$ rpki-client -vvf rpki.apnic.net/member_repository/A9142489/3A3F28369BFA11EFBEB9846EC4F9AE02/quV1mn6YqnRYWY3jwZqheX8A9fU.mft File: quV1mn6YqnRYWY3jwZqheX8A9fU.mft (raw, json) Hash identifier: GAZqYoIJtbnY9Qe5VS6OCHdpGORG5h1EUh0/hg2L2tI= Subject key identifier: 73:21:E3:65:B1:98:92:16:0A:E8:1A:B6:6C:05:78:B7:99:1B:8A:B4 Authority key identifier: AA:E5:75:9A:7E:98:AA:74:58:59:8D:E3:C1:9A:A1:79:7F:00:F5:F5 Certificate issuer: /CN=A9142489/serialNumber=AAE5759A7E98AA7458598DE3C19AA1797F00F5F5 Certificate serial: 67 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/quV1mn6YqnRYWY3jwZqheX8A9fU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142489/3A3F28369BFA11EFBEB9846EC4F9AE02/quV1mn6YqnRYWY3jwZqheX8A9fU.mft Manifest number: 65 Signing time: Thu 15 May 2025 06:17:45 +0000 Manifest this update: Thu 15 May 2025 06:17:45 +0000 Manifest next update: Thu 22 May 2025 06:17:45 +0000 Files and hashes: 1: quV1mn6YqnRYWY3jwZqheX8A9fU.crl (hash: YMRJC7aL5dlFNIrUnpc0GpYYBB2ANErRHFKXKw6EoRE=) 2: 4D7DE09E9BFB11EF8E975D70C4F9AE02.roa (hash: XzXF/8xfpuOMbcKhBzvfBK+CZWCno4sqp+r1zL1L1bM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142489/3A3F28369BFA11EFBEB9846EC4F9AE02/quV1mn6YqnRYWY3jwZqheX8A9fU.crl rsync://rpki.apnic.net/member_repository/A9142489/3A3F28369BFA11EFBEB9846EC4F9AE02/quV1mn6YqnRYWY3jwZqheX8A9fU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/quV1mn6YqnRYWY3jwZqheX8A9fU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 06:17:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 103 (0x67) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142489, serialNumber=AAE5759A7E98AA7458598DE3C19AA1797F00F5F5 Validity Not Before: May 15 06:17:45 2025 GMT Not After : May 22 06:17:45 2025 GMT Subject: CN=68258709-4e10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:5e:aa:31:73:be:de:0c:a5:bd:18:63:13:0c: 7c:e9:ee:11:ed:59:5a:6a:53:10:35:34:ca:fa:f5: c2:40:72:cc:e6:89:78:95:1c:3c:42:18:ec:e5:87: 55:77:29:6e:a0:15:fe:75:91:d0:52:8b:ac:41:76: 2b:11:dc:bc:c7:d4:e8:4f:5e:6c:01:57:ab:10:f2: a3:e3:4d:85:2f:80:c1:c1:da:12:72:e9:da:68:f1: b6:1b:a8:cb:e3:f6:19:8e:51:65:9d:d5:e4:e0:7e: 18:aa:85:3a:0d:3f:40:b6:5a:0c:97:51:f0:1b:c3: 66:c1:b8:b8:b6:db:c4:8d:19:91:1c:76:a0:9e:ca: d5:c5:d1:09:85:1c:9b:c5:13:7f:5a:4e:8f:a9:9d: cc:b8:b1:ee:e2:9e:d4:c9:9d:16:c9:84:8a:53:d7: 6f:c7:b7:20:fc:f5:f8:65:0b:7c:cf:2c:c6:67:e4: f4:8e:ce:12:8d:a7:ae:f8:8e:f6:47:ee:90:cb:47: 8f:4c:fe:84:e1:ef:48:bd:0e:cd:3f:61:6a:01:3d: 92:63:30:41:7b:18:47:b0:fa:54:09:5f:8f:e0:fc: db:6b:77:e4:ad:f7:00:ef:98:9e:6a:c6:bb:ad:e5: e6:a9:e3:9a:3f:13:a3:c9:b6:9f:d3:f8:06:64:24: 49:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:21:E3:65:B1:98:92:16:0A:E8:1A:B6:6C:05:78:B7:99:1B:8A:B4 X509v3 Authority Key Identifier: keyid:AA:E5:75:9A:7E:98:AA:74:58:59:8D:E3:C1:9A:A1:79:7F:00:F5:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142489/3A3F28369BFA11EFBEB9846EC4F9AE02/quV1mn6YqnRYWY3jwZqheX8A9fU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/quV1mn6YqnRYWY3jwZqheX8A9fU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142489/3A3F28369BFA11EFBEB9846EC4F9AE02/quV1mn6YqnRYWY3jwZqheX8A9fU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:f1:6d:9d:9f:90:e0:a7:56:65:4f:62:bd:e4:58:8d:64:b2: 80:25:a7:15:ee:99:85:0a:e1:22:21:71:d6:f1:31:ac:fc:24: 83:68:66:53:1e:8f:dd:be:a9:f0:d7:b1:f3:05:b7:16:1d:4c: 86:a1:b4:82:7b:76:0f:35:d9:e5:c0:68:f2:67:dd:ff:c4:4c: 1e:51:88:78:cc:ae:1d:d4:4c:3d:28:bf:83:2a:98:73:1c:fe: 4f:ad:86:9d:09:c9:bd:c6:cb:c3:71:24:af:58:dd:7f:43:a7: 3b:e8:a6:ab:35:85:2a:7b:64:4e:3a:fb:c7:e8:c4:23:4f:72: 07:e0:f3:fa:ee:a6:f3:08:b1:24:57:29:e8:4b:d7:6e:bf:37: ae:67:51:c2:f5:3b:05:5d:65:94:46:4f:a8:80:d9:90:3a:95: 5e:07:4e:93:5c:d1:b9:89:5b:4b:d5:53:19:c6:1a:aa:3e:ac: 00:71:8e:77:ca:d3:e0:bb:c3:31:03:36:5e:10:ff:9f:b7:9a: f4:36:c6:62:48:96:c3:8e:27:84:01:1e:73:33:46:1e:25:df: fc:0e:43:10:2e:2b:39:4f:85:47:a5:eb:89:92:f5:8d:7d:57: 7b:c1:4d:b2:7b:3b:fe:e6:19:83:25:68:98:cb:ea:70:ed:e6: 7d:c7:39:48 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MjQ4OTExMC8GA1UEBRMoQUFFNTc1OUE3RTk4QUE3NDU4NTk4REUzQzE5QUExNzk3 RjAwRjVGNTAeFw0yNTA1MTUwNjE3NDVaFw0yNTA1MjIwNjE3NDVaMBgxFjAUBgNV BAMTDTY4MjU4NzA5LTRlMTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDrXqoxc77eDKW9GGMTDHzp7hHtWVpqUxA1NMr69cJAcszmiXiVHDxCGOzlh1V3 KW6gFf51kdBSi6xBdisR3LzH1OhPXmwBV6sQ8qPjTYUvgMHB2hJy6dpo8bYbqMvj 9hmOUWWd1eTgfhiqhToNP0C2WgyXUfAbw2bBuLi228SNGZEcdqCeytXF0QmFHJvF E39aTo+pncy4se7intTJnRbJhIpT12/HtyD89fhlC3zPLMZn5PSOzhKNp674jvZH 7pDLR49M/oTh70i9Ds0/YWoBPZJjMEF7GEew+lQJX4/g/Ntrd+St9wDvmJ5qxrut 5eap45o/E6PJtp/T+AZkJEknAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUcyHjZbGY khYK6Bq2bAV4t5kbirQwHwYDVR0jBBgwFoAUquV1mn6YqnRYWY3jwZqheX8A9fUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQyNDg5LzNBM0YyODM2OUJG QTExRUZCRUI5ODQ2RUM0RjlBRTAyL3F1VjFtbjZZcW5SWVdZM2p3WnFoZVg4QTlm VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcXVWMW1uNllxblJZV1kzandacWhlWDhBOWZVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQy NDg5LzNBM0YyODM2OUJGQTExRUZCRUI5ODQ2RUM0RjlBRTAyL3F1VjFtbjZZcW5S WVdZM2p3WnFoZVg4QTlmVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHTxbZ2fkOCnVmVPYr3kWI1ksoAlpxXumYUK4SIhcdbxMaz8JINoZlMe j92+qfDXsfMFtxYdTIahtIJ7dg812eXAaPJn3f/ETB5RiHjMrh3UTD0ov4MqmHMc /k+thp0Jyb3Gy8NxJK9Y3X9Dpzvopqs1hSp7ZE46+8foxCNPcgfg8/rupvMIsSRX KehL126/N65nUcL1OwVdZZRGT6iA2ZA6lV4HTpNc0bmJW0vVUxnGGqo+rABxjnfK 0+C7wzEDNl4Q/5+3mvQ2xmJIlsOOJ4QBHnMzRh4l3/wOQxAuKzlPhUel64mS9Y19 V3vBTbJ7O/7mGYMlaJjL6nDt5n3HOUg= -----END CERTIFICATE-----Generated at Fri May 16 11:54:58 2025 by rpki-client