$ rpki-client -vvf rpki.apnic.net/member_repository/A9113B73/BA6359822FE411EB8DB41B25C4F9AE02/QstM8CH28_wMgcT98cl9dCEAMXs.mft File: QstM8CH28_wMgcT98cl9dCEAMXs.mft (raw, json) Hash identifier: ZTY7BnBBXQYjsw7UGHjWhAPHThmMZoBwUApzOrIY/pU= Subject key identifier: 81:09:E3:07:72:25:7E:F0:D7:08:77:47:B3:E7:F6:87:2B:22:7E:E8 Authority key identifier: 42:CB:4C:F0:21:F6:F3:FC:0C:81:C4:FD:F1:C9:7D:74:21:00:31:7B Certificate issuer: /CN=A9113B73/serialNumber=42CB4CF021F6F3FC0C81C4FDF1C97D742100317B Certificate serial: 0739 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QstM8CH28_wMgcT98cl9dCEAMXs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9113B73/BA6359822FE411EB8DB41B25C4F9AE02/QstM8CH28_wMgcT98cl9dCEAMXs.mft Manifest number: 0730 Signing time: Mon 12 May 2025 21:35:29 +0000 Manifest this update: Mon 12 May 2025 21:35:29 +0000 Manifest next update: Mon 19 May 2025 21:35:29 +0000 Files and hashes: 1: QstM8CH28_wMgcT98cl9dCEAMXs.crl (hash: Asf3FafDHbdCbZIZ7HHrTX7SRS7ZJMNoKYedXZHyFkI=) 2: 038C732E874611EB83B41D39C4F9AE02.roa (hash: xDFL83BDJofXsoqgs4IapCDppXS9oRsh4Talz2QouY4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9113B73/BA6359822FE411EB8DB41B25C4F9AE02/QstM8CH28_wMgcT98cl9dCEAMXs.crl rsync://rpki.apnic.net/member_repository/A9113B73/BA6359822FE411EB8DB41B25C4F9AE02/QstM8CH28_wMgcT98cl9dCEAMXs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QstM8CH28_wMgcT98cl9dCEAMXs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 21:35:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1849 (0x739) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9113B73, serialNumber=42CB4CF021F6F3FC0C81C4FDF1C97D742100317B Validity Not Before: May 12 21:35:29 2025 GMT Not After : May 19 21:35:29 2025 GMT Subject: CN=682269a1-8db5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:cd:b0:4e:e7:13:a7:28:f7:15:b2:d5:06:d7: af:ab:f3:b7:dd:33:be:61:52:b4:f6:a8:3d:d7:e6: 30:d3:dc:69:97:5f:db:24:11:33:91:41:61:1c:e3: ed:7c:16:0a:4e:f5:9d:58:00:b8:c0:47:ef:d4:22: dc:7e:19:47:dd:f4:f2:ae:5e:05:3a:9a:5a:36:c3: 8e:6c:fd:97:0f:7b:a1:cb:84:79:d6:d1:d4:3a:72: 86:16:eb:ec:83:a1:e9:96:ef:a5:14:ce:d6:1a:6d: 30:76:38:9c:13:f3:61:f9:db:ac:1f:54:55:63:4e: 08:6b:dc:74:a4:e8:73:46:7b:8e:33:76:4d:55:2a: e1:d7:69:57:38:88:40:63:a4:db:b9:86:66:4f:3b: 54:b0:89:00:40:1a:9e:f1:3e:43:2d:a7:71:26:50: f6:e8:26:44:86:db:3e:d2:72:a9:a7:cb:88:6d:45: e5:2e:26:6b:54:52:8c:b6:cb:d7:1f:75:28:00:43: 19:e2:ce:22:31:b2:0d:1d:5f:18:5e:c2:a3:f8:65: f7:7f:58:4d:5a:60:a8:74:a1:0e:4f:f3:3e:8c:06: b6:07:85:1e:c7:76:03:b2:af:72:54:63:a2:06:14: f7:a6:e3:50:86:46:ee:5c:47:64:ef:ca:d6:1e:2e: 2c:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:09:E3:07:72:25:7E:F0:D7:08:77:47:B3:E7:F6:87:2B:22:7E:E8 X509v3 Authority Key Identifier: keyid:42:CB:4C:F0:21:F6:F3:FC:0C:81:C4:FD:F1:C9:7D:74:21:00:31:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9113B73/BA6359822FE411EB8DB41B25C4F9AE02/QstM8CH28_wMgcT98cl9dCEAMXs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QstM8CH28_wMgcT98cl9dCEAMXs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113B73/BA6359822FE411EB8DB41B25C4F9AE02/QstM8CH28_wMgcT98cl9dCEAMXs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:8a:90:df:ae:21:60:4f:d1:ff:00:c7:bb:c8:78:0d:f3:c3: 08:93:e3:88:46:a6:be:6c:82:31:db:1b:a7:44:5e:b9:18:4d: a7:30:49:c7:9e:1c:83:ff:a2:44:dc:31:5e:60:30:34:68:11: 74:16:0d:60:d1:18:23:53:bc:db:55:7c:be:7e:c3:f9:8a:1a: 92:4a:59:44:53:b2:e7:ec:88:8e:96:43:22:fe:02:c4:bf:55: c9:0d:5e:ae:38:d9:2a:d4:d5:d1:97:f2:f3:7e:fd:e8:39:3b: c3:31:df:5b:3e:66:2a:80:cd:a5:5f:29:21:cf:2f:8f:bc:b3: 02:ee:54:1f:12:d2:5f:8b:a1:0b:09:d0:ce:6f:a4:b4:af:0d: 00:d0:2e:12:89:c4:35:2e:0c:40:0e:89:e0:67:df:69:07:dc: 7b:c8:69:32:04:a3:ed:9a:07:e9:f3:65:af:15:7f:d9:fc:d7: 9c:01:a6:2b:aa:5a:b0:77:36:4e:3c:d4:1e:96:73:3f:b3:f7: b7:eb:99:87:e6:a5:3c:2e:1f:65:74:07:f7:54:85:f3:a8:50: c4:d0:8f:c5:cc:5e:a0:f9:75:be:e6:05:a7:83:d7:fe:41:4a: 3b:d0:af:66:23:ed:17:85:84:9e:42:8c:82:1e:c1:3f:3e:c0: 03:86:1a:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBzkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTNCNzMxMTAvBgNVBAUTKDQyQ0I0Q0YwMjFGNkYzRkMwQzgxQzRGREYxQzk3RDc0 MjEwMDMxN0IwHhcNMjUwNTEyMjEzNTI5WhcNMjUwNTE5MjEzNTI5WjAYMRYwFAYD VQQDEw02ODIyNjlhMS04ZGI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw82wTucTpyj3FbLVBtevq/O33TO+YVK09qg91+Yw09xpl1/bJBEzkUFhHOPt fBYKTvWdWAC4wEfv1CLcfhlH3fTyrl4FOppaNsOObP2XD3uhy4R51tHUOnKGFuvs g6Hplu+lFM7WGm0wdjicE/Nh+dusH1RVY04Ia9x0pOhzRnuOM3ZNVSrh12lXOIhA Y6TbuYZmTztUsIkAQBqe8T5DLadxJlD26CZEhts+0nKpp8uIbUXlLiZrVFKMtsvX H3UoAEMZ4s4iMbINHV8YXsKj+GX3f1hNWmCodKEOT/M+jAa2B4Uex3YDsq9yVGOi BhT3puNQhkbuXEdk78rWHi4sowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIEJ4wdy JX7w1wh3R7Pn9ocrIn7oMB8GA1UdIwQYMBaAFELLTPAh9vP8DIHE/fHJfXQhADF7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExM0I3My9CQTYzNTk4MjJG RTQxMUVCOERCNDFCMjVDNEY5QUUwMi9Rc3RNOENIMjhfd01nY1Q5OGNsOWRDRUFN WHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FzdE04Q0gyOF93TWdjVDk4Y2w5ZENFQU1Ycy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx M0I3My9CQTYzNTk4MjJGRTQxMUVCOERCNDFCMjVDNEY5QUUwMi9Rc3RNOENIMjhf d01nY1Q5OGNsOWRDRUFNWHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXipDfriFgT9H/AMe7yHgN88MIk+OIRqa+bIIx2xunRF65GE2nMEnH nhyD/6JE3DFeYDA0aBF0Fg1g0RgjU7zbVXy+fsP5ihqSSllEU7Ln7IiOlkMi/gLE v1XJDV6uONkq1NXRl/Lzfv3oOTvDMd9bPmYqgM2lXykhzy+PvLMC7lQfEtJfi6EL CdDOb6S0rw0A0C4SicQ1LgxADongZ99pB9x7yGkyBKPtmgfp82WvFX/Z/NecAaYr qlqwdzZOPNQelnM/s/e365mH5qU8Lh9ldAf3VIXzqFDE0I/FzF6g+XW+5gWng9f+ QUo70K9mI+0XhYSeQoyCHsE/PsADhhqA -----END CERTIFICATE-----Generated at Tue May 13 18:08:10 2025 by rpki-client