$ rpki-client -vvf rpki.apnic.net/member_repository/A911B12B/08C27532DB6811ED96C49C3DC4F9AE02/qZhc3TeTLh02TExtddulA79yZ3w.mft File: qZhc3TeTLh02TExtddulA79yZ3w.mft (raw, json) Hash identifier: dGGBQhUzhtSqKlmKnUCtyfACEpg0j6INgiFsO3UPdTs= Subject key identifier: 89:46:F0:15:74:2C:49:F5:93:7A:B8:1D:B6:F9:68:3B:E1:6D:45:09 Authority key identifier: A9:98:5C:DD:37:93:2E:1D:36:4C:4C:6D:75:DB:A5:03:BF:72:67:7C Certificate issuer: /CN=A911B12B/serialNumber=A9985CDD37932E1D364C4C6D75DBA503BF72677C Certificate serial: 01AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZhc3TeTLh02TExtddulA79yZ3w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B12B/08C27532DB6811ED96C49C3DC4F9AE02/qZhc3TeTLh02TExtddulA79yZ3w.mft Manifest number: 01A1 Signing time: Sat 31 May 2025 03:12:46 +0000 Manifest this update: Sat 31 May 2025 03:12:46 +0000 Manifest next update: Sat 07 Jun 2025 03:12:46 +0000 Files and hashes: 1: qZhc3TeTLh02TExtddulA79yZ3w.crl (hash: 6/O3Dp2e20UoaXOXDBuEyhyULz14EVswlAvoTc3Db5c=) 2: 2048ADEADD5011EDA3ACE13CC4F9AE02.roa (hash: Ry5wENgivtIXCFgzf0QiO3bQmATycLuxi4WQf0WGYRQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B12B/08C27532DB6811ED96C49C3DC4F9AE02/qZhc3TeTLh02TExtddulA79yZ3w.crl rsync://rpki.apnic.net/member_repository/A911B12B/08C27532DB6811ED96C49C3DC4F9AE02/qZhc3TeTLh02TExtddulA79yZ3w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZhc3TeTLh02TExtddulA79yZ3w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:12:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 427 (0x1ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B12B, serialNumber=A9985CDD37932E1D364C4C6D75DBA503BF72677C Validity Not Before: May 31 03:12:46 2025 GMT Not After : Jun 7 03:12:46 2025 GMT Subject: CN=683a73ae-2409 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:48:a8:77:bc:9a:24:e8:02:6b:58:19:28:22: f5:7c:2b:e2:a3:dd:de:15:cc:6d:ec:29:19:ea:d8: c3:2c:7e:c4:13:7a:e6:63:48:1f:37:d4:1d:8b:0c: b6:fb:3b:80:13:bc:d2:c1:5e:7a:4b:2f:6d:d3:02: 38:29:ea:8c:72:a8:66:4b:76:0e:f3:0f:a3:43:68: 6c:10:3b:e8:ed:30:d8:9d:62:0a:8c:37:d8:b8:65: 34:ce:d6:9b:56:d4:c7:52:7a:a7:58:96:17:ac:e5: 7a:66:95:2c:9e:4e:c9:bb:ef:79:f2:95:15:1e:7d: 3d:63:e0:7c:1b:22:62:1d:4f:65:8f:e2:92:24:cd: 79:39:a3:9a:dd:4a:e5:05:bf:e0:cf:7f:78:ed:25: eb:60:90:72:01:36:b8:a3:09:db:2d:1f:c2:cb:3f: 21:53:18:8f:4c:a1:80:66:30:45:8f:13:2f:e5:dd: a0:09:28:92:1d:ae:21:1e:a8:53:d9:62:f3:4f:a7: 71:4d:f1:31:c3:39:3b:da:12:fa:57:9f:5b:3a:57: 50:8f:01:ec:38:75:52:66:ae:3b:bf:1c:17:09:cf: 92:0f:b4:b7:9e:72:1f:e6:b0:00:dc:13:0c:10:44: 83:17:f3:4d:42:fd:0c:ca:47:62:f1:d9:e9:5d:b5: fd:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:46:F0:15:74:2C:49:F5:93:7A:B8:1D:B6:F9:68:3B:E1:6D:45:09 X509v3 Authority Key Identifier: keyid:A9:98:5C:DD:37:93:2E:1D:36:4C:4C:6D:75:DB:A5:03:BF:72:67:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B12B/08C27532DB6811ED96C49C3DC4F9AE02/qZhc3TeTLh02TExtddulA79yZ3w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZhc3TeTLh02TExtddulA79yZ3w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B12B/08C27532DB6811ED96C49C3DC4F9AE02/qZhc3TeTLh02TExtddulA79yZ3w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c1:8f:bd:b1:9b:91:8d:27:a4:37:52:a3:72:1a:51:c3:99:85: d0:b6:a8:d4:0b:9e:58:c1:a3:3a:52:5d:c8:62:3f:15:75:2d: 01:b7:f5:3d:43:23:cd:f0:8c:fd:f9:a9:4c:a9:51:9e:9b:1f: 9b:0e:59:4d:e6:9a:c3:18:5d:cb:d5:bc:0e:ee:43:4c:9a:5e: 96:4c:ad:da:86:d0:bf:c2:37:bb:8d:c8:5c:7e:96:bd:e1:d3: 75:9e:ed:c8:46:98:a5:72:d4:f7:09:54:6f:a2:ed:7e:13:4c: 78:47:5d:ec:26:9f:1f:37:32:5d:fc:55:77:1c:63:d4:4d:19: 85:aa:cb:b4:30:54:d4:db:59:b5:f8:1a:ba:1d:3f:56:90:16: bd:73:54:7a:a9:ad:af:4d:17:83:0e:eb:cf:fe:59:3e:1a:2d: a8:0b:64:34:88:ad:c5:83:4d:5f:bf:3c:a9:42:52:c5:32:f0: 5c:c6:d5:f8:98:48:0d:eb:2f:28:2c:3c:9c:bf:08:c9:02:01: e0:3b:b9:87:5d:c7:51:d9:69:cc:75:06:ee:d0:0f:82:4c:f0: 97:2a:27:01:5c:5b:75:e4:2d:2e:cd:63:84:e8:36:c9:06:9f: 65:0a:d7:e5:b0:55:68:41:0b:8a:90:77:2b:a1:dc:4c:10:f9: fc:2a:62:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUIxMkIxMTAvBgNVBAUTKEE5OTg1Q0REMzc5MzJFMUQzNjRDNEM2RDc1REJBNTAz QkY3MjY3N0MwHhcNMjUwNTMxMDMxMjQ2WhcNMjUwNjA3MDMxMjQ2WjAYMRYwFAYD VQQDEw02ODNhNzNhZS0yNDA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvUiod7yaJOgCa1gZKCL1fCvio93eFcxt7CkZ6tjDLH7EE3rmY0gfN9Qdiwy2 +zuAE7zSwV56Sy9t0wI4KeqMcqhmS3YO8w+jQ2hsEDvo7TDYnWIKjDfYuGU0ztab VtTHUnqnWJYXrOV6ZpUsnk7Ju+958pUVHn09Y+B8GyJiHU9lj+KSJM15OaOa3Url Bb/gz3947SXrYJByATa4ownbLR/Cyz8hUxiPTKGAZjBFjxMv5d2gCSiSHa4hHqhT 2WLzT6dxTfExwzk72hL6V59bOldQjwHsOHVSZq47vxwXCc+SD7S3nnIf5rAA3BMM EESDF/NNQv0Mykdi8dnpXbX9IwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIlG8BV0 LEn1k3q4Hbb5aDvhbUUJMB8GA1UdIwQYMBaAFKmYXN03ky4dNkxMbXXbpQO/cmd8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjEyQi8wOEMyNzUzMkRC NjgxMUVEOTZDNDlDM0RDNEY5QUUwMi9xWmhjM1RlVExoMDJURXh0ZGR1bEE3OXla M3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FaaGMzVGVUTGgwMlRFeHRkZHVsQTc5eVozdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QjEyQi8wOEMyNzUzMkRCNjgxMUVEOTZDNDlDM0RDNEY5QUUwMi9xWmhjM1RlVExo MDJURXh0ZGR1bEE3OXlaM3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDBj72xm5GNJ6Q3UqNyGlHDmYXQtqjUC55YwaM6Ul3IYj8VdS0Bt/U9 QyPN8Iz9+alMqVGemx+bDllN5prDGF3L1bwO7kNMml6WTK3ahtC/wje7jchcfpa9 4dN1nu3IRpilctT3CVRvou1+E0x4R13sJp8fNzJd/FV3HGPUTRmFqsu0MFTU21m1 +Bq6HT9WkBa9c1R6qa2vTReDDuvP/lk+Gi2oC2Q0iK3Fg01fvzypQlLFMvBcxtX4 mEgN6y8oLDycvwjJAgHgO7mHXcdR2WnMdQbu0A+CTPCXKicBXFt15C0uzWOE6DbJ Bp9lCtflsFVoQQuKkHcrodxMEPn8KmLg -----END CERTIFICATE-----Generated at Sat May 31 14:46:32 2025 by rpki-client