$ rpki-client -vvf rpki.apnic.net/member_repository/A9148B6A/0875F4964C7411E997900F55C4F9AE02/qXEsy37uAkrriHZ7di4Qk7FA_24.mft File: qXEsy37uAkrriHZ7di4Qk7FA_24.mft (raw, json) Hash identifier: X+f9Q2QnPlp1wxFRRqgQjCSLyxdE17+OQSoLl1iknTw= Subject key identifier: 8F:3E:F5:00:59:44:56:C6:D7:63:97:96:10:2D:DB:11:8A:DA:85:79 Authority key identifier: A9:71:2C:CB:7E:EE:02:4A:EB:88:76:7B:76:2E:10:93:B1:40:FF:6E Certificate issuer: /CN=A9148B6A/serialNumber=A9712CCB7EEE024AEB88767B762E1093B140FF6E Certificate serial: 1001 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qXEsy37uAkrriHZ7di4Qk7FA_24.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148B6A/0875F4964C7411E997900F55C4F9AE02/qXEsy37uAkrriHZ7di4Qk7FA_24.mft Manifest number: 0FEF Signing time: Wed 14 May 2025 17:35:13 +0000 Manifest this update: Wed 14 May 2025 17:35:13 +0000 Manifest next update: Wed 21 May 2025 17:35:13 +0000 Files and hashes: 1: qXEsy37uAkrriHZ7di4Qk7FA_24.crl (hash: v1AEgUd8ev2FKgd0N0ehKCL9SDAcLLzwO7AUw0HKaAc=) 2: 07FF4ABC5A1011EAA8B1B456C4F9AE02.roa (hash: /71nbSiWt0RVe5ogZCQfFYyxEZ4Mr3Z7iCfhqhLbM+k=) 3: 1BCA5982656311ECA4E81323C4F9AE02.roa (hash: JhAWbCAMrXKEKj1b3MlbXCTMtcBsS+XKDtYcGnLBqlU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148B6A/0875F4964C7411E997900F55C4F9AE02/qXEsy37uAkrriHZ7di4Qk7FA_24.crl rsync://rpki.apnic.net/member_repository/A9148B6A/0875F4964C7411E997900F55C4F9AE02/qXEsy37uAkrriHZ7di4Qk7FA_24.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qXEsy37uAkrriHZ7di4Qk7FA_24.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 17:35:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4097 (0x1001) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148B6A, serialNumber=A9712CCB7EEE024AEB88767B762E1093B140FF6E Validity Not Before: May 14 17:35:13 2025 GMT Not After : May 21 17:35:13 2025 GMT Subject: CN=6824d451-163a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:02:ee:3e:18:b1:4c:96:8b:c8:ca:61:ec:40: 5a:cf:a8:44:e8:54:77:7d:9d:a4:8d:f2:96:8a:5b: 80:5d:b5:a1:ee:16:40:8e:3c:06:1a:20:b9:45:76: 70:76:7a:7f:33:a4:31:e1:04:20:7e:13:a0:06:86: 59:73:e8:9c:50:a4:c1:d9:00:e7:b5:8a:7b:43:ea: 1f:c1:95:29:cb:60:01:de:87:da:74:06:15:90:f5: 38:c7:0d:ca:c9:e6:ae:b9:b7:ea:3e:4f:43:a5:23: 12:16:3b:61:14:98:a6:bb:28:6f:39:29:14:1d:b6: 26:81:20:48:3e:23:6f:75:ed:57:db:4b:75:a9:3d: 6d:f9:b2:6f:96:75:c2:21:d9:7b:26:b5:da:a3:3d: e4:85:18:95:e9:30:ff:9d:90:99:d2:59:b0:19:9a: 7d:82:b0:c2:cb:b1:7d:04:00:6b:ac:94:44:e0:10: 3f:cb:e7:c8:3a:b8:fe:94:55:6a:b2:b1:af:11:72: fa:ba:37:52:21:97:49:28:d0:95:b9:3e:67:b0:cd: c2:04:c4:c1:37:04:dc:44:44:5d:60:ad:20:4b:ef: 5e:94:17:e4:5a:a7:c4:29:76:55:5d:c2:84:b2:19: 9a:bc:a5:40:17:b5:3b:3b:30:d3:9b:1d:03:f1:a8: 9b:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:3E:F5:00:59:44:56:C6:D7:63:97:96:10:2D:DB:11:8A:DA:85:79 X509v3 Authority Key Identifier: keyid:A9:71:2C:CB:7E:EE:02:4A:EB:88:76:7B:76:2E:10:93:B1:40:FF:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148B6A/0875F4964C7411E997900F55C4F9AE02/qXEsy37uAkrriHZ7di4Qk7FA_24.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qXEsy37uAkrriHZ7di4Qk7FA_24.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148B6A/0875F4964C7411E997900F55C4F9AE02/qXEsy37uAkrriHZ7di4Qk7FA_24.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:95:21:7f:de:59:69:1c:34:19:0e:1e:b8:09:90:31:82:f5: 50:f9:ae:b7:2e:f5:73:00:d4:c5:64:ac:a9:55:5b:41:54:2b: cb:2d:40:27:1b:b4:07:4b:31:56:b6:b7:63:91:29:09:f2:36: b0:b2:9f:ca:f3:da:77:0a:94:05:6d:ee:68:59:69:67:7e:d2: be:de:37:82:ab:5e:cc:66:1f:42:f5:8b:67:7e:b9:63:b0:51: 96:fe:45:5b:af:91:55:dc:8b:92:81:46:2e:eb:99:a5:ac:50: 5c:38:9b:9e:eb:13:57:f4:79:be:60:43:77:4f:ae:aa:39:47: 13:30:58:92:74:28:3d:75:db:76:69:f0:f8:c1:61:3e:3e:da: 78:86:df:e2:bb:c2:a2:0f:d0:30:20:d3:95:82:78:d7:b6:8d: b6:d8:96:f1:13:f7:5a:b0:2a:eb:25:ec:cc:63:7b:68:7b:c7: 89:9d:61:37:99:00:0e:34:43:e9:63:05:51:ef:47:3f:d4:17: de:7e:d5:f7:00:ff:7c:6a:9d:d3:51:c2:3c:7b:f3:00:dd:20: 5d:b2:b1:5d:48:6b:c8:fe:e9:9b:9d:18:77:53:52:2c:b1:db: 28:b3:3c:ea:f5:85:98:ac:42:f6:72:db:f1:ee:ee:74:8c:30: e3:26:96:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEAEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhCNkExMTAvBgNVBAUTKEE5NzEyQ0NCN0VFRTAyNEFFQjg4NzY3Qjc2MkUxMDkz QjE0MEZGNkUwHhcNMjUwNTE0MTczNTEzWhcNMjUwNTIxMTczNTEzWjAYMRYwFAYD VQQDEw02ODI0ZDQ1MS0xNjNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1QLuPhixTJaLyMph7EBaz6hE6FR3fZ2kjfKWiluAXbWh7hZAjjwGGiC5RXZw dnp/M6Qx4QQgfhOgBoZZc+icUKTB2QDntYp7Q+ofwZUpy2AB3ofadAYVkPU4xw3K yeauubfqPk9DpSMSFjthFJimuyhvOSkUHbYmgSBIPiNvde1X20t1qT1t+bJvlnXC Idl7JrXaoz3khRiV6TD/nZCZ0lmwGZp9grDCy7F9BABrrJRE4BA/y+fIOrj+lFVq srGvEXL6ujdSIZdJKNCVuT5nsM3CBMTBNwTcRERdYK0gS+9elBfkWqfEKXZVXcKE shmavKVAF7U7OzDTmx0D8aibKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI8+9QBZ RFbG12OXlhAt2xGK2oV5MB8GA1UdIwQYMBaAFKlxLMt+7gJK64h2e3YuEJOxQP9u MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEI2QS8wODc1RjQ5NjRD NzQxMUU5OTc5MDBGNTVDNEY5QUUwMi9xWEVzeTM3dUFrcnJpSFo3ZGk0UWs3RkFf MjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FYRXN5Mzd1QWtycmlIWjdkaTRRazdGQV8yNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEI2QS8wODc1RjQ5NjRDNzQxMUU5OTc5MDBGNTVDNEY5QUUwMi9xWEVzeTM3dUFr cnJpSFo3ZGk0UWs3RkFfMjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBElSF/3llpHDQZDh64CZAxgvVQ+a63LvVzANTFZKypVVtBVCvLLUAn G7QHSzFWtrdjkSkJ8jawsp/K89p3CpQFbe5oWWlnftK+3jeCq17MZh9C9Ytnfrlj sFGW/kVbr5FV3IuSgUYu65mlrFBcOJue6xNX9Hm+YEN3T66qOUcTMFiSdCg9ddt2 afD4wWE+Ptp4ht/iu8KiD9AwINOVgnjXto222JbxE/dasCrrJezMY3toe8eJnWE3 mQAONEPpYwVR70c/1BfeftX3AP98ap3TUcI8e/MA3SBdsrFdSGvI/umbnRh3U1Is sdsoszzq9YWYrEL2ctvx7u50jDDjJpZZ -----END CERTIFICATE-----Generated at Fri May 16 12:00:02 2025 by rpki-client