$ rpki-client -vvf rpki.apnic.net/member_repository/A91BEE0F/5E11148E9BA911EDA33EEC6BC4F9AE02/QRzJhRGOMuB6FVTV6boLTNKKSu8.mft File: QRzJhRGOMuB6FVTV6boLTNKKSu8.mft (raw, json) Hash identifier: QniSa9ac9DVhr77gxOCbob66B+BMR2KMCGfuKRI9eVU= Subject key identifier: 69:34:E8:75:EC:F0:18:56:E2:F2:CB:43:70:1F:41:DB:CE:0B:59:29 Authority key identifier: 41:1C:C9:85:11:8E:32:E0:7A:15:54:D5:E9:BA:0B:4C:D2:8A:4A:EF Certificate issuer: /CN=A91BEE0F/serialNumber=411CC985118E32E07A1554D5E9BA0B4CD28A4AEF Certificate serial: 019C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRzJhRGOMuB6FVTV6boLTNKKSu8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BEE0F/5E11148E9BA911EDA33EEC6BC4F9AE02/QRzJhRGOMuB6FVTV6boLTNKKSu8.mft Manifest number: 019C Signing time: Fri 11 Apr 2025 02:40:38 +0000 Manifest this update: Fri 11 Apr 2025 02:40:37 +0000 Manifest next update: Fri 18 Apr 2025 02:40:37 +0000 Files and hashes: 1: QRzJhRGOMuB6FVTV6boLTNKKSu8.crl (hash: vR2WXZQK5ltd9dNyPGQMNKbmNpzIOtL7FmOv/BWjNdE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BEE0F/5E11148E9BA911EDA33EEC6BC4F9AE02/QRzJhRGOMuB6FVTV6boLTNKKSu8.crl rsync://rpki.apnic.net/member_repository/A91BEE0F/5E11148E9BA911EDA33EEC6BC4F9AE02/QRzJhRGOMuB6FVTV6boLTNKKSu8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRzJhRGOMuB6FVTV6boLTNKKSu8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 02:40:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 412 (0x19c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BEE0F, serialNumber=411CC985118E32E07A1554D5E9BA0B4CD28A4AEF Validity Not Before: Apr 11 02:40:37 2025 GMT Not After : Apr 18 02:40:37 2025 GMT Subject: CN=67f88125-c935 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:93:79:0e:a0:26:2d:cf:b4:1a:51:12:d2:24: 35:10:43:66:a1:9c:83:25:5a:ec:aa:70:f4:ca:ff: bf:65:6a:81:cc:47:00:0f:12:b3:f5:76:d2:b4:9c: fd:22:dc:a7:99:3f:3a:a6:2d:8f:aa:0a:86:2b:79: 6d:f2:6f:66:8a:c3:32:f4:b6:32:17:3b:bb:48:2b: 37:f5:3e:c5:02:b8:e0:4f:62:85:d3:6e:c4:03:12: d2:d4:66:83:65:ec:5c:88:62:6f:e9:bc:bb:81:88: 86:c9:57:ac:10:04:1b:ab:ea:4d:05:12:66:73:c8: 3f:2a:e9:7a:62:8d:90:b7:ac:c5:9b:32:6e:e0:fc: be:50:19:f4:5a:0d:f6:06:75:0c:48:93:9d:30:63: 80:c2:42:f1:e4:94:62:de:39:95:ab:aa:d8:4a:6e: d0:c5:6e:1a:b3:25:38:b9:81:02:76:f9:7c:e0:90: 0e:16:e7:c2:e7:83:c7:17:44:0d:f0:df:24:71:ed: 15:42:c6:89:6b:80:8b:55:9d:11:a0:42:0e:80:29: 7c:a9:c0:ee:29:1a:60:d7:06:e6:11:2f:d5:cf:1b: 84:f4:8f:69:5e:83:4d:5d:99:ae:0e:78:f3:19:3c: 89:d9:17:a2:f7:ae:26:05:7a:4a:02:09:92:33:94: 2e:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:34:E8:75:EC:F0:18:56:E2:F2:CB:43:70:1F:41:DB:CE:0B:59:29 X509v3 Authority Key Identifier: keyid:41:1C:C9:85:11:8E:32:E0:7A:15:54:D5:E9:BA:0B:4C:D2:8A:4A:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BEE0F/5E11148E9BA911EDA33EEC6BC4F9AE02/QRzJhRGOMuB6FVTV6boLTNKKSu8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRzJhRGOMuB6FVTV6boLTNKKSu8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEE0F/5E11148E9BA911EDA33EEC6BC4F9AE02/QRzJhRGOMuB6FVTV6boLTNKKSu8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:87:b2:d3:5b:4f:de:e6:a7:29:b0:62:25:16:0f:5b:a2:31: 5c:bf:a8:26:42:3f:a8:21:7a:63:88:63:bc:d3:d2:af:e2:03: c6:19:8c:00:f8:89:9c:36:27:44:1b:b1:78:c2:c2:e4:6d:da: 75:af:08:e4:7a:66:f7:bf:f7:55:b2:e4:2f:5f:d0:95:7b:e5: ce:cf:6e:ea:f2:f8:23:70:a4:60:ec:1f:78:f3:65:75:4f:e2: 57:5b:41:9a:fc:c0:e5:c2:d9:14:f8:4a:b6:05:1d:ca:84:f5: fa:db:71:95:69:a9:d4:99:f4:60:92:d8:4c:cb:42:1e:9f:ee: 92:77:d7:d9:d5:e5:67:b0:19:cc:38:c5:01:1a:94:87:7d:fb: af:bc:04:c9:e1:29:a4:99:4f:6c:70:ef:b2:29:f9:ce:5e:a3: 7f:58:da:93:86:4d:76:46:66:5e:55:b9:fc:df:1e:94:2b:2d: 0a:84:e4:e8:03:7b:e3:31:8a:8c:94:81:f0:54:e4:25:7b:cb: 0b:39:6f:c6:56:ff:47:4a:f0:6a:11:13:b1:9f:9d:48:c8:23: 2a:03:a3:21:76:bb:08:80:74:8d:8e:0d:a3:d6:8d:60:d2:e5: cc:84:33:aa:9f:67:0a:f5:8a:97:9b:22:02:29:10:d9:20:20: 6d:21:84:4c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkVFMEYxMTAvBgNVBAUTKDQxMUNDOTg1MTE4RTMyRTA3QTE1NTRENUU5QkEwQjRD RDI4QTRBRUYwHhcNMjUwNDExMDI0MDM3WhcNMjUwNDE4MDI0MDM3WjAYMRYwFAYD VQQDEw02N2Y4ODEyNS1jOTM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2JN5DqAmLc+0GlES0iQ1EENmoZyDJVrsqnD0yv+/ZWqBzEcADxKz9XbStJz9 ItynmT86pi2PqgqGK3lt8m9misMy9LYyFzu7SCs39T7FArjgT2KF027EAxLS1GaD ZexciGJv6by7gYiGyVesEAQbq+pNBRJmc8g/Kul6Yo2Qt6zFmzJu4Py+UBn0Wg32 BnUMSJOdMGOAwkLx5JRi3jmVq6rYSm7QxW4asyU4uYECdvl84JAOFufC54PHF0QN 8N8kce0VQsaJa4CLVZ0RoEIOgCl8qcDuKRpg1wbmES/VzxuE9I9pXoNNXZmuDnjz GTyJ2Rei964mBXpKAgmSM5QuIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGk06HXs 8BhW4vLLQ3AfQdvOC1kpMB8GA1UdIwQYMBaAFEEcyYURjjLgehVU1em6C0zSikrv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRUUwRi81RTExMTQ4RTlC QTkxMUVEQTMzRUVDNkJDNEY5QUUwMi9RUnpKaFJHT011QjZGVlRWNmJvTFROS0tT dTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FSekpoUkdPTXVCNkZWVFY2Ym9MVE5LS1N1OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RUUwRi81RTExMTQ4RTlCQTkxMUVEQTMzRUVDNkJDNEY5QUUwMi9RUnpKaFJHT011 QjZGVlRWNmJvTFROS0tTdTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAh7LTW0/e5qcpsGIlFg9bojFcv6gmQj+oIXpjiGO809Kv4gPGGYwA +ImcNidEG7F4wsLkbdp1rwjkemb3v/dVsuQvX9CVe+XOz27q8vgjcKRg7B9482V1 T+JXW0Ga/MDlwtkU+Eq2BR3KhPX623GVaanUmfRgkthMy0Ien+6Sd9fZ1eVnsBnM OMUBGpSHffuvvATJ4SmkmU9scO+yKfnOXqN/WNqThk12RmZeVbn83x6UKy0KhOTo A3vjMYqMlIHwVOQle8sLOW/GVv9HSvBqEROxn51IyCMqA6MhdrsIgHSNjg2j1o1g 0uXMhDOqn2cK9YqXmyICKRDZICBtIYRM -----END CERTIFICATE-----Generated at Sat Apr 12 23:37:57 2025 by rpki-client