$ rpki-client -vvf rpki.apnic.net/member_repository/A9113B73/BA6359822FE411EB8DB41B25C4F9AE02/QstM8CH28_wMgcT98cl9dCEAMXs.mft File: QstM8CH28_wMgcT98cl9dCEAMXs.mft (raw, json) Hash identifier: W981qP1hvJaT9wDjRSUqbXthPniWzbI9l8uxkBjfq2w= Subject key identifier: 03:98:2E:51:F5:94:AF:09:D3:0A:D4:B5:63:86:CC:35:78:EE:0B:7C Authority key identifier: 42:CB:4C:F0:21:F6:F3:FC:0C:81:C4:FD:F1:C9:7D:74:21:00:31:7B Certificate issuer: /CN=A9113B73/serialNumber=42CB4CF021F6F3FC0C81C4FDF1C97D742100317B Certificate serial: 0741 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QstM8CH28_wMgcT98cl9dCEAMXs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9113B73/BA6359822FE411EB8DB41B25C4F9AE02/QstM8CH28_wMgcT98cl9dCEAMXs.mft Manifest number: 0738 Signing time: Fri 30 May 2025 21:59:33 +0000 Manifest this update: Fri 30 May 2025 21:59:32 +0000 Manifest next update: Fri 06 Jun 2025 21:59:32 +0000 Files and hashes: 1: QstM8CH28_wMgcT98cl9dCEAMXs.crl (hash: WeO8CSUQ0vCvML3vZD8XgAc25GDFV0M1rxPJ1F96vhY=) 2: 038C732E874611EB83B41D39C4F9AE02.roa (hash: xDFL83BDJofXsoqgs4IapCDppXS9oRsh4Talz2QouY4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9113B73/BA6359822FE411EB8DB41B25C4F9AE02/QstM8CH28_wMgcT98cl9dCEAMXs.crl rsync://rpki.apnic.net/member_repository/A9113B73/BA6359822FE411EB8DB41B25C4F9AE02/QstM8CH28_wMgcT98cl9dCEAMXs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QstM8CH28_wMgcT98cl9dCEAMXs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 21:59:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1857 (0x741) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9113B73, serialNumber=42CB4CF021F6F3FC0C81C4FDF1C97D742100317B Validity Not Before: May 30 21:59:32 2025 GMT Not After : Jun 6 21:59:32 2025 GMT Subject: CN=683a2a44-325b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:3e:22:db:24:7b:c6:0a:1e:09:41:b3:61:c6: 2f:13:74:c3:c6:8b:dd:a3:68:74:16:6b:1e:4d:d2: 38:f9:5f:60:49:73:0e:91:79:b4:c4:0c:35:55:81: f2:b9:93:9f:b1:7f:b3:a6:a9:33:33:14:07:0f:23: e0:3f:08:d4:9c:59:20:33:ae:74:83:5c:27:1c:3d: 35:90:59:c8:3a:e9:df:77:58:eb:00:26:4b:4a:83: ee:c4:92:6d:ad:57:2f:ee:63:29:3b:b0:2a:8a:21: 7d:f9:1a:ce:b8:15:0a:22:f5:99:e3:d9:ec:29:3b: f1:c7:4e:0a:45:3b:e2:c8:7b:2e:eb:ac:66:cd:dd: 21:af:af:24:f6:da:86:cd:64:0d:ec:f1:10:01:7a: 4e:7b:0e:72:71:16:c7:04:a4:a9:f5:f9:6b:0a:53: 69:ef:48:47:2b:1d:19:d4:6c:70:b3:33:54:8a:79: e2:80:2a:c0:1d:e5:ee:50:b7:17:de:ef:0e:8c:81: 21:5a:f2:ca:d3:b4:99:74:14:ea:ce:48:57:7b:44: 0c:68:eb:bb:39:8c:3a:b2:f5:4a:ca:ec:68:01:c0: c0:af:68:31:35:1d:c2:28:fb:b0:85:35:ba:78:45: ea:2e:b9:a6:d5:6b:86:e8:70:ef:e9:ac:d6:c6:ed: 32:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:98:2E:51:F5:94:AF:09:D3:0A:D4:B5:63:86:CC:35:78:EE:0B:7C X509v3 Authority Key Identifier: keyid:42:CB:4C:F0:21:F6:F3:FC:0C:81:C4:FD:F1:C9:7D:74:21:00:31:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9113B73/BA6359822FE411EB8DB41B25C4F9AE02/QstM8CH28_wMgcT98cl9dCEAMXs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QstM8CH28_wMgcT98cl9dCEAMXs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113B73/BA6359822FE411EB8DB41B25C4F9AE02/QstM8CH28_wMgcT98cl9dCEAMXs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:64:02:dd:cf:5c:e3:ba:84:2b:f8:9f:90:73:ac:8c:77:8c: 23:91:a9:1c:ad:6e:c8:ff:c6:c3:3f:25:0c:bf:1b:ab:c5:35: 4f:5c:28:b5:d0:fa:b1:e9:5a:ba:1a:b1:5b:7c:95:25:d6:4a: 77:5c:0e:82:a7:ae:8b:a8:c6:84:2d:9f:6b:ba:88:ad:e6:8b: 9b:45:80:59:2b:ff:b9:aa:53:ed:d4:e5:a9:74:97:74:12:64: f9:13:e9:0d:44:17:56:6a:9f:47:18:87:7e:f5:93:5c:4d:e5: ea:08:60:b5:d6:1a:ab:4f:47:74:bf:ff:20:db:f2:80:b9:79: 2b:7f:8d:c2:5c:0c:da:5b:d3:3d:d0:dc:7d:14:4f:92:0d:16: 83:a6:ba:4b:0c:c7:cc:0a:36:c8:76:14:e2:64:fc:a7:02:64: b1:c6:27:b8:d3:78:76:e1:20:0f:88:88:36:58:19:ed:47:60: 6e:24:97:12:d3:79:5e:76:79:ce:82:bd:c1:92:9c:c3:af:0d: 1b:b3:45:99:c4:eb:4c:71:d8:a8:4a:50:1d:d6:30:2d:1f:10: c1:84:37:df:f4:5b:98:f2:16:b1:b6:a4:04:b2:50:21:8a:18: ca:02:a3:de:db:51:74:7d:6e:31:5c:86:ed:ed:c3:25:48:04: 67:53:e3:39 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB0EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTNCNzMxMTAvBgNVBAUTKDQyQ0I0Q0YwMjFGNkYzRkMwQzgxQzRGREYxQzk3RDc0 MjEwMDMxN0IwHhcNMjUwNTMwMjE1OTMyWhcNMjUwNjA2MjE1OTMyWjAYMRYwFAYD VQQDEw02ODNhMmE0NC0zMjViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvz4i2yR7xgoeCUGzYcYvE3TDxovdo2h0FmseTdI4+V9gSXMOkXm0xAw1VYHy uZOfsX+zpqkzMxQHDyPgPwjUnFkgM650g1wnHD01kFnIOunfd1jrACZLSoPuxJJt rVcv7mMpO7AqiiF9+RrOuBUKIvWZ49nsKTvxx04KRTviyHsu66xmzd0hr68k9tqG zWQN7PEQAXpOew5ycRbHBKSp9flrClNp70hHKx0Z1GxwszNUinnigCrAHeXuULcX 3u8OjIEhWvLK07SZdBTqzkhXe0QMaOu7OYw6svVKyuxoAcDAr2gxNR3CKPuwhTW6 eEXqLrmm1WuG6HDv6azWxu0yuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAOYLlH1 lK8J0wrUtWOGzDV47gt8MB8GA1UdIwQYMBaAFELLTPAh9vP8DIHE/fHJfXQhADF7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExM0I3My9CQTYzNTk4MjJG RTQxMUVCOERCNDFCMjVDNEY5QUUwMi9Rc3RNOENIMjhfd01nY1Q5OGNsOWRDRUFN WHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FzdE04Q0gyOF93TWdjVDk4Y2w5ZENFQU1Ycy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx M0I3My9CQTYzNTk4MjJGRTQxMUVCOERCNDFCMjVDNEY5QUUwMi9Rc3RNOENIMjhf d01nY1Q5OGNsOWRDRUFNWHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgZALdz1zjuoQr+J+Qc6yMd4wjkakcrW7I/8bDPyUMvxurxTVPXCi1 0Pqx6Vq6GrFbfJUl1kp3XA6Cp66LqMaELZ9ruoit5oubRYBZK/+5qlPt1OWpdJd0 EmT5E+kNRBdWap9HGId+9ZNcTeXqCGC11hqrT0d0v/8g2/KAuXkrf43CXAzaW9M9 0Nx9FE+SDRaDprpLDMfMCjbIdhTiZPynAmSxxie403h24SAPiIg2WBntR2BuJJcS 03lednnOgr3BkpzDrw0bs0WZxOtMcdioSlAd1jAtHxDBhDff9FuY8haxtqQEslAh ihjKAqPe21F0fW4xXIbt7cMlSARnU+M5 -----END CERTIFICATE-----Generated at Sat May 31 16:59:29 2025 by rpki-client