$ rpki-client -vvf rpki.apnic.net/member_repository/A91144AB/5E0AA9A21D9511E2B4EE337D08B02CD2/QXbxCRjJsY0t74t8ZvxaOmWCIx4.mft File: QXbxCRjJsY0t74t8ZvxaOmWCIx4.mft (raw, json) Hash identifier: +L0dTVjf2UrZqt+Effkl1LW9T96/Xb6HYC+ZENyD4Ek= Subject key identifier: 7E:CA:3A:AD:98:D2:C8:40:F3:67:45:AB:9F:97:60:3F:D9:98:F9:6E Authority key identifier: 41:76:F1:09:18:C9:B1:8D:2D:EF:8B:7C:66:FC:5A:3A:65:82:23:1E Certificate issuer: /CN=A91144AB/serialNumber=4176F10918C9B18D2DEF8B7C66FC5A3A6582231E Certificate serial: 347C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QXbxCRjJsY0t74t8ZvxaOmWCIx4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91144AB/5E0AA9A21D9511E2B4EE337D08B02CD2/QXbxCRjJsY0t74t8ZvxaOmWCIx4.mft Manifest number: 347C Signing time: Wed 14 May 2025 14:49:32 +0000 Manifest this update: Wed 14 May 2025 14:49:31 +0000 Manifest next update: Wed 21 May 2025 14:49:31 +0000 Files and hashes: 1: QXbxCRjJsY0t74t8ZvxaOmWCIx4.crl (hash: gpLkRoEMYppPztmYvei9PU5Q62MKlFAvtaEPRBCnw0g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91144AB/5E0AA9A21D9511E2B4EE337D08B02CD2/QXbxCRjJsY0t74t8ZvxaOmWCIx4.crl rsync://rpki.apnic.net/member_repository/A91144AB/5E0AA9A21D9511E2B4EE337D08B02CD2/QXbxCRjJsY0t74t8ZvxaOmWCIx4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QXbxCRjJsY0t74t8ZvxaOmWCIx4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 14:49:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13436 (0x347c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91144AB, serialNumber=4176F10918C9B18D2DEF8B7C66FC5A3A6582231E Validity Not Before: May 14 14:49:31 2025 GMT Not After : May 21 14:49:31 2025 GMT Subject: CN=6824ad7b-1a43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:32:c5:df:42:66:1d:69:ff:45:a2:b4:5c:bc: f5:30:aa:a9:cc:ea:4b:5f:02:45:43:0a:f9:ed:f5: 1b:c5:6d:7b:19:2d:47:22:91:f6:d4:40:52:53:b4: 07:99:e8:f2:39:42:bd:37:83:a3:4b:56:04:f5:5f: 3a:35:b1:a4:24:0f:27:0c:48:d7:dd:4b:7d:06:8a: e9:95:d1:82:23:05:49:49:37:47:6e:7d:7c:f2:0b: 5d:c0:c9:ef:7d:7f:11:0c:1f:a6:41:f7:5d:38:5b: 10:e8:a9:e6:09:68:82:d0:33:e4:4b:46:e3:c5:71: 1b:3b:25:2f:b0:13:a4:2f:37:31:c3:f0:94:e5:65: ae:ad:e4:ad:1e:fa:86:d6:9e:70:1b:18:8b:d9:fa: 7a:17:61:dc:67:3d:c0:57:d8:28:08:95:39:a4:50: a2:e3:96:11:70:96:39:c4:b8:34:85:cf:53:ab:a5: a9:4d:2f:b1:8f:59:f6:31:8f:a4:99:05:9a:f7:d4: 06:aa:9d:5b:fa:7c:4f:bc:f6:ad:8d:4e:b5:78:c2: da:71:f2:36:93:0f:78:cc:af:e2:53:64:13:f5:a1: 7c:7b:59:e2:ad:18:bd:6b:2d:3b:13:6b:0b:6e:93: ed:9a:c5:e9:43:52:52:fe:e0:d7:ca:bf:d7:ea:11: af:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:CA:3A:AD:98:D2:C8:40:F3:67:45:AB:9F:97:60:3F:D9:98:F9:6E X509v3 Authority Key Identifier: keyid:41:76:F1:09:18:C9:B1:8D:2D:EF:8B:7C:66:FC:5A:3A:65:82:23:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91144AB/5E0AA9A21D9511E2B4EE337D08B02CD2/QXbxCRjJsY0t74t8ZvxaOmWCIx4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QXbxCRjJsY0t74t8ZvxaOmWCIx4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91144AB/5E0AA9A21D9511E2B4EE337D08B02CD2/QXbxCRjJsY0t74t8ZvxaOmWCIx4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:c6:3d:0e:21:53:c1:58:eb:fb:27:cd:6d:ab:ab:61:80:de: ed:c4:df:c7:ef:68:25:d1:a9:b8:b1:91:a3:e4:13:f9:7d:7e: 62:fb:95:a5:c6:6e:c3:52:ff:c0:e8:51:90:84:0b:91:21:6e: fc:20:3f:eb:9a:92:7f:db:35:55:c4:5b:40:3f:ec:83:59:15: d8:d7:e1:43:e5:00:a2:0d:76:0f:e2:84:fb:69:1e:3c:1f:6c: 6d:24:6f:58:12:8d:76:77:60:5d:f1:64:db:00:ef:f2:2a:f3: 76:e6:3e:77:41:dd:1b:f4:89:cf:0a:1d:8a:9e:ce:cd:ac:71: 5e:ca:6f:0f:a7:49:8e:5f:d5:f4:07:66:7e:90:70:80:d0:65: 52:9c:74:6c:10:2b:03:df:b6:9a:38:fa:b8:32:a7:6f:b4:c9: 83:56:12:ec:1d:19:6b:99:e0:ac:fe:78:8e:ec:a9:36:d5:e7: fb:7b:5a:3f:6b:ff:e6:05:f4:aa:d7:21:f6:7a:16:62:62:ad: 93:31:c8:58:5d:ce:74:00:b4:24:f4:37:b2:47:ce:d0:d2:2a: d1:c9:f5:10:38:13:6f:1e:77:dc:f8:8c:78:76:a8:2a:03:fe: cb:56:cf:b3:41:63:b4:d7:cd:1a:c8:f9:d5:26:27:7d:4b:0b: 1e:e5:b4:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNHwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTQ0QUIxMTAvBgNVBAUTKDQxNzZGMTA5MThDOUIxOEQyREVGOEI3QzY2RkM1QTNB NjU4MjIzMUUwHhcNMjUwNTE0MTQ0OTMxWhcNMjUwNTIxMTQ0OTMxWjAYMRYwFAYD VQQDEw02ODI0YWQ3Yi0xYTQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqjLF30JmHWn/RaK0XLz1MKqpzOpLXwJFQwr57fUbxW17GS1HIpH21EBSU7QH mejyOUK9N4OjS1YE9V86NbGkJA8nDEjX3Ut9BorpldGCIwVJSTdHbn188gtdwMnv fX8RDB+mQfddOFsQ6KnmCWiC0DPkS0bjxXEbOyUvsBOkLzcxw/CU5WWureStHvqG 1p5wGxiL2fp6F2HcZz3AV9goCJU5pFCi45YRcJY5xLg0hc9Tq6WpTS+xj1n2MY+k mQWa99QGqp1b+nxPvPatjU61eMLacfI2kw94zK/iU2QT9aF8e1nirRi9ay07E2sL bpPtmsXpQ1JS/uDXyr/X6hGvgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH7KOq2Y 0shA82dFq5+XYD/ZmPluMB8GA1UdIwQYMBaAFEF28QkYybGNLe+LfGb8WjplgiMe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDRBQi81RTBBQTlBMjFE OTUxMUUyQjRFRTMzN0QwOEIwMkNEMi9RWGJ4Q1JqSnNZMHQ3NHQ4WnZ4YU9tV0NJ eDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FYYnhDUmpKc1kwdDc0dDhadnhhT21XQ0l4NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NDRBQi81RTBBQTlBMjFEOTUxMUUyQjRFRTMzN0QwOEIwMkNEMi9RWGJ4Q1JqSnNZ MHQ3NHQ4WnZ4YU9tV0NJeDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCIxj0OIVPBWOv7J81tq6thgN7txN/H72gl0am4sZGj5BP5fX5i+5Wl xm7DUv/A6FGQhAuRIW78ID/rmpJ/2zVVxFtAP+yDWRXY1+FD5QCiDXYP4oT7aR48 H2xtJG9YEo12d2Bd8WTbAO/yKvN25j53Qd0b9InPCh2Kns7NrHFeym8Pp0mOX9X0 B2Z+kHCA0GVSnHRsECsD37aaOPq4MqdvtMmDVhLsHRlrmeCs/niO7Kk21ef7e1o/ a//mBfSq1yH2ehZiYq2TMchYXc50ALQk9DeyR87Q0irRyfUQOBNvHnfc+Ix4dqgq A/7LVs+zQWO0180ayPnVJid9Swse5bTA -----END CERTIFICATE-----Generated at Thu May 15 07:06:37 2025 by rpki-client