$ rpki-client -vvf rpki.apnic.net/member_repository/A911B12B/08C27532DB6811ED96C49C3DC4F9AE02/qZhc3TeTLh02TExtddulA79yZ3w.mft File: qZhc3TeTLh02TExtddulA79yZ3w.mft (raw, json) Hash identifier: BnXhlZr/Y7BI+6+EnmzNWs4zX9Hk0ZHKup9O7zE9oOI= Subject key identifier: 96:15:A5:AF:63:BC:A0:81:C3:4A:39:D3:CB:58:D5:B7:87:6C:7C:6E Authority key identifier: A9:98:5C:DD:37:93:2E:1D:36:4C:4C:6D:75:DB:A5:03:BF:72:67:7C Certificate issuer: /CN=A911B12B/serialNumber=A9985CDD37932E1D364C4C6D75DBA503BF72677C Certificate serial: 01A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZhc3TeTLh02TExtddulA79yZ3w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B12B/08C27532DB6811ED96C49C3DC4F9AE02/qZhc3TeTLh02TExtddulA79yZ3w.mft Manifest number: 0196 Signing time: Wed 07 May 2025 02:52:05 +0000 Manifest this update: Wed 07 May 2025 02:52:04 +0000 Manifest next update: Wed 14 May 2025 02:52:04 +0000 Files and hashes: 1: qZhc3TeTLh02TExtddulA79yZ3w.crl (hash: dpV3wSPCm+lPKzoayawxmQNIsHnHzoV86THYKXCjc5c=) 2: 2048ADEADD5011EDA3ACE13CC4F9AE02.roa (hash: Ry5wENgivtIXCFgzf0QiO3bQmATycLuxi4WQf0WGYRQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B12B/08C27532DB6811ED96C49C3DC4F9AE02/qZhc3TeTLh02TExtddulA79yZ3w.crl rsync://rpki.apnic.net/member_repository/A911B12B/08C27532DB6811ED96C49C3DC4F9AE02/qZhc3TeTLh02TExtddulA79yZ3w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZhc3TeTLh02TExtddulA79yZ3w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 May 2025 02:52:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 416 (0x1a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B12B, serialNumber=A9985CDD37932E1D364C4C6D75DBA503BF72677C Validity Not Before: May 7 02:52:04 2025 GMT Not After : May 14 02:52:04 2025 GMT Subject: CN=681acad5-f281 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:2f:69:f3:bd:59:96:80:aa:27:f7:bf:e4:a7: 7e:01:09:08:06:8f:0f:5c:1f:bc:b6:d2:c3:b7:c1: a5:36:a7:ab:df:67:2a:aa:98:fc:73:ac:44:67:e3: d5:6f:91:d7:5d:22:a3:27:b2:af:ca:d0:39:a3:d8: 12:7b:cd:a9:ad:1a:7d:1e:eb:bf:bb:61:43:d8:8c: 43:67:d4:1c:93:64:ad:09:b0:d0:53:87:e2:1a:11: 8e:9e:73:c4:7f:38:4c:6f:29:31:5b:69:76:16:6d: b5:0d:58:8b:3f:38:56:db:09:c1:4c:03:93:23:dd: ea:a5:50:f4:26:1b:5d:5d:38:ed:cc:3e:6f:04:40: 83:b2:1b:15:41:97:94:8a:5d:9e:0f:42:5f:a7:26: df:73:df:fb:28:0c:dd:1f:94:5d:fa:e5:88:c7:07: 3f:a2:71:82:6c:ea:3a:eb:71:2c:88:1b:a9:10:2a: e0:f3:66:d3:19:17:62:78:b4:87:4a:98:1e:1a:3d: 3e:36:04:77:d8:ee:f5:e8:35:93:92:24:02:21:7e: eb:3e:af:65:c9:e0:55:58:c7:84:59:a3:45:69:da: 2d:fc:aa:d9:f0:b4:db:68:2e:a2:ae:eb:76:29:be: dd:41:64:02:42:91:37:a5:d2:30:33:a9:16:f8:17: 52:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:15:A5:AF:63:BC:A0:81:C3:4A:39:D3:CB:58:D5:B7:87:6C:7C:6E X509v3 Authority Key Identifier: keyid:A9:98:5C:DD:37:93:2E:1D:36:4C:4C:6D:75:DB:A5:03:BF:72:67:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B12B/08C27532DB6811ED96C49C3DC4F9AE02/qZhc3TeTLh02TExtddulA79yZ3w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZhc3TeTLh02TExtddulA79yZ3w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B12B/08C27532DB6811ED96C49C3DC4F9AE02/qZhc3TeTLh02TExtddulA79yZ3w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:39:4b:54:b7:99:72:88:da:6f:57:f2:06:1c:4e:b3:fa:da: 68:ba:3e:73:55:bb:81:0d:aa:c4:aa:a3:42:0d:ed:70:cb:3b: 84:fe:f4:2d:8d:a2:03:f9:af:25:24:93:47:a6:c0:d1:ab:90: 18:98:6e:e1:3d:22:53:f8:b6:89:15:1a:f6:72:f8:da:cb:bb: d9:51:2f:8a:64:04:62:bd:4e:04:3b:7d:8c:30:c3:73:b8:ba: 55:f8:e5:ab:e0:1e:7e:51:0f:e2:e4:e3:6e:74:6a:6e:e0:3c: f9:b3:5d:f3:c7:cd:09:ac:0f:c8:11:c7:0f:4b:cf:06:15:35: eb:73:06:95:9f:f1:8d:40:ba:31:27:c5:9e:2a:9a:92:9f:c9: e8:7b:f3:2a:54:da:11:3e:7f:b7:ca:45:83:1d:5a:c1:93:4c: 47:ff:b3:a0:7c:93:ca:71:67:41:a7:e1:23:60:1e:26:f5:31: c3:4f:0a:0e:9a:06:94:ff:04:32:13:42:02:05:1b:16:2d:13: fa:87:b3:31:e6:08:fc:50:50:52:27:be:3e:a7:fc:2b:0e:d1: e3:f4:f6:85:f8:85:91:f8:a6:31:f1:d8:2c:17:9b:f7:c0:f7: d1:88:65:12:40:91:75:d5:3c:1a:52:9e:a6:f8:ec:4a:28:6a: 30:cb:f7:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUIxMkIxMTAvBgNVBAUTKEE5OTg1Q0REMzc5MzJFMUQzNjRDNEM2RDc1REJBNTAz QkY3MjY3N0MwHhcNMjUwNTA3MDI1MjA0WhcNMjUwNTE0MDI1MjA0WjAYMRYwFAYD VQQDEw02ODFhY2FkNS1mMjgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvS9p871ZloCqJ/e/5Kd+AQkIBo8PXB+8ttLDt8GlNqer32cqqpj8c6xEZ+PV b5HXXSKjJ7KvytA5o9gSe82prRp9Huu/u2FD2IxDZ9Qck2StCbDQU4fiGhGOnnPE fzhMbykxW2l2Fm21DViLPzhW2wnBTAOTI93qpVD0JhtdXTjtzD5vBECDshsVQZeU il2eD0Jfpybfc9/7KAzdH5Rd+uWIxwc/onGCbOo663EsiBupECrg82bTGRdieLSH SpgeGj0+NgR32O716DWTkiQCIX7rPq9lyeBVWMeEWaNFadot/KrZ8LTbaC6irut2 Kb7dQWQCQpE3pdIwM6kW+BdSAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJYVpa9j vKCBw0o508tY1beHbHxuMB8GA1UdIwQYMBaAFKmYXN03ky4dNkxMbXXbpQO/cmd8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjEyQi8wOEMyNzUzMkRC NjgxMUVEOTZDNDlDM0RDNEY5QUUwMi9xWmhjM1RlVExoMDJURXh0ZGR1bEE3OXla M3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FaaGMzVGVUTGgwMlRFeHRkZHVsQTc5eVozdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QjEyQi8wOEMyNzUzMkRCNjgxMUVEOTZDNDlDM0RDNEY5QUUwMi9xWmhjM1RlVExo MDJURXh0ZGR1bEE3OXlaM3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7OUtUt5lyiNpvV/IGHE6z+tpouj5zVbuBDarEqqNCDe1wyzuE/vQt jaID+a8lJJNHpsDRq5AYmG7hPSJT+LaJFRr2cvjay7vZUS+KZARivU4EO32MMMNz uLpV+OWr4B5+UQ/i5ONudGpu4Dz5s13zx80JrA/IEccPS88GFTXrcwaVn/GNQLox J8WeKpqSn8noe/MqVNoRPn+3ykWDHVrBk0xH/7OgfJPKcWdBp+EjYB4m9THDTwoO mgaU/wQyE0ICBRsWLRP6h7Mx5gj8UFBSJ74+p/wrDtHj9PaF+IWR+KYx8dgsF5v3 wPfRiGUSQJF11TwaUp6m+OxKKGowy/di -----END CERTIFICATE-----Generated at Thu May 8 10:06:16 2025 by rpki-client