$ rpki-client -vvf rpki.apnic.net/member_repository/A9198D6B/81E83F62D64A11EAB6A66410C4F9AE02/qQILYm9QRkjk2_akIHbomXPEq8A.mft File: qQILYm9QRkjk2_akIHbomXPEq8A.mft (raw, json) Hash identifier: ctFC0P/vUbeO9ThFZVcFjj9LQnPu2MmY2t/L10nxAco= Subject key identifier: 76:3B:14:60:AF:83:F9:7D:67:C8:CA:FC:B0:D7:78:77:54:E3:2E:F9 Authority key identifier: A9:02:0B:62:6F:50:46:48:E4:DB:F6:A4:20:76:E8:99:73:C4:AB:C0 Certificate issuer: /CN=A9198D6B/serialNumber=A9020B626F504648E4DBF6A42076E89973C4ABC0 Certificate serial: 0810 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qQILYm9QRkjk2_akIHbomXPEq8A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9198D6B/81E83F62D64A11EAB6A66410C4F9AE02/qQILYm9QRkjk2_akIHbomXPEq8A.mft Manifest number: 0805 Signing time: Tue 08 Apr 2025 20:42:24 +0000 Manifest this update: Tue 08 Apr 2025 20:42:24 +0000 Manifest next update: Tue 15 Apr 2025 20:42:24 +0000 Files and hashes: 1: qQILYm9QRkjk2_akIHbomXPEq8A.crl (hash: BUejnVmwvOXGSPeR/hl92mXN2m8cbhq4g6Y5JEHxWxI=) 2: 0446C8B2945911EB83AC5363C4F9AE02.roa (hash: l0ICGLwuaPDJO60DuHwg4w9v81ASlnFGPH6s06O+ZdY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9198D6B/81E83F62D64A11EAB6A66410C4F9AE02/qQILYm9QRkjk2_akIHbomXPEq8A.crl rsync://rpki.apnic.net/member_repository/A9198D6B/81E83F62D64A11EAB6A66410C4F9AE02/qQILYm9QRkjk2_akIHbomXPEq8A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qQILYm9QRkjk2_akIHbomXPEq8A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 15 Apr 2025 20:42:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2064 (0x810) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9198D6B Validity Not Before: Apr 8 20:42:24 2025 GMT Not After : Apr 15 20:42:24 2025 GMT Subject: CN=67f58a30-19ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:63:d7:95:54:c7:fb:aa:2f:e8:ad:35:61:19: d1:5c:5a:86:de:c7:68:35:6a:0d:f7:1d:bf:e1:e4: b1:28:ae:6e:d1:9e:57:47:97:27:07:a9:d7:4b:0a: d0:00:69:f3:2d:88:89:77:4d:9f:bc:bd:fb:0a:97: 40:5e:29:33:ed:a9:28:23:e5:11:18:63:f3:2d:76: 3f:df:7f:93:cc:c0:a7:dc:40:96:d0:84:83:90:49: 60:4a:49:cb:9c:5a:a5:96:16:b0:e9:b1:a2:30:30: 0d:18:e9:de:bf:e1:6b:b7:6b:cb:9a:12:e0:1a:71: ce:d6:a0:38:44:43:72:4c:21:13:fa:35:d4:bd:e3: c3:dd:71:78:88:41:56:73:51:36:49:aa:7e:94:2d: 9b:69:ec:27:2c:96:c1:b8:2f:d7:37:42:fb:2e:3c: 13:77:72:00:b0:c8:4f:c6:bf:a7:d5:32:5e:b7:54: ac:a8:35:59:65:fd:53:72:69:9c:de:4a:1a:a3:84: cd:dc:2c:de:0f:97:d9:77:2a:a8:9b:79:ca:c4:60: 93:49:44:3c:e9:a1:e0:43:dd:37:79:03:fd:e0:49: 1d:f2:89:ad:3d:7c:78:84:1c:79:58:29:d3:01:15: f7:80:05:b0:8d:29:a5:e6:78:a8:14:10:b0:42:d3: 3e:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:3B:14:60:AF:83:F9:7D:67:C8:CA:FC:B0:D7:78:77:54:E3:2E:F9 X509v3 Authority Key Identifier: keyid:A9:02:0B:62:6F:50:46:48:E4:DB:F6:A4:20:76:E8:99:73:C4:AB:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9198D6B/81E83F62D64A11EAB6A66410C4F9AE02/qQILYm9QRkjk2_akIHbomXPEq8A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qQILYm9QRkjk2_akIHbomXPEq8A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198D6B/81E83F62D64A11EAB6A66410C4F9AE02/qQILYm9QRkjk2_akIHbomXPEq8A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:5c:0c:6b:9e:50:b6:1a:0c:d8:8a:4a:8e:92:6c:c2:0e:c4: 87:0f:28:3f:c3:01:31:82:fe:c6:ac:b4:0d:13:e0:85:41:f0: a2:4a:a6:e5:24:65:39:3f:fe:d9:79:08:81:0f:03:46:02:e9: 56:56:ab:7a:4f:08:26:ea:85:f6:9c:cb:10:de:f4:5a:fe:66: f1:2e:e9:a2:60:2f:05:bd:a7:d7:0b:e3:f7:db:fb:ab:ea:e6: 74:6b:e9:44:48:9a:31:50:79:4d:74:70:e5:ae:14:19:54:1e: dd:8e:a9:f0:b4:4e:20:58:81:c3:26:80:ee:86:f0:8a:b5:78: 26:12:25:dd:8a:2b:b6:85:5b:cf:5b:27:59:45:0c:b9:6e:b7: ef:2f:bf:1c:f3:02:6c:a2:58:74:93:0c:8a:c8:a4:e5:be:38: d1:6c:84:75:02:23:0c:98:c7:1e:ab:3a:66:49:d5:fe:bf:1d: dd:86:ae:c0:8f:f6:a5:29:c1:7d:1d:4a:ba:a6:0d:c5:f0:6d: 6e:19:0f:27:0a:f2:08:6a:fd:98:d1:ec:86:80:e0:5a:58:32: d9:9f:7b:2f:f7:00:a4:9c:93:b6:bb:3e:80:64:f1:8b:14:ac: f9:ac:c9:8c:02:df:80:3f:9e:21:18:8c:54:f9:1c:be:39:59: 8d:d2:ab:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCBAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OThENkIxMTAvBgNVBAUTKEE5MDIwQjYyNkY1MDQ2NDhFNERCRjZBNDIwNzZFODk5 NzNDNEFCQzAwHhcNMjUwNDA4MjA0MjI0WhcNMjUwNDE1MjA0MjI0WjAYMRYwFAYD VQQDEw02N2Y1OGEzMC0xOWVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqmPXlVTH+6ov6K01YRnRXFqG3sdoNWoN9x2/4eSxKK5u0Z5XR5cnB6nXSwrQ AGnzLYiJd02fvL37CpdAXikz7akoI+URGGPzLXY/33+TzMCn3ECW0ISDkElgSknL nFqllhaw6bGiMDANGOnev+Frt2vLmhLgGnHO1qA4RENyTCET+jXUvePD3XF4iEFW c1E2Sap+lC2baewnLJbBuC/XN0L7LjwTd3IAsMhPxr+n1TJet1SsqDVZZf1Tcmmc 3koao4TN3CzeD5fZdyqom3nKxGCTSUQ86aHgQ903eQP94Ekd8omtPXx4hBx5WCnT ARX3gAWwjSml5nioFBCwQtM+zwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHY7FGCv g/l9Z8jK/LDXeHdU4y75MB8GA1UdIwQYMBaAFKkCC2JvUEZI5Nv2pCB26JlzxKvA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OEQ2Qi84MUU4M0Y2MkQ2 NEExMUVBQjZBNjY0MTBDNEY5QUUwMi9xUUlMWW05UVJramsyX2FrSUhib21YUEVx OEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FRSUxZbTlRUmtqazJfYWtJSGJvbVhQRXE4QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OEQ2Qi84MUU4M0Y2MkQ2NEExMUVBQjZBNjY0MTBDNEY5QUUwMi9xUUlMWW05UVJr amsyX2FrSUhib21YUEVxOEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZXAxrnlC2GgzYikqOkmzCDsSHDyg/wwExgv7GrLQNE+CFQfCiSqbl JGU5P/7ZeQiBDwNGAulWVqt6Twgm6oX2nMsQ3vRa/mbxLumiYC8FvafXC+P32/ur 6uZ0a+lESJoxUHlNdHDlrhQZVB7djqnwtE4gWIHDJoDuhvCKtXgmEiXdiiu2hVvP WydZRQy5brfvL78c8wJsolh0kwyKyKTlvjjRbIR1AiMMmMceqzpmSdX+vx3dhq7A j/alKcF9HUq6pg3F8G1uGQ8nCvIIav2Y0eyGgOBaWDLZn3sv9wCknJO2uz6AZPGL FKz5rMmMAt+AP54hGIxU+Ry+OVmN0qsX -----END CERTIFICATE-----Generated at Wed Apr 9 05:03:15 2025 by rpki-client