$ rpki-client -vvf rpki.apnic.net/member_repository/A9111ED2/621E8610845011EA8047CE7DC4F9AE02/QMCQUT8kAYkgsVHapVRJwV3IS-s.mft File: QMCQUT8kAYkgsVHapVRJwV3IS-s.mft (raw, json) Hash identifier: d+gyZj50VLtEtqxCj3QnCnMuQtnpUhOfgRBi1zW+1gs= Subject key identifier: 10:13:F7:72:47:69:A6:26:A6:5F:C7:5C:85:46:6C:5A:CD:48:06:8D Authority key identifier: 40:C0:90:51:3F:24:01:89:20:B1:51:DA:A5:54:49:C1:5D:C8:4B:EB Certificate issuer: /CN=A9111ED2/serialNumber=40C090513F24018920B151DAA55449C15DC84BEB Certificate serial: 09B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QMCQUT8kAYkgsVHapVRJwV3IS-s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9111ED2/621E8610845011EA8047CE7DC4F9AE02/QMCQUT8kAYkgsVHapVRJwV3IS-s.mft Manifest number: 09AD Signing time: Wed 14 May 2025 20:09:11 +0000 Manifest this update: Wed 14 May 2025 20:09:11 +0000 Manifest next update: Wed 21 May 2025 20:09:11 +0000 Files and hashes: 1: QMCQUT8kAYkgsVHapVRJwV3IS-s.crl (hash: PhXhhTAq7gnSy3fSbeV3nTIeBVzWSYUnx5q/QmT5Zts=) 2: 1E809CD0845111EAA961467EC4F9AE02.roa (hash: H/OVGlOkL0NhP3BGJyz6i1zChcNr+09N/UDEg/ELwo0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9111ED2/621E8610845011EA8047CE7DC4F9AE02/QMCQUT8kAYkgsVHapVRJwV3IS-s.crl rsync://rpki.apnic.net/member_repository/A9111ED2/621E8610845011EA8047CE7DC4F9AE02/QMCQUT8kAYkgsVHapVRJwV3IS-s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QMCQUT8kAYkgsVHapVRJwV3IS-s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 20:09:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2484 (0x9b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9111ED2, serialNumber=40C090513F24018920B151DAA55449C15DC84BEB Validity Not Before: May 14 20:09:11 2025 GMT Not After : May 21 20:09:11 2025 GMT Subject: CN=6824f867-c23a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:1c:44:5f:96:e0:20:c2:49:ff:0a:86:f2:c3: 93:a1:41:9d:36:b0:a3:37:0d:72:90:f2:ee:3a:b8: b7:44:a3:db:a0:1b:e1:65:ce:65:63:f1:a7:92:4e: 22:67:e6:0d:c2:d1:46:ef:d9:85:a9:3e:f1:67:de: b3:4b:e3:46:6d:99:bd:9b:d8:ea:17:07:57:99:80: 37:7f:22:cd:59:21:d9:08:3a:aa:38:2e:1c:49:34: 44:b5:1d:05:f2:a5:51:b3:b1:40:da:7d:f1:a9:13: 3c:b4:c9:98:e9:07:33:67:30:f8:5d:b9:bb:5e:ab: 9e:2a:27:db:e0:ac:b6:be:5c:f6:33:03:a2:23:a7: 6b:dc:c9:fe:9b:35:80:60:01:aa:64:f7:a7:8a:9e: 2e:e1:63:29:67:38:f1:94:8d:da:17:3c:25:38:5c: 1d:10:25:51:d1:98:59:35:3e:c6:83:a5:1f:90:24: 22:47:3f:0c:1a:a4:9a:79:65:5d:4b:3f:eb:7f:45: 4e:1a:43:1f:77:2b:71:66:eb:b3:84:dd:06:9b:df: 33:1d:b6:93:18:3f:8f:46:4f:52:94:eb:ca:9c:54: 62:fc:9c:40:85:bf:71:15:ab:11:cf:b7:79:f9:01: 87:3c:5c:14:95:15:fd:f1:17:b5:7e:68:e4:15:9d: 90:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:13:F7:72:47:69:A6:26:A6:5F:C7:5C:85:46:6C:5A:CD:48:06:8D X509v3 Authority Key Identifier: keyid:40:C0:90:51:3F:24:01:89:20:B1:51:DA:A5:54:49:C1:5D:C8:4B:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9111ED2/621E8610845011EA8047CE7DC4F9AE02/QMCQUT8kAYkgsVHapVRJwV3IS-s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QMCQUT8kAYkgsVHapVRJwV3IS-s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111ED2/621E8610845011EA8047CE7DC4F9AE02/QMCQUT8kAYkgsVHapVRJwV3IS-s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:a4:70:8f:11:61:94:a0:7a:74:a0:90:aa:42:2e:ce:5b:bf: 8a:9b:93:fd:ef:a6:ba:e0:8f:eb:2c:d6:5d:10:dc:9d:28:5d: b8:10:97:fe:57:45:b2:00:d8:a9:88:26:2d:69:8c:31:f5:0d: 98:96:70:bb:d4:4a:aa:70:0a:a5:50:01:72:08:ce:e1:dd:3e: 9e:8e:29:c7:46:e4:6b:9a:3d:c1:0e:77:89:e1:17:42:b0:a5: b5:b3:e7:bf:b1:7e:02:00:67:d6:8d:4f:04:59:97:6b:75:d2: a1:e9:3f:74:89:fc:b4:0b:53:a8:15:f8:67:6b:67:f6:37:e9: b0:2f:ec:e2:2b:2f:66:38:0b:e3:5c:5d:2f:07:a6:c4:2b:4d: 98:d2:2c:61:c7:be:da:aa:44:6e:9f:d8:53:23:ce:2b:37:bc: 4f:c1:e2:66:43:b0:5b:2c:e7:90:b4:8d:1b:e7:7c:dd:6d:13: 9e:51:3d:c7:a7:37:5d:c0:ce:bb:5d:9e:8b:c2:cd:bc:9f:63: 0d:1f:83:e1:58:20:35:08:7d:8e:58:54:22:33:b4:a3:b7:d0: 0b:77:09:b9:a0:64:74:43:c4:7b:02:a5:d1:7f:a3:0f:8a:79: 05:1c:01:14:ce:8a:1d:ad:29:59:5d:d6:8a:9b:5b:de:30:06: de:cf:b4:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCbQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTFFRDIxMTAvBgNVBAUTKDQwQzA5MDUxM0YyNDAxODkyMEIxNTFEQUE1NTQ0OUMx NURDODRCRUIwHhcNMjUwNTE0MjAwOTExWhcNMjUwNTIxMjAwOTExWjAYMRYwFAYD VQQDEw02ODI0Zjg2Ny1jMjNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3xxEX5bgIMJJ/wqG8sOToUGdNrCjNw1ykPLuOri3RKPboBvhZc5lY/Gnkk4i Z+YNwtFG79mFqT7xZ96zS+NGbZm9m9jqFwdXmYA3fyLNWSHZCDqqOC4cSTREtR0F 8qVRs7FA2n3xqRM8tMmY6QczZzD4Xbm7XqueKifb4Ky2vlz2MwOiI6dr3Mn+mzWA YAGqZPenip4u4WMpZzjxlI3aFzwlOFwdECVR0ZhZNT7Gg6UfkCQiRz8MGqSaeWVd Sz/rf0VOGkMfdytxZuuzhN0Gm98zHbaTGD+PRk9SlOvKnFRi/JxAhb9xFasRz7d5 +QGHPFwUlRX98Re1fmjkFZ2Q+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBAT93JH aaYmpl/HXIVGbFrNSAaNMB8GA1UdIwQYMBaAFEDAkFE/JAGJILFR2qVUScFdyEvr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMUVEMi82MjFFODYxMDg0 NTAxMUVBODA0N0NFN0RDNEY5QUUwMi9RTUNRVVQ4a0FZa2dzVkhhcFZSSndWM0lT LXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FNQ1FVVDhrQVlrZ3NWSGFwVlJKd1YzSVMtcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MUVEMi82MjFFODYxMDg0NTAxMUVBODA0N0NFN0RDNEY5QUUwMi9RTUNRVVQ4a0FZ a2dzVkhhcFZSSndWM0lTLXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQpHCPEWGUoHp0oJCqQi7OW7+Km5P976a64I/rLNZdENydKF24EJf+ V0WyANipiCYtaYwx9Q2YlnC71EqqcAqlUAFyCM7h3T6ejinHRuRrmj3BDneJ4RdC sKW1s+e/sX4CAGfWjU8EWZdrddKh6T90ify0C1OoFfhna2f2N+mwL+ziKy9mOAvj XF0vB6bEK02Y0ixhx77aqkRun9hTI84rN7xPweJmQ7BbLOeQtI0b53zdbROeUT3H pzddwM67XZ6Lws28n2MNH4PhWCA1CH2OWFQiM7Sjt9ALdwm5oGR0Q8R7AqXRf6MP inkFHAEUzoodrSlZXdaKm1veMAbez7RZ -----END CERTIFICATE-----Generated at Fri May 16 12:50:41 2025 by rpki-client