$ rpki-client -vvf rpki.apnic.net/member_repository/A913E9AD/FD723C50A43111EAB7721E6AC4F9AE02/QWpUTLUK6kcDnxO8WMNBDH_miM4.mft File: QWpUTLUK6kcDnxO8WMNBDH_miM4.mft (raw, json) Hash identifier: 8nWSOb2KpZc/ecDzACr8e10X3GZ6H6O99pQVbNvrh0g= Subject key identifier: 5D:14:6A:5F:A3:07:2A:F9:14:E3:B3:A7:57:9A:B3:DD:01:B9:B0:69 Authority key identifier: 41:6A:54:4C:B5:0A:EA:47:03:9F:13:BC:58:C3:41:0C:7F:E6:88:CE Certificate issuer: /CN=A913E9AD/serialNumber=416A544CB50AEA47039F13BC58C3410C7FE688CE Certificate serial: 090F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QWpUTLUK6kcDnxO8WMNBDH_miM4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E9AD/FD723C50A43111EAB7721E6AC4F9AE02/QWpUTLUK6kcDnxO8WMNBDH_miM4.mft Manifest number: 0908 Signing time: Mon 12 May 2025 20:09:31 +0000 Manifest this update: Mon 12 May 2025 20:09:30 +0000 Manifest next update: Mon 19 May 2025 20:09:30 +0000 Files and hashes: 1: QWpUTLUK6kcDnxO8WMNBDH_miM4.crl (hash: DmdzEzYd5J/GndQNU/OyDOpcBJpCnNEnWab5RSinHdg=) 2: 04758F0AA43411EAA22B0871C4F9AE02.roa (hash: gLtq1uRfz9P1m1h8+/+e4fI782kx3+paUmd4vGjKTlg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E9AD/FD723C50A43111EAB7721E6AC4F9AE02/QWpUTLUK6kcDnxO8WMNBDH_miM4.crl rsync://rpki.apnic.net/member_repository/A913E9AD/FD723C50A43111EAB7721E6AC4F9AE02/QWpUTLUK6kcDnxO8WMNBDH_miM4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QWpUTLUK6kcDnxO8WMNBDH_miM4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 20:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2319 (0x90f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E9AD, serialNumber=416A544CB50AEA47039F13BC58C3410C7FE688CE Validity Not Before: May 12 20:09:30 2025 GMT Not After : May 19 20:09:30 2025 GMT Subject: CN=6822557a-6d65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c0:3f:b2:ef:66:53:5a:c3:b2:6f:d0:12:9a: ac:4e:2d:f2:b4:ae:b3:9f:f3:ec:01:22:c2:cd:1e: ca:d1:80:a0:59:22:e6:ea:cf:42:32:93:12:f3:02: 43:d4:92:7c:e9:cd:c6:e1:91:40:2e:be:23:12:85: 23:fd:15:e4:54:38:f1:ce:b7:6f:db:9d:d6:ad:4a: 45:be:f2:e9:ae:ba:df:60:c2:7e:f7:7e:68:cb:27: 32:da:03:83:d0:61:aa:7e:14:2c:86:66:6a:62:6e: 2b:82:5b:a4:54:27:1b:40:1e:21:22:37:7b:5b:ca: 04:58:cc:2a:65:04:dd:98:04:ef:89:1a:00:0e:51: 56:91:7e:90:92:cb:98:a4:a8:e9:44:8f:73:62:d8: 1d:93:30:f8:7c:f6:bc:ad:73:67:b2:df:3b:5f:c7: 41:83:d4:da:1a:b3:c3:cf:bc:a9:15:77:c6:24:27: 12:39:7e:5f:ce:77:54:c7:05:2e:b8:e9:a7:db:cd: 3f:94:54:14:ec:0d:fb:0a:38:6c:82:e5:c2:e3:68: d6:22:ed:bd:27:78:b7:e3:a7:03:9c:d3:1c:34:cb: 2f:b5:47:ef:3e:8e:de:f9:a3:19:da:6a:d1:1f:b4: 87:c4:fb:eb:11:f6:20:ac:b2:8e:b2:d1:35:d6:0f: 24:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:14:6A:5F:A3:07:2A:F9:14:E3:B3:A7:57:9A:B3:DD:01:B9:B0:69 X509v3 Authority Key Identifier: keyid:41:6A:54:4C:B5:0A:EA:47:03:9F:13:BC:58:C3:41:0C:7F:E6:88:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E9AD/FD723C50A43111EAB7721E6AC4F9AE02/QWpUTLUK6kcDnxO8WMNBDH_miM4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QWpUTLUK6kcDnxO8WMNBDH_miM4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E9AD/FD723C50A43111EAB7721E6AC4F9AE02/QWpUTLUK6kcDnxO8WMNBDH_miM4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:95:28:e8:39:ba:cf:95:c7:8d:2d:19:4e:9f:00:af:24:3d: d6:e4:46:5d:4a:57:76:51:ab:cc:5f:4d:66:b5:e8:db:ab:ea: 91:26:f7:c4:b2:1c:ba:9f:37:aa:0a:6b:9a:47:ec:54:c4:3d: ad:83:ef:36:f9:5f:23:62:3d:70:ba:74:90:4b:af:f4:a3:f8: 86:0d:ed:28:e1:62:e3:8a:a1:a1:11:f5:08:1f:e3:31:5c:04: 79:2a:e0:cb:fb:a2:2c:a1:f8:7f:42:b2:fd:5c:c8:c9:fe:08: 2e:dc:77:2f:29:71:32:b3:40:4b:96:d3:3f:c4:9d:05:70:6c: 7f:59:f9:c7:fe:42:7d:73:08:df:ac:5f:4f:05:bb:d0:f0:d9: 99:6d:63:64:1c:ec:7b:49:8a:35:1d:bd:ab:c4:1d:7b:84:94: 76:3a:39:cf:58:5b:f1:1d:67:47:ad:5b:21:8f:68:12:e0:c5: 17:d6:bc:f9:bc:fa:d0:7e:f8:ce:ab:bb:26:2d:aa:b2:69:74: 09:d0:74:ac:a7:2f:44:06:4a:8c:6c:f6:f8:12:9a:89:d8:89: 9e:68:7d:21:f6:ca:39:0f:bb:a6:21:29:12:f3:d8:ec:9a:8f: 49:be:2f:21:7c:67:d2:e7:3e:43:31:63:94:68:fe:5d:49:9e: e4:c2:69:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCQ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0U5QUQxMTAvBgNVBAUTKDQxNkE1NDRDQjUwQUVBNDcwMzlGMTNCQzU4QzM0MTBD N0ZFNjg4Q0UwHhcNMjUwNTEyMjAwOTMwWhcNMjUwNTE5MjAwOTMwWjAYMRYwFAYD VQQDEw02ODIyNTU3YS02ZDY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt8A/su9mU1rDsm/QEpqsTi3ytK6zn/PsASLCzR7K0YCgWSLm6s9CMpMS8wJD 1JJ86c3G4ZFALr4jEoUj/RXkVDjxzrdv253WrUpFvvLprrrfYMJ+935oyycy2gOD 0GGqfhQshmZqYm4rglukVCcbQB4hIjd7W8oEWMwqZQTdmATviRoADlFWkX6QksuY pKjpRI9zYtgdkzD4fPa8rXNnst87X8dBg9TaGrPDz7ypFXfGJCcSOX5fzndUxwUu uOmn280/lFQU7A37CjhsguXC42jWIu29J3i346cDnNMcNMsvtUfvPo7e+aMZ2mrR H7SHxPvrEfYgrLKOstE11g8k7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF0Ual+j Byr5FOOzp1eas90BubBpMB8GA1UdIwQYMBaAFEFqVEy1CupHA58TvFjDQQx/5ojO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRTlBRC9GRDcyM0M1MEE0 MzExMUVBQjc3MjFFNkFDNEY5QUUwMi9RV3BVVExVSzZrY0RueE84V01OQkRIX21p TTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FXcFVUTFVLNmtjRG54TzhXTU5CREhfbWlNNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RTlBRC9GRDcyM0M1MEE0MzExMUVBQjc3MjFFNkFDNEY5QUUwMi9RV3BVVExVSzZr Y0RueE84V01OQkRIX21pTTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCflSjoObrPlceNLRlOnwCvJD3W5EZdSld2UavMX01mtejbq+qRJvfE shy6nzeqCmuaR+xUxD2tg+82+V8jYj1wunSQS6/0o/iGDe0o4WLjiqGhEfUIH+Mx XAR5KuDL+6Isofh/QrL9XMjJ/ggu3HcvKXEys0BLltM/xJ0FcGx/WfnH/kJ9cwjf rF9PBbvQ8NmZbWNkHOx7SYo1Hb2rxB17hJR2OjnPWFvxHWdHrVshj2gS4MUX1rz5 vPrQfvjOq7smLaqyaXQJ0HSspy9EBkqMbPb4EpqJ2ImeaH0h9so5D7umISkS89js mo9Jvi8hfGfS5z5DMWOUaP5dSZ7kwmnG -----END CERTIFICATE-----Generated at Tue May 13 15:14:03 2025 by rpki-client