$ rpki-client -vvf rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.mft File: qbzKbTTT1fHv-Lvng9SXc4E-Xvg.mft (raw, json) Hash identifier: b4iybx3Int1fpRbq7gwXXkpfkLD3F9iTZg7dgITm/e4= Subject key identifier: 34:A2:20:AA:C4:E1:57:93:D1:C1:C7:63:C3:0D:BD:03:A2:F1:A2:A8 Authority key identifier: A9:BC:CA:6D:34:D3:D5:F1:EF:F8:BB:E7:83:D4:97:73:81:3E:5E:F8 Certificate issuer: /CN=A9186E8A/serialNumber=A9BCCA6D34D3D5F1EFF8BBE783D49773813E5EF8 Certificate serial: 077A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.mft Manifest number: 074D Signing time: Wed 12 Mar 2025 21:29:54 +0000 Manifest this update: Wed 12 Mar 2025 21:29:53 +0000 Manifest next update: Wed 19 Mar 2025 21:29:53 +0000 Files and hashes: 1: qbzKbTTT1fHv-Lvng9SXc4E-Xvg.crl (hash: 4SOod6I2LQuB8yL2pzjF5yPQ9CsSFp/Ytu1v5D6KcXw=) 2: 66C1BA862FBB11EB9B861059C4F9AE02.roa (hash: 1+DFz3Ohl+K4Krz+OlUwDG7GSgikxyNy5V+bghBruP8=) 3: ECB6EF462FC311EB8B442B0DC4F9AE02.roa (hash: jQyPrwoXsSmi3M2tyYMpOHb4oWp30e7X7cQmklX25kw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.crl rsync://rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Mar 2025 21:29:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1914 (0x77a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186E8A Validity Not Before: Mar 12 21:29:53 2025 GMT Not After : Mar 19 21:29:53 2025 GMT Subject: CN=67d1fcd1-6606 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:43:a4:df:71:e5:01:5e:8f:94:7f:19:ef:38: 0c:05:ba:4f:3f:ad:39:ab:06:10:65:68:e4:23:b0: fc:bb:a4:ca:aa:f9:d1:42:23:35:35:6e:f3:a2:e9: bc:e6:48:07:54:45:03:06:c4:3d:16:ed:b8:fc:8d: d1:1e:13:65:22:0d:b1:c9:3e:45:4c:82:16:e3:0d: bc:95:09:2b:66:56:b2:71:d1:34:ef:80:cc:f9:bf: 82:04:d3:be:fa:c5:1a:78:ad:18:eb:fc:88:84:07: b8:b4:39:00:ae:ea:9e:1c:95:a2:6d:aa:82:71:ca: 20:01:20:fc:57:f2:61:07:47:3e:bf:ae:f8:dc:4a: cd:32:59:ab:15:3e:dd:5d:50:4d:ed:25:29:18:ff: e4:cd:89:95:61:f6:fa:ae:78:be:91:af:7e:35:9a: b4:de:a0:f7:cb:5f:af:67:9a:97:0b:85:09:be:2a: 28:aa:20:2e:5d:ba:94:01:dd:31:dc:da:72:46:b6: 5b:73:6e:6a:f7:2f:58:d4:b1:57:40:ab:10:97:21: cf:4d:3c:76:0a:d1:2d:78:a6:4e:4b:2b:23:37:d5: 98:ee:a5:b4:ad:60:ef:cf:8b:d5:9c:14:a6:fd:8f: dc:3d:02:da:3d:a1:fb:3d:0d:a1:14:84:3c:f4:20: f5:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:A2:20:AA:C4:E1:57:93:D1:C1:C7:63:C3:0D:BD:03:A2:F1:A2:A8 X509v3 Authority Key Identifier: keyid:A9:BC:CA:6D:34:D3:D5:F1:EF:F8:BB:E7:83:D4:97:73:81:3E:5E:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:56:f7:22:cf:b0:84:31:7c:fe:12:a6:23:f8:c4:ef:d7:7e: 4d:4d:ed:a2:f0:c8:35:5e:ae:cf:f9:30:0b:eb:7e:63:64:f0: 72:00:3e:8d:d0:7d:c3:d7:86:a7:56:42:07:dc:95:44:04:89: ed:14:b2:ab:02:09:e4:81:5e:33:4c:21:bb:d1:21:2c:6c:8f: 93:2d:53:4f:21:4a:95:42:cb:e8:72:2f:0b:c5:d8:4d:45:02: e2:78:40:f6:19:04:1d:d6:a9:35:c4:44:9d:7f:f0:12:e7:b2: 55:3b:8b:1e:70:15:a6:f7:b2:ce:ca:e7:1b:a8:03:0c:b3:37: 60:d7:de:65:e7:7f:58:8e:e4:7c:03:57:6d:35:54:f0:13:a0: d5:a3:cd:41:63:46:99:04:26:a0:77:d3:32:ce:d6:00:a9:d0: bc:bb:e8:e6:ff:a6:54:27:ae:2a:32:54:57:27:60:6d:20:1c: 1d:e3:45:e7:11:cd:cc:77:a7:61:51:a7:ff:e8:dd:97:4e:77: 97:d8:d3:a6:7d:c2:dc:9e:ec:a5:29:e0:d1:a3:7e:ff:08:c2: b8:cd:a6:a7:bf:7a:f0:4e:6e:c3:27:94:11:e7:68:29:f5:59: d8:19:00:1a:8a:45:4f:f1:da:c6:2a:55:b9:67:85:fd:15:d1: aa:b6:c6:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB3owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODZFOEExMTAvBgNVBAUTKEE5QkNDQTZEMzREM0Q1RjFFRkY4QkJFNzgzRDQ5Nzcz ODEzRTVFRjgwHhcNMjUwMzEyMjEyOTUzWhcNMjUwMzE5MjEyOTUzWjAYMRYwFAYD VQQDEw02N2QxZmNkMS02NjA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqEOk33HlAV6PlH8Z7zgMBbpPP605qwYQZWjkI7D8u6TKqvnRQiM1NW7zoum8 5kgHVEUDBsQ9Fu24/I3RHhNlIg2xyT5FTIIW4w28lQkrZlaycdE074DM+b+CBNO+ +sUaeK0Y6/yIhAe4tDkAruqeHJWibaqCccogASD8V/JhB0c+v6743ErNMlmrFT7d XVBN7SUpGP/kzYmVYfb6rni+ka9+NZq03qD3y1+vZ5qXC4UJviooqiAuXbqUAd0x 3NpyRrZbc25q9y9Y1LFXQKsQlyHPTTx2CtEteKZOSysjN9WY7qW0rWDvz4vVnBSm /Y/cPQLaPaH7PQ2hFIQ89CD1kQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDSiIKrE 4VeT0cHHY8MNvQOi8aKoMB8GA1UdIwQYMBaAFKm8ym0009Xx7/i754PUl3OBPl74 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkU4QS8zQjQ3NkU3QzJE RkYxMUVCODY4QTkxMzVDNEY5QUUwMi9xYnpLYlRUVDFmSHYtTHZuZzlTWGM0RS1Y dmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FiektiVFRUMWZIdi1Mdm5nOVNYYzRFLVh2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NkU4QS8zQjQ3NkU3QzJERkYxMUVCODY4QTkxMzVDNEY5QUUwMi9xYnpLYlRUVDFm SHYtTHZuZzlTWGM0RS1YdmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAyVvciz7CEMXz+EqYj+MTv135NTe2i8Mg1Xq7P+TAL635jZPByAD6N 0H3D14anVkIH3JVEBIntFLKrAgnkgV4zTCG70SEsbI+TLVNPIUqVQsvoci8LxdhN RQLieED2GQQd1qk1xESdf/AS57JVO4secBWm97LOyucbqAMMszdg195l539YjuR8 A1dtNVTwE6DVo81BY0aZBCagd9MyztYAqdC8u+jm/6ZUJ64qMlRXJ2BtIBwd40Xn Ec3Md6dhUaf/6N2XTneX2NOmfcLcnuylKeDRo37/CMK4zaanv3rwTm7DJ5QR52gp 9VnYGQAaikVP8drGKlW5Z4X9FdGqtsYL -----END CERTIFICATE-----Generated at Thu Mar 13 21:31:58 2025 by rpki-client