$ rpki-client -vvf rpki.apnic.net/member_repository/A9113B62/26619D44C6E811EFBB520B0DC4F9AE02/Qv7zMXQaVNWgrnVTEI1NLTKwV7A.mft File: Qv7zMXQaVNWgrnVTEI1NLTKwV7A.mft (raw, json) Hash identifier: 1+NWgpMUHdnrTBFA2904UMPfmZEmzJZJQPmfAvIau6Q= Subject key identifier: EF:10:D3:1F:6A:4A:A5:A7:B5:1C:F3:F7:FB:8A:65:C7:86:9E:21:58 Authority key identifier: 42:FE:F3:31:74:1A:54:D5:A0:AE:75:53:10:8D:4D:2D:32:B0:57:B0 Certificate issuer: /CN=A9113B62/serialNumber=42FEF331741A54D5A0AE7553108D4D2D32B057B0 Certificate serial: 49 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qv7zMXQaVNWgrnVTEI1NLTKwV7A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9113B62/26619D44C6E811EFBB520B0DC4F9AE02/Qv7zMXQaVNWgrnVTEI1NLTKwV7A.mft Manifest number: 48 Signing time: Thu 15 May 2025 06:39:12 +0000 Manifest this update: Thu 15 May 2025 06:39:12 +0000 Manifest next update: Thu 22 May 2025 06:39:12 +0000 Files and hashes: 1: Qv7zMXQaVNWgrnVTEI1NLTKwV7A.crl (hash: hePJZ2yBlgXhh8A2frzLBjvCYYtlNa6o4YIrlypGiTc=) 2: 01238706C86211EFBDCCC22AC4F9AE02.roa (hash: sqsd36HvdOtJGpobxnch2UziqlMaZAChQP7HevqvsWs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9113B62/26619D44C6E811EFBB520B0DC4F9AE02/Qv7zMXQaVNWgrnVTEI1NLTKwV7A.crl rsync://rpki.apnic.net/member_repository/A9113B62/26619D44C6E811EFBB520B0DC4F9AE02/Qv7zMXQaVNWgrnVTEI1NLTKwV7A.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qv7zMXQaVNWgrnVTEI1NLTKwV7A.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 06:39:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73 (0x49) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9113B62, serialNumber=42FEF331741A54D5A0AE7553108D4D2D32B057B0 Validity Not Before: May 15 06:39:12 2025 GMT Not After : May 22 06:39:12 2025 GMT Subject: CN=68258c10-f7c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:f8:56:0f:7a:84:b5:8e:a9:ae:01:18:a4:63: 2f:88:c2:a0:d6:8c:22:1c:5a:ef:5a:a3:fb:3b:17: c3:1b:4b:be:60:81:94:d0:98:0f:66:bf:9e:00:3b: a8:8c:4d:97:24:2d:5b:28:04:b8:bc:df:61:04:71: 6e:af:bc:5a:b6:1c:bf:3a:53:54:f3:12:9f:99:86: e0:e0:2d:37:5c:0d:0b:6d:9c:fb:a1:10:e6:21:30: fe:c9:d3:bf:cd:0c:b1:20:2d:9d:0d:da:75:2f:90: 66:9f:94:55:7a:40:6b:7e:79:29:7f:55:95:51:af: 8b:05:76:7c:6c:91:c4:a4:fc:a1:88:8c:80:0c:34: cf:a4:14:0d:d0:a4:26:0a:83:02:18:c9:47:69:52: d1:22:ca:e6:da:bd:08:86:36:e4:6c:f5:f5:91:28: ec:78:16:0d:85:62:b5:47:67:13:d9:3b:65:a6:3e: d2:dc:80:7f:c3:c8:87:6d:a8:fa:55:32:ea:72:2f: 5a:c2:a0:1f:99:91:24:48:a3:c2:28:82:51:37:f1: c4:82:31:36:3a:e2:75:54:77:a9:21:fc:36:1f:3d: 9a:5d:40:9f:43:e2:68:cd:d6:f5:44:47:10:7f:12: 76:e2:ce:ce:66:51:52:57:58:3d:b2:86:a3:2a:ef: a0:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:10:D3:1F:6A:4A:A5:A7:B5:1C:F3:F7:FB:8A:65:C7:86:9E:21:58 X509v3 Authority Key Identifier: keyid:42:FE:F3:31:74:1A:54:D5:A0:AE:75:53:10:8D:4D:2D:32:B0:57:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9113B62/26619D44C6E811EFBB520B0DC4F9AE02/Qv7zMXQaVNWgrnVTEI1NLTKwV7A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qv7zMXQaVNWgrnVTEI1NLTKwV7A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113B62/26619D44C6E811EFBB520B0DC4F9AE02/Qv7zMXQaVNWgrnVTEI1NLTKwV7A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:2e:ad:b1:0f:36:ab:b6:be:5b:3c:92:72:14:68:4e:40:5d: 0d:7c:d1:31:f3:70:82:92:3f:04:a8:4b:82:58:8d:9f:be:c2: b5:90:5a:c9:9c:71:ff:3a:ef:94:ed:7a:31:18:5a:09:cb:6b: 3a:fc:79:d1:34:7e:08:c4:e9:77:40:2e:68:84:a8:58:33:8c: 4b:17:76:94:c0:e1:c0:18:4c:a9:bd:a2:0d:8d:1f:ca:cd:1c: 5f:0a:cf:be:c4:15:33:43:51:f2:80:00:3a:99:90:ef:dc:5b: 03:be:3a:4b:b9:6f:16:63:00:ee:01:14:8b:ce:da:0a:70:9e: b7:da:4f:37:08:c6:55:76:cc:aa:ef:5f:86:71:a5:9e:de:b6: 8f:21:81:c2:fd:b3:01:8c:77:dd:49:55:07:f7:bb:e8:f4:9a: cc:97:f4:ae:bd:89:6b:11:68:e5:ed:bd:22:7c:60:f9:02:16: 11:68:c8:6d:22:3e:bd:a3:c0:f1:fa:73:1d:71:e3:32:d1:e3: 83:66:e8:54:39:05:56:26:43:49:e0:91:50:b7:34:f3:66:e9: 8f:43:e7:e6:eb:d7:28:67:67:e3:1c:b2:e6:8f:4b:04:2b:2b: 62:95:75:a6:9f:a2:06:b9:c4:0c:80:8b:f0:00:85:34:75:a7: d9:54:80:6c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx M0I2MjExMC8GA1UEBRMoNDJGRUYzMzE3NDFBNTRENUEwQUU3NTUzMTA4RDREMkQz MkIwNTdCMDAeFw0yNTA1MTUwNjM5MTJaFw0yNTA1MjIwNjM5MTJaMBgxFjAUBgNV BAMTDTY4MjU4YzEwLWY3YzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDY+FYPeoS1jqmuARikYy+IwqDWjCIcWu9ao/s7F8MbS75ggZTQmA9mv54AO6iM TZckLVsoBLi832EEcW6vvFq2HL86U1TzEp+ZhuDgLTdcDQttnPuhEOYhMP7J07/N DLEgLZ0N2nUvkGaflFV6QGt+eSl/VZVRr4sFdnxskcSk/KGIjIAMNM+kFA3QpCYK gwIYyUdpUtEiyubavQiGNuRs9fWRKOx4Fg2FYrVHZxPZO2WmPtLcgH/DyIdtqPpV MupyL1rCoB+ZkSRIo8IoglE38cSCMTY64nVUd6kh/DYfPZpdQJ9D4mjN1vVERxB/ Enbizs5mUVJXWD2yhqMq76ArAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU7xDTH2pK pae1HPP3+4plx4aeIVgwHwYDVR0jBBgwFoAUQv7zMXQaVNWgrnVTEI1NLTKwV7Aw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEzQjYyLzI2NjE5RDQ0QzZF ODExRUZCQjUyMEIwREM0RjlBRTAyL1F2N3pNWFFhVk5XZ3JuVlRFSTFOTFRLd1Y3 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvUXY3ek1YUWFWTldncm5WVEVJMU5MVEt3VjdBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEz QjYyLzI2NjE5RDQ0QzZFODExRUZCQjUyMEIwREM0RjlBRTAyL1F2N3pNWFFhVk5X Z3JuVlRFSTFOTFRLd1Y3QS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKsurbEPNqu2vls8knIUaE5AXQ180THzcIKSPwSoS4JYjZ++wrWQWsmc cf8675TtejEYWgnLazr8edE0fgjE6XdALmiEqFgzjEsXdpTA4cAYTKm9og2NH8rN HF8Kz77EFTNDUfKAADqZkO/cWwO+Oku5bxZjAO4BFIvO2gpwnrfaTzcIxlV2zKrv X4ZxpZ7eto8hgcL9swGMd91JVQf3u+j0msyX9K69iWsRaOXtvSJ8YPkCFhFoyG0i Pr2jwPH6cx1x4zLR44Nm6FQ5BVYmQ0ngkVC3NPNm6Y9D5+br1yhnZ+McsuaPSwQr K2KVdaafoga5xAyAi/AAhTR1p9lUgGw= -----END CERTIFICATE-----Generated at Fri May 16 23:55:53 2025 by rpki-client