$ rpki-client -vvf rpki.apnic.net/member_repository/A91A35A4/DBC1FD10699611EEB4E77B3CC4F9AE02/QaDCRDWfAjXJpgsfcZpf1WeWYFM.mft File: QaDCRDWfAjXJpgsfcZpf1WeWYFM.mft (raw, json) Hash identifier: 2iXfudoIbfNg8km4o4VVeUMjKjWxV0/AsxX3nSJjoQk= Subject key identifier: 34:42:A0:86:78:D0:5C:6C:56:E2:0E:2C:52:FA:DB:A0:11:94:7D:FB Authority key identifier: 41:A0:C2:44:35:9F:02:35:C9:A6:0B:1F:71:9A:5F:D5:67:96:60:53 Certificate issuer: /CN=A91A35A4/serialNumber=41A0C244359F0235C9A60B1F719A5FD567966053 Certificate serial: 011B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QaDCRDWfAjXJpgsfcZpf1WeWYFM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A35A4/DBC1FD10699611EEB4E77B3CC4F9AE02/QaDCRDWfAjXJpgsfcZpf1WeWYFM.mft Manifest number: 0119 Signing time: Fri 11 Apr 2025 04:03:43 +0000 Manifest this update: Fri 11 Apr 2025 04:03:43 +0000 Manifest next update: Fri 18 Apr 2025 04:03:42 +0000 Files and hashes: 1: QaDCRDWfAjXJpgsfcZpf1WeWYFM.crl (hash: pdovfmlkY9lDs28b2t+5uxH1R0I/9ejGvKBUzahNuVU=) 2: 294325DC699711EEB317603DC4F9AE02.roa (hash: Hsp12OEUAxLgfWPa2BFXRQnGaC8ZbmcTs8T1lK+V734=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A35A4/DBC1FD10699611EEB4E77B3CC4F9AE02/QaDCRDWfAjXJpgsfcZpf1WeWYFM.crl rsync://rpki.apnic.net/member_repository/A91A35A4/DBC1FD10699611EEB4E77B3CC4F9AE02/QaDCRDWfAjXJpgsfcZpf1WeWYFM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QaDCRDWfAjXJpgsfcZpf1WeWYFM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 04:03:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 283 (0x11b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A35A4, serialNumber=41A0C244359F0235C9A60B1F719A5FD567966053 Validity Not Before: Apr 11 04:03:43 2025 GMT Not After : Apr 18 04:03:42 2025 GMT Subject: CN=67f8949f-17e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:3b:a3:dc:87:c0:c3:41:0f:5a:d6:34:90:e5: b5:a6:63:c5:d1:dc:de:c4:8e:5d:72:18:7f:e1:a3: 5e:a5:a2:ab:7c:97:6e:33:26:ac:6c:30:a5:88:e7: 45:0a:e0:48:22:3c:cc:a9:24:2a:1e:5c:59:8d:6c: 21:92:b6:7e:2d:4f:93:5e:87:a5:9a:db:27:b3:c7: e3:ba:ba:87:02:b7:a5:7b:64:e4:b3:5d:79:0a:0b: 49:ed:79:3d:0a:28:f2:dc:b2:a2:07:dd:a2:09:93: 10:35:35:9e:ba:99:70:74:98:74:ba:88:dd:18:76: 65:4d:b0:56:f9:e5:e5:27:52:90:f4:13:11:cf:37: dd:dd:b4:ed:9c:50:eb:6e:a2:e0:a1:89:11:c3:3b: 50:a3:ba:06:4d:91:39:cb:53:8d:96:c8:9f:04:dd: 5b:60:1e:02:eb:3a:99:70:69:e2:e9:81:96:74:83: 84:94:98:92:f1:56:91:28:b2:b7:a4:e5:f5:01:ae: 83:71:77:5c:78:73:b6:3b:b3:36:dc:42:29:31:b1: a6:71:e2:33:78:9a:5a:69:e9:0c:a3:d6:93:6f:35: 6c:56:78:da:01:b9:ee:b1:23:fa:b7:87:45:2c:08: ec:4e:42:95:41:d6:c1:28:83:22:50:5d:ce:a9:e8: 6a:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:42:A0:86:78:D0:5C:6C:56:E2:0E:2C:52:FA:DB:A0:11:94:7D:FB X509v3 Authority Key Identifier: keyid:41:A0:C2:44:35:9F:02:35:C9:A6:0B:1F:71:9A:5F:D5:67:96:60:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A35A4/DBC1FD10699611EEB4E77B3CC4F9AE02/QaDCRDWfAjXJpgsfcZpf1WeWYFM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QaDCRDWfAjXJpgsfcZpf1WeWYFM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A35A4/DBC1FD10699611EEB4E77B3CC4F9AE02/QaDCRDWfAjXJpgsfcZpf1WeWYFM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:9c:b1:61:4e:52:18:f5:02:f5:17:5b:b6:dc:fa:2f:d1:30: ce:56:5a:1a:b3:ce:1a:46:a9:d4:fa:a2:d5:e1:2f:87:c9:41: 46:1d:2a:78:82:60:3a:bc:cb:07:44:00:90:fa:a3:e4:8c:19: cb:bc:65:ad:af:c4:fd:38:df:d9:cd:4a:b4:80:83:85:7d:92: 86:ea:59:83:b2:16:17:53:92:62:d1:49:0c:58:32:17:d3:5f: 06:62:68:5c:b8:ae:c5:07:2f:54:ec:5a:bb:9e:bd:7f:bd:c2: 80:83:42:2c:d3:8b:50:a5:86:59:f3:43:32:20:67:32:03:74: b3:b9:9f:30:79:95:3c:be:59:50:f4:07:27:15:fd:dd:d3:f1: 5f:1d:81:55:54:41:54:f3:37:94:84:41:26:3b:82:d3:b0:65: d6:7d:0c:0c:19:d1:36:9d:eb:54:00:6b:12:bc:78:7b:09:b4: 83:cd:5d:bb:d2:16:29:35:45:3c:d3:1c:5c:24:5b:30:97:0b: cc:8d:ee:8b:7b:7c:db:6c:bd:f8:03:04:25:2a:4a:ce:8d:ce: cb:68:68:49:e9:b1:2e:b0:8f:30:b6:08:94:15:ec:ec:94:37: 60:b1:84:71:51:1c:72:92:98:a6:b8:b3:52:48:6d:74:68:76: 8e:fd:cc:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTM1QTQxMTAvBgNVBAUTKDQxQTBDMjQ0MzU5RjAyMzVDOUE2MEIxRjcxOUE1RkQ1 Njc5NjYwNTMwHhcNMjUwNDExMDQwMzQzWhcNMjUwNDE4MDQwMzQyWjAYMRYwFAYD VQQDEw02N2Y4OTQ5Zi0xN2UxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyTuj3IfAw0EPWtY0kOW1pmPF0dzexI5dchh/4aNepaKrfJduMyasbDCliOdF CuBIIjzMqSQqHlxZjWwhkrZ+LU+TXoelmtsns8fjurqHArele2Tks115CgtJ7Xk9 Cijy3LKiB92iCZMQNTWeuplwdJh0uojdGHZlTbBW+eXlJ1KQ9BMRzzfd3bTtnFDr bqLgoYkRwztQo7oGTZE5y1ONlsifBN1bYB4C6zqZcGni6YGWdIOElJiS8VaRKLK3 pOX1Aa6DcXdceHO2O7M23EIpMbGmceIzeJpaaekMo9aTbzVsVnjaAbnusSP6t4dF LAjsTkKVQdbBKIMiUF3OqehqBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDRCoIZ4 0FxsVuIOLFL626ARlH37MB8GA1UdIwQYMBaAFEGgwkQ1nwI1yaYLH3GaX9VnlmBT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzVBNC9EQkMxRkQxMDY5 OTYxMUVFQjRFNzdCM0NDNEY5QUUwMi9RYURDUkRXZkFqWEpwZ3NmY1pwZjFXZVdZ Rk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FhRENSRFdmQWpYSnBnc2ZjWnBmMVdlV1lGTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MzVBNC9EQkMxRkQxMDY5OTYxMUVFQjRFNzdCM0NDNEY5QUUwMi9RYURDUkRXZkFq WEpwZ3NmY1pwZjFXZVdZRk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsnLFhTlIY9QL1F1u23Pov0TDOVloas84aRqnU+qLV4S+HyUFGHSp4 gmA6vMsHRACQ+qPkjBnLvGWtr8T9ON/ZzUq0gIOFfZKG6lmDshYXU5Ji0UkMWDIX 018GYmhcuK7FBy9U7Fq7nr1/vcKAg0Is04tQpYZZ80MyIGcyA3SzuZ8weZU8vllQ 9AcnFf3d0/FfHYFVVEFU8zeUhEEmO4LTsGXWfQwMGdE2netUAGsSvHh7CbSDzV27 0hYpNUU80xxcJFswlwvMje6Le3zbbL34AwQlKkrOjc7LaGhJ6bEusI8wtgiUFezs lDdgsYRxURxykpimuLNSSG10aHaO/cwQ -----END CERTIFICATE-----Generated at Sun Apr 13 05:08:27 2025 by rpki-client