$ rpki-client -vvf rpki.apnic.net/member_repository/A912B6D9/7743D51E1E5F11F0BA389A4EC4F9AE02/q2LZY5CMwOOoAZmkPTEqNKBIgfA.mft File: q2LZY5CMwOOoAZmkPTEqNKBIgfA.mft (raw, json) Hash identifier: JPV09Ey7eWMSY7pq7r805EfuDJVEcI+gsdi1z1Qko8E= Subject key identifier: 53:0E:B8:8C:EC:2C:DC:19:2C:A6:28:3D:CA:3D:39:84:A1:2B:A7:A4 Authority key identifier: AB:62:D9:63:90:8C:C0:E3:A8:01:99:A4:3D:31:2A:34:A0:48:81:F0 Certificate issuer: /CN=A912B6D9/serialNumber=AB62D963908CC0E3A80199A43D312A34A04881F0 Certificate serial: 0E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2LZY5CMwOOoAZmkPTEqNKBIgfA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B6D9/7743D51E1E5F11F0BA389A4EC4F9AE02/q2LZY5CMwOOoAZmkPTEqNKBIgfA.mft Manifest number: 0E Signing time: Thu 15 May 2025 07:22:45 +0000 Manifest this update: Thu 15 May 2025 07:22:45 +0000 Manifest next update: Thu 22 May 2025 07:22:45 +0000 Files and hashes: 1: q2LZY5CMwOOoAZmkPTEqNKBIgfA.crl (hash: 17/C9ApSSstp+Ily2EAatm5sI8GMsRFGEHA9yKClIJI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B6D9/7743D51E1E5F11F0BA389A4EC4F9AE02/q2LZY5CMwOOoAZmkPTEqNKBIgfA.crl rsync://rpki.apnic.net/member_repository/A912B6D9/7743D51E1E5F11F0BA389A4EC4F9AE02/q2LZY5CMwOOoAZmkPTEqNKBIgfA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2LZY5CMwOOoAZmkPTEqNKBIgfA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 07:22:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14 (0xe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B6D9, serialNumber=AB62D963908CC0E3A80199A43D312A34A04881F0 Validity Not Before: May 15 07:22:45 2025 GMT Not After : May 22 07:22:45 2025 GMT Subject: CN=68259645-d6ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:29:56:b4:81:9e:09:20:43:e7:74:55:f1:79: e1:55:f7:bd:bd:a4:b6:4a:14:42:40:c1:c3:36:ec: 50:0a:74:ec:f1:98:b9:8b:d4:6c:60:17:39:51:0b: 77:0b:e1:8d:ff:86:bf:9a:f0:4e:8b:3a:45:16:4c: f4:44:75:91:95:5e:9c:af:88:ca:80:07:05:25:14: 29:32:43:06:be:49:2a:e4:09:1f:5b:9f:4b:e5:a9: 6f:b8:0f:28:87:5d:af:d2:68:1e:d0:a0:f7:b7:c2: a7:29:5d:c2:1d:0b:18:5b:b2:b7:6b:7d:1f:53:04: 6d:7f:69:30:13:6a:4f:b8:58:b0:ac:07:88:fe:bd: 2b:95:c8:28:23:e9:b3:a4:5e:75:e5:cf:9c:5b:fd: 5c:f1:74:b4:7f:c5:11:f3:68:6f:25:ee:c3:3b:4c: ca:53:31:75:e9:54:2f:76:23:c3:c8:52:25:d2:bc: 8d:8a:e1:9d:e2:08:f7:d6:d7:e0:b3:99:8d:e6:75: c5:e8:75:b9:57:a3:a1:fb:9f:c6:30:c4:a6:09:1f: fd:bb:e8:82:a9:67:89:0d:8e:96:be:a9:b1:04:ec: 55:19:4e:63:8e:d4:3a:cf:0d:50:c9:7c:f1:a7:f8: 5b:25:dd:71:26:2b:c8:eb:8d:d3:3f:86:11:68:19: be:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:0E:B8:8C:EC:2C:DC:19:2C:A6:28:3D:CA:3D:39:84:A1:2B:A7:A4 X509v3 Authority Key Identifier: keyid:AB:62:D9:63:90:8C:C0:E3:A8:01:99:A4:3D:31:2A:34:A0:48:81:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B6D9/7743D51E1E5F11F0BA389A4EC4F9AE02/q2LZY5CMwOOoAZmkPTEqNKBIgfA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2LZY5CMwOOoAZmkPTEqNKBIgfA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B6D9/7743D51E1E5F11F0BA389A4EC4F9AE02/q2LZY5CMwOOoAZmkPTEqNKBIgfA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:b6:85:9a:2b:bf:89:70:ae:a2:64:a6:38:41:2c:b1:22:4e: 15:4a:4e:ff:77:5c:10:11:33:aa:9e:93:6b:b9:ff:0e:9d:b1: a6:60:9c:21:e1:31:7d:44:39:d1:24:a7:ca:f8:86:5f:a5:a0: 5c:9f:4a:61:86:4c:10:73:3f:51:03:78:27:cf:4c:51:df:37: f1:1f:42:b5:65:be:80:7a:52:76:e2:74:79:7f:2f:ff:98:17: 51:3d:96:6d:c7:80:17:7b:34:a1:25:e9:52:86:2e:fd:12:3c: 21:60:01:13:d8:26:d4:88:4d:78:16:4f:9e:da:8e:81:0d:35: dd:b1:83:13:c2:c8:1b:b8:3b:ad:91:25:94:7b:7e:36:b9:b8: ad:b6:f9:73:10:f2:5b:01:28:f1:0c:ad:92:b7:d3:30:18:4e: 30:b4:92:90:ce:10:98:3c:d3:67:30:fe:32:42:1b:16:07:9e: 90:c2:15:78:5b:b3:41:38:39:be:c2:be:e2:ff:9e:fd:08:ea: f3:63:b2:b5:70:c9:83:d8:a4:bb:c7:a8:05:d0:c1:eb:7c:61: 5d:05:d5:4a:64:f8:4e:2f:43:a2:9f:ee:05:2c:02:ac:e2:17: ef:9a:50:fd:45:f8:20:03:e5:b4:96:2e:54:cc:88:44:e0:c8: 8d:9b:b7:13 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy QjZEOTExMC8GA1UEBRMoQUI2MkQ5NjM5MDhDQzBFM0E4MDE5OUE0M0QzMTJBMzRB MDQ4ODFGMDAeFw0yNTA1MTUwNzIyNDVaFw0yNTA1MjIwNzIyNDVaMBgxFjAUBgNV BAMTDTY4MjU5NjQ1LWQ2ZWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDFKVa0gZ4JIEPndFXxeeFV9729pLZKFEJAwcM27FAKdOzxmLmL1GxgFzlRC3cL 4Y3/hr+a8E6LOkUWTPREdZGVXpyviMqABwUlFCkyQwa+SSrkCR9bn0vlqW+4DyiH Xa/SaB7QoPe3wqcpXcIdCxhbsrdrfR9TBG1/aTATak+4WLCsB4j+vSuVyCgj6bOk XnXlz5xb/VzxdLR/xRHzaG8l7sM7TMpTMXXpVC92I8PIUiXSvI2K4Z3iCPfW1+Cz mY3mdcXodblXo6H7n8YwxKYJH/276IKpZ4kNjpa+qbEE7FUZTmOO1DrPDVDJfPGn +Fsl3XEmK8jrjdM/hhFoGb6rAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUUw64jOws 3Bkspig9yj05hKErp6QwHwYDVR0jBBgwFoAUq2LZY5CMwOOoAZmkPTEqNKBIgfAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJCNkQ5Lzc3NDNENTFFMUU1 RjExRjBCQTM4OUE0RUM0RjlBRTAyL3EyTFpZNUNNd09Pb0FabWtQVEVxTktCSWdm QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcTJMWlk1Q013T09vQVpta1BURXFOS0JJZ2ZBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJC NkQ5Lzc3NDNENTFFMUU1RjExRjBCQTM4OUE0RUM0RjlBRTAyL3EyTFpZNUNNd09P b0FabWtQVEVxTktCSWdmQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACu2hZorv4lwrqJkpjhBLLEiThVKTv93XBARM6qek2u5/w6dsaZgnCHh MX1EOdEkp8r4hl+loFyfSmGGTBBzP1EDeCfPTFHfN/EfQrVlvoB6UnbidHl/L/+Y F1E9lm3HgBd7NKEl6VKGLv0SPCFgARPYJtSITXgWT57ajoENNd2xgxPCyBu4O62R JZR7fja5uK22+XMQ8lsBKPEMrZK30zAYTjC0kpDOEJg802cw/jJCGxYHnpDCFXhb s0E4Ob7CvuL/nv0I6vNjsrVwyYPYpLvHqAXQwet8YV0F1Upk+E4vQ6Kf7gUsAqzi F++aUP1F+CAD5bSWLlTMiETgyI2btxM= -----END CERTIFICATE-----Generated at Fri May 16 21:49:24 2025 by rpki-client