$ rpki-client -vvf rpki.apnic.net/member_repository/A91F95E2/118545FA5C7511EC89ABFA0BC4F9AE02/QQWX1bAAQ-IKokCeMnHtT0HhMcc.mft File: QQWX1bAAQ-IKokCeMnHtT0HhMcc.mft (raw, json) Hash identifier: f4Xt7PP2QAo1PgZEiVsf2NkIu15KBDsPdnv5jFGQkKU= Subject key identifier: C2:17:45:C5:11:29:5A:E3:F2:22:3C:3D:D6:6A:D1:0E:42:04:B6:72 Authority key identifier: 41:05:97:D5:B0:00:43:E2:0A:A2:40:9E:32:71:ED:4F:41:E1:31:C7 Certificate issuer: /CN=A91F95E2/serialNumber=410597D5B00043E20AA2409E3271ED4F41E131C7 Certificate serial: 0427 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQWX1bAAQ-IKokCeMnHtT0HhMcc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F95E2/118545FA5C7511EC89ABFA0BC4F9AE02/QQWX1bAAQ-IKokCeMnHtT0HhMcc.mft Manifest number: 0423 Signing time: Fri 11 Apr 2025 00:18:59 +0000 Manifest this update: Fri 11 Apr 2025 00:18:59 +0000 Manifest next update: Fri 18 Apr 2025 00:18:59 +0000 Files and hashes: 1: QQWX1bAAQ-IKokCeMnHtT0HhMcc.crl (hash: xb9l4RaI7Y8JQ2OHJALA393XB45kawRh3WYWmygeQvo=) 2: 6229E2DC5C7911EC8C7BD812C4F9AE02.roa (hash: wGbE0YkCiIM+SIF6UsXM2Y8Q1BpBKgQHBXubgyLVuBc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F95E2/118545FA5C7511EC89ABFA0BC4F9AE02/QQWX1bAAQ-IKokCeMnHtT0HhMcc.crl rsync://rpki.apnic.net/member_repository/A91F95E2/118545FA5C7511EC89ABFA0BC4F9AE02/QQWX1bAAQ-IKokCeMnHtT0HhMcc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQWX1bAAQ-IKokCeMnHtT0HhMcc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 00:18:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1063 (0x427) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F95E2, serialNumber=410597D5B00043E20AA2409E3271ED4F41E131C7 Validity Not Before: Apr 11 00:18:59 2025 GMT Not After : Apr 18 00:18:59 2025 GMT Subject: CN=67f85ff3-2154 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f4:56:69:2f:4f:84:16:37:9c:10:f2:69:3b: d5:3c:4e:fe:87:01:67:6b:91:91:98:9a:17:64:4f: 59:2a:41:4d:37:4b:4a:2f:34:bd:57:05:45:5f:d6: 55:3f:0e:11:4a:fc:8f:2f:0c:68:09:a9:8c:4c:42: 4e:ec:35:18:89:b8:81:08:dd:8a:79:5e:1e:0f:e8: 75:b4:eb:a7:ad:b0:df:40:89:b3:99:58:e3:dc:3d: f0:e9:df:99:4e:d1:8a:30:3b:88:b5:7d:e7:55:e4: b4:96:fb:ae:be:db:4d:d2:4a:5c:d7:f9:71:48:63: 09:21:73:80:31:65:b5:b8:67:f3:18:ac:63:ec:bf: b2:96:82:8b:71:e0:08:04:34:22:e5:3d:2e:70:2e: a5:81:9c:da:cf:21:29:ac:dd:09:77:f2:60:62:ba: 45:2d:e5:16:3c:0d:1a:84:34:d9:44:dd:9b:45:f2: 25:af:5b:09:a1:fa:72:2e:ed:75:87:41:43:19:04: c9:f4:09:44:fb:c4:2e:96:bc:7b:e7:83:b9:c2:4d: 86:a4:5b:dc:0d:c9:5a:db:71:26:e6:3d:49:12:f1: 94:73:15:f9:79:70:18:4b:0b:bc:49:48:24:8d:bf: 37:4c:36:c8:62:44:92:f5:09:5b:42:7c:3e:1b:3b: 63:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:17:45:C5:11:29:5A:E3:F2:22:3C:3D:D6:6A:D1:0E:42:04:B6:72 X509v3 Authority Key Identifier: keyid:41:05:97:D5:B0:00:43:E2:0A:A2:40:9E:32:71:ED:4F:41:E1:31:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F95E2/118545FA5C7511EC89ABFA0BC4F9AE02/QQWX1bAAQ-IKokCeMnHtT0HhMcc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQWX1bAAQ-IKokCeMnHtT0HhMcc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F95E2/118545FA5C7511EC89ABFA0BC4F9AE02/QQWX1bAAQ-IKokCeMnHtT0HhMcc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:2c:fb:3d:db:b4:d9:ef:34:d5:06:a8:e1:5c:bc:d5:e8:a8: 12:ea:55:05:10:ff:60:ad:bd:5d:70:21:e8:6e:23:cd:83:a1: e7:b6:a5:5d:bc:88:86:9c:b2:ee:6e:56:58:93:95:80:71:02: 23:11:23:8d:54:9e:09:36:3b:bf:ef:1c:ca:0b:1d:48:3f:a6: 18:05:e8:35:31:bb:6b:64:0a:0c:f7:7a:5d:42:10:4b:50:56: 28:d4:e1:3d:2f:48:6f:7e:6e:17:ec:15:1d:3b:6e:b9:01:5e: 58:c2:2a:a6:24:fb:76:5b:c0:9b:fd:c8:22:3c:b1:88:45:bd: 71:17:45:4a:6a:cf:b5:aa:ad:e7:8c:a6:38:ce:cf:85:1b:67: cb:5e:08:40:2a:89:83:93:c6:dc:a7:1d:c9:5a:5c:7d:c1:a8: 39:5e:b3:03:5b:3c:8c:c3:55:ff:a7:1a:ce:48:08:de:0f:f8: 84:19:31:1b:9a:82:79:a1:26:8a:6f:cd:ed:e6:f1:c5:06:79: 0b:b7:33:fd:3b:94:df:97:e3:e4:00:61:b4:e0:ae:ab:75:2d: 57:2e:78:0b:13:68:b8:aa:c9:68:6c:34:b9:25:2e:9b:d8:4c: c0:89:f8:bf:a0:bc:f0:a3:44:c8:0d:27:30:32:ac:3b:1f:14: 0b:3d:4b:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBCcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjk1RTIxMTAvBgNVBAUTKDQxMDU5N0Q1QjAwMDQzRTIwQUEyNDA5RTMyNzFFRDRG NDFFMTMxQzcwHhcNMjUwNDExMDAxODU5WhcNMjUwNDE4MDAxODU5WjAYMRYwFAYD VQQDEw02N2Y4NWZmMy0yMTU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuPRWaS9PhBY3nBDyaTvVPE7+hwFna5GRmJoXZE9ZKkFNN0tKLzS9VwVFX9ZV Pw4RSvyPLwxoCamMTEJO7DUYibiBCN2KeV4eD+h1tOunrbDfQImzmVjj3D3w6d+Z TtGKMDuItX3nVeS0lvuuvttN0kpc1/lxSGMJIXOAMWW1uGfzGKxj7L+yloKLceAI BDQi5T0ucC6lgZzazyEprN0Jd/JgYrpFLeUWPA0ahDTZRN2bRfIlr1sJofpyLu11 h0FDGQTJ9AlE+8Qulrx754O5wk2GpFvcDcla23Em5j1JEvGUcxX5eXAYSwu8SUgk jb83TDbIYkSS9QlbQnw+GztjsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMIXRcUR KVrj8iI8PdZq0Q5CBLZyMB8GA1UdIwQYMBaAFEEFl9WwAEPiCqJAnjJx7U9B4THH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOTVFMi8xMTg1NDVGQTVD NzUxMUVDODlBQkZBMEJDNEY5QUUwMi9RUVdYMWJBQVEtSUtva0NlTW5IdFQwSGhN Y2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FRV1gxYkFBUS1JS29rQ2VNbkh0VDBIaE1jYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OTVFMi8xMTg1NDVGQTVDNzUxMUVDODlBQkZBMEJDNEY5QUUwMi9RUVdYMWJBQVEt SUtva0NlTW5IdFQwSGhNY2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmLPs927TZ7zTVBqjhXLzV6KgS6lUFEP9grb1dcCHobiPNg6HntqVd vIiGnLLublZYk5WAcQIjESONVJ4JNju/7xzKCx1IP6YYBeg1MbtrZAoM93pdQhBL UFYo1OE9L0hvfm4X7BUdO265AV5YwiqmJPt2W8Cb/cgiPLGIRb1xF0VKas+1qq3n jKY4zs+FG2fLXghAKomDk8bcpx3JWlx9wag5XrMDWzyMw1X/pxrOSAjeD/iEGTEb moJ5oSaKb83t5vHFBnkLtzP9O5Tfl+PkAGG04K6rdS1XLngLE2i4qslobDS5JS6b 2EzAifi/oLzwo0TIDScwMqw7HxQLPUtI -----END CERTIFICATE-----Generated at Sat Apr 12 22:42:43 2025 by rpki-client