$ rpki-client -vvf rpki.apnic.net/member_repository/A913A74D/68A1D55AC72611EA9955E410C4F9AE02/1QTYGQKxg4soKun0XE3D-BeOJO4.mft File: 1QTYGQKxg4soKun0XE3D-BeOJO4.mft (raw, json) Hash identifier: x62h/lu/xRMZHVmCYU8afziNDcTV9PGTuzXK6QCcTE4= Subject key identifier: 8B:E9:3B:1C:50:F3:02:7F:CE:B3:B2:62:B6:C6:3F:D8:3D:27:7C:85 Authority key identifier: D5:04:D8:19:02:B1:83:8B:28:2A:E9:F4:5C:4D:C3:F8:17:8E:24:EE Certificate issuer: /CN=A913A74D/serialNumber=D504D81902B1838B282AE9F45C4DC3F8178E24EE Certificate serial: 085C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1QTYGQKxg4soKun0XE3D-BeOJO4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913A74D/68A1D55AC72611EA9955E410C4F9AE02/1QTYGQKxg4soKun0XE3D-BeOJO4.mft Manifest number: 0856 Signing time: Mon 12 May 2025 20:32:52 +0000 Manifest this update: Mon 12 May 2025 20:32:51 +0000 Manifest next update: Mon 19 May 2025 20:32:51 +0000 Files and hashes: 1: 1QTYGQKxg4soKun0XE3D-BeOJO4.crl (hash: 5EwHz3k98SxQoUu53k3L3Ttgv3rsVLmnGh+i9+cu2zM=) 2: 833D8D9AC72711EA8890F311C4F9AE02.roa (hash: tIeSqHeCHUuOJ39Gd9YUOSN/PIr6jNAJWJM2EB0gZPY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913A74D/68A1D55AC72611EA9955E410C4F9AE02/1QTYGQKxg4soKun0XE3D-BeOJO4.crl rsync://rpki.apnic.net/member_repository/A913A74D/68A1D55AC72611EA9955E410C4F9AE02/1QTYGQKxg4soKun0XE3D-BeOJO4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1QTYGQKxg4soKun0XE3D-BeOJO4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 20:32:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2140 (0x85c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913A74D, serialNumber=D504D81902B1838B282AE9F45C4DC3F8178E24EE Validity Not Before: May 12 20:32:51 2025 GMT Not After : May 19 20:32:51 2025 GMT Subject: CN=68225af3-ddc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:6c:ac:e9:03:a8:fe:bf:39:76:de:32:62:d8: f0:06:8f:e9:93:97:8d:87:de:bf:3e:c0:07:e6:b4: 9b:c7:d8:5b:a3:e2:56:82:67:d9:85:fb:bf:f1:a5: 26:b8:3f:66:65:ae:f1:47:d8:75:c7:f1:64:9b:fe: 2e:19:4b:52:48:ca:28:46:be:de:70:33:1f:c5:d0: a4:c2:48:75:c4:71:0b:fd:12:38:c8:f8:0e:7c:96: 4f:09:fa:90:4e:c6:bd:dd:fc:15:92:e8:dd:b9:8c: ae:9f:d4:07:5a:6f:e9:2e:8e:bd:9b:c7:f3:03:c7: d8:c1:cd:eb:d1:8a:d6:e1:c5:d6:9e:f3:e4:c2:e7: 20:05:83:40:03:0e:12:48:60:a9:c2:b8:98:54:19: 51:27:f5:0a:f6:f2:d2:42:b8:6f:71:0e:40:1a:20: 06:93:80:99:6c:94:f8:70:8c:a9:d8:4e:6f:72:c5: 6e:82:c1:3b:2a:78:2d:a5:69:9f:92:ab:22:d6:bb: c7:b7:b1:e0:a4:10:75:2c:00:87:3a:83:7a:03:15: e6:0f:cc:d0:b7:6a:b7:d4:86:bc:c2:21:94:e1:a8: 5e:96:8b:8d:db:76:a7:bb:6e:42:7d:83:8e:64:7e: a6:29:63:b8:a0:e5:f6:84:f9:fd:48:27:3e:10:ba: fc:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:E9:3B:1C:50:F3:02:7F:CE:B3:B2:62:B6:C6:3F:D8:3D:27:7C:85 X509v3 Authority Key Identifier: keyid:D5:04:D8:19:02:B1:83:8B:28:2A:E9:F4:5C:4D:C3:F8:17:8E:24:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913A74D/68A1D55AC72611EA9955E410C4F9AE02/1QTYGQKxg4soKun0XE3D-BeOJO4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1QTYGQKxg4soKun0XE3D-BeOJO4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A74D/68A1D55AC72611EA9955E410C4F9AE02/1QTYGQKxg4soKun0XE3D-BeOJO4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:01:49:87:7d:dd:6d:92:ec:73:2a:cb:95:54:e1:9d:97:8f: 15:c3:1a:09:18:19:69:d5:4e:31:de:2a:64:de:68:42:eb:d7: 33:d0:e4:b2:f4:50:0b:d0:05:57:59:1a:7c:11:ad:c7:d0:cc: 9c:f6:c4:5c:f7:d8:55:e5:c3:da:22:0c:94:56:66:08:b8:cc: 04:d4:8f:62:3d:7f:fa:3c:79:ef:6e:52:61:4b:be:7f:96:f3: c6:3b:39:23:68:38:54:c2:8a:07:ff:32:fb:c3:e7:04:ed:10: f3:26:6d:7d:15:5b:ac:ed:55:ad:fa:da:cc:63:a0:17:1e:66: 75:c4:a3:37:f3:99:58:ea:9e:27:ff:90:41:05:f5:fc:dd:8b: 90:bf:f1:b8:da:14:cd:7a:c3:07:f6:12:f9:ac:2e:20:bb:c3: 9c:ea:71:28:a7:ba:fe:11:2f:14:24:b0:f2:31:33:1e:f2:5a: 68:a3:d9:f5:9c:ab:e0:0b:51:f6:ce:c2:b4:34:c9:e5:16:5a: 8e:fd:15:c5:b9:ea:7d:21:14:50:bf:0e:09:12:67:49:b8:dc: 60:39:01:f4:6e:f6:3f:b5:c5:99:a6:78:90:5f:85:0c:4a:06: 1c:36:30:af:ac:11:25:e8:54:7f:ad:fd:1f:04:46:e5:20:c5: be:a3:74:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCFwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0E3NEQxMTAvBgNVBAUTKEQ1MDREODE5MDJCMTgzOEIyODJBRTlGNDVDNERDM0Y4 MTc4RTI0RUUwHhcNMjUwNTEyMjAzMjUxWhcNMjUwNTE5MjAzMjUxWjAYMRYwFAYD VQQDEw02ODIyNWFmMy1kZGM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz2ys6QOo/r85dt4yYtjwBo/pk5eNh96/PsAH5rSbx9hbo+JWgmfZhfu/8aUm uD9mZa7xR9h1x/Fkm/4uGUtSSMooRr7ecDMfxdCkwkh1xHEL/RI4yPgOfJZPCfqQ Tsa93fwVkujduYyun9QHWm/pLo69m8fzA8fYwc3r0YrW4cXWnvPkwucgBYNAAw4S SGCpwriYVBlRJ/UK9vLSQrhvcQ5AGiAGk4CZbJT4cIyp2E5vcsVugsE7KngtpWmf kqsi1rvHt7HgpBB1LACHOoN6AxXmD8zQt2q31Ia8wiGU4ahelouN23anu25CfYOO ZH6mKWO4oOX2hPn9SCc+ELr8WQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIvpOxxQ 8wJ/zrOyYrbGP9g9J3yFMB8GA1UdIwQYMBaAFNUE2BkCsYOLKCrp9FxNw/gXjiTu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQTc0RC82OEExRDU1QUM3 MjYxMUVBOTk1NUU0MTBDNEY5QUUwMi8xUVRZR1FLeGc0c29LdW4wWEUzRC1CZU9K TzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFRVFlHUUt4ZzRzb0t1bjBYRTNELUJlT0pPNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QTc0RC82OEExRDU1QUM3MjYxMUVBOTk1NUU0MTBDNEY5QUUwMi8xUVRZR1FLeGc0 c29LdW4wWEUzRC1CZU9KTzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfAUmHfd1tkuxzKsuVVOGdl48VwxoJGBlp1U4x3ipk3mhC69cz0OSy 9FAL0AVXWRp8Ea3H0Myc9sRc99hV5cPaIgyUVmYIuMwE1I9iPX/6PHnvblJhS75/ lvPGOzkjaDhUwooH/zL7w+cE7RDzJm19FVus7VWt+trMY6AXHmZ1xKM385lY6p4n /5BBBfX83YuQv/G42hTNesMH9hL5rC4gu8Oc6nEop7r+ES8UJLDyMTMe8lpoo9n1 nKvgC1H2zsK0NMnlFlqO/RXFuep9IRRQvw4JEmdJuNxgOQH0bvY/tcWZpniQX4UM SgYcNjCvrBEl6FR/rf0fBEblIMW+o3T1 -----END CERTIFICATE-----Generated at Wed May 14 16:36:11 2025 by rpki-client