$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4475/832470DC18CF11EF8E3F2457C4F9AE02/QQQ9rBieIv9_Wu2BB6MjL0GQrz4.mft File: QQQ9rBieIv9_Wu2BB6MjL0GQrz4.mft (raw, json) Hash identifier: oZTggdgVQaGg/JdJx+uiW2nangAvxyaVV+qIKB68Gk8= Subject key identifier: 37:D3:9D:31:54:45:9E:31:10:7F:A6:EE:F9:06:04:63:C6:95:A2:53 Authority key identifier: 41:04:3D:AC:18:9E:22:FF:7F:5A:ED:81:07:A3:23:2F:41:90:AF:3E Certificate issuer: /CN=A91A4475/serialNumber=41043DAC189E22FF7F5AED8107A3232F4190AF3E Certificate serial: B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQQ9rBieIv9_Wu2BB6MjL0GQrz4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4475/832470DC18CF11EF8E3F2457C4F9AE02/QQQ9rBieIv9_Wu2BB6MjL0GQrz4.mft Manifest number: AD Signing time: Fri 11 Apr 2025 05:20:37 +0000 Manifest this update: Fri 11 Apr 2025 05:20:37 +0000 Manifest next update: Fri 18 Apr 2025 05:20:37 +0000 Files and hashes: 1: QQQ9rBieIv9_Wu2BB6MjL0GQrz4.crl (hash: pDSx32yYs8/yOIJ7NA1Kjp9UWg2MNAq8NNXUv5zt2/Q=) 2: 3F9C6E6619B811EF8628ED1FC4F9AE02.roa (hash: W33rXxSlvsCWhMMJptogBjvzdgDQoYwJi+V5ipdn5y8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4475/832470DC18CF11EF8E3F2457C4F9AE02/QQQ9rBieIv9_Wu2BB6MjL0GQrz4.crl rsync://rpki.apnic.net/member_repository/A91A4475/832470DC18CF11EF8E3F2457C4F9AE02/QQQ9rBieIv9_Wu2BB6MjL0GQrz4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQQ9rBieIv9_Wu2BB6MjL0GQrz4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 05:20:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 179 (0xb3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4475, serialNumber=41043DAC189E22FF7F5AED8107A3232F4190AF3E Validity Not Before: Apr 11 05:20:37 2025 GMT Not After : Apr 18 05:20:37 2025 GMT Subject: CN=67f8a6a5-a09b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:35:a6:ea:34:bb:aa:48:50:70:6b:11:95:10: 97:76:3b:8e:a9:55:eb:58:f5:88:bd:04:ea:63:ef: 3a:99:d7:63:a8:c0:09:31:a2:60:70:2c:ee:99:aa: 16:fc:f2:f1:83:11:c8:9b:db:c7:8a:fd:f5:ef:7f: ac:4f:14:8f:87:a0:48:e9:c4:d5:8c:64:bc:41:2b: 6d:01:21:36:ec:f8:90:5e:93:bb:48:39:f0:f6:c2: 92:d3:00:d9:a2:e0:5d:26:52:94:76:46:89:d9:71: e9:2d:5b:fb:5b:28:87:f1:09:dc:e4:1d:2f:59:c4: 77:bc:b1:44:4b:88:b8:7a:45:ec:ad:63:27:ad:23: 44:63:08:b3:b5:b4:c0:83:a0:81:e7:79:80:21:fe: a0:27:ea:48:26:af:78:fe:23:a8:81:00:60:e0:76: 01:0d:26:28:a0:8a:6e:6c:e5:4e:22:43:4f:fd:35: ae:cf:a7:93:0b:67:2b:cf:4d:7c:6f:ac:6b:1f:a5: 14:66:f5:20:39:14:ae:a8:be:8f:72:b4:1e:85:8e: ae:86:c1:65:9f:d8:3e:67:4c:88:33:10:5f:f5:7b: 74:22:e0:a0:fe:be:fd:24:c2:d6:3e:27:61:96:32: ba:0a:85:bb:05:a8:8c:0d:36:53:7f:4f:3d:4a:23: 44:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:D3:9D:31:54:45:9E:31:10:7F:A6:EE:F9:06:04:63:C6:95:A2:53 X509v3 Authority Key Identifier: keyid:41:04:3D:AC:18:9E:22:FF:7F:5A:ED:81:07:A3:23:2F:41:90:AF:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4475/832470DC18CF11EF8E3F2457C4F9AE02/QQQ9rBieIv9_Wu2BB6MjL0GQrz4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQQ9rBieIv9_Wu2BB6MjL0GQrz4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4475/832470DC18CF11EF8E3F2457C4F9AE02/QQQ9rBieIv9_Wu2BB6MjL0GQrz4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:b9:39:83:dc:4f:0e:68:27:4f:ad:05:99:ca:6b:50:5e:5d: eb:28:38:a5:96:10:e2:49:e4:6c:58:56:b7:ae:dd:24:7b:29: 9f:11:9d:1f:10:d0:7b:ad:db:f2:d8:d5:30:32:c1:91:96:05: 28:81:5c:db:82:b7:10:83:95:92:30:1e:5e:d3:86:1b:26:5f: 10:3b:bf:c2:94:b3:a3:0f:60:88:94:31:9b:29:e4:89:33:8f: 94:e3:33:5b:e6:ff:5b:80:96:bb:2b:c1:eb:50:37:08:53:58: 5e:47:62:30:da:b2:cd:21:89:41:dc:08:0d:b1:cf:1d:73:6d: 14:ce:06:38:86:91:6d:3a:6f:20:1c:f0:8e:f3:fd:14:f0:50: 25:c7:90:cc:ec:db:2b:e1:68:1b:0e:06:a8:e0:24:52:d9:44: a0:db:b4:71:fd:6e:bb:4d:6b:39:cc:d5:db:db:43:11:f7:f0: 15:f9:9c:6a:05:77:ec:c7:50:0b:d9:72:d6:24:1f:fa:03:5f: dd:3c:d2:27:3e:3e:61:45:46:bb:e5:03:d6:1c:cc:5b:9c:3a: 6f:dd:7a:f8:2f:9e:68:1f:2d:ec:87:25:7b:f3:64:09:55:d5: 3a:4f:e8:bf:e0:bb:ec:c8:74:af:fd:65:90:a6:94:a9:95:63: b3:57:73:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ0NzUxMTAvBgNVBAUTKDQxMDQzREFDMTg5RTIyRkY3RjVBRUQ4MTA3QTMyMzJG NDE5MEFGM0UwHhcNMjUwNDExMDUyMDM3WhcNMjUwNDE4MDUyMDM3WjAYMRYwFAYD VQQDEw02N2Y4YTZhNS1hMDliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3TWm6jS7qkhQcGsRlRCXdjuOqVXrWPWIvQTqY+86mddjqMAJMaJgcCzumaoW /PLxgxHIm9vHiv3173+sTxSPh6BI6cTVjGS8QSttASE27PiQXpO7SDnw9sKS0wDZ ouBdJlKUdkaJ2XHpLVv7WyiH8Qnc5B0vWcR3vLFES4i4ekXsrWMnrSNEYwiztbTA g6CB53mAIf6gJ+pIJq94/iOogQBg4HYBDSYooIpubOVOIkNP/TWuz6eTC2crz018 b6xrH6UUZvUgORSuqL6PcrQehY6uhsFln9g+Z0yIMxBf9Xt0IuCg/r79JMLWPidh ljK6CoW7BaiMDTZTf089SiNEEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDfTnTFU RZ4xEH+m7vkGBGPGlaJTMB8GA1UdIwQYMBaAFEEEPawYniL/f1rtgQejIy9BkK8+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDQ3NS84MzI0NzBEQzE4 Q0YxMUVGOEUzRjI0NTdDNEY5QUUwMi9RUVE5ckJpZUl2OV9XdTJCQjZNakwwR1Fy ejQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FRUTlyQmllSXY5X1d1MkJCNk1qTDBHUXJ6NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDQ3NS84MzI0NzBEQzE4Q0YxMUVGOEUzRjI0NTdDNEY5QUUwMi9RUVE5ckJpZUl2 OV9XdTJCQjZNakwwR1FyejQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMuTmD3E8OaCdPrQWZymtQXl3rKDillhDiSeRsWFa3rt0keymfEZ0f ENB7rdvy2NUwMsGRlgUogVzbgrcQg5WSMB5e04YbJl8QO7/ClLOjD2CIlDGbKeSJ M4+U4zNb5v9bgJa7K8HrUDcIU1heR2Iw2rLNIYlB3AgNsc8dc20UzgY4hpFtOm8g HPCO8/0U8FAlx5DM7Nsr4WgbDgao4CRS2USg27Rx/W67TWs5zNXb20MR9/AV+Zxq BXfsx1AL2XLWJB/6A1/dPNInPj5hRUa75QPWHMxbnDpv3Xr4L55oHy3shyV782QJ VdU6T+i/4LvsyHSv/WWQppSplWOzV3OF -----END CERTIFICATE-----Generated at Sun Apr 13 02:37:15 2025 by rpki-client