$ rpki-client -vvf rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.mft File: qbzKbTTT1fHv-Lvng9SXc4E-Xvg.mft (raw, json) Hash identifier: m2lCdt2VjNBsFs4L22RGzkn7/oGXCIPpwk8ydsvlsJw= Subject key identifier: B9:44:3C:77:3B:AA:21:91:DA:A6:3F:2E:B0:26:8B:34:F0:F3:1B:71 Authority key identifier: A9:BC:CA:6D:34:D3:D5:F1:EF:F8:BB:E7:83:D4:97:73:81:3E:5E:F8 Certificate issuer: /CN=A9186E8A/serialNumber=A9BCCA6D34D3D5F1EFF8BBE783D49773813E5EF8 Certificate serial: 0795 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.mft Manifest number: 0764 Signing time: Mon 14 Apr 2025 21:33:30 +0000 Manifest this update: Mon 14 Apr 2025 21:33:29 +0000 Manifest next update: Mon 21 Apr 2025 21:33:29 +0000 Files and hashes: 1: qbzKbTTT1fHv-Lvng9SXc4E-Xvg.crl (hash: 0WfR0wHiSf/D05AkQtJUbGR8a0OkEr5oRyxxy2EyARU=) 2: 66C1BA862FBB11EB9B861059C4F9AE02.roa (hash: cMd/1qRqPVkWlIQVudOBbLGE1UfquRskjOxtjAtMCMY=) 3: ECB6EF462FC311EB8B442B0DC4F9AE02.roa (hash: a8XYuPeONn+rGsCkDHvI7U0sYBu0vBHIBtuG6y2sPos=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.crl rsync://rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Apr 2025 21:33:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1941 (0x795) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186E8A, serialNumber=A9BCCA6D34D3D5F1EFF8BBE783D49773813E5EF8 Validity Not Before: Apr 14 21:33:29 2025 GMT Not After : Apr 21 21:33:29 2025 GMT Subject: CN=67fd7f29-16f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:dc:09:93:9e:17:f8:62:22:40:e5:bb:0f:28: 0c:96:7c:ce:e6:e7:fe:40:77:e4:6b:5e:41:51:f3: c3:ea:8b:66:90:9a:94:bc:2c:97:ab:7a:f9:c9:23: ec:f6:ef:89:43:76:09:63:40:1d:ce:a7:b1:98:f3: 39:61:4b:f9:ca:ab:69:a6:97:5d:17:51:54:54:2f: 04:eb:f1:4d:12:5f:04:d5:8c:a7:e0:69:d1:00:5d: 65:f8:64:01:30:87:74:6f:4b:d2:a9:92:35:34:b6: 37:37:0d:a7:bf:0b:e2:14:e6:05:ed:6d:19:3a:66: c0:21:c0:fa:4b:7c:b2:15:3c:7a:4e:2a:4c:ab:9a: bb:c7:0d:5c:83:cc:f4:60:e2:2f:3b:f5:a4:fd:35: 41:e0:c2:82:8c:d0:d9:ff:4c:46:a4:c3:43:13:b0: f3:b8:49:58:a2:57:11:09:ec:f7:ac:25:e3:33:ba: ad:66:73:ed:e4:8b:ee:94:2e:4e:e5:92:7b:07:af: 5a:46:82:d3:a3:ff:07:ec:2e:eb:38:9b:25:3a:53: d8:9c:81:f3:dc:97:fa:8d:62:4a:c8:fe:e4:1a:55: e8:0e:d7:95:0d:bb:2b:bd:67:12:8d:cb:6c:ab:4d: b0:bd:b5:37:fe:e5:38:c1:52:a1:21:e5:ea:5a:64: 96:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:44:3C:77:3B:AA:21:91:DA:A6:3F:2E:B0:26:8B:34:F0:F3:1B:71 X509v3 Authority Key Identifier: keyid:A9:BC:CA:6D:34:D3:D5:F1:EF:F8:BB:E7:83:D4:97:73:81:3E:5E:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:5f:0c:cc:62:6b:8a:90:f9:f0:ad:d3:31:fa:18:27:a0:32: 9d:a3:46:a8:a2:4e:1a:0a:d6:52:0a:07:c1:a9:64:f4:05:2a: 16:dd:1f:88:65:8e:85:9e:1e:7e:f3:22:13:17:98:27:94:a6: f6:8d:db:13:b4:ca:64:fb:af:04:44:dd:86:42:69:34:f7:81: f4:d3:4e:21:0a:7a:65:55:a9:a8:5e:25:b0:8b:3e:40:b2:bd: b8:2d:41:6f:97:5d:61:ee:7e:29:5c:05:7a:86:dc:55:af:e9: fb:e8:6e:17:52:86:eb:71:d5:e3:28:a8:df:3b:73:c1:bc:12: a5:ee:10:b9:70:35:08:2a:f6:b5:c0:54:8e:92:99:f7:72:12: 77:51:c9:8b:b5:54:3f:44:ec:cc:3a:31:94:78:1a:62:90:ff: 6f:cc:c4:8b:5d:e7:57:6d:8b:29:76:de:ff:22:e5:77:c7:0f: 45:1a:0a:da:8b:b1:58:90:21:08:e2:0e:1a:83:f6:ce:26:61: a1:c6:24:fb:d3:e1:82:18:fe:24:aa:ed:f9:00:6b:d9:14:41: 39:8f:0d:6d:c1:33:a2:1b:91:38:e1:6e:53:ac:3e:20:0f:e6: fa:ce:09:d3:53:66:88:13:4a:24:bf:0c:d3:cd:f9:1f:5c:60: ff:33:8e:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB5UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODZFOEExMTAvBgNVBAUTKEE5QkNDQTZEMzREM0Q1RjFFRkY4QkJFNzgzRDQ5Nzcz ODEzRTVFRjgwHhcNMjUwNDE0MjEzMzI5WhcNMjUwNDIxMjEzMzI5WjAYMRYwFAYD VQQDEw02N2ZkN2YyOS0xNmYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA09wJk54X+GIiQOW7DygMlnzO5uf+QHfka15BUfPD6otmkJqUvCyXq3r5ySPs 9u+JQ3YJY0AdzqexmPM5YUv5yqtpppddF1FUVC8E6/FNEl8E1Yyn4GnRAF1l+GQB MId0b0vSqZI1NLY3Nw2nvwviFOYF7W0ZOmbAIcD6S3yyFTx6TipMq5q7xw1cg8z0 YOIvO/Wk/TVB4MKCjNDZ/0xGpMNDE7DzuElYolcRCez3rCXjM7qtZnPt5IvulC5O 5ZJ7B69aRoLTo/8H7C7rOJslOlPYnIHz3Jf6jWJKyP7kGlXoDteVDbsrvWcSjcts q02wvbU3/uU4wVKhIeXqWmSWowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLlEPHc7 qiGR2qY/LrAmizTw8xtxMB8GA1UdIwQYMBaAFKm8ym0009Xx7/i754PUl3OBPl74 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkU4QS8zQjQ3NkU3QzJE RkYxMUVCODY4QTkxMzVDNEY5QUUwMi9xYnpLYlRUVDFmSHYtTHZuZzlTWGM0RS1Y dmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FiektiVFRUMWZIdi1Mdm5nOVNYYzRFLVh2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NkU4QS8zQjQ3NkU3QzJERkYxMUVCODY4QTkxMzVDNEY5QUUwMi9xYnpLYlRUVDFm SHYtTHZuZzlTWGM0RS1YdmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/XwzMYmuKkPnwrdMx+hgnoDKdo0aook4aCtZSCgfBqWT0BSoW3R+I ZY6Fnh5+8yITF5gnlKb2jdsTtMpk+68ERN2GQmk094H0004hCnplVamoXiWwiz5A sr24LUFvl11h7n4pXAV6htxVr+n76G4XUobrcdXjKKjfO3PBvBKl7hC5cDUIKva1 wFSOkpn3chJ3UcmLtVQ/ROzMOjGUeBpikP9vzMSLXedXbYspdt7/IuV3xw9FGgra i7FYkCEI4g4ag/bOJmGhxiT70+GCGP4kqu35AGvZFEE5jw1twTOiG5E44W5TrD4g D+b6zgnTU2aIE0okvwzTzfkfXGD/M448 -----END CERTIFICATE-----Generated at Tue Apr 15 22:54:32 2025 by rpki-client