$ rpki-client -vvf rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.mft File: mqwVb6kYtDBXQdrp1duikzdGzoc.mft (raw, json) Hash identifier: lqGfbBdUW7+tuaveISA4LF9s38fiyq7mJsHoDfdk4nY= Subject key identifier: 10:5C:72:D8:30:EB:47:67:EC:3A:D4:BF:3A:DB:CA:69:F1:20:8C:49 Authority key identifier: 9A:AC:15:6F:A9:18:B4:30:57:41:DA:E9:D5:DB:A2:93:37:46:CE:87 Certificate issuer: /CN=A9133CD2/serialNumber=9AAC156FA918B4305741DAE9D5DBA2933746CE87 Certificate serial: 01B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mqwVb6kYtDBXQdrp1duikzdGzoc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.mft Manifest number: 01AC Signing time: Sat 03 May 2025 02:47:59 +0000 Manifest this update: Sat 03 May 2025 02:47:58 +0000 Manifest next update: Sat 10 May 2025 02:47:58 +0000 Files and hashes: 1: mqwVb6kYtDBXQdrp1duikzdGzoc.crl (hash: PHFemGdLlcbtneNKM3zKhNBpIvevDA1z8to64kPr0xg=) 2: A46B24207D3811EF8EE86E6BC4F9AE02.roa (hash: q4NWMO7W6lRpux2uN6ng9OrQyUZmWgx1UYeF7qqy2kQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.crl rsync://rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mqwVb6kYtDBXQdrp1duikzdGzoc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 02:47:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 439 (0x1b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9133CD2, serialNumber=9AAC156FA918B4305741DAE9D5DBA2933746CE87 Validity Not Before: May 3 02:47:58 2025 GMT Not After : May 10 02:47:58 2025 GMT Subject: CN=681583df-e322 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:6b:5d:31:fa:aa:b2:63:ef:06:d4:9e:14:c5: dc:dc:47:f3:94:b0:8b:5b:14:3b:ae:3b:c0:c6:24: 75:d8:3e:12:78:ca:34:77:23:c8:16:9a:0a:28:e9: 6b:3a:56:fc:48:83:62:a8:5f:ea:7d:f9:1a:5f:f6: 44:e0:60:bc:fb:e0:4e:3e:3f:26:5d:81:63:0a:7e: 3b:89:c0:7f:ec:ac:2e:be:f2:d0:3e:8e:e3:fc:5a: e7:6f:00:f6:c2:b5:50:3f:6b:38:a2:95:99:cd:6a: 30:f4:e0:76:c2:6b:9d:c9:25:04:50:4a:47:60:b7: be:52:f9:34:3c:7f:17:43:d5:88:9c:f0:14:87:e8: 99:c0:e6:5d:32:94:bc:41:f9:33:18:c3:70:fb:a2: bd:7e:04:e2:04:75:0b:dc:a3:4a:89:0f:b7:05:a1: c6:7b:86:1f:e2:fb:71:21:14:1f:10:26:33:37:52: a7:e3:c4:65:f0:26:ec:37:c4:87:c6:85:f7:b2:8c: 95:c3:a8:22:d4:03:c2:ee:5f:20:66:7f:49:50:61: b3:dc:94:bf:ba:48:80:2f:5b:d5:4a:b5:fe:5c:8f: e0:00:c8:3a:7b:e4:92:85:06:5b:e5:1a:94:e3:a6: a5:9d:67:37:02:72:18:67:11:02:ad:b7:d4:57:3e: de:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:5C:72:D8:30:EB:47:67:EC:3A:D4:BF:3A:DB:CA:69:F1:20:8C:49 X509v3 Authority Key Identifier: keyid:9A:AC:15:6F:A9:18:B4:30:57:41:DA:E9:D5:DB:A2:93:37:46:CE:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mqwVb6kYtDBXQdrp1duikzdGzoc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:aa:92:ff:92:49:cd:e7:58:43:d0:6c:1d:50:20:42:8d:47: 07:a6:7e:b0:e4:08:10:63:47:11:d3:81:12:9d:44:1e:44:dc: ee:a1:64:75:8a:18:7d:a8:a8:ea:c9:67:f3:98:9c:c9:65:92: 1b:de:93:0e:a7:47:05:2b:46:7e:4b:c5:2e:70:27:ab:0f:f1: 64:06:90:00:9a:6b:b3:7a:54:85:1e:5b:96:b7:fa:3d:39:bc: 68:59:22:0f:a9:c0:0d:9d:05:73:38:fb:03:e3:83:d0:16:16: 8f:37:a8:6d:ec:75:53:fe:63:0d:f1:73:63:0c:88:71:b5:29: 46:ea:dc:22:be:6c:4e:00:2e:bc:f7:24:3f:b4:7e:3b:db:73: 6b:00:ad:06:07:d2:e2:3d:61:46:99:c8:b7:b7:af:07:8d:11: 99:f7:56:70:bb:a1:ce:bc:dc:5e:a7:f7:00:d0:f9:13:29:d0: ec:3d:89:f0:17:df:ef:b8:bb:ba:f0:27:4b:db:b4:3a:f8:51: 05:9a:c3:b9:62:d1:b6:39:dd:19:26:cc:3b:90:7b:25:54:c6: b9:c5:75:44:e4:97:29:cd:55:cc:a4:5c:fe:ca:14:16:13:a5: 92:4b:8a:15:ae:f1:e9:2a:78:3e:2a:1a:85:33:fe:b7:32:fd: b5:24:69:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzNDRDIxMTAvBgNVBAUTKDlBQUMxNTZGQTkxOEI0MzA1NzQxREFFOUQ1REJBMjkz Mzc0NkNFODcwHhcNMjUwNTAzMDI0NzU4WhcNMjUwNTEwMDI0NzU4WjAYMRYwFAYD VQQDEw02ODE1ODNkZi1lMzIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApGtdMfqqsmPvBtSeFMXc3EfzlLCLWxQ7rjvAxiR12D4SeMo0dyPIFpoKKOlr Olb8SINiqF/qffkaX/ZE4GC8++BOPj8mXYFjCn47icB/7KwuvvLQPo7j/FrnbwD2 wrVQP2s4opWZzWow9OB2wmudySUEUEpHYLe+Uvk0PH8XQ9WInPAUh+iZwOZdMpS8 QfkzGMNw+6K9fgTiBHUL3KNKiQ+3BaHGe4Yf4vtxIRQfECYzN1Kn48Rl8CbsN8SH xoX3soyVw6gi1APC7l8gZn9JUGGz3JS/ukiAL1vVSrX+XI/gAMg6e+SShQZb5RqU 46alnWc3AnIYZxECrbfUVz7ehwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBBcctgw 60dn7DrUvzrbymnxIIxJMB8GA1UdIwQYMBaAFJqsFW+pGLQwV0Ha6dXbopM3Rs6H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzM0NEMi80NUYzQUE3RUFD MTYxMUVEQjk0N0I4NjBDNEY5QUUwMi9tcXdWYjZrWXREQlhRZHJwMWR1aWt6ZEd6 b2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21xd1ZiNmtZdERCWFFkcnAxZHVpa3pkR3pvYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz M0NEMi80NUYzQUE3RUFDMTYxMUVEQjk0N0I4NjBDNEY5QUUwMi9tcXdWYjZrWXRE QlhRZHJwMWR1aWt6ZEd6b2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBFqpL/kknN51hD0GwdUCBCjUcHpn6w5AgQY0cR04ESnUQeRNzuoWR1 ihh9qKjqyWfzmJzJZZIb3pMOp0cFK0Z+S8UucCerD/FkBpAAmmuzelSFHluWt/o9 ObxoWSIPqcANnQVzOPsD44PQFhaPN6ht7HVT/mMN8XNjDIhxtSlG6twivmxOAC68 9yQ/tH4723NrAK0GB9LiPWFGmci3t68HjRGZ91Zwu6HOvNxep/cA0PkTKdDsPYnw F9/vuLu68CdL27Q6+FEFmsO5YtG2Od0ZJsw7kHslVMa5xXVE5JcpzVXMpFz+yhQW E6WSS4oVrvHpKng+KhqFM/63Mv21JGnS -----END CERTIFICATE-----Generated at Mon May 5 01:59:04 2025 by rpki-client