$ rpki-client -vvf rpki.apnic.net/member_repository/A9136CB3/A5FD84F2571B11EEB418AB3EC4F9AE02/q0Xb_DVXfyfJn89Ao5s4azI1Cto.mft File: q0Xb_DVXfyfJn89Ao5s4azI1Cto.mft (raw, json) Hash identifier: yIvnicUANnN1zhpa7O2UAXQzgp0sIcNEhaVasLGGXR0= Subject key identifier: AA:1C:0B:45:74:F4:A8:13:F5:CD:16:F7:7A:EE:A0:16:5C:28:06:8C Authority key identifier: AB:45:DB:FC:35:57:7F:27:C9:9F:CF:40:A3:9B:38:6B:32:35:0A:DA Certificate issuer: /CN=A9136CB3/serialNumber=AB45DBFC35577F27C99FCF40A39B386B32350ADA Certificate serial: 0143 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q0Xb_DVXfyfJn89Ao5s4azI1Cto.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136CB3/A5FD84F2571B11EEB418AB3EC4F9AE02/q0Xb_DVXfyfJn89Ao5s4azI1Cto.mft Manifest number: 013B Signing time: Tue 13 May 2025 03:40:32 +0000 Manifest this update: Tue 13 May 2025 03:40:32 +0000 Manifest next update: Tue 20 May 2025 03:40:32 +0000 Files and hashes: 1: q0Xb_DVXfyfJn89Ao5s4azI1Cto.crl (hash: Oaczb2/gpMYcUO506QawUdwLvURPbFGXFpba4T0hUl0=) 2: B210BF28D1BF11EF95281B83C4F9AE02.roa (hash: ZnF+YTP2pRwfo0eUOGSGb1Y71fB7TRDK5QfyiO+cZbM=) 3: 20DA8B7E571D11EEAA430244C4F9AE02.roa (hash: dRKaSZEwPfTmZ9fnNDPlpvp0Ujh9QZMuM+RN8ZLvFSw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136CB3/A5FD84F2571B11EEB418AB3EC4F9AE02/q0Xb_DVXfyfJn89Ao5s4azI1Cto.crl rsync://rpki.apnic.net/member_repository/A9136CB3/A5FD84F2571B11EEB418AB3EC4F9AE02/q0Xb_DVXfyfJn89Ao5s4azI1Cto.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q0Xb_DVXfyfJn89Ao5s4azI1Cto.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 03:40:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 323 (0x143) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136CB3, serialNumber=AB45DBFC35577F27C99FCF40A39B386B32350ADA Validity Not Before: May 13 03:40:32 2025 GMT Not After : May 20 03:40:32 2025 GMT Subject: CN=6822bf30-b025 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:36:73:7e:5f:02:be:d0:a3:31:58:85:e5:64: c6:89:bc:84:74:7b:ae:5c:1c:5e:73:66:4b:1e:73: 1d:92:08:69:f2:24:d5:3b:8e:06:ec:ef:0b:c2:ea: d1:4f:8d:da:e2:5a:3a:c1:35:ff:a0:8f:a4:e9:51: 6a:90:52:f6:97:38:de:d1:18:ee:1c:28:68:5c:19: d8:07:0f:2c:8f:ee:1c:14:de:45:d0:60:8e:ac:02: d6:7f:30:77:3d:23:aa:9a:82:ed:2b:fa:57:13:7f: a7:5d:cd:cb:57:eb:99:24:94:47:af:84:e1:52:14: a0:80:6f:c1:bb:98:44:e0:af:74:55:f1:12:45:a9: bc:47:0a:a7:4f:62:4e:9a:38:0c:57:11:24:b4:89: 90:07:48:7e:7b:66:3e:9c:ec:18:36:8b:e8:3d:c2: 15:ae:ff:d4:56:1c:c0:be:8b:92:1c:87:5b:f7:3d: f7:aa:d8:d5:2a:06:b9:95:08:e0:d7:11:9e:62:89: 29:cb:36:23:e2:cc:22:b5:67:01:da:e4:e8:d3:54: de:2e:7f:c7:f0:73:ce:43:cc:b1:df:7d:3d:35:ff: 1d:3b:7f:eb:13:b0:93:b9:1f:82:b9:c3:32:85:2b: d0:ba:93:45:c0:e1:97:d4:42:04:65:eb:a2:6d:52: e7:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:1C:0B:45:74:F4:A8:13:F5:CD:16:F7:7A:EE:A0:16:5C:28:06:8C X509v3 Authority Key Identifier: keyid:AB:45:DB:FC:35:57:7F:27:C9:9F:CF:40:A3:9B:38:6B:32:35:0A:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136CB3/A5FD84F2571B11EEB418AB3EC4F9AE02/q0Xb_DVXfyfJn89Ao5s4azI1Cto.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q0Xb_DVXfyfJn89Ao5s4azI1Cto.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136CB3/A5FD84F2571B11EEB418AB3EC4F9AE02/q0Xb_DVXfyfJn89Ao5s4azI1Cto.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:49:54:13:ad:73:08:19:bc:33:ef:e5:d7:6a:4a:cd:ce:65: a0:c3:06:74:b8:31:99:bc:8f:ec:42:26:9b:dc:61:81:ca:15: 28:81:1f:c1:12:b8:08:2a:01:79:17:e0:b9:14:30:87:88:6d: 8c:25:e9:2a:34:15:16:9d:71:5d:74:2a:2c:3a:cb:c5:31:ce: bb:d0:02:42:f9:9f:f5:48:1f:b2:0f:a8:7e:65:94:eb:06:37: 16:40:b3:3d:cf:83:13:cb:68:ac:cd:56:dc:89:d9:42:bf:a8: 35:1b:f8:e4:3f:e0:23:03:fc:95:eb:cf:cf:d9:6f:94:ec:8c: 68:08:c5:47:38:4a:3a:04:58:5f:0c:1a:cf:34:38:03:f1:9e: 88:8d:e6:37:48:ec:a8:e3:4a:1e:18:8f:57:a7:e1:55:b6:b1: 26:15:90:bb:b1:93:40:88:80:2b:5d:44:57:fc:c2:69:2a:ef: 57:c9:c7:9b:d4:e2:09:54:12:7d:ed:52:e9:4b:51:03:6a:98: b1:05:a8:3e:f6:06:e0:e4:e5:b2:45:43:70:eb:97:6f:8f:e7: 85:bc:50:dd:6a:fb:a2:84:c6:f8:68:85:14:0d:74:3b:e5:31: 1b:4c:63:7b:f8:e6:c2:6c:be:08:e8:26:48:27:37:63:69:be: 28:1f:7e:56 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzZDQjMxMTAvBgNVBAUTKEFCNDVEQkZDMzU1NzdGMjdDOTlGQ0Y0MEEzOUIzODZC MzIzNTBBREEwHhcNMjUwNTEzMDM0MDMyWhcNMjUwNTIwMDM0MDMyWjAYMRYwFAYD VQQDEw02ODIyYmYzMC1iMDI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAszZzfl8CvtCjMViF5WTGibyEdHuuXBxec2ZLHnMdkghp8iTVO44G7O8LwurR T43a4lo6wTX/oI+k6VFqkFL2lzje0RjuHChoXBnYBw8sj+4cFN5F0GCOrALWfzB3 PSOqmoLtK/pXE3+nXc3LV+uZJJRHr4ThUhSggG/Bu5hE4K90VfESRam8RwqnT2JO mjgMVxEktImQB0h+e2Y+nOwYNovoPcIVrv/UVhzAvouSHIdb9z33qtjVKga5lQjg 1xGeYokpyzYj4switWcB2uTo01TeLn/H8HPOQ8yx3309Nf8dO3/rE7CTuR+CucMy hSvQupNFwOGX1EIEZeuibVLn2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKocC0V0 9KgT9c0W93ruoBZcKAaMMB8GA1UdIwQYMBaAFKtF2/w1V38nyZ/PQKObOGsyNQra MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkNCMy9BNUZEODRGMjU3 MUIxMUVFQjQxOEFCM0VDNEY5QUUwMi9xMFhiX0RWWGZ5ZkpuODlBbzVzNGF6STFD dG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3EwWGJfRFZYZnlmSm44OUFvNXM0YXpJMUN0by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NkNCMy9BNUZEODRGMjU3MUIxMUVFQjQxOEFCM0VDNEY5QUUwMi9xMFhiX0RWWGZ5 ZkpuODlBbzVzNGF6STFDdG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/SVQTrXMIGbwz7+XXakrNzmWgwwZ0uDGZvI/sQiab3GGByhUogR/B ErgIKgF5F+C5FDCHiG2MJekqNBUWnXFddCosOsvFMc670AJC+Z/1SB+yD6h+ZZTr BjcWQLM9z4MTy2iszVbcidlCv6g1G/jkP+AjA/yV68/P2W+U7IxoCMVHOEo6BFhf DBrPNDgD8Z6IjeY3SOyo40oeGI9Xp+FVtrEmFZC7sZNAiIArXURX/MJpKu9Xyceb 1OIJVBJ97VLpS1EDapixBag+9gbg5OWyRUNw65dvj+eFvFDdavuihMb4aIUUDXQ7 5TEbTGN7+ObCbL4I6CZIJzdjab4oH35W -----END CERTIFICATE-----Generated at Tue May 13 10:45:18 2025 by rpki-client