$ rpki-client -vvf rpki.apnic.net/member_repository/A912D306/BCBD801C1D8D11E2B429B7EB08B02CD2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.mft File: QQ8P6Xvp2e0HVs1Ndja5P48jizE.mft (raw, json) Hash identifier: xn6q1GTvp7yj9eSWbzbVTXNhzGWkQ6oR/cwGHzsgbYk= Subject key identifier: 67:D1:39:22:5F:9F:F6:0C:4A:C1:DD:B9:88:CB:43:0C:92:D2:A1:E8 Authority key identifier: 41:0F:0F:E9:7B:E9:D9:ED:07:56:CD:4D:76:36:B9:3F:8F:23:8B:31 Certificate issuer: /CN=A912D306/serialNumber=410F0FE97BE9D9ED0756CD4D7636B93F8F238B31 Certificate serial: 3494 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D306/BCBD801C1D8D11E2B429B7EB08B02CD2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.mft Manifest number: 3489 Signing time: Wed 14 May 2025 14:38:36 +0000 Manifest this update: Wed 14 May 2025 14:38:36 +0000 Manifest next update: Wed 21 May 2025 14:38:36 +0000 Files and hashes: 1: QQ8P6Xvp2e0HVs1Ndja5P48jizE.crl (hash: lPQqE5KjPf+VsKe+vlLjlSOSKe7+oZQq8x7cruu2mCs=) 2: ABE8518A18DA11F08FC68386C4F9AE02.roa (hash: 1QZz1HDQ1jRfLspLePE9D1zwt8zFnYwF7eP5N5O/9vg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D306/BCBD801C1D8D11E2B429B7EB08B02CD2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.crl rsync://rpki.apnic.net/member_repository/A912D306/BCBD801C1D8D11E2B429B7EB08B02CD2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 14:38:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13460 (0x3494) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D306, serialNumber=410F0FE97BE9D9ED0756CD4D7636B93F8F238B31 Validity Not Before: May 14 14:38:36 2025 GMT Not After : May 21 14:38:36 2025 GMT Subject: CN=6824aaec-da90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:c8:68:a7:4a:fe:ed:00:90:72:5d:65:e2:98: 4e:be:d2:bc:32:ca:12:9b:0f:58:e1:0b:7d:0d:9a: d7:c2:aa:ea:be:0c:e0:5b:e5:11:f7:a0:b5:22:30: e4:87:d9:93:d0:4e:50:6b:f1:2d:94:a7:4e:20:dc: 22:e9:68:f5:4b:06:74:72:62:0f:96:16:dc:97:5c: c9:5b:4c:c7:91:53:e5:e5:36:be:ea:78:6f:c1:a7: 9f:ae:fc:c2:2c:73:fa:61:0c:f4:58:43:11:64:e4: 0c:cc:b5:a1:e7:e3:a1:0d:b4:52:a8:bb:21:8d:b4: 0d:2b:24:07:e6:6d:08:bf:ab:43:b8:0d:de:73:3b: a4:96:0b:04:fb:7a:19:9e:34:d1:e9:32:5e:d9:28: ba:3c:2b:62:51:f6:9f:90:1a:57:59:b3:ac:f4:c0: ff:48:25:fb:54:6c:c6:c1:37:63:88:e9:1a:44:3e: db:1c:b8:2e:94:25:60:1d:e1:08:93:fe:79:05:50: 08:95:13:ef:ac:b0:4a:d8:72:0e:70:87:f8:59:d4: 4d:7a:44:a3:d5:85:2e:45:e4:a8:ca:d6:a9:dd:13: 55:27:23:b1:d0:02:ae:5f:c4:82:2c:aa:33:e2:51: cf:49:a1:8d:05:ba:f0:16:a1:08:47:e3:37:dc:f4: 17:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:D1:39:22:5F:9F:F6:0C:4A:C1:DD:B9:88:CB:43:0C:92:D2:A1:E8 X509v3 Authority Key Identifier: keyid:41:0F:0F:E9:7B:E9:D9:ED:07:56:CD:4D:76:36:B9:3F:8F:23:8B:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D306/BCBD801C1D8D11E2B429B7EB08B02CD2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D306/BCBD801C1D8D11E2B429B7EB08B02CD2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:d2:ed:94:b5:3e:ad:0d:75:25:bc:8b:ea:eb:24:88:0f:7e: ec:86:08:5b:4a:d6:b5:9b:ae:8e:f6:cf:75:c9:78:0f:f8:dd: ca:a0:e6:c3:ef:35:54:53:fd:1c:ee:be:54:fb:73:7c:fb:2e: a5:92:9e:07:75:bc:f3:de:99:d3:7d:fb:7e:6d:3c:a7:9a:a4: 1e:51:b3:28:02:c9:a3:7b:80:92:e0:55:a4:93:75:9a:49:00: 6c:84:73:1a:e9:fe:bb:fb:0f:42:04:39:36:7d:00:f9:63:a4: 18:b5:b1:ff:a3:27:b3:de:b5:6b:9c:91:fa:32:78:1a:db:7b: 62:08:cc:4d:66:d4:b6:46:9c:d9:73:89:83:f2:29:ff:66:4f: 67:5a:99:08:56:a5:59:7a:01:9b:fd:cb:4a:0a:e0:cf:59:27: 1c:0e:83:49:75:00:b1:42:da:f2:ce:1a:72:d3:43:31:d5:65: da:e4:9d:31:bd:c5:91:c9:49:a4:a9:71:5f:6d:e2:25:bc:51: 15:c3:b1:15:71:24:ab:c3:a5:4b:85:d9:4b:b0:61:5f:cc:66: 71:6c:08:2d:72:7b:64:53:e8:35:7b:bd:31:c6:63:55:9e:64: 23:0a:87:bb:c4:c7:e4:30:1a:29:be:47:b9:30:ba:f1:ee:3f: ad:ea:3a:ff -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNJQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQzMDYxMTAvBgNVBAUTKDQxMEYwRkU5N0JFOUQ5RUQwNzU2Q0Q0RDc2MzZCOTNG OEYyMzhCMzEwHhcNMjUwNTE0MTQzODM2WhcNMjUwNTIxMTQzODM2WjAYMRYwFAYD VQQDEw02ODI0YWFlYy1kYTkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzshop0r+7QCQcl1l4phOvtK8MsoSmw9Y4Qt9DZrXwqrqvgzgW+UR96C1IjDk h9mT0E5Qa/EtlKdOINwi6Wj1SwZ0cmIPlhbcl1zJW0zHkVPl5Ta+6nhvwaefrvzC LHP6YQz0WEMRZOQMzLWh5+OhDbRSqLshjbQNKyQH5m0Iv6tDuA3eczuklgsE+3oZ njTR6TJe2Si6PCtiUfafkBpXWbOs9MD/SCX7VGzGwTdjiOkaRD7bHLgulCVgHeEI k/55BVAIlRPvrLBK2HIOcIf4WdRNekSj1YUuReSoytap3RNVJyOx0AKuX8SCLKoz 4lHPSaGNBbrwFqEIR+M33PQXPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGfROSJf n/YMSsHduYjLQwyS0qHoMB8GA1UdIwQYMBaAFEEPD+l76dntB1bNTXY2uT+PI4sx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDMwNi9CQ0JEODAxQzFE OEQxMUUyQjQyOUI3RUIwOEIwMkNEMi9RUThQNlh2cDJlMEhWczFOZGphNVA0OGpp ekUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FROFA2WHZwMmUwSFZzMU5kamE1UDQ4aml6RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RDMwNi9CQ0JEODAxQzFEOEQxMUUyQjQyOUI3RUIwOEIwMkNEMi9RUThQNlh2cDJl MEhWczFOZGphNVA0OGppekUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAS0u2UtT6tDXUlvIvq6ySID37shghbSta1m66O9s91yXgP+N3KoObD 7zVUU/0c7r5U+3N8+y6lkp4Hdbzz3pnTfft+bTynmqQeUbMoAsmje4CS4FWkk3Wa SQBshHMa6f67+w9CBDk2fQD5Y6QYtbH/oyez3rVrnJH6Mnga23tiCMxNZtS2RpzZ c4mD8in/Zk9nWpkIVqVZegGb/ctKCuDPWSccDoNJdQCxQtryzhpy00Mx1WXa5J0x vcWRyUmkqXFfbeIlvFEVw7EVcSSrw6VLhdlLsGFfzGZxbAgtcntkU+g1e70xxmNV nmQjCoe7xMfkMBopvke5MLrx7j+t6jr/ -----END CERTIFICATE-----Generated at Wed May 14 21:09:47 2025 by rpki-client