$ rpki-client -vvf rpki.apnic.net/member_repository/A912968B/FC1D2736E12A11EE8684C217C4F9AE02/QuZl4REE2M0IP7GdPG81XHYoxEU.mft File: QuZl4REE2M0IP7GdPG81XHYoxEU.mft (raw, json) Hash identifier: exRY28+E+cqoM7/JCQXtRcT8aHGu8/Y1tvlNDZcAFyw= Subject key identifier: 51:F3:3B:07:DB:EF:58:DD:02:33:BC:A1:65:AD:6F:EF:25:BA:E7:AF Authority key identifier: 42:E6:65:E1:11:04:D8:CD:08:3F:B1:9D:3C:6F:35:5C:76:28:C4:45 Certificate issuer: /CN=A912968B/serialNumber=42E665E11104D8CD083FB19D3C6F355C7628C445 Certificate serial: E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QuZl4REE2M0IP7GdPG81XHYoxEU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912968B/FC1D2736E12A11EE8684C217C4F9AE02/QuZl4REE2M0IP7GdPG81XHYoxEU.mft Manifest number: DD Signing time: Thu 15 May 2025 04:51:18 +0000 Manifest this update: Thu 15 May 2025 04:51:17 +0000 Manifest next update: Thu 22 May 2025 04:51:17 +0000 Files and hashes: 1: QuZl4REE2M0IP7GdPG81XHYoxEU.crl (hash: FctRKClq26EXY/w1+iVWRPVz+4XYyO62F7/VRyVDT6Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912968B/FC1D2736E12A11EE8684C217C4F9AE02/QuZl4REE2M0IP7GdPG81XHYoxEU.crl rsync://rpki.apnic.net/member_repository/A912968B/FC1D2736E12A11EE8684C217C4F9AE02/QuZl4REE2M0IP7GdPG81XHYoxEU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QuZl4REE2M0IP7GdPG81XHYoxEU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 04:51:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 225 (0xe1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912968B, serialNumber=42E665E11104D8CD083FB19D3C6F355C7628C445 Validity Not Before: May 15 04:51:17 2025 GMT Not After : May 22 04:51:17 2025 GMT Subject: CN=682572c5-5146 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:8e:9e:3a:4d:b4:c3:fb:03:9d:c9:b5:4a:6b: ec:5e:03:cf:92:c5:19:b8:70:94:1f:8e:95:93:eb: 6f:b2:b8:5a:38:c7:32:85:06:2e:90:17:86:8c:de: 10:93:fc:8d:ab:ff:3c:80:ec:4b:e7:cc:93:a8:ee: 1a:88:c6:df:eb:70:86:4d:07:48:d2:fd:a9:0d:96: e3:1a:ff:17:a8:d1:34:11:76:a7:bc:1b:54:78:6c: a7:d9:76:91:76:a9:08:3d:e3:15:7a:ee:48:4b:40: 33:9e:6f:79:9b:3d:da:5a:d6:39:09:b2:e7:65:fd: 0a:3a:28:a9:23:a2:c6:09:13:12:85:49:50:1f:3b: cb:3f:73:b2:85:15:3d:33:7f:24:07:57:60:88:bc: 75:09:de:34:c3:ff:5e:e6:86:b2:98:74:35:89:5e: c8:78:f8:ac:da:7e:c1:22:73:5a:70:0c:f0:77:ac: 91:10:ba:99:04:98:d4:60:61:a7:10:ec:c8:b7:d0: 42:af:39:3c:ed:e7:a6:b9:e1:10:0c:65:b4:70:64: 2d:fa:e3:17:ee:07:e8:91:44:e4:a6:0b:bc:92:d0: 5e:c6:fa:3c:f7:2d:08:92:03:3f:ba:41:b3:80:ee: 82:ea:6d:48:a1:59:c4:06:76:7d:d6:b0:6e:ab:c4: 1b:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:F3:3B:07:DB:EF:58:DD:02:33:BC:A1:65:AD:6F:EF:25:BA:E7:AF X509v3 Authority Key Identifier: keyid:42:E6:65:E1:11:04:D8:CD:08:3F:B1:9D:3C:6F:35:5C:76:28:C4:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912968B/FC1D2736E12A11EE8684C217C4F9AE02/QuZl4REE2M0IP7GdPG81XHYoxEU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QuZl4REE2M0IP7GdPG81XHYoxEU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912968B/FC1D2736E12A11EE8684C217C4F9AE02/QuZl4REE2M0IP7GdPG81XHYoxEU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:d1:4e:15:6b:5b:94:6c:42:ea:0c:da:52:8e:c9:59:12:6a: a6:c0:55:99:55:14:76:08:f3:2d:85:7c:d1:5b:f6:7b:bd:6e: fc:2d:f8:98:e8:90:81:1c:f1:3c:ab:f0:03:d8:0b:42:4d:81: 97:45:7d:36:35:f6:af:4d:43:20:d4:03:b9:ab:ee:3f:eb:57: f8:00:39:8c:20:60:4a:1a:6f:6f:da:22:13:7d:a1:27:2b:a0: ce:2e:2e:f4:5a:09:fb:68:55:4f:70:df:04:9b:c5:86:65:04: 3d:35:03:36:9d:05:a4:96:27:43:dc:f1:32:af:cc:ef:53:30: 2c:22:35:50:ea:ae:30:d8:7b:d6:84:7d:fa:8c:05:cc:94:f4: 59:9a:08:2a:d4:d3:d8:46:98:fb:59:63:11:5a:09:90:f5:52: 69:83:db:58:b6:63:8c:93:ff:02:62:c3:67:4f:b7:a3:70:e0: f2:8e:37:48:9c:ef:f8:e1:b9:ee:27:4f:d5:4e:6b:47:7a:6f: 0a:83:95:63:e2:98:1d:66:3e:d6:46:cd:98:0d:13:77:66:1e: a3:7c:8e:6e:27:76:d0:52:04:05:5d:27:d4:b5:6f:28:9d:b2: 38:5e:3f:39:21:3e:69:6c:fe:da:c9:7b:73:a4:ea:8f:35:82: 15:0a:b8:df -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjk2OEIxMTAvBgNVBAUTKDQyRTY2NUUxMTEwNEQ4Q0QwODNGQjE5RDNDNkYzNTVD NzYyOEM0NDUwHhcNMjUwNTE1MDQ1MTE3WhcNMjUwNTIyMDQ1MTE3WjAYMRYwFAYD VQQDEw02ODI1NzJjNS01MTQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4o6eOk20w/sDncm1SmvsXgPPksUZuHCUH46Vk+tvsrhaOMcyhQYukBeGjN4Q k/yNq/88gOxL58yTqO4aiMbf63CGTQdI0v2pDZbjGv8XqNE0EXanvBtUeGyn2XaR dqkIPeMVeu5IS0Aznm95mz3aWtY5CbLnZf0KOiipI6LGCRMShUlQHzvLP3OyhRU9 M38kB1dgiLx1Cd40w/9e5oaymHQ1iV7IePis2n7BInNacAzwd6yRELqZBJjUYGGn EOzIt9BCrzk87eemueEQDGW0cGQt+uMX7gfokUTkpgu8ktBexvo89y0IkgM/ukGz gO6C6m1IoVnEBnZ91rBuq8Qb/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFHzOwfb 71jdAjO8oWWtb+8luuevMB8GA1UdIwQYMBaAFELmZeERBNjNCD+xnTxvNVx2KMRF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTY4Qi9GQzFEMjczNkUx MkExMUVFODY4NEMyMTdDNEY5QUUwMi9RdVpsNFJFRTJNMElQN0dkUEc4MVhIWW94 RVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1F1Wmw0UkVFMk0wSVA3R2RQRzgxWEhZb3hFVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OTY4Qi9GQzFEMjczNkUxMkExMUVFODY4NEMyMTdDNEY5QUUwMi9RdVpsNFJFRTJN MElQN0dkUEc4MVhIWW94RVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBT0U4Va1uUbELqDNpSjslZEmqmwFWZVRR2CPMthXzRW/Z7vW78LfiY 6JCBHPE8q/AD2AtCTYGXRX02NfavTUMg1AO5q+4/61f4ADmMIGBKGm9v2iITfaEn K6DOLi70Wgn7aFVPcN8Em8WGZQQ9NQM2nQWklidD3PEyr8zvUzAsIjVQ6q4w2HvW hH36jAXMlPRZmggq1NPYRpj7WWMRWgmQ9VJpg9tYtmOMk/8CYsNnT7ejcODyjjdI nO/44bnuJ0/VTmtHem8Kg5Vj4pgdZj7WRs2YDRN3Zh6jfI5uJ3bQUgQFXSfUtW8o nbI4Xj85IT5pbP7ayXtzpOqPNYIVCrjf -----END CERTIFICATE-----Generated at Thu May 15 22:59:04 2025 by rpki-client