$ rpki-client -vvf rpki.apnic.net/member_repository/A91840A8/67907734A19611EB8200CF09C4F9AE02/QL0p_yZodz0y7qDscGYCir7gy54.mft File: QL0p_yZodz0y7qDscGYCir7gy54.mft (raw, json) Hash identifier: bZuobig+YRWoVR4Q4ttconrafSsCEOA5JLpL8Uc0mYg= Subject key identifier: 0D:8A:FC:1B:66:21:C6:5D:61:2F:96:08:D7:79:99:23:CC:1C:DF:5A Authority key identifier: 40:BD:29:FF:26:68:77:3D:32:EE:A0:EC:70:66:02:8A:BE:E0:CB:9E Certificate issuer: /CN=A91840A8/serialNumber=40BD29FF2668773D32EEA0EC7066028ABEE0CB9E Certificate serial: 060A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QL0p_yZodz0y7qDscGYCir7gy54.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91840A8/67907734A19611EB8200CF09C4F9AE02/QL0p_yZodz0y7qDscGYCir7gy54.mft Manifest number: 060A Signing time: Wed 14 May 2025 22:54:57 +0000 Manifest this update: Wed 14 May 2025 22:54:57 +0000 Manifest next update: Wed 21 May 2025 22:54:57 +0000 Files and hashes: 1: QL0p_yZodz0y7qDscGYCir7gy54.crl (hash: 9cOg1mm5+r4hhkDaTKeqKy8TvjOklaf5+DjWPyTLhxc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91840A8/67907734A19611EB8200CF09C4F9AE02/QL0p_yZodz0y7qDscGYCir7gy54.crl rsync://rpki.apnic.net/member_repository/A91840A8/67907734A19611EB8200CF09C4F9AE02/QL0p_yZodz0y7qDscGYCir7gy54.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QL0p_yZodz0y7qDscGYCir7gy54.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 22:54:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1546 (0x60a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91840A8, serialNumber=40BD29FF2668773D32EEA0EC7066028ABEE0CB9E Validity Not Before: May 14 22:54:57 2025 GMT Not After : May 21 22:54:57 2025 GMT Subject: CN=68251f41-f714 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:4d:25:74:f4:2a:16:fb:3b:62:0c:cc:ec:ab: 97:23:7a:6c:e5:bf:28:56:ce:19:07:93:ad:b1:b9: 2e:97:fc:7f:27:cf:36:2d:f7:c6:a9:28:7d:3f:7b: 01:95:72:7b:d7:91:3f:d9:3b:e3:93:6b:54:80:08: 45:6a:19:06:65:1e:be:42:2f:07:7e:fd:f0:f4:8b: a0:1c:04:c6:25:93:7b:21:ad:82:93:b4:6f:73:41: 3c:c6:ae:ff:55:9b:06:1c:01:3f:da:82:d3:3a:ac: 0c:af:4a:88:28:9b:5a:4a:fe:ec:53:3a:9b:83:02: a5:b4:28:46:e8:bd:65:9a:c3:ce:2a:6d:e9:14:c8: 24:7a:ba:76:c2:d8:2c:6b:d0:66:9f:ab:40:57:2d: c4:60:05:da:cc:85:3d:24:d6:dc:a8:27:b1:24:2d: f5:21:e6:50:2e:49:10:93:2e:a0:d4:25:79:d5:94: 46:b0:31:35:53:6c:f8:d6:68:8e:2c:b0:4b:5b:05: f6:41:dd:32:ea:9a:a1:d9:65:15:68:72:c7:c2:81: f5:e5:e5:4b:b9:eb:e1:04:a5:1f:c7:a4:5c:08:46: bd:fd:45:27:6c:b1:16:af:f7:0a:ad:64:5c:92:7b: 4c:32:1e:70:f2:38:42:40:dd:72:1c:6b:70:99:ae: 97:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:8A:FC:1B:66:21:C6:5D:61:2F:96:08:D7:79:99:23:CC:1C:DF:5A X509v3 Authority Key Identifier: keyid:40:BD:29:FF:26:68:77:3D:32:EE:A0:EC:70:66:02:8A:BE:E0:CB:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91840A8/67907734A19611EB8200CF09C4F9AE02/QL0p_yZodz0y7qDscGYCir7gy54.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QL0p_yZodz0y7qDscGYCir7gy54.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91840A8/67907734A19611EB8200CF09C4F9AE02/QL0p_yZodz0y7qDscGYCir7gy54.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:ef:7c:0d:48:40:c8:3f:9a:66:06:9b:f2:82:ae:b9:d9:e5: f4:ef:22:f7:e1:61:a9:a2:e3:80:11:95:5c:96:73:d4:d4:da: 95:8a:f6:25:96:d2:ff:a5:f2:45:36:59:0a:eb:ac:fc:59:cf: 09:8c:3a:74:ab:aa:81:4a:0f:0b:f7:3a:30:32:b8:ab:4b:91: d8:c9:90:36:af:20:94:46:60:b1:d1:c6:20:e8:37:25:34:43: 55:2e:68:a7:ac:5a:d6:a4:d3:17:be:e6:63:4c:cc:0e:48:27: 27:86:4d:1b:d8:7f:91:75:b5:ae:0e:fa:16:18:be:9c:f4:97: d1:1d:8f:10:45:94:67:98:f9:3e:26:8a:e5:1e:b8:0b:1f:62: 08:e3:da:59:c7:7f:c0:3a:7f:b5:d9:cf:04:f8:c2:14:87:a3: 96:60:88:12:92:e0:b7:fd:aa:0b:bb:11:ad:79:b3:6b:0f:4e: e1:80:22:9a:77:8a:f4:54:bd:59:ac:a6:19:19:b1:e8:e3:e0: a6:02:af:64:12:c1:22:bc:7f:99:7c:44:27:39:da:c7:0e:93: 23:c3:1c:04:0e:c9:29:60:8c:0d:c3:6d:35:d0:d0:90:ff:ec: ab:73:df:63:58:6d:7e:4a:19:96:e4:d9:0a:f4:8a:df:5a:b1: 42:ec:fe:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBgowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQwQTgxMTAvBgNVBAUTKDQwQkQyOUZGMjY2ODc3M0QzMkVFQTBFQzcwNjYwMjhB QkVFMENCOUUwHhcNMjUwNTE0MjI1NDU3WhcNMjUwNTIxMjI1NDU3WjAYMRYwFAYD VQQDEw02ODI1MWY0MS1mNzE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy00ldPQqFvs7YgzM7KuXI3ps5b8oVs4ZB5Otsbkul/x/J882LffGqSh9P3sB lXJ715E/2Tvjk2tUgAhFahkGZR6+Qi8Hfv3w9IugHATGJZN7Ia2Ck7Rvc0E8xq7/ VZsGHAE/2oLTOqwMr0qIKJtaSv7sUzqbgwKltChG6L1lmsPOKm3pFMgkerp2wtgs a9Bmn6tAVy3EYAXazIU9JNbcqCexJC31IeZQLkkQky6g1CV51ZRGsDE1U2z41miO LLBLWwX2Qd0y6pqh2WUVaHLHwoH15eVLuevhBKUfx6RcCEa9/UUnbLEWr/cKrWRc kntMMh5w8jhCQN1yHGtwma6XiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA2K/Btm IcZdYS+WCNd5mSPMHN9aMB8GA1UdIwQYMBaAFEC9Kf8maHc9Mu6g7HBmAoq+4Mue MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDBBOC82NzkwNzczNEEx OTYxMUVCODIwMENGMDlDNEY5QUUwMi9RTDBwX3lab2R6MHk3cURzY0dZQ2lyN2d5 NTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1FMMHBfeVpvZHoweTdxRHNjR1lDaXI3Z3k1NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDBBOC82NzkwNzczNEExOTYxMUVCODIwMENGMDlDNEY5QUUwMi9RTDBwX3lab2R6 MHk3cURzY0dZQ2lyN2d5NTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCW73wNSEDIP5pmBpvygq652eX07yL34WGpouOAEZVclnPU1NqVivYl ltL/pfJFNlkK66z8Wc8JjDp0q6qBSg8L9zowMrirS5HYyZA2ryCURmCx0cYg6Dcl NENVLminrFrWpNMXvuZjTMwOSCcnhk0b2H+RdbWuDvoWGL6c9JfRHY8QRZRnmPk+ JorlHrgLH2II49pZx3/AOn+12c8E+MIUh6OWYIgSkuC3/aoLuxGtebNrD07hgCKa d4r0VL1ZrKYZGbHo4+CmAq9kEsEivH+ZfEQnOdrHDpMjwxwEDskpYIwNw2010NCQ /+yrc99jWG1+ShmW5NkK9IrfWrFC7P7O -----END CERTIFICATE-----Generated at Fri May 16 16:48:07 2025 by rpki-client