$ rpki-client -vvf rpki.apnic.net/member_repository/A912C3BD/1A8108F2D97F11EB9E13594FC4F9AE02/RqE3XwEj9TNI8MT5A02QQP7p08o.mft File: RqE3XwEj9TNI8MT5A02QQP7p08o.mft (raw, json) Hash identifier: dBMcwMRE8yqkMdsM/LaAuI2o3PprcGrTXGu+C7MFIEI= Subject key identifier: 92:CA:58:49:E4:03:D3:F8:6F:FD:6E:3B:06:AB:A9:EE:A2:D5:B2:85 Authority key identifier: 46:A1:37:5F:01:23:F5:33:48:F0:C4:F9:03:4D:90:40:FE:E9:D3:CA Certificate issuer: /CN=A912C3BD/serialNumber=46A1375F0123F53348F0C4F9034D9040FEE9D3CA Certificate serial: 058D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RqE3XwEj9TNI8MT5A02QQP7p08o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C3BD/1A8108F2D97F11EB9E13594FC4F9AE02/RqE3XwEj9TNI8MT5A02QQP7p08o.mft Manifest number: 0584 Signing time: Mon 12 May 2025 23:04:23 +0000 Manifest this update: Mon 12 May 2025 23:04:22 +0000 Manifest next update: Mon 19 May 2025 23:04:22 +0000 Files and hashes: 1: RqE3XwEj9TNI8MT5A02QQP7p08o.crl (hash: uPgiggOJW+WUIk9e68zVb98J1ENyjFJjlbyrMUqURNw=) 2: 6079B40AD98211EBAA210852C4F9AE02.roa (hash: cPDgWfK2zOB3bgbWohc7RllaAj78iS9Dek771g2OWfM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C3BD/1A8108F2D97F11EB9E13594FC4F9AE02/RqE3XwEj9TNI8MT5A02QQP7p08o.crl rsync://rpki.apnic.net/member_repository/A912C3BD/1A8108F2D97F11EB9E13594FC4F9AE02/RqE3XwEj9TNI8MT5A02QQP7p08o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RqE3XwEj9TNI8MT5A02QQP7p08o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 23:04:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1421 (0x58d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C3BD, serialNumber=46A1375F0123F53348F0C4F9034D9040FEE9D3CA Validity Not Before: May 12 23:04:22 2025 GMT Not After : May 19 23:04:22 2025 GMT Subject: CN=68227e76-3db2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ad:99:d8:46:8d:27:2f:20:7f:46:95:62:50: 79:1b:52:7e:01:69:7d:49:b6:c1:68:5f:53:62:d8: df:89:38:2f:15:5a:69:54:bd:3b:df:89:f2:d9:27: 7b:c3:2e:b2:e5:fd:dd:9a:56:b9:8c:65:d8:2c:0c: e5:ee:fb:60:f1:72:22:cf:8a:59:45:c2:b8:f7:6b: 05:31:8f:85:6f:01:43:65:4e:32:d4:05:47:de:f3: 35:ff:99:60:ba:15:31:78:16:d2:6e:53:22:6c:89: 65:ff:df:1d:35:39:f8:9e:18:11:ee:b1:2a:a4:de: e9:ef:e1:f6:69:14:8f:59:21:8e:26:00:59:77:ad: b7:62:45:5d:5f:93:c1:eb:22:02:e4:3e:c3:3f:94: a0:66:61:4a:6e:76:80:d3:06:b9:90:04:a3:fc:c6: 28:7a:3b:c5:8c:43:af:6f:c5:e5:f2:e1:20:65:5f: ba:dd:e7:49:24:f2:63:22:cc:06:b6:2a:13:41:96: 55:35:85:65:69:a8:c3:2c:e6:ae:47:c2:c6:54:1f: cf:16:b3:b7:4f:b8:02:c4:92:e9:fc:87:9b:15:cc: 0f:36:75:d4:17:ef:b0:b4:04:38:31:35:b9:54:78: f3:d7:b5:df:94:f8:86:f8:3c:64:48:c7:30:c6:29: 8d:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:CA:58:49:E4:03:D3:F8:6F:FD:6E:3B:06:AB:A9:EE:A2:D5:B2:85 X509v3 Authority Key Identifier: keyid:46:A1:37:5F:01:23:F5:33:48:F0:C4:F9:03:4D:90:40:FE:E9:D3:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C3BD/1A8108F2D97F11EB9E13594FC4F9AE02/RqE3XwEj9TNI8MT5A02QQP7p08o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RqE3XwEj9TNI8MT5A02QQP7p08o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C3BD/1A8108F2D97F11EB9E13594FC4F9AE02/RqE3XwEj9TNI8MT5A02QQP7p08o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:82:76:ad:67:7d:bc:ca:7c:69:76:a2:da:af:68:10:16:22: 1b:2a:47:05:95:bc:fa:3c:77:7b:f6:24:31:ba:db:c6:4c:b1: 24:fe:a6:fc:62:c5:f1:60:d3:cf:5c:71:0e:45:ce:68:25:f2: 4a:5d:44:97:84:7d:ac:49:95:66:15:5d:e0:9a:d9:ef:5f:10: 35:71:c0:0d:07:35:2b:02:de:2a:c3:fa:07:ee:81:81:43:32: 7f:9d:76:68:e4:34:53:65:2f:a5:ee:04:65:c7:d5:cf:71:78: 53:9a:1b:c8:5f:39:5b:10:a0:4e:19:6d:2f:d2:44:05:25:cf: 16:cf:cf:16:fb:99:5e:ee:b9:a8:b3:f0:af:a2:c1:9f:c9:54: f4:f9:a7:ee:3e:60:80:ec:81:e5:a7:e6:0e:e4:ba:76:14:39: 20:8c:c0:01:81:11:c7:14:2c:5d:99:98:99:b9:43:2c:c3:59: 38:3f:78:6b:9d:35:b5:0d:8e:14:12:24:40:dc:b8:99:f8:01: 0f:99:db:74:ea:15:91:cd:f4:1e:d8:eb:76:a8:a7:ff:9e:68: 8a:23:14:18:7b:ec:06:e9:07:5b:72:ae:99:85:35:13:d2:e3: 95:3c:99:26:9a:1b:eb:57:4e:08:77:a3:7a:44:e5:45:0e:57: 7d:50:43:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBY0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkMzQkQxMTAvBgNVBAUTKDQ2QTEzNzVGMDEyM0Y1MzM0OEYwQzRGOTAzNEQ5MDQw RkVFOUQzQ0EwHhcNMjUwNTEyMjMwNDIyWhcNMjUwNTE5MjMwNDIyWjAYMRYwFAYD VQQDEw02ODIyN2U3Ni0zZGIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0a2Z2EaNJy8gf0aVYlB5G1J+AWl9SbbBaF9TYtjfiTgvFVppVL0734ny2Sd7 wy6y5f3dmla5jGXYLAzl7vtg8XIiz4pZRcK492sFMY+FbwFDZU4y1AVH3vM1/5lg uhUxeBbSblMibIll/98dNTn4nhgR7rEqpN7p7+H2aRSPWSGOJgBZd623YkVdX5PB 6yIC5D7DP5SgZmFKbnaA0wa5kASj/MYoejvFjEOvb8Xl8uEgZV+63edJJPJjIswG tioTQZZVNYVlaajDLOauR8LGVB/PFrO3T7gCxJLp/IebFcwPNnXUF++wtAQ4MTW5 VHjz17XflPiG+DxkSMcwximNOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJLKWEnk A9P4b/1uOwarqe6i1bKFMB8GA1UdIwQYMBaAFEahN18BI/UzSPDE+QNNkED+6dPK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzNCRC8xQTgxMDhGMkQ5 N0YxMUVCOUUxMzU5NEZDNEY5QUUwMi9ScUUzWHdFajlUTkk4TVQ1QTAyUVFQN3Aw OG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JxRTNYd0VqOVROSThNVDVBMDJRUVA3cDA4by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QzNCRC8xQTgxMDhGMkQ5N0YxMUVCOUUxMzU5NEZDNEY5QUUwMi9ScUUzWHdFajlU Tkk4TVQ1QTAyUVFQN3AwOG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPgnatZ328ynxpdqLar2gQFiIbKkcFlbz6PHd79iQxutvGTLEk/qb8 YsXxYNPPXHEORc5oJfJKXUSXhH2sSZVmFV3gmtnvXxA1ccANBzUrAt4qw/oH7oGB QzJ/nXZo5DRTZS+l7gRlx9XPcXhTmhvIXzlbEKBOGW0v0kQFJc8Wz88W+5le7rmo s/CvosGfyVT0+afuPmCA7IHlp+YO5Lp2FDkgjMABgRHHFCxdmZiZuUMsw1k4P3hr nTW1DY4UEiRA3LiZ+AEPmdt06hWRzfQe2Ot2qKf/nmiKIxQYe+wG6Qdbcq6ZhTUT 0uOVPJkmmhvrV04Id6N6ROVFDld9UEOZ -----END CERTIFICATE-----Generated at Wed May 14 10:28:21 2025 by rpki-client