$ rpki-client -vvf rpki.apnic.net/member_repository/A9135B24/3BA691A8F83D11E8B0EC3448C4F9AE02/qrLSCRHmfiw6NccByHZaaFtQDsc.mft File: qrLSCRHmfiw6NccByHZaaFtQDsc.mft (raw, json) Hash identifier: J0BZs+pymUEedvQ6nm81spHvA6+S5QNx8u+1u8/qeiM= Subject key identifier: FA:B1:37:A5:47:6D:9E:65:B6:7F:E5:7D:72:43:21:8A:29:6D:1C:46 Authority key identifier: AA:B2:D2:09:11:E6:7E:2C:3A:35:C7:01:C8:76:5A:68:5B:50:0E:C7 Certificate issuer: /CN=A9135B24/serialNumber=AAB2D20911E67E2C3A35C701C8765A685B500EC7 Certificate serial: 1194 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrLSCRHmfiw6NccByHZaaFtQDsc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135B24/3BA691A8F83D11E8B0EC3448C4F9AE02/qrLSCRHmfiw6NccByHZaaFtQDsc.mft Manifest number: 118D Signing time: Sat 10 May 2025 17:06:10 +0000 Manifest this update: Sat 10 May 2025 17:06:09 +0000 Manifest next update: Sat 17 May 2025 17:06:09 +0000 Files and hashes: 1: qrLSCRHmfiw6NccByHZaaFtQDsc.crl (hash: bKms7jPsNKMz0uREEobswu1bkwyXjJkpX2UM8WHBlB8=) 2: 5AC7F986F83E11E8B1FA8F4AC4F9AE02.roa (hash: iW6YjMpstfMKbZY59Tg1WeEsakFUmD2BPmWINCFK44U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135B24/3BA691A8F83D11E8B0EC3448C4F9AE02/qrLSCRHmfiw6NccByHZaaFtQDsc.crl rsync://rpki.apnic.net/member_repository/A9135B24/3BA691A8F83D11E8B0EC3448C4F9AE02/qrLSCRHmfiw6NccByHZaaFtQDsc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrLSCRHmfiw6NccByHZaaFtQDsc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 17:06:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4500 (0x1194) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135B24, serialNumber=AAB2D20911E67E2C3A35C701C8765A685B500EC7 Validity Not Before: May 10 17:06:09 2025 GMT Not After : May 17 17:06:09 2025 GMT Subject: CN=681f8781-f141 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ca:cb:e3:8e:05:c7:28:21:91:ad:fb:47:48: 1f:a2:9f:46:7b:97:9e:71:a5:da:68:5b:74:31:31: ec:5a:c6:93:c9:3e:de:04:59:c9:a0:d5:90:0e:78: 03:4b:4b:d4:06:5c:00:70:c4:dc:99:6e:6a:78:f2: 70:53:f2:6b:55:da:7f:a2:c6:56:ec:f7:9a:c9:c5: 49:90:e3:af:4a:36:a8:68:3c:e0:29:70:27:47:2a: 8a:fa:e8:86:db:f4:59:90:ed:a7:7a:1e:d2:91:dc: 47:23:01:b1:b5:5d:84:c9:38:52:5b:54:3e:97:af: c1:04:20:48:0d:d5:9e:cf:6c:7d:d9:08:7b:cd:1e: e4:1e:08:b1:fe:c8:0a:4c:8e:df:c0:ce:c9:43:ec: 05:14:43:68:65:a6:e2:9e:51:8f:9a:d8:81:34:72: 05:6d:a7:2e:bc:15:9e:f6:9f:15:81:c9:2e:f6:93: 16:91:10:b7:58:3b:17:a9:0e:f9:06:06:fb:49:20: 78:25:21:45:c5:ce:8c:fa:53:4d:bf:5b:d3:73:83: 0e:80:dd:84:73:be:5a:c3:da:4c:e7:1a:29:82:34: 3d:c9:ed:57:14:8d:04:ed:ac:00:f7:c3:7a:10:9d: a2:91:0c:f8:40:32:56:61:54:7a:f3:6d:d7:08:8d: c9:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:B1:37:A5:47:6D:9E:65:B6:7F:E5:7D:72:43:21:8A:29:6D:1C:46 X509v3 Authority Key Identifier: keyid:AA:B2:D2:09:11:E6:7E:2C:3A:35:C7:01:C8:76:5A:68:5B:50:0E:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135B24/3BA691A8F83D11E8B0EC3448C4F9AE02/qrLSCRHmfiw6NccByHZaaFtQDsc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrLSCRHmfiw6NccByHZaaFtQDsc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135B24/3BA691A8F83D11E8B0EC3448C4F9AE02/qrLSCRHmfiw6NccByHZaaFtQDsc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:97:2d:f6:c8:c6:71:7c:40:9b:12:28:2b:af:dc:cb:9a:5f: f4:71:ae:fc:27:8d:29:e9:f5:88:5d:05:08:b2:18:bf:96:48: de:ec:98:f6:8f:2e:50:7f:c9:d0:b6:98:74:f7:6f:37:68:ef: c7:56:4c:d6:08:8d:13:75:00:e1:7e:5b:e4:d9:8b:88:5d:9d: 43:a1:4e:cc:3a:25:79:fc:f7:ff:e6:7b:db:7f:b2:d3:ff:58: ca:ae:2c:f8:40:04:f9:4b:5b:ff:b5:a4:ad:09:cc:77:31:f9: 4a:54:69:08:4a:3d:56:ba:b7:30:07:ca:97:d4:b4:62:1c:31: c4:f1:b6:7b:ca:00:58:90:53:47:f8:df:6e:ea:ec:64:42:f6: 4f:91:75:8a:94:6a:b1:a6:4b:69:f2:c3:48:e4:69:0b:38:23: c5:8f:58:b0:f0:eb:d1:bb:27:cb:2c:e2:93:03:b5:4a:d0:17: 9c:60:db:d0:56:60:e9:c2:27:5c:50:7c:d0:07:d7:15:20:44: 86:35:e8:bd:2d:ac:c9:a5:7c:f1:3d:4a:d0:85:90:ba:1f:c0: ce:b1:6e:9f:f3:f4:7f:9d:62:d3:32:b8:0d:1d:a3:9a:6d:5f: 85:61:2b:5e:b7:e4:a8:63:d8:36:72:8e:4e:44:00:a4:86:8c: b7:df:c3:3f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEZQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzVCMjQxMTAvBgNVBAUTKEFBQjJEMjA5MTFFNjdFMkMzQTM1QzcwMUM4NzY1QTY4 NUI1MDBFQzcwHhcNMjUwNTEwMTcwNjA5WhcNMjUwNTE3MTcwNjA5WjAYMRYwFAYD VQQDEw02ODFmODc4MS1mMTQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwMrL444Fxyghka37R0gfop9Ge5eecaXaaFt0MTHsWsaTyT7eBFnJoNWQDngD S0vUBlwAcMTcmW5qePJwU/JrVdp/osZW7PeaycVJkOOvSjaoaDzgKXAnRyqK+uiG 2/RZkO2neh7SkdxHIwGxtV2EyThSW1Q+l6/BBCBIDdWez2x92Qh7zR7kHgix/sgK TI7fwM7JQ+wFFENoZabinlGPmtiBNHIFbacuvBWe9p8Vgcku9pMWkRC3WDsXqQ75 Bgb7SSB4JSFFxc6M+lNNv1vTc4MOgN2Ec75aw9pM5xopgjQ9ye1XFI0E7awA98N6 EJ2ikQz4QDJWYVR6823XCI3JaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPqxN6VH bZ5ltn/lfXJDIYopbRxGMB8GA1UdIwQYMBaAFKqy0gkR5n4sOjXHAch2WmhbUA7H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNUIyNC8zQkE2OTFBOEY4 M0QxMUU4QjBFQzM0NDhDNEY5QUUwMi9xckxTQ1JIbWZpdzZOY2NCeUhaYWFGdFFE c2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FyTFNDUkhtZml3Nk5jY0J5SFphYUZ0UURzYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NUIyNC8zQkE2OTFBOEY4M0QxMUU4QjBFQzM0NDhDNEY5QUUwMi9xckxTQ1JIbWZp dzZOY2NCeUhaYWFGdFFEc2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxly32yMZxfECbEigrr9zLml/0ca78J40p6fWIXQUIshi/lkje7Jj2 jy5Qf8nQtph09283aO/HVkzWCI0TdQDhflvk2YuIXZ1DoU7MOiV5/Pf/5nvbf7LT /1jKriz4QAT5S1v/taStCcx3MflKVGkISj1WurcwB8qX1LRiHDHE8bZ7ygBYkFNH +N9u6uxkQvZPkXWKlGqxpktp8sNI5GkLOCPFj1iw8OvRuyfLLOKTA7VK0BecYNvQ VmDpwidcUHzQB9cVIESGNei9LazJpXzxPUrQhZC6H8DOsW6f8/R/nWLTMrgNHaOa bV+FYStet+SoY9g2co5ORACkhoy338M/ -----END CERTIFICATE-----Generated at Sun May 11 09:19:31 2025 by rpki-client