6+2x8HRCvEZ6WfYS08qDnc1gJhoiVIxMjITAwJRuBCN47UgyksNUZkhoMF cSJqpq8ya2wfD9eA5RADwJQbb4VHoHqNK4T91Ak+Yc00Hym6TGcPoAZA2ueXcFn+ YLJtcAgjE3jMw1LksKoCyjrXC97ZO0A7NnlF5DeQ+QY9pm8SDS9ChXzIJU31MIxp cTk44n6XWRyu+V9GjQwPXWaglQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHblqxib stB4mwVLMWwgYEDkLUPJMB8GA1UdIwQYMBaAFEG/vr5jUh+wTtgSPGjlwM2vXQXN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDk4Mi9DRjIwNUM2MEFD MTMxMUVDQjc3NkIyMDlDNEY5QUUwMi9RYi0tdm1OU0g3Qk8yQkk4YU9YQXphOWRC YzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1FiLS12bU5TSDdCTzJCSThhT1hBemE5ZEJjMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDk4Mi9DRjIwNUM2MEFDMTMxMUVDQjc3NkIyMDlDNEY5QUUwMi9RYi0tdm1OU0g3 Qk8yQkk4YU9YQXphOWRCYzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAnfsjQbhEgYSPZICCHTrA+KGDNRLyNfi2pwRK35/Ky8KuT+wGaN78s SSkDoqphM6+76FUMRbakPfWhhtxmAOSJZCOc77wOf9BV/z9AOa+q89RMJSNwOYJc xPNDq6/AI9uJVgZtyWl5FCevEqs61lH/kl9QHZn5vKSwDDyzyIpbiQXbvueGBO4x lCU2Q7mPWtzW7AJhtXDV2HjpIrqyDAh7+wXL+9VELprWOmYZpJxBXKnyEzjFq+qS Qbd5zK5W6dkNinvaHfo9kU1wukLprJl02A4tc92Ql98gofHTQbG22WnGWKhjpz5x jqHjCmCIYd294WCLMHOhwNSHCorQFj/u -----END CERTIFICATE-----Generated at Thu Apr 10 22:09:53 2025 by rpki-client