$ rpki-client -vvf rpki.apnic.net/member_repository/A913D6C9/73FBD332481D11ECB6FEDF77C4F9AE02/Qfi2tHutsA9vj-jn4BP_VaGOdCg.mft File: Qfi2tHutsA9vj-jn4BP_VaGOdCg.mft (raw, json) Hash identifier: FxfsDe4EgdqvlCwDstGLLVEyFEgD87ieArXdblcEvRI= Subject key identifier: 62:42:83:A7:8E:D4:D0:98:43:BD:4E:74:0D:E1:9D:62:06:35:FC:91 Authority key identifier: 41:F8:B6:B4:7B:AD:B0:0F:6F:8F:E8:E7:E0:13:FF:55:A1:8E:74:28 Certificate issuer: /CN=A913D6C9/serialNumber=41F8B6B47BADB00F6F8FE8E7E013FF55A18E7428 Certificate serial: 047D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qfi2tHutsA9vj-jn4BP_VaGOdCg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913D6C9/73FBD332481D11ECB6FEDF77C4F9AE02/Qfi2tHutsA9vj-jn4BP_VaGOdCg.mft Manifest number: 0473 Signing time: Sat 10 May 2025 23:43:20 +0000 Manifest this update: Sat 10 May 2025 23:43:20 +0000 Manifest next update: Sat 17 May 2025 23:43:20 +0000 Files and hashes: 1: Qfi2tHutsA9vj-jn4BP_VaGOdCg.crl (hash: kuUFYOFA24ECyXnErH+g7FAIp9p2YjO1khu07kav7T0=) 2: 54AC9B64C3B411EEBF90C180C4F9AE02.roa (hash: BPstFCUC7r4sqZcas3tBZS1NiGfkeUG5bomyvOkC2W0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913D6C9/73FBD332481D11ECB6FEDF77C4F9AE02/Qfi2tHutsA9vj-jn4BP_VaGOdCg.crl rsync://rpki.apnic.net/member_repository/A913D6C9/73FBD332481D11ECB6FEDF77C4F9AE02/Qfi2tHutsA9vj-jn4BP_VaGOdCg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qfi2tHutsA9vj-jn4BP_VaGOdCg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 23:43:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1149 (0x47d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913D6C9, serialNumber=41F8B6B47BADB00F6F8FE8E7E013FF55A18E7428 Validity Not Before: May 10 23:43:20 2025 GMT Not After : May 17 23:43:20 2025 GMT Subject: CN=681fe498-0207 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:64:ac:26:25:cb:66:36:94:10:70:22:77:bd: 4e:3e:a2:17:0d:d3:ab:6a:79:3c:15:e1:9e:f5:11: 86:41:ae:09:46:2b:6a:b7:6f:98:76:3b:47:c6:c1: e5:af:8a:65:9d:06:40:f6:66:84:26:2c:10:2f:89: 4e:5d:9a:fd:bf:e6:c1:c1:35:14:73:7e:e9:62:5e: af:95:94:be:0b:a5:0f:2e:58:bc:48:e0:da:8b:d2: 77:3b:4a:2d:84:e3:63:df:76:d6:43:63:c2:6a:ba: f3:ac:9e:74:47:00:52:00:78:d8:74:9c:4d:18:f7: e5:d1:2a:bd:ea:a4:6e:5b:34:32:b1:25:9f:bf:4b: d1:6f:3d:58:40:40:8d:dc:9f:6f:5d:bc:fd:28:d1: c4:5b:9e:b5:6a:f4:22:99:c9:3e:df:2b:65:b6:f2: 97:6f:ef:c2:3d:07:59:b0:d5:b1:95:98:3a:68:37: ab:96:b8:f1:f6:c0:7d:d1:5c:12:0e:21:26:2b:f7: 0d:1f:26:aa:81:f5:67:b1:78:07:c4:c3:3f:fa:31: 7d:c4:6f:d5:5a:45:72:54:c1:16:1c:b8:b3:35:9a: 3b:8b:b1:f9:b0:4b:5b:e6:43:db:7c:01:19:1b:71: af:8c:d9:f7:fc:8b:46:78:81:5b:1c:d1:29:81:ad: ed:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:42:83:A7:8E:D4:D0:98:43:BD:4E:74:0D:E1:9D:62:06:35:FC:91 X509v3 Authority Key Identifier: keyid:41:F8:B6:B4:7B:AD:B0:0F:6F:8F:E8:E7:E0:13:FF:55:A1:8E:74:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913D6C9/73FBD332481D11ECB6FEDF77C4F9AE02/Qfi2tHutsA9vj-jn4BP_VaGOdCg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qfi2tHutsA9vj-jn4BP_VaGOdCg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D6C9/73FBD332481D11ECB6FEDF77C4F9AE02/Qfi2tHutsA9vj-jn4BP_VaGOdCg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:b3:4f:8e:66:78:06:df:05:b6:5b:9b:c5:d6:9a:c5:56:42: de:d3:be:a5:c0:5b:c7:e8:3b:bf:ca:77:3c:6e:03:d6:27:54: 52:f1:6e:9a:10:f4:73:d4:ec:92:62:55:35:eb:9a:cc:da:db: 2f:64:1d:34:92:15:dc:7f:8b:34:a2:c8:da:a0:e5:2e:d7:81: b4:d7:90:c4:8e:11:53:9f:13:d5:10:60:e3:00:c9:12:a1:e8: b6:57:0c:ed:e1:07:d0:8e:1b:77:9f:30:f4:42:72:97:43:84: 7b:cf:e1:3f:e0:ad:06:c2:1d:81:3b:7e:9f:68:c7:09:2a:b6: c1:16:2f:15:39:3e:8f:4e:7b:d8:fa:50:46:37:5a:92:2d:06: 6b:d8:fa:36:1f:02:81:af:e1:89:42:5f:d2:5a:18:db:db:df: e5:98:05:e4:2a:d8:82:ad:3d:d8:15:48:87:36:19:bb:b2:dc: d2:9d:0d:50:80:42:64:6a:1b:02:22:75:5a:69:93:fe:78:a8: 77:73:b9:e4:8e:c6:a2:48:d4:aa:36:a6:ef:46:e7:e6:86:ae: 3a:55:b2:91:33:ed:bd:fd:cb:96:3e:23:92:3a:de:3b:d4:75: 51:b7:5b:30:aa:c7:dc:e8:72:1a:ad:51:fe:a2:de:b1:a4:98: 7f:c5:38:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBH0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0Q2QzkxMTAvBgNVBAUTKDQxRjhCNkI0N0JBREIwMEY2RjhGRThFN0UwMTNGRjU1 QTE4RTc0MjgwHhcNMjUwNTEwMjM0MzIwWhcNMjUwNTE3MjM0MzIwWjAYMRYwFAYD VQQDEw02ODFmZTQ5OC0wMjA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArWSsJiXLZjaUEHAid71OPqIXDdOrank8FeGe9RGGQa4JRitqt2+YdjtHxsHl r4plnQZA9maEJiwQL4lOXZr9v+bBwTUUc37pYl6vlZS+C6UPLli8SODai9J3O0ot hONj33bWQ2PCarrzrJ50RwBSAHjYdJxNGPfl0Sq96qRuWzQysSWfv0vRbz1YQECN 3J9vXbz9KNHEW561avQimck+3ytltvKXb+/CPQdZsNWxlZg6aDerlrjx9sB90VwS DiEmK/cNHyaqgfVnsXgHxMM/+jF9xG/VWkVyVMEWHLizNZo7i7H5sEtb5kPbfAEZ G3GvjNn3/ItGeIFbHNEpga3tGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGJCg6eO 1NCYQ71OdA3hnWIGNfyRMB8GA1UdIwQYMBaAFEH4trR7rbAPb4/o5+AT/1WhjnQo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRDZDOS83M0ZCRDMzMjQ4 MUQxMUVDQjZGRURGNzdDNEY5QUUwMi9RZmkydEh1dHNBOXZqLWpuNEJQX1ZhR09k Q2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FmaTJ0SHV0c0E5dmotam40QlBfVmFHT2RDZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RDZDOS83M0ZCRDMzMjQ4MUQxMUVDQjZGRURGNzdDNEY5QUUwMi9RZmkydEh1dHNB OXZqLWpuNEJQX1ZhR09kQ2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKs0+OZngG3wW2W5vF1prFVkLe076lwFvH6Du/ync8bgPWJ1RS8W6a EPRz1OySYlU165rM2tsvZB00khXcf4s0osjaoOUu14G015DEjhFTnxPVEGDjAMkS oei2Vwzt4QfQjht3nzD0QnKXQ4R7z+E/4K0Gwh2BO36faMcJKrbBFi8VOT6PTnvY +lBGN1qSLQZr2Po2HwKBr+GJQl/SWhjb29/lmAXkKtiCrT3YFUiHNhm7stzSnQ1Q gEJkahsCInVaaZP+eKh3c7nkjsaiSNSqNqbvRufmhq46VbKRM+29/cuWPiOSOt47 1HVRt1swqsfc6HIarVH+ot6xpJh/xThS -----END CERTIFICATE-----Generated at Mon May 12 16:15:09 2025 by rpki-client