$ rpki-client -vvf rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.mft File: qbzKbTTT1fHv-Lvng9SXc4E-Xvg.mft (raw, json) Hash identifier: qx852nxATZXD9TnIoN3yAO/U795XNgaqTO/hqE6Dg8A= Subject key identifier: 8D:6A:70:4A:27:65:88:70:E7:47:98:0F:34:A0:13:96:32:B9:88:E5 Authority key identifier: A9:BC:CA:6D:34:D3:D5:F1:EF:F8:BB:E7:83:D4:97:73:81:3E:5E:F8 Certificate issuer: /CN=A9186E8A/serialNumber=A9BCCA6D34D3D5F1EFF8BBE783D49773813E5EF8 Certificate serial: 07A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.mft Manifest number: 0776 Signing time: Fri 16 May 2025 22:02:16 +0000 Manifest this update: Fri 16 May 2025 22:02:15 +0000 Manifest next update: Fri 23 May 2025 22:02:15 +0000 Files and hashes: 1: qbzKbTTT1fHv-Lvng9SXc4E-Xvg.crl (hash: XtINt8ZtuXfWsaEv3JXshSUfZ6Hy+aE42LdzJKkKrLc=) 2: 5E6E0EFA1E7911F0A04A5366C4F9AE02.roa (hash: +ewFxwgws96qZb42iktranHuo6xk0cnwygWmXyUhbEc=) 3: 66C1BA862FBB11EB9B861059C4F9AE02.roa (hash: cMd/1qRqPVkWlIQVudOBbLGE1UfquRskjOxtjAtMCMY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.crl rsync://rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 May 2025 22:02:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1960 (0x7a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186E8A, serialNumber=A9BCCA6D34D3D5F1EFF8BBE783D49773813E5EF8 Validity Not Before: May 16 22:02:15 2025 GMT Not After : May 23 22:02:15 2025 GMT Subject: CN=6827b5e8-eebe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:be:a5:28:f8:02:92:76:72:26:9c:95:4c:cd: 2f:a1:fd:53:75:8b:29:60:bd:74:8b:be:cf:04:91: 78:ab:96:89:df:e9:e1:fd:d5:7c:8b:a7:d9:d4:f6: a2:ee:54:7e:4c:87:6f:41:bd:48:c1:84:50:98:35: 70:37:d1:b6:48:e5:90:40:81:2e:aa:3b:7c:e5:a6: dd:a9:56:00:c9:22:20:13:c7:be:07:e2:e9:9d:8b: 60:12:1e:0d:9e:32:56:b2:28:78:e7:d6:1b:d0:91: a5:a1:bb:aa:6f:52:c7:cc:9f:4a:4d:36:47:e1:3f: aa:50:a2:1a:68:4a:19:38:96:18:2f:2e:49:61:41: 7e:09:56:41:85:46:9f:2f:6c:10:a6:93:c2:1d:4c: ef:51:bb:14:21:27:90:38:41:b3:44:25:f4:83:10: 1d:22:31:c2:9a:9a:51:5a:bb:8b:92:4a:ee:93:19: 29:e0:91:4f:63:22:7d:c2:6d:0b:ce:d4:f3:b2:ec: a4:4b:22:92:ae:50:e9:9d:1f:3e:74:81:b4:a7:85: c8:f2:05:b6:f5:79:ea:e1:ee:51:92:9b:45:a7:60: 1c:33:5c:07:e8:97:a5:9d:b7:49:14:9f:19:fc:5f: 37:b0:5b:d1:ff:ab:5f:82:7b:3f:81:5a:0d:a0:78: cf:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:6A:70:4A:27:65:88:70:E7:47:98:0F:34:A0:13:96:32:B9:88:E5 X509v3 Authority Key Identifier: keyid:A9:BC:CA:6D:34:D3:D5:F1:EF:F8:BB:E7:83:D4:97:73:81:3E:5E:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:22:e0:12:e1:0c:5c:b8:13:ff:45:45:27:f5:6f:70:99:ca: 43:06:2a:a5:49:48:e9:07:77:75:f7:e9:b7:d8:34:12:28:39: ce:aa:b5:59:c1:a5:49:f6:18:3a:46:49:30:c8:ee:33:3a:53: 4b:73:35:d3:d4:55:21:87:d8:cb:06:03:27:83:b0:26:00:43: f0:70:7f:48:e9:99:9a:76:42:ab:08:8a:07:2d:93:8e:15:5d: 46:e4:47:66:bc:4f:80:97:fb:63:d5:2f:80:b4:3a:4e:08:b9: fe:40:31:cb:7a:e1:2d:19:ba:a4:af:29:2d:ce:0d:84:2f:f4: 6b:9b:b7:8e:5d:97:70:dc:10:4a:a8:b7:2e:98:f6:4d:8c:f0: 57:ea:a3:dd:3f:b9:9c:6a:b4:36:8a:d8:55:20:c0:6d:87:84: 4e:75:9f:6c:6e:d0:29:b7:2a:a8:bd:3f:2b:6e:96:d8:08:f4: 02:fe:c3:ff:07:85:e7:9a:78:70:0b:75:7e:a0:d1:8e:7c:28: 4a:71:65:95:1a:c3:5d:f4:c1:f6:fe:53:a8:12:1e:5e:2c:7e: 46:01:a2:8f:20:96:dd:ae:c8:91:0e:45:2a:49:6e:13:62:4f: 84:09:4d:e0:dd:2c:8a:f5:bd:00:f2:a8:06:b7:5b:36:a3:3b: 3d:a8:16:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB6gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODZFOEExMTAvBgNVBAUTKEE5QkNDQTZEMzREM0Q1RjFFRkY4QkJFNzgzRDQ5Nzcz ODEzRTVFRjgwHhcNMjUwNTE2MjIwMjE1WhcNMjUwNTIzMjIwMjE1WjAYMRYwFAYD VQQDEw02ODI3YjVlOC1lZWJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtr6lKPgCknZyJpyVTM0vof1TdYspYL10i77PBJF4q5aJ3+nh/dV8i6fZ1Pai 7lR+TIdvQb1IwYRQmDVwN9G2SOWQQIEuqjt85abdqVYAySIgE8e+B+LpnYtgEh4N njJWsih459Yb0JGlobuqb1LHzJ9KTTZH4T+qUKIaaEoZOJYYLy5JYUF+CVZBhUaf L2wQppPCHUzvUbsUISeQOEGzRCX0gxAdIjHCmppRWruLkkrukxkp4JFPYyJ9wm0L ztTzsuykSyKSrlDpnR8+dIG0p4XI8gW29Xnq4e5RkptFp2AcM1wH6JelnbdJFJ8Z /F83sFvR/6tfgns/gVoNoHjPFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI1qcEon ZYhw50eYDzSgE5YyuYjlMB8GA1UdIwQYMBaAFKm8ym0009Xx7/i754PUl3OBPl74 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkU4QS8zQjQ3NkU3QzJE RkYxMUVCODY4QTkxMzVDNEY5QUUwMi9xYnpLYlRUVDFmSHYtTHZuZzlTWGM0RS1Y dmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FiektiVFRUMWZIdi1Mdm5nOVNYYzRFLVh2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NkU4QS8zQjQ3NkU3QzJERkYxMUVCODY4QTkxMzVDNEY5QUUwMi9xYnpLYlRUVDFm SHYtTHZuZzlTWGM0RS1YdmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC4IuAS4QxcuBP/RUUn9W9wmcpDBiqlSUjpB3d19+m32DQSKDnOqrVZ waVJ9hg6RkkwyO4zOlNLczXT1FUhh9jLBgMng7AmAEPwcH9I6ZmadkKrCIoHLZOO FV1G5EdmvE+Al/tj1S+AtDpOCLn+QDHLeuEtGbqkryktzg2EL/Rrm7eOXZdw3BBK qLcumPZNjPBX6qPdP7mcarQ2ithVIMBth4ROdZ9sbtAptyqovT8rbpbYCPQC/sP/ B4XnmnhwC3V+oNGOfChKcWWVGsNd9MH2/lOoEh5eLH5GAaKPIJbdrsiRDkUqSW4T Yk+ECU3g3SyK9b0A8qgGt1s2ozs9qBYS -----END CERTIFICATE-----Generated at Sat May 17 03:23:29 2025 by rpki-client