$ rpki-client -vvf rpki.apnic.net/member_repository/A918235E/9690EE0C9ED311EC8F48B974C4F9AE02/qu_cqSXayY_a0YyFf58d5YagUbY.mft File: qu_cqSXayY_a0YyFf58d5YagUbY.mft (raw, json) Hash identifier: VtAFFu2fVCyqWc9XlKUiZTNqyswrn+tdCpDuNhHmrRU= Subject key identifier: 61:1C:9D:9A:BF:3D:2F:D5:DE:FE:C3:E4:19:E4:8E:B1:4D:E4:E0:1C Authority key identifier: AA:EF:DC:A9:25:DA:C9:8F:DA:D1:8C:85:7F:9F:1D:E5:86:A0:51:B6 Certificate issuer: /CN=A918235E/serialNumber=AAEFDCA925DAC98FDAD18C857F9F1DE586A051B6 Certificate serial: 0382 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qu_cqSXayY_a0YyFf58d5YagUbY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918235E/9690EE0C9ED311EC8F48B974C4F9AE02/qu_cqSXayY_a0YyFf58d5YagUbY.mft Manifest number: 037D Signing time: Tue 15 Apr 2025 00:34:50 +0000 Manifest this update: Tue 15 Apr 2025 00:34:49 +0000 Manifest next update: Tue 22 Apr 2025 00:34:49 +0000 Files and hashes: 1: qu_cqSXayY_a0YyFf58d5YagUbY.crl (hash: ao88OQcJNCiG+LhFNLEVf9MnJ5s9IFsnWbb63TO3nzc=) 2: 48E696FE9ED611ECAC3B1777C4F9AE02.roa (hash: wh4KvNLBK6XFgoR8FRnF/jwZCf/huqxHy9C0SYykY04=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918235E/9690EE0C9ED311EC8F48B974C4F9AE02/qu_cqSXayY_a0YyFf58d5YagUbY.crl rsync://rpki.apnic.net/member_repository/A918235E/9690EE0C9ED311EC8F48B974C4F9AE02/qu_cqSXayY_a0YyFf58d5YagUbY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qu_cqSXayY_a0YyFf58d5YagUbY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Apr 2025 00:34:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 898 (0x382) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918235E, serialNumber=AAEFDCA925DAC98FDAD18C857F9F1DE586A051B6 Validity Not Before: Apr 15 00:34:49 2025 GMT Not After : Apr 22 00:34:49 2025 GMT Subject: CN=67fda9aa-843a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:6b:96:9e:c2:e4:db:e4:18:21:9d:d9:01:09: b9:f6:d4:2c:c7:96:77:63:d8:6d:3e:c6:ba:50:28: c2:8e:8c:34:be:fe:a8:77:92:83:f0:a2:24:36:3e: 69:c6:5d:8c:a3:1f:e6:03:08:8e:1e:cb:2a:2d:66: 89:d9:3f:c9:43:b6:99:ff:73:cb:14:ff:14:35:7a: 49:69:57:6b:8e:5d:8b:82:12:a3:11:03:76:62:47: b6:b1:50:ef:72:a4:aa:f5:93:ff:54:c6:10:51:ba: 7b:9d:06:a3:ba:41:62:07:20:c9:93:12:6e:54:65: 5d:24:d3:eb:cf:02:9b:63:01:66:f3:fc:f1:7a:58: 08:14:b8:26:e9:6a:de:68:4d:65:41:43:6f:1f:ee: 20:2b:e5:ca:6a:b6:e2:42:aa:eb:4c:ed:7d:21:d7: 69:a1:59:14:55:10:ff:97:46:c6:a1:ab:bf:bf:44: c2:d0:ec:11:58:36:39:fc:93:97:3b:30:1a:4d:1a: e8:5e:7c:b2:07:c2:23:fb:de:29:ca:98:77:d6:38: c5:6c:c1:53:18:b0:72:75:0f:7c:8b:5d:f9:c8:74: 05:b9:8e:6f:e5:c9:20:cf:9b:4c:1f:93:e1:a0:10: 27:ce:03:5e:27:57:a6:82:96:65:be:e3:eb:34:75: e1:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:1C:9D:9A:BF:3D:2F:D5:DE:FE:C3:E4:19:E4:8E:B1:4D:E4:E0:1C X509v3 Authority Key Identifier: keyid:AA:EF:DC:A9:25:DA:C9:8F:DA:D1:8C:85:7F:9F:1D:E5:86:A0:51:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918235E/9690EE0C9ED311EC8F48B974C4F9AE02/qu_cqSXayY_a0YyFf58d5YagUbY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qu_cqSXayY_a0YyFf58d5YagUbY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918235E/9690EE0C9ED311EC8F48B974C4F9AE02/qu_cqSXayY_a0YyFf58d5YagUbY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:a9:24:fc:13:a3:a4:8b:70:90:7e:73:b4:f2:84:ca:b6:86: 78:24:2b:27:e9:e9:11:85:e8:87:59:9a:e2:b7:da:34:0f:6a: e6:11:0e:81:f7:f1:57:2d:b0:3d:f7:1d:0d:ce:2c:6f:3d:0c: 46:8f:a5:cd:64:dd:5f:21:9c:a3:60:17:76:94:40:c4:1f:05: 38:27:36:eb:19:28:0f:68:36:9b:e7:0e:d9:23:8d:2a:34:93: ae:18:97:9b:84:68:8c:a0:08:bf:62:0b:3d:a7:13:be:b8:f7: fa:2b:cf:82:21:f1:b0:d8:fe:76:af:7f:10:1c:1d:eb:b1:1d: 8a:54:df:87:43:87:dc:30:86:5b:5a:87:67:dd:c8:4c:86:b8: a1:08:74:7a:65:11:7b:26:aa:fa:bb:b1:b1:8a:9f:38:20:75: 4a:0d:1f:4f:da:27:e8:6e:aa:b7:a7:d2:6a:25:8b:06:a1:5b: cc:06:16:bc:12:8a:ff:94:77:22:05:40:50:75:7f:64:3a:02: a3:e9:71:de:b5:6a:15:52:80:a7:2c:bc:94:67:2e:62:c0:f2: 98:77:6c:45:94:ce:22:82:9d:30:c0:d8:7d:1f:63:58:ce:48: 82:58:0b:cb:1e:30:67:12:78:14:59:52:3d:8b:b1:26:72:f6: 91:b2:65:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA4IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODIzNUUxMTAvBgNVBAUTKEFBRUZEQ0E5MjVEQUM5OEZEQUQxOEM4NTdGOUYxREU1 ODZBMDUxQjYwHhcNMjUwNDE1MDAzNDQ5WhcNMjUwNDIyMDAzNDQ5WjAYMRYwFAYD VQQDEw02N2ZkYTlhYS04NDNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA62uWnsLk2+QYIZ3ZAQm59tQsx5Z3Y9htPsa6UCjCjow0vv6od5KD8KIkNj5p xl2Mox/mAwiOHssqLWaJ2T/JQ7aZ/3PLFP8UNXpJaVdrjl2LghKjEQN2Yke2sVDv cqSq9ZP/VMYQUbp7nQajukFiByDJkxJuVGVdJNPrzwKbYwFm8/zxelgIFLgm6Wre aE1lQUNvH+4gK+XKarbiQqrrTO19IddpoVkUVRD/l0bGoau/v0TC0OwRWDY5/JOX OzAaTRroXnyyB8Ij+94pyph31jjFbMFTGLBydQ98i135yHQFuY5v5ckgz5tMH5Ph oBAnzgNeJ1emgpZlvuPrNHXhywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGEcnZq/ PS/V3v7D5BnkjrFN5OAcMB8GA1UdIwQYMBaAFKrv3Kkl2smP2tGMhX+fHeWGoFG2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjM1RS85NjkwRUUwQzlF RDMxMUVDOEY0OEI5NzRDNEY5QUUwMi9xdV9jcVNYYXlZX2EwWXlGZjU4ZDVZYWdV YlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3F1X2NxU1hheVlfYTBZeUZmNThkNVlhZ1ViWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MjM1RS85NjkwRUUwQzlFRDMxMUVDOEY0OEI5NzRDNEY5QUUwMi9xdV9jcVNYYXlZ X2EwWXlGZjU4ZDVZYWdVYlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVqST8E6Oki3CQfnO08oTKtoZ4JCsn6ekRheiHWZrit9o0D2rmEQ6B 9/FXLbA99x0NzixvPQxGj6XNZN1fIZyjYBd2lEDEHwU4JzbrGSgPaDab5w7ZI40q NJOuGJebhGiMoAi/Ygs9pxO+uPf6K8+CIfGw2P52r38QHB3rsR2KVN+HQ4fcMIZb Wodn3chMhrihCHR6ZRF7Jqr6u7Gxip84IHVKDR9P2ifobqq3p9JqJYsGoVvMBha8 Eor/lHciBUBQdX9kOgKj6XHetWoVUoCnLLyUZy5iwPKYd2xFlM4igp0wwNh9H2NY zkiCWAvLHjBnEngUWVI9i7EmcvaRsmXJ -----END CERTIFICATE-----Generated at Wed Apr 16 17:16:37 2025 by rpki-client