$ rpki-client -vvf rpki.apnic.net/member_repository/A9130416/CA6D58B4B67411EDBEB60F39C4F9AE02/mQaocNrdFPbUuobyzCweXkcN6LI.mft File: mQaocNrdFPbUuobyzCweXkcN6LI.mft (raw, json) Hash identifier: eLKEfsvyWvTokuu8gLxUQXnGC051D1HtRXawuoJ2x2o= Subject key identifier: 8C:14:AB:DF:C0:05:E5:89:71:7B:05:58:44:85:5D:EC:6A:47:4B:E9 Authority key identifier: 99:06:A8:70:DA:DD:14:F6:D4:BA:86:F2:CC:2C:1E:5E:47:0D:E8:B2 Certificate issuer: /CN=A9130416/serialNumber=9906A870DADD14F6D4BA86F2CC2C1E5E470DE8B2 Certificate serial: 01BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mQaocNrdFPbUuobyzCweXkcN6LI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130416/CA6D58B4B67411EDBEB60F39C4F9AE02/mQaocNrdFPbUuobyzCweXkcN6LI.mft Manifest number: 01AB Signing time: Wed 07 May 2025 02:37:00 +0000 Manifest this update: Wed 07 May 2025 02:36:59 +0000 Manifest next update: Wed 14 May 2025 02:36:59 +0000 Files and hashes: 1: mQaocNrdFPbUuobyzCweXkcN6LI.crl (hash: wRM3woeuAzL5DvhmSOrn1e15Fae70FwbuMz2B9z4/ng=) 2: B24758AE772311EFA5510A63C4F9AE02.roa (hash: 7G0BMVUvyd16Cn1kPop9OQuW3GDQmIvZTooAvUo69iU=) 3: 62F0214E4E4F11EEB53AAA72C4F9AE02.roa (hash: nyG124tiVkImPGU3rqTUWRaCP3DJ/CIWqzndBgQMaZU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130416/CA6D58B4B67411EDBEB60F39C4F9AE02/mQaocNrdFPbUuobyzCweXkcN6LI.crl rsync://rpki.apnic.net/member_repository/A9130416/CA6D58B4B67411EDBEB60F39C4F9AE02/mQaocNrdFPbUuobyzCweXkcN6LI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mQaocNrdFPbUuobyzCweXkcN6LI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 May 2025 02:36:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 442 (0x1ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130416, serialNumber=9906A870DADD14F6D4BA86F2CC2C1E5E470DE8B2 Validity Not Before: May 7 02:36:59 2025 GMT Not After : May 14 02:36:59 2025 GMT Subject: CN=681ac74b-8d5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:4f:dd:4b:a9:f3:5c:47:aa:fd:c8:dd:71:41: eb:f6:c6:db:51:4a:d9:15:cf:c5:a4:4d:44:a5:4c: 43:a8:38:c6:ef:f0:d7:da:19:05:66:ac:ca:4b:0f: 2d:6f:50:4c:ef:57:b9:62:12:3b:3e:46:ad:6e:07: 64:39:53:93:8d:e1:35:17:fb:d3:0a:f5:e5:87:e7: 92:75:09:e2:4b:dd:54:65:f0:54:e3:c4:8f:f1:d5: 96:e9:94:27:26:9a:89:ca:ba:c7:40:53:e2:ef:b6: 0b:fc:77:98:ba:44:83:46:2a:8b:13:48:38:8d:bb: 9d:29:8d:73:e5:4b:ae:a7:69:7f:e0:b2:34:7f:c0: e8:4e:2a:bf:f5:73:b3:1e:5c:55:b4:43:a0:13:1d: c2:92:ee:9f:68:0e:2e:d2:7e:b1:5a:7e:8e:50:8d: 16:80:16:60:fc:90:f9:b2:68:34:0f:2a:8a:99:c2: 34:fe:71:d1:e2:6a:32:65:04:00:c4:0e:e0:4f:31: 83:d2:55:5a:99:7a:de:97:98:f1:a7:24:39:d2:85: 84:b9:76:4b:27:56:df:ac:99:80:50:e2:9d:d0:70: 91:47:e6:8d:86:28:1f:91:9a:e7:f8:0e:83:b7:29: bf:dc:40:19:ed:6a:df:1b:a1:93:85:eb:dc:48:c4: bb:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:14:AB:DF:C0:05:E5:89:71:7B:05:58:44:85:5D:EC:6A:47:4B:E9 X509v3 Authority Key Identifier: keyid:99:06:A8:70:DA:DD:14:F6:D4:BA:86:F2:CC:2C:1E:5E:47:0D:E8:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130416/CA6D58B4B67411EDBEB60F39C4F9AE02/mQaocNrdFPbUuobyzCweXkcN6LI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mQaocNrdFPbUuobyzCweXkcN6LI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130416/CA6D58B4B67411EDBEB60F39C4F9AE02/mQaocNrdFPbUuobyzCweXkcN6LI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:55:30:5f:f9:65:30:77:0d:44:c8:22:db:3b:6d:e2:f2:ef: 9c:3a:2c:62:22:4e:9b:cf:7a:d9:74:5c:e5:01:fc:71:b4:03: 99:02:52:99:24:1f:00:54:13:9c:81:95:16:f9:f4:74:9d:7f: 26:e1:bb:f4:4d:8c:d1:13:9c:1c:0b:28:f0:e8:cd:f4:72:7a: 94:89:35:0e:f6:d7:0a:0c:8a:e5:02:6d:27:f2:67:45:7a:9f: 0b:2a:81:8e:4a:00:a6:1e:b7:91:f2:dc:ff:5e:40:c6:65:7d: 95:35:f0:25:4e:b3:02:84:fc:47:cc:83:f4:78:45:a4:90:df: 3a:8d:4e:77:fb:b0:15:4c:88:3c:d6:cc:77:76:d6:e6:45:dc: 3e:d4:fc:3d:48:70:82:4d:10:9f:d5:f5:5d:d3:ce:30:d7:ec: 16:f0:ce:de:cf:af:90:ca:6f:79:5f:d4:88:0a:d7:fc:67:03: 01:fd:cc:1d:5e:ed:6c:7c:ae:20:62:2b:1d:e7:86:3d:80:37: 49:7f:5d:af:28:08:f5:99:70:98:0a:70:50:fb:d1:3e:be:5f: fd:1f:1f:24:94:7a:fb:68:69:c4:a0:dd:e8:71:7b:91:11:14: 60:9c:ee:ec:5a:71:09:aa:04:73:bb:fd:d5:d3:c9:22:8e:ee: d0:8f:45:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzA0MTYxMTAvBgNVBAUTKDk5MDZBODcwREFERDE0RjZENEJBODZGMkNDMkMxRTVF NDcwREU4QjIwHhcNMjUwNTA3MDIzNjU5WhcNMjUwNTE0MDIzNjU5WjAYMRYwFAYD VQQDEw02ODFhYzc0Yi04ZDVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwE/dS6nzXEeq/cjdcUHr9sbbUUrZFc/FpE1EpUxDqDjG7/DX2hkFZqzKSw8t b1BM71e5YhI7PkatbgdkOVOTjeE1F/vTCvXlh+eSdQniS91UZfBU48SP8dWW6ZQn JpqJyrrHQFPi77YL/HeYukSDRiqLE0g4jbudKY1z5Uuup2l/4LI0f8DoTiq/9XOz HlxVtEOgEx3Cku6faA4u0n6xWn6OUI0WgBZg/JD5smg0DyqKmcI0/nHR4moyZQQA xA7gTzGD0lVamXrel5jxpyQ50oWEuXZLJ1bfrJmAUOKd0HCRR+aNhigfkZrn+A6D tym/3EAZ7WrfG6GThevcSMS7PwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIwUq9/A BeWJcXsFWESFXexqR0vpMB8GA1UdIwQYMBaAFJkGqHDa3RT21LqG8swsHl5HDeiy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDQxNi9DQTZENThCNEI2 NzQxMUVEQkVCNjBGMzlDNEY5QUUwMi9tUWFvY05yZEZQYlV1b2J5ekN3ZVhrY042 TEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21RYW9jTnJkRlBiVXVvYnl6Q3dlWGtjTjZMSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDQxNi9DQTZENThCNEI2NzQxMUVEQkVCNjBGMzlDNEY5QUUwMi9tUWFvY05yZEZQ YlV1b2J5ekN3ZVhrY042TEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABVTBf+WUwdw1EyCLbO23i8u+cOixiIk6bz3rZdFzlAfxxtAOZAlKZ JB8AVBOcgZUW+fR0nX8m4bv0TYzRE5wcCyjw6M30cnqUiTUO9tcKDIrlAm0n8mdF ep8LKoGOSgCmHreR8tz/XkDGZX2VNfAlTrMChPxHzIP0eEWkkN86jU53+7AVTIg8 1sx3dtbmRdw+1Pw9SHCCTRCf1fVd084w1+wW8M7ez6+Qym95X9SICtf8ZwMB/cwd Xu1sfK4gYisd54Y9gDdJf12vKAj1mXCYCnBQ+9E+vl/9Hx8klHr7aGnEoN3ocXuR ERRgnO7sWnEJqgRzu/3V08kiju7Qj0Um -----END CERTIFICATE-----Generated at Thu May 8 07:34:18 2025 by rpki-client