$ rpki-client -vvf rpki.apnic.net/member_repository/A9132C09/CD6D520256C511EEBED32E0BC4F9AE02/Q5KdkW3Jyc40Y_-RWMy-_p8YLDs.mft File: Q5KdkW3Jyc40Y_-RWMy-_p8YLDs.mft (raw, json) Hash identifier: BxomvOtbWX9YhxyvcEb15UQRpQJH72LnmfTr7GAcoFc= Subject key identifier: C7:89:27:B5:F4:F4:F6:EC:77:15:C1:5B:C0:21:38:8B:C4:34:0F:61 Authority key identifier: 43:92:9D:91:6D:C9:C9:CE:34:63:FF:91:58:CC:BE:FE:9F:18:2C:3B Certificate issuer: /CN=A9132C09/serialNumber=43929D916DC9C9CE3463FF9158CCBEFE9F182C3B Certificate serial: 0134 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q5KdkW3Jyc40Y_-RWMy-_p8YLDs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9132C09/CD6D520256C511EEBED32E0BC4F9AE02/Q5KdkW3Jyc40Y_-RWMy-_p8YLDs.mft Manifest number: 0134 Signing time: Tue 13 May 2025 03:40:18 +0000 Manifest this update: Tue 13 May 2025 03:40:18 +0000 Manifest next update: Tue 20 May 2025 03:40:18 +0000 Files and hashes: 1: Q5KdkW3Jyc40Y_-RWMy-_p8YLDs.crl (hash: D1I34qjZ36af/th/oINi0IdxjV79GoP8nZYb51j81Rc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9132C09/CD6D520256C511EEBED32E0BC4F9AE02/Q5KdkW3Jyc40Y_-RWMy-_p8YLDs.crl rsync://rpki.apnic.net/member_repository/A9132C09/CD6D520256C511EEBED32E0BC4F9AE02/Q5KdkW3Jyc40Y_-RWMy-_p8YLDs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q5KdkW3Jyc40Y_-RWMy-_p8YLDs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 03:40:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 308 (0x134) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9132C09, serialNumber=43929D916DC9C9CE3463FF9158CCBEFE9F182C3B Validity Not Before: May 13 03:40:18 2025 GMT Not After : May 20 03:40:18 2025 GMT Subject: CN=6822bf22-ab1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:46:fe:fe:9b:67:ab:e7:79:dd:58:90:bf:e6: ba:38:4f:66:9e:b3:28:99:c3:d6:ec:96:5c:29:8a: 8c:8a:55:c3:8b:86:a0:e7:c7:61:f9:b8:15:86:7e: ab:e1:75:85:fd:2b:2d:a0:08:84:18:b7:0e:9a:59: af:d9:3d:ba:e5:1f:ff:63:77:a1:ad:0a:f5:55:8d: 0c:6e:4b:42:0f:55:6e:a9:d8:d8:dc:e5:75:c9:a7: e3:8f:d6:9e:2b:f3:db:bc:a7:f8:20:7c:02:a3:50: 82:4d:f7:b1:8c:8a:8f:08:f1:71:d7:44:34:30:f5: 44:39:51:e1:b3:ce:58:28:d8:7c:cf:20:be:6b:bf: c6:63:42:cc:e1:5d:17:b0:33:94:a0:dc:ff:d1:c7: 9f:c9:cb:ed:85:45:e4:fa:e0:19:96:34:d6:7b:d4: 11:69:ed:89:79:ea:b0:a4:32:06:16:24:f6:54:6f: 78:87:d4:f2:06:63:3c:84:fe:7b:79:65:11:d0:9b: b3:10:29:61:d0:ad:e2:02:6b:ff:d1:20:d0:85:41: 52:44:09:f6:5e:00:9a:54:d4:5e:2f:d0:1d:b2:02: a3:b2:ea:04:17:75:d4:20:8e:40:90:4d:cf:af:44: a7:8e:b5:df:aa:07:63:0b:92:de:0c:5f:31:47:09: 52:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:89:27:B5:F4:F4:F6:EC:77:15:C1:5B:C0:21:38:8B:C4:34:0F:61 X509v3 Authority Key Identifier: keyid:43:92:9D:91:6D:C9:C9:CE:34:63:FF:91:58:CC:BE:FE:9F:18:2C:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9132C09/CD6D520256C511EEBED32E0BC4F9AE02/Q5KdkW3Jyc40Y_-RWMy-_p8YLDs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q5KdkW3Jyc40Y_-RWMy-_p8YLDs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132C09/CD6D520256C511EEBED32E0BC4F9AE02/Q5KdkW3Jyc40Y_-RWMy-_p8YLDs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:4a:3b:c7:90:7a:ec:ae:31:9f:ad:57:cd:f8:bd:ea:58:57: 3c:95:cb:d7:f0:a7:4f:dd:83:c1:5d:dd:cf:d2:f5:72:6b:6d: ec:fd:45:7f:fe:81:70:83:12:8e:87:2f:71:e8:0b:31:d6:88: aa:07:45:a6:b2:9c:38:7d:29:3e:3d:36:1b:8e:84:27:71:6b: c0:32:8c:54:73:be:86:58:d6:c7:87:f1:b9:ac:36:be:ec:b8: 25:82:c7:75:b0:cb:bf:c2:89:22:73:74:d1:83:84:01:3a:bd: 19:37:b8:63:28:18:99:64:89:07:c9:63:0c:06:6f:f8:a4:a4: 12:bd:10:06:90:5d:f9:db:93:f3:ca:0b:ac:bf:5e:86:d1:86: 67:6c:de:48:b8:85:8a:ea:e6:22:88:73:ab:2b:64:8c:12:ca: ab:a0:a9:30:34:e8:29:b1:8b:82:b5:b9:85:b7:43:0d:4e:3e: a5:c8:63:04:2d:51:3e:33:94:ec:55:26:a0:8c:96:a2:31:c8: 9e:5b:21:17:0a:94:9f:2e:c6:3d:75:72:14:b7:a5:1c:6a:3b: 45:db:5d:98:b8:a3:c7:76:12:d8:7b:87:f9:9a:b3:35:50:28: 2e:e2:ba:f6:54:3b:cb:2e:77:1e:4d:70:61:aa:e7:47:dc:74: fe:72:91:3e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzJDMDkxMTAvBgNVBAUTKDQzOTI5RDkxNkRDOUM5Q0UzNDYzRkY5MTU4Q0NCRUZF OUYxODJDM0IwHhcNMjUwNTEzMDM0MDE4WhcNMjUwNTIwMDM0MDE4WjAYMRYwFAYD VQQDEw02ODIyYmYyMi1hYjFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAykb+/ptnq+d53ViQv+a6OE9mnrMomcPW7JZcKYqMilXDi4ag58dh+bgVhn6r 4XWF/SstoAiEGLcOmlmv2T265R//Y3ehrQr1VY0MbktCD1VuqdjY3OV1yafjj9ae K/PbvKf4IHwCo1CCTfexjIqPCPFx10Q0MPVEOVHhs85YKNh8zyC+a7/GY0LM4V0X sDOUoNz/0cefycvthUXk+uAZljTWe9QRae2JeeqwpDIGFiT2VG94h9TyBmM8hP57 eWUR0JuzEClh0K3iAmv/0SDQhUFSRAn2XgCaVNReL9AdsgKjsuoEF3XUII5AkE3P r0SnjrXfqgdjC5LeDF8xRwlSswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMeJJ7X0 9PbsdxXBW8AhOIvENA9hMB8GA1UdIwQYMBaAFEOSnZFtycnONGP/kVjMvv6fGCw7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMkMwOS9DRDZENTIwMjU2 QzUxMUVFQkVEMzJFMEJDNEY5QUUwMi9RNUtka1czSnljNDBZXy1SV015LV9wOFlM RHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1E1S2RrVzNKeWM0MFlfLVJXTXktX3A4WUxEcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MkMwOS9DRDZENTIwMjU2QzUxMUVFQkVEMzJFMEJDNEY5QUUwMi9RNUtka1czSnlj NDBZXy1SV015LV9wOFlMRHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCqSjvHkHrsrjGfrVfN+L3qWFc8lcvX8KdP3YPBXd3P0vVya23s/UV/ /oFwgxKOhy9x6Asx1oiqB0Wmspw4fSk+PTYbjoQncWvAMoxUc76GWNbHh/G5rDa+ 7Lglgsd1sMu/wokic3TRg4QBOr0ZN7hjKBiZZIkHyWMMBm/4pKQSvRAGkF3525Pz ygusv16G0YZnbN5IuIWK6uYiiHOrK2SMEsqroKkwNOgpsYuCtbmFt0MNTj6lyGME LVE+M5TsVSagjJaiMcieWyEXCpSfLsY9dXIUt6UcajtF212YuKPHdhLYe4f5mrM1 UCgu4rr2VDvLLnceTXBhqudH3HT+cpE+ -----END CERTIFICATE-----Generated at Wed May 14 23:57:38 2025 by rpki-client