$ rpki-client -vvf rpki.apnic.net/member_repository/A913132A/B11648D81DA711E28B6E86A108B02CD2/cQnPztTUjL9WSOoHl6fHNH1o_xI.mft File: cQnPztTUjL9WSOoHl6fHNH1o_xI.mft (raw, json) Hash identifier: S/kEJfurtwV4KUJ8VdgUc4XHQNIq+Bf2B7r/qwoEKuQ= Subject key identifier: B3:D4:3F:39:FF:8E:C7:80:E1:09:13:1D:72:87:26:06:95:7B:2E:A6 Authority key identifier: 71:09:CF:CE:D4:D4:8C:BF:56:48:EA:07:97:A7:C7:34:7D:68:FF:12 Certificate issuer: /CN=A913132A/serialNumber=7109CFCED4D48CBF5648EA0797A7C7347D68FF12 Certificate serial: 3479 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cQnPztTUjL9WSOoHl6fHNH1o_xI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913132A/B11648D81DA711E28B6E86A108B02CD2/cQnPztTUjL9WSOoHl6fHNH1o_xI.mft Manifest number: 3479 Signing time: Mon 12 May 2025 15:12:07 +0000 Manifest this update: Mon 12 May 2025 15:12:06 +0000 Manifest next update: Mon 19 May 2025 15:12:06 +0000 Files and hashes: 1: cQnPztTUjL9WSOoHl6fHNH1o_xI.crl (hash: zJITG47OfzWs4EwEjpaZl+KkAR9WfQiFxcUyvXDo+T8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913132A/B11648D81DA711E28B6E86A108B02CD2/cQnPztTUjL9WSOoHl6fHNH1o_xI.crl rsync://rpki.apnic.net/member_repository/A913132A/B11648D81DA711E28B6E86A108B02CD2/cQnPztTUjL9WSOoHl6fHNH1o_xI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cQnPztTUjL9WSOoHl6fHNH1o_xI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 15:12:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13433 (0x3479) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913132A, serialNumber=7109CFCED4D48CBF5648EA0797A7C7347D68FF12 Validity Not Before: May 12 15:12:06 2025 GMT Not After : May 19 15:12:06 2025 GMT Subject: CN=68220fc7-3a40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:fc:0c:b8:40:cc:34:8e:33:b9:58:5e:73:43: 01:cf:de:d9:79:7b:ab:db:6c:08:35:2c:aa:f1:9c: e3:47:af:b8:47:66:e2:0c:fc:dd:b6:2f:34:56:09: d3:a7:89:4f:21:f2:f3:90:9a:cc:dc:88:4d:b8:ea: 00:dd:63:01:20:56:07:4e:4e:ff:93:41:42:5e:8b: 9d:e3:f9:87:05:ea:28:df:db:f6:0b:91:1e:69:73: e8:04:89:b3:26:fb:0b:3f:c3:85:d7:d7:42:02:e5: 16:48:5a:66:30:03:83:ec:c9:46:a8:43:68:e1:70: ef:e8:0f:b1:e9:ad:e8:8b:9b:46:cc:d3:cb:56:74: 95:12:8c:82:22:af:11:c2:b1:a5:b7:77:48:f6:04: 89:72:45:51:5e:83:25:63:84:f3:99:fb:a8:50:b4: 9b:d0:0f:2c:d4:2b:64:36:16:38:c5:cb:ed:72:ab: d6:34:d7:a1:14:5b:e5:e2:70:c6:4e:f7:56:9b:73: 51:a3:ad:7e:3a:42:48:69:1b:92:67:33:8c:bf:3e: 2d:a1:1b:bf:c9:72:69:f0:6e:08:7b:8e:48:b9:d5: c2:65:b1:16:0c:d6:b4:b6:58:07:ad:50:5d:31:48: 80:fe:c8:71:7c:05:26:38:cb:34:c5:ea:20:51:1f: 67:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:D4:3F:39:FF:8E:C7:80:E1:09:13:1D:72:87:26:06:95:7B:2E:A6 X509v3 Authority Key Identifier: keyid:71:09:CF:CE:D4:D4:8C:BF:56:48:EA:07:97:A7:C7:34:7D:68:FF:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913132A/B11648D81DA711E28B6E86A108B02CD2/cQnPztTUjL9WSOoHl6fHNH1o_xI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cQnPztTUjL9WSOoHl6fHNH1o_xI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913132A/B11648D81DA711E28B6E86A108B02CD2/cQnPztTUjL9WSOoHl6fHNH1o_xI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:26:3d:f0:2a:23:c3:58:68:9d:ce:ce:a4:f8:8f:71:39:2f: 5f:cd:39:9b:c7:24:ac:0b:d0:60:63:bb:c0:4f:cf:1a:28:94: 9f:90:2e:81:cb:be:df:41:ee:11:63:c0:4d:4d:b3:c9:72:3c: 48:b4:9f:e5:7a:84:6a:0f:0b:cd:0f:68:a3:cb:f4:fd:f5:7a: 3d:f3:1c:6c:ff:7d:dd:5e:36:bc:4d:ff:c3:36:dd:97:38:b7: 21:0f:3d:25:e7:c3:a0:40:bc:96:e3:d9:c3:7d:88:03:d3:de: 7a:b1:76:15:f0:f5:a4:a3:0e:32:88:ef:65:92:72:16:7f:0b: a6:4b:ce:05:fd:75:48:21:c6:3a:d7:1d:b2:d9:20:87:ad:37: 6c:53:f3:68:67:39:8b:2d:db:34:fc:de:18:e6:88:3d:4a:32: 72:22:f4:78:ba:a6:1b:ae:c7:c3:65:f8:55:2d:a2:2e:0a:b3: 18:ec:dc:b3:7b:c9:6b:79:57:e6:24:dd:95:85:65:57:30:c5: 87:57:cd:52:c4:c7:38:69:ca:cc:14:ab:36:0f:09:cb:cc:0c: 86:1e:a4:7a:e9:dd:90:cf:df:b2:e5:75:60:63:50:8c:96:74: 23:9a:68:b5:e9:b2:71:98:53:85:13:48:a1:d2:5b:d9:53:64: b5:86:7b:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNHkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzEzMkExMTAvBgNVBAUTKDcxMDlDRkNFRDRENDhDQkY1NjQ4RUEwNzk3QTdDNzM0 N0Q2OEZGMTIwHhcNMjUwNTEyMTUxMjA2WhcNMjUwNTE5MTUxMjA2WjAYMRYwFAYD VQQDEw02ODIyMGZjNy0zYTQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsvwMuEDMNI4zuVhec0MBz97ZeXur22wINSyq8ZzjR6+4R2biDPzdti80VgnT p4lPIfLzkJrM3IhNuOoA3WMBIFYHTk7/k0FCXoud4/mHBeoo39v2C5EeaXPoBImz JvsLP8OF19dCAuUWSFpmMAOD7MlGqENo4XDv6A+x6a3oi5tGzNPLVnSVEoyCIq8R wrGlt3dI9gSJckVRXoMlY4TzmfuoULSb0A8s1CtkNhY4xcvtcqvWNNehFFvl4nDG TvdWm3NRo61+OkJIaRuSZzOMvz4toRu/yXJp8G4Ie45IudXCZbEWDNa0tlgHrVBd MUiA/shxfAUmOMs0xeogUR9nQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLPUPzn/ jseA4QkTHXKHJgaVey6mMB8GA1UdIwQYMBaAFHEJz87U1Iy/VkjqB5enxzR9aP8S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTMyQS9CMTE2NDhEODFE QTcxMUUyOEI2RTg2QTEwOEIwMkNEMi9jUW5QenRUVWpMOVdTT29IbDZmSE5IMW9f eEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NRblB6dFRVakw5V1NPb0hsNmZITkgxb194SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTMyQS9CMTE2NDhEODFEQTcxMUUyOEI2RTg2QTEwOEIwMkNEMi9jUW5QenRUVWpM OVdTT29IbDZmSE5IMW9feEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0Jj3wKiPDWGidzs6k+I9xOS9fzTmbxySsC9BgY7vAT88aKJSfkC6B y77fQe4RY8BNTbPJcjxItJ/leoRqDwvND2ijy/T99Xo98xxs/33dXja8Tf/DNt2X OLchDz0l58OgQLyW49nDfYgD0956sXYV8PWkow4yiO9lknIWfwumS84F/XVIIcY6 1x2y2SCHrTdsU/NoZzmLLds0/N4Y5og9SjJyIvR4uqYbrsfDZfhVLaIuCrMY7Nyz e8lreVfmJN2VhWVXMMWHV81SxMc4acrMFKs2DwnLzAyGHqR66d2Qz9+y5XVgY1CM lnQjmmi16bJxmFOFE0ih0lvZU2S1hnt1 -----END CERTIFICATE-----Generated at Wed May 14 01:32:09 2025 by rpki-client