$ rpki-client -vvf rpki.apnic.net/member_repository/A914A2CF/D61FEA9EA76611E4B1103D30C4F9AE02/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.mft File: Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.mft (raw, json) Hash identifier: 7OS7vBVe0BknTUHVmpUfXnOGgzbL+0giZrr9tnA8jc8= Subject key identifier: 5F:34:80:0F:AB:E8:D0:C0:DA:15:0F:FE:41:09:6B:89:53:AC:F8:75 Authority key identifier: 43:81:95:5E:26:5A:28:3F:85:DC:9A:44:E9:D5:13:73:12:7A:24:12 Certificate issuer: /CN=A914A2CF/serialNumber=4381955E265A283F85DC9A44E9D51373127A2412 Certificate serial: 27AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A2CF/D61FEA9EA76611E4B1103D30C4F9AE02/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.mft Manifest number: 279E Signing time: Wed 14 May 2025 15:42:51 +0000 Manifest this update: Wed 14 May 2025 15:42:51 +0000 Manifest next update: Wed 21 May 2025 15:42:51 +0000 Files and hashes: 1: Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.crl (hash: HQ8zED+PxxkHdzlNwXJ99/slBb4pGDJTOhSD+Zy3n0k=) 2: 6DAE125C54F611E79DF7E643C4F9AE02.roa (hash: h5hXtP9IbSxqcG/aS1dzRp2AGDqGhZ3NxNAa9bJM38Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A2CF/D61FEA9EA76611E4B1103D30C4F9AE02/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.crl rsync://rpki.apnic.net/member_repository/A914A2CF/D61FEA9EA76611E4B1103D30C4F9AE02/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 15:42:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10158 (0x27ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A2CF, serialNumber=4381955E265A283F85DC9A44E9D51373127A2412 Validity Not Before: May 14 15:42:51 2025 GMT Not After : May 21 15:42:51 2025 GMT Subject: CN=6824b9fb-a44a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:8c:ce:57:17:ad:49:63:d0:73:0a:12:04:6e: 35:e6:96:85:19:6f:63:78:1e:3c:48:3c:24:47:c5: 2c:c6:d2:b7:48:26:51:62:6d:8c:8b:f7:fe:35:ac: d9:d7:6e:29:23:c3:f5:12:6a:1a:56:69:72:49:a6: 0c:28:6c:41:7f:dd:b2:65:b4:2c:0f:1f:e5:1a:c4: 30:c7:7d:0c:5f:1a:a0:12:b4:52:28:67:63:22:54: 03:ad:89:29:e5:b1:52:b2:5b:b9:09:0f:cb:39:02: 79:40:72:84:16:f8:59:31:5d:1c:47:44:53:70:a7: 0e:e9:92:e7:af:5d:6a:8a:ae:56:7a:10:0b:54:b0: 0f:ad:45:80:59:b2:2a:18:22:70:b0:84:9a:ee:58: 74:95:58:46:1a:38:52:75:7c:b0:58:1a:c3:3f:ae: 60:9b:de:8d:4e:50:74:b1:1d:34:0c:60:d2:6c:9b: a2:04:61:37:65:52:d2:a7:ac:3b:fb:8b:c5:75:fd: c8:0f:0b:81:79:50:0a:9e:44:fc:b3:db:96:86:17: e2:e2:09:94:07:3c:65:86:37:52:7d:cc:ff:f6:3c: 2f:6c:ee:4a:1d:0c:df:50:fa:75:23:1b:7d:3b:ed: fb:d1:ee:c6:c0:5b:18:4c:6e:c9:bb:aa:51:8f:45: ed:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:34:80:0F:AB:E8:D0:C0:DA:15:0F:FE:41:09:6B:89:53:AC:F8:75 X509v3 Authority Key Identifier: keyid:43:81:95:5E:26:5A:28:3F:85:DC:9A:44:E9:D5:13:73:12:7A:24:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A2CF/D61FEA9EA76611E4B1103D30C4F9AE02/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A2CF/D61FEA9EA76611E4B1103D30C4F9AE02/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cf:e0:70:82:ef:e7:d1:ef:6a:d0:f3:ad:20:52:9d:8c:c2:0f: 76:53:99:1c:bb:2a:9f:90:79:0e:0c:22:68:e8:1b:da:ca:4a: db:b7:e8:ae:6a:61:8f:df:36:4a:86:25:e4:30:77:18:f6:27: 1c:19:21:6c:b9:03:ee:5d:b5:19:cc:22:26:77:c5:dc:a6:b2: 32:b6:92:be:7e:d6:52:e1:06:ee:25:4c:68:89:a3:26:d9:4f: 55:27:7b:8f:cb:83:10:fd:c8:a5:cf:18:58:73:2b:e4:ea:17: 81:6c:5e:8a:8c:19:21:3e:3b:e3:52:0c:ee:88:b2:01:36:a3: f0:fe:6e:43:6d:db:f1:3a:23:67:43:a0:62:cf:60:7a:ce:31: 49:d0:59:4c:21:65:c1:20:b3:d2:bd:2b:a0:f2:a5:9a:ab:9c: 6b:7e:00:c2:53:51:aa:35:81:db:2e:29:7f:25:ff:83:a7:22: c8:e8:cf:d2:ed:9b:a8:86:41:b6:32:94:73:61:df:00:7d:95: fa:33:fa:23:8c:d9:c0:fb:33:59:90:a8:75:6e:ac:b9:95:7a: f7:63:8e:33:21:5d:c7:73:a6:eb:53:29:da:68:1d:ef:b0:62: e9:0e:d1:91:8d:3a:58:80:9d:75:6a:63:09:db:b4:de:f7:95: 2b:10:f5:22 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJ64wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEEyQ0YxMTAvBgNVBAUTKDQzODE5NTVFMjY1QTI4M0Y4NURDOUE0NEU5RDUxMzcz MTI3QTI0MTIwHhcNMjUwNTE0MTU0MjUxWhcNMjUwNTIxMTU0MjUxWjAYMRYwFAYD VQQDEw02ODI0YjlmYi1hNDRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0YzOVxetSWPQcwoSBG415paFGW9jeB48SDwkR8UsxtK3SCZRYm2Mi/f+NazZ 124pI8P1EmoaVmlySaYMKGxBf92yZbQsDx/lGsQwx30MXxqgErRSKGdjIlQDrYkp 5bFSslu5CQ/LOQJ5QHKEFvhZMV0cR0RTcKcO6ZLnr11qiq5WehALVLAPrUWAWbIq GCJwsISa7lh0lVhGGjhSdXywWBrDP65gm96NTlB0sR00DGDSbJuiBGE3ZVLSp6w7 +4vFdf3IDwuBeVAKnkT8s9uWhhfi4gmUBzxlhjdSfcz/9jwvbO5KHQzfUPp1Ixt9 O+370e7GwFsYTG7Ju6pRj0XtcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF80gA+r 6NDA2hUP/kEJa4lTrPh1MB8GA1UdIwQYMBaAFEOBlV4mWig/hdyaROnVE3MSeiQS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTJDRi9ENjFGRUE5RUE3 NjYxMUU0QjExMDNEMzBDNEY5QUUwMi9RNEdWWGlaYUtELUYzSnBFNmRVVGN4SjZK QkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1E0R1ZYaVphS0QtRjNKcEU2ZFVUY3hKNkpCSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QTJDRi9ENjFGRUE5RUE3NjYxMUU0QjExMDNEMzBDNEY5QUUwMi9RNEdWWGlaYUtE LUYzSnBFNmRVVGN4SjZKQkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDP4HCC7+fR72rQ860gUp2Mwg92U5kcuyqfkHkODCJo6Bvaykrbt+iu amGP3zZKhiXkMHcY9iccGSFsuQPuXbUZzCImd8XcprIytpK+ftZS4QbuJUxoiaMm 2U9VJ3uPy4MQ/cilzxhYcyvk6heBbF6KjBkhPjvjUgzuiLIBNqPw/m5DbdvxOiNn Q6Biz2B6zjFJ0FlMIWXBILPSvSug8qWaq5xrfgDCU1GqNYHbLil/Jf+DpyLI6M/S 7ZuohkG2MpRzYd8AfZX6M/ojjNnA+zNZkKh1bqy5lXr3Y44zIV3Hc6brUynaaB3v sGLpDtGRjTpYgJ11amMJ27Te95UrEPUi -----END CERTIFICATE-----Generated at Thu May 15 00:31:14 2025 by rpki-client