$ rpki-client -vvf rpki.apnic.net/member_repository/A912C8AF/EE0AEECA3E8111EB9ABD920FC4F9AE02/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.mft File: Qk4KOEPz-h9Etq8u8-4RgVxLUgk.mft (raw, json) Hash identifier: IcWig2z330MHk0OjCFOeKxttdQInVwq8GL1RNPGhgG8= Subject key identifier: 6A:6E:E1:8A:22:D1:F9:68:E7:62:B4:51:32:20:AA:58:D1:2D:B8:88 Authority key identifier: 42:4E:0A:38:43:F3:FA:1F:44:B6:AF:2E:F3:EE:11:81:5C:4B:52:09 Certificate issuer: /CN=A912C8AF/serialNumber=424E0A3843F3FA1F44B6AF2EF3EE11815C4B5209 Certificate serial: 0720 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C8AF/EE0AEECA3E8111EB9ABD920FC4F9AE02/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.mft Manifest number: 0716 Signing time: Mon 12 May 2025 19:28:26 +0000 Manifest this update: Mon 12 May 2025 19:28:25 +0000 Manifest next update: Mon 19 May 2025 19:28:25 +0000 Files and hashes: 1: Qk4KOEPz-h9Etq8u8-4RgVxLUgk.crl (hash: oFDixCrIHFnZcWl9lcdPZ8YAWr8vMKn9uFpRGVrpK5g=) 2: 510308503E8211EBA910FF57C4F9AE02.roa (hash: PjHH406K/ka7XNZ7a0h9GqbdKh0e4+H0cJO6YTJYTgA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C8AF/EE0AEECA3E8111EB9ABD920FC4F9AE02/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.crl rsync://rpki.apnic.net/member_repository/A912C8AF/EE0AEECA3E8111EB9ABD920FC4F9AE02/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 14:50:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1824 (0x720) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C8AF, serialNumber=424E0A3843F3FA1F44B6AF2EF3EE11815C4B5209 Validity Not Before: May 12 19:28:25 2025 GMT Not After : May 19 19:28:25 2025 GMT Subject: CN=68224bda-1bce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:62:47:44:90:73:44:71:85:c1:c7:e0:72:12: 4d:2d:0e:cb:7a:b7:06:5a:96:83:84:f1:48:bd:87: 37:76:44:1f:c7:14:dd:2a:b4:7c:a6:61:a9:86:cc: fb:1b:98:99:7f:40:ff:88:4e:a1:b0:8e:7f:a7:0d: 1e:1d:10:31:00:81:c6:b3:c1:18:94:01:86:06:95: 6f:2e:3a:70:93:0f:c1:9d:11:6d:a4:39:d9:5e:96: ab:49:14:7e:ce:fb:e8:b1:3b:91:61:0d:ba:5c:26: f7:2a:07:71:e8:ca:fc:1e:7a:57:93:24:c1:93:f8: 55:0f:b4:27:25:88:f3:f5:a0:d0:6d:f3:ec:6e:c5: b0:c2:1d:69:26:73:38:37:37:4d:18:9f:ed:44:d3: df:6e:e2:d1:17:49:cc:a1:e3:a9:68:a4:73:48:3d: 12:4b:4a:77:2f:43:d1:70:81:af:7a:f7:ca:19:72: 10:b4:62:71:2c:50:db:a2:c2:b1:ad:0a:d8:c4:cd: d2:74:0f:8d:7e:ff:38:c4:ea:d5:a7:53:83:83:61: 1a:f5:aa:90:b0:cf:d4:82:ef:9d:6a:dc:3e:0f:8f: da:68:34:5b:59:da:2d:9b:4a:57:51:25:f0:d9:57: 6a:5f:a8:53:bb:7f:f8:e0:88:ea:ad:b6:99:07:57: c2:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:6E:E1:8A:22:D1:F9:68:E7:62:B4:51:32:20:AA:58:D1:2D:B8:88 X509v3 Authority Key Identifier: keyid:42:4E:0A:38:43:F3:FA:1F:44:B6:AF:2E:F3:EE:11:81:5C:4B:52:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C8AF/EE0AEECA3E8111EB9ABD920FC4F9AE02/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C8AF/EE0AEECA3E8111EB9ABD920FC4F9AE02/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:3c:72:14:04:56:ba:b9:5d:d6:d6:7c:bd:f6:b7:57:e2:dd: cd:63:14:64:a1:b4:ce:11:cd:f3:5a:9e:03:f3:05:23:99:1d: ff:0d:b3:99:fd:0d:9a:29:be:0c:57:cb:44:93:88:a4:65:dc: 49:7c:6c:af:86:bd:48:b1:01:ad:62:6c:9b:15:aa:4c:9f:a2: fa:80:12:21:95:36:f4:d0:91:05:b5:1a:a5:63:3a:56:e7:d8: 29:3e:36:3e:1b:9d:c8:a1:31:ac:c4:4c:f0:3c:ab:b4:f0:ac: 32:04:24:9d:3c:0d:d9:9b:50:58:d7:4c:3b:5d:02:f2:f9:b5: 23:3d:69:cf:8c:0a:da:d6:fd:f5:9d:42:0e:6b:3d:c9:45:1f: d1:31:18:d9:fd:5a:f6:14:a4:88:54:7b:15:0e:44:4a:4e:6a: 58:b4:d5:e8:9d:7f:a8:7a:8e:0d:c7:23:c7:30:a7:85:76:6c: da:39:d2:dd:e5:84:a2:ce:fd:17:bd:16:1a:ab:a1:81:03:1d: 9f:a9:c4:a6:bd:d9:cb:11:3f:06:43:c6:92:72:31:11:10:26: 1c:66:b1:86:fb:37:2a:22:f2:87:16:c5:21:77:6f:7c:90:9b: 84:cb:71:6f:ae:24:df:95:7a:8a:4f:c9:c9:7f:73:31:6e:7d: 7f:73:c1:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICByAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkM4QUYxMTAvBgNVBAUTKDQyNEUwQTM4NDNGM0ZBMUY0NEI2QUYyRUYzRUUxMTgx NUM0QjUyMDkwHhcNMjUwNTEyMTkyODI1WhcNMjUwNTE5MTkyODI1WjAYMRYwFAYD VQQDEw02ODIyNGJkYS0xYmNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApGJHRJBzRHGFwcfgchJNLQ7LercGWpaDhPFIvYc3dkQfxxTdKrR8pmGphsz7 G5iZf0D/iE6hsI5/pw0eHRAxAIHGs8EYlAGGBpVvLjpwkw/BnRFtpDnZXparSRR+ zvvosTuRYQ26XCb3Kgdx6Mr8HnpXkyTBk/hVD7QnJYjz9aDQbfPsbsWwwh1pJnM4 NzdNGJ/tRNPfbuLRF0nMoeOpaKRzSD0SS0p3L0PRcIGvevfKGXIQtGJxLFDbosKx rQrYxM3SdA+Nfv84xOrVp1ODg2Ea9aqQsM/Ugu+datw+D4/aaDRbWdotm0pXUSXw 2VdqX6hTu3/44IjqrbaZB1fCiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGpu4Yoi 0flo52K0UTIgqljRLbiIMB8GA1UdIwQYMBaAFEJOCjhD8/ofRLavLvPuEYFcS1IJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzhBRi9FRTBBRUVDQTNF ODExMUVCOUFCRDkyMEZDNEY5QUUwMi9RazRLT0VQei1oOUV0cTh1OC00UmdWeExV Z2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL1FrNEtPRVB6LWg5RXRxOHU4LTRSZ1Z4TFVnay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QzhBRi9FRTBBRUVDQTNFODExMUVCOUFCRDkyMEZDNEY5QUUwMi9RazRLT0VQei1o OUV0cTh1OC00UmdWeExVZ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSPHIUBFa6uV3W1ny99rdX4t3NYxRkobTOEc3zWp4D8wUjmR3/DbOZ /Q2aKb4MV8tEk4ikZdxJfGyvhr1IsQGtYmybFapMn6L6gBIhlTb00JEFtRqlYzpW 59gpPjY+G53IoTGsxEzwPKu08KwyBCSdPA3Zm1BY10w7XQLy+bUjPWnPjAra1v31 nUIOaz3JRR/RMRjZ/Vr2FKSIVHsVDkRKTmpYtNXonX+oeo4NxyPHMKeFdmzaOdLd 5YSizv0XvRYaq6GBAx2fqcSmvdnLET8GQ8aScjERECYcZrGG+zcqIvKHFsUhd298 kJuEy3FvriTflXqKT8nJf3Mxbn1/c8GB -----END CERTIFICATE-----Generated at Mon May 12 22:44:26 2025 by rpki-client