$ rpki-client -vvf rpki.apnic.net/member_repository/A9145D4C/F422FD12325811EDBD16D624C4F9AE02/QNg3fKpabquREz6WLv9-IbURPbk.mft File: QNg3fKpabquREz6WLv9-IbURPbk.mft (raw, json) Hash identifier: zOMpmRXSfP1N6XONaBb6H+mGjg3lnPmkU94zxgWeJYI= Subject key identifier: 8B:17:3A:D1:06:AB:80:92:6F:4D:B2:6D:7D:7C:0F:87:94:0E:5A:45 Authority key identifier: 40:D8:37:7C:AA:5A:6E:AB:91:13:3E:96:2E:FF:7E:21:B5:11:3D:B9 Certificate issuer: /CN=A9145D4C/serialNumber=40D8377CAA5A6EAB91133E962EFF7E21B5113DB9 Certificate serial: 0223 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QNg3fKpabquREz6WLv9-IbURPbk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145D4C/F422FD12325811EDBD16D624C4F9AE02/QNg3fKpabquREz6WLv9-IbURPbk.mft Manifest number: 021B Signing time: Tue 13 May 2025 01:46:57 +0000 Manifest this update: Tue 13 May 2025 01:46:57 +0000 Manifest next update: Tue 20 May 2025 01:46:57 +0000 Files and hashes: 1: QNg3fKpabquREz6WLv9-IbURPbk.crl (hash: BTylj+EZPF4vRBfN5EjxQ4FK63e4Dgrf2UB7NREaRRc=) 2: 5E24BEAADA7C11ED8156D867C4F9AE02.roa (hash: ktK9vCE7vIpwa3GinrPFia6DHxl96KzteCFThN1eca8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145D4C/F422FD12325811EDBD16D624C4F9AE02/QNg3fKpabquREz6WLv9-IbURPbk.crl rsync://rpki.apnic.net/member_repository/A9145D4C/F422FD12325811EDBD16D624C4F9AE02/QNg3fKpabquREz6WLv9-IbURPbk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QNg3fKpabquREz6WLv9-IbURPbk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 01:46:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 547 (0x223) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145D4C, serialNumber=40D8377CAA5A6EAB91133E962EFF7E21B5113DB9 Validity Not Before: May 13 01:46:57 2025 GMT Not After : May 20 01:46:57 2025 GMT Subject: CN=6822a491-0d7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:92:09:12:85:08:f7:a0:03:86:fe:16:1b:d5: 81:18:ed:3e:fb:bd:5b:b2:c4:95:3e:d0:c7:68:e9: d5:39:f8:e7:18:e6:84:42:58:fb:e4:e4:bf:9b:90: 73:0a:99:cb:c8:9c:05:b9:06:d7:5e:9d:35:61:3c: 5c:e1:b3:b3:2c:d1:d3:a6:33:48:f7:9a:29:62:ee: ea:82:0d:5d:ef:57:34:89:0c:39:6d:26:43:13:42: dd:fb:05:6b:a7:5d:a0:5a:d5:bf:c8:96:73:31:b4: 59:67:b7:f7:45:b4:da:20:a9:ef:3b:a5:75:0e:fd: 96:15:40:32:d1:0b:f2:b1:ad:e2:ac:7f:9f:e6:2c: a2:11:44:3f:39:e5:c3:b2:dc:83:cf:47:d0:28:aa: 2f:dd:d8:be:6e:84:d2:6a:8b:bf:13:52:b3:21:e7: 95:38:4d:2a:f4:60:a5:18:59:e0:2f:fa:28:72:3f: e4:59:9e:82:16:e3:3c:39:af:b0:b8:56:e5:0b:ec: d5:17:93:c5:46:1c:c4:20:28:71:1b:5c:bd:f7:af: 79:00:d9:09:89:a8:3a:f9:c3:c1:fd:66:bf:2a:e6: e5:34:8d:da:7b:1d:cd:36:fb:2f:de:d4:cc:8d:4f: 2e:37:8b:b7:5b:0f:5a:bf:3e:ea:c6:b8:41:13:4a: 28:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:17:3A:D1:06:AB:80:92:6F:4D:B2:6D:7D:7C:0F:87:94:0E:5A:45 X509v3 Authority Key Identifier: keyid:40:D8:37:7C:AA:5A:6E:AB:91:13:3E:96:2E:FF:7E:21:B5:11:3D:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145D4C/F422FD12325811EDBD16D624C4F9AE02/QNg3fKpabquREz6WLv9-IbURPbk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QNg3fKpabquREz6WLv9-IbURPbk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145D4C/F422FD12325811EDBD16D624C4F9AE02/QNg3fKpabquREz6WLv9-IbURPbk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:c5:04:3d:a5:13:af:80:0a:df:4c:9e:22:ff:10:66:e0:1f: ad:df:0c:e6:25:1d:1c:ce:f9:d7:dd:56:ee:b7:eb:1c:e0:87: eb:a0:d5:2a:a7:36:6c:5a:62:09:91:1c:ab:68:4c:5c:16:7b: 04:f7:eb:b6:bd:d8:c7:8e:a3:d5:fe:6c:0d:f5:3c:e4:ac:fe: 63:ba:43:65:45:57:1b:7f:86:4e:8c:04:9a:1e:91:b0:df:64: 7f:1c:da:25:c5:6a:0b:4d:0a:8f:76:26:6c:ed:8a:3f:cb:74: fe:ba:05:34:7f:ca:06:0a:f8:1c:da:fa:af:7b:12:8b:1d:61: 66:b1:62:26:6a:b1:23:11:31:34:13:b1:12:37:f5:4b:f0:3f: 39:e8:87:0c:cc:4f:ca:53:80:b8:5a:46:a2:8d:b0:f2:72:82: da:ac:45:e6:ce:ed:0f:7d:4b:7a:f0:6f:a6:18:d4:66:57:da: 8e:1f:24:2a:80:6a:63:4f:1e:33:e5:83:b6:d1:4e:1d:cf:9b: 3a:f6:f2:06:80:7e:41:97:94:f5:5e:95:5a:a4:0f:53:45:5d: 72:62:15:8a:6f:e0:a1:73:96:f1:81:1a:41:02:76:96:62:86: 5e:9e:cb:5a:ee:e4:7a:1c:ad:ee:31:8e:c8:bf:54:6f:c9:ba: 09:0f:91:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAiMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDVENEMxMTAvBgNVBAUTKDQwRDgzNzdDQUE1QTZFQUI5MTEzM0U5NjJFRkY3RTIx QjUxMTNEQjkwHhcNMjUwNTEzMDE0NjU3WhcNMjUwNTIwMDE0NjU3WjAYMRYwFAYD VQQDEw02ODIyYTQ5MS0wZDdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3JIJEoUI96ADhv4WG9WBGO0++71bssSVPtDHaOnVOfjnGOaEQlj75OS/m5Bz CpnLyJwFuQbXXp01YTxc4bOzLNHTpjNI95opYu7qgg1d71c0iQw5bSZDE0Ld+wVr p12gWtW/yJZzMbRZZ7f3RbTaIKnvO6V1Dv2WFUAy0Qvysa3irH+f5iyiEUQ/OeXD styDz0fQKKov3di+boTSaou/E1KzIeeVOE0q9GClGFngL/oocj/kWZ6CFuM8Oa+w uFblC+zVF5PFRhzEIChxG1y99695ANkJiag6+cPB/Wa/KublNI3aex3NNvsv3tTM jU8uN4u3Ww9avz7qxrhBE0ooRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIsXOtEG q4CSb02ybX18D4eUDlpFMB8GA1UdIwQYMBaAFEDYN3yqWm6rkRM+li7/fiG1ET25 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NUQ0Qy9GNDIyRkQxMjMy NTgxMUVEQkQxNkQ2MjRDNEY5QUUwMi9RTmczZktwYWJxdVJFejZXTHY5LUliVVJQ YmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FOZzNmS3BhYnF1UkV6NldMdjktSWJVUlBiay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NUQ0Qy9GNDIyRkQxMjMyNTgxMUVEQkQxNkQ2MjRDNEY5QUUwMi9RTmczZktwYWJx dVJFejZXTHY5LUliVVJQYmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRxQQ9pROvgArfTJ4i/xBm4B+t3wzmJR0czvnX3Vbut+sc4IfroNUq pzZsWmIJkRyraExcFnsE9+u2vdjHjqPV/mwN9TzkrP5jukNlRVcbf4ZOjASaHpGw 32R/HNolxWoLTQqPdiZs7Yo/y3T+ugU0f8oGCvgc2vqvexKLHWFmsWImarEjETE0 E7ESN/VL8D856IcMzE/KU4C4WkaijbDycoLarEXmzu0PfUt68G+mGNRmV9qOHyQq gGpjTx4z5YO20U4dz5s69vIGgH5Bl5T1XpVapA9TRV1yYhWKb+Chc5bxgRpBAnaW YoZensta7uR6HK3uMY7Iv1RvyboJD5F5 -----END CERTIFICATE-----Generated at Wed May 14 13:21:06 2025 by rpki-client