$ rpki-client -vvf rpki.apnic.net/member_repository/A914A553/95C8A3E457A311EAA935C083C4F9AE02/q0w-Na78VbW6NYykBu2WJqQiD9A.mft File: q0w-Na78VbW6NYykBu2WJqQiD9A.mft (raw, json) Hash identifier: fgz4M6PJFLba5D1S7wLD489H983fZKHQJt6/LZddW+8= Subject key identifier: CB:54:8D:1D:82:04:5F:B8:19:30:3C:F4:AA:63:63:39:FB:D2:4B:BE Authority key identifier: AB:4C:3E:35:AE:FC:55:B5:BA:35:8C:A4:06:ED:96:26:A4:22:0F:D0 Certificate issuer: /CN=A914A553/serialNumber=AB4C3E35AEFC55B5BA358CA406ED9626A4220FD0 Certificate serial: 0AAF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q0w-Na78VbW6NYykBu2WJqQiD9A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A553/95C8A3E457A311EAA935C083C4F9AE02/q0w-Na78VbW6NYykBu2WJqQiD9A.mft Manifest number: 0AA1 Signing time: Wed 14 May 2025 19:41:36 +0000 Manifest this update: Wed 14 May 2025 19:41:36 +0000 Manifest next update: Wed 21 May 2025 19:41:36 +0000 Files and hashes: 1: q0w-Na78VbW6NYykBu2WJqQiD9A.crl (hash: g1S7YG+reqQgqVQPqyKftNGFECfrEC5XA8SHjor2PIU=) 2: 7E3B7BE6B1E911EC9A0D366FC4F9AE02.roa (hash: kRz4OHfhPxe5EPvefvMi3Xao6izuUxMq6U5mJJMpf2U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A553/95C8A3E457A311EAA935C083C4F9AE02/q0w-Na78VbW6NYykBu2WJqQiD9A.crl rsync://rpki.apnic.net/member_repository/A914A553/95C8A3E457A311EAA935C083C4F9AE02/q0w-Na78VbW6NYykBu2WJqQiD9A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q0w-Na78VbW6NYykBu2WJqQiD9A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 19:41:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2735 (0xaaf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A553, serialNumber=AB4C3E35AEFC55B5BA358CA406ED9626A4220FD0 Validity Not Before: May 14 19:41:36 2025 GMT Not After : May 21 19:41:36 2025 GMT Subject: CN=6824f1f0-0343 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:11:15:97:c4:c5:3d:d8:ae:d6:3d:4a:5d:f2: 5c:f1:44:fb:96:dd:a9:0a:9f:bd:10:28:b8:0b:e5: e2:f0:50:8d:f6:2a:be:c7:cb:10:0d:d1:81:cc:b8: 6a:41:98:6d:85:c3:fb:a9:a8:a2:ca:7c:48:fe:30: 61:3e:8e:6c:76:4b:1a:80:4d:04:73:40:38:a1:d9: 65:2b:0c:67:60:c9:a1:c7:b4:ce:01:da:0f:8c:40: 66:ea:9a:72:c3:63:0e:29:b9:c5:7e:39:21:b6:3c: dc:95:93:6c:d2:11:a0:20:12:c8:da:a9:95:20:37: be:d2:67:33:67:88:a7:37:a6:c8:b6:fd:75:44:eb: e7:c0:fd:34:6f:d2:6e:35:28:c5:be:44:99:81:4b: 09:4f:b8:29:e8:ba:0f:93:ca:77:63:41:c5:ea:eb: 5c:06:1e:58:9c:4b:62:35:57:e3:90:24:c2:33:0b: a8:e2:60:6d:b1:48:cb:61:ca:66:5c:f5:18:62:f3: eb:cf:18:79:15:42:50:25:06:fe:ee:5f:80:49:8c: e9:3f:c2:6e:b6:74:f2:a8:ad:de:5f:ff:48:be:d7: 49:e2:35:67:a4:a3:26:b7:f2:9c:c9:d9:59:6b:bd: e1:97:f1:00:bc:b5:de:00:c2:97:4c:52:26:d2:d5: 17:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:54:8D:1D:82:04:5F:B8:19:30:3C:F4:AA:63:63:39:FB:D2:4B:BE X509v3 Authority Key Identifier: keyid:AB:4C:3E:35:AE:FC:55:B5:BA:35:8C:A4:06:ED:96:26:A4:22:0F:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A553/95C8A3E457A311EAA935C083C4F9AE02/q0w-Na78VbW6NYykBu2WJqQiD9A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q0w-Na78VbW6NYykBu2WJqQiD9A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A553/95C8A3E457A311EAA935C083C4F9AE02/q0w-Na78VbW6NYykBu2WJqQiD9A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:eb:73:05:88:4c:b6:b8:e2:60:06:41:30:16:1c:71:cf:59: 60:a4:3b:67:80:32:4a:4a:6d:33:29:85:ba:01:f0:f5:f3:12: ca:94:74:fc:65:12:2a:e4:c9:8e:57:83:c5:98:ed:f3:34:d7: fc:1e:fa:fb:d4:41:44:f8:f9:ef:52:09:c4:ac:0d:28:d5:1e: 6b:cc:f0:a4:64:9a:04:8a:69:89:a5:b2:b3:84:8c:60:3d:04: 1a:41:b2:5a:3b:44:74:89:2c:74:85:a3:00:ce:a0:63:fa:53: df:f3:69:7f:54:77:53:92:67:88:eb:3d:02:c3:96:e0:64:69: c0:f4:fa:4f:f8:e0:0c:4e:50:d0:7b:01:4a:fa:bf:78:7f:a6: 4a:4a:34:41:4d:58:58:7e:31:c6:71:8f:d1:9f:22:f8:35:85: a8:c3:a9:53:36:e3:37:b4:00:f1:78:8d:4e:b7:a6:a0:64:29: 49:e4:11:d2:ec:8b:39:19:ed:85:7c:b7:3c:3d:c6:ec:85:1c: 92:78:18:d7:9f:8a:b3:58:9b:6e:09:75:aa:ed:39:84:3f:80: 04:e5:db:f6:25:ca:66:a1:ba:9a:4a:54:7e:4f:b5:7d:6a:f3: 1b:18:5d:3b:db:5d:09:53:ef:2e:3d:ec:f4:d1:4a:40:56:f3: 9e:72:3b:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCq8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEE1NTMxMTAvBgNVBAUTKEFCNEMzRTM1QUVGQzU1QjVCQTM1OENBNDA2RUQ5NjI2 QTQyMjBGRDAwHhcNMjUwNTE0MTk0MTM2WhcNMjUwNTIxMTk0MTM2WjAYMRYwFAYD VQQDEw02ODI0ZjFmMC0wMzQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzREVl8TFPdiu1j1KXfJc8UT7lt2pCp+9ECi4C+Xi8FCN9iq+x8sQDdGBzLhq QZhthcP7qaiiynxI/jBhPo5sdksagE0Ec0A4odllKwxnYMmhx7TOAdoPjEBm6ppy w2MOKbnFfjkhtjzclZNs0hGgIBLI2qmVIDe+0mczZ4inN6bItv11ROvnwP00b9Ju NSjFvkSZgUsJT7gp6LoPk8p3Y0HF6utcBh5YnEtiNVfjkCTCMwuo4mBtsUjLYcpm XPUYYvPrzxh5FUJQJQb+7l+ASYzpP8JutnTyqK3eX/9IvtdJ4jVnpKMmt/KcydlZ a73hl/EAvLXeAMKXTFIm0tUXfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMtUjR2C BF+4GTA89KpjYzn70ku+MB8GA1UdIwQYMBaAFKtMPjWu/FW1ujWMpAbtliakIg/Q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTU1My85NUM4QTNFNDU3 QTMxMUVBQTkzNUMwODNDNEY5QUUwMi9xMHctTmE3OFZiVzZOWXlrQnUyV0pxUWlE OUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Ewdy1OYTc4VmJXNk5ZeWtCdTJXSnFRaUQ5QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QTU1My85NUM4QTNFNDU3QTMxMUVBQTkzNUMwODNDNEY5QUUwMi9xMHctTmE3OFZi VzZOWXlrQnUyV0pxUWlEOUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBx63MFiEy2uOJgBkEwFhxxz1lgpDtngDJKSm0zKYW6AfD18xLKlHT8 ZRIq5MmOV4PFmO3zNNf8Hvr71EFE+PnvUgnErA0o1R5rzPCkZJoEimmJpbKzhIxg PQQaQbJaO0R0iSx0haMAzqBj+lPf82l/VHdTkmeI6z0Cw5bgZGnA9PpP+OAMTlDQ ewFK+r94f6ZKSjRBTVhYfjHGcY/RnyL4NYWow6lTNuM3tADxeI1Ot6agZClJ5BHS 7Is5Ge2FfLc8PcbshRySeBjXn4qzWJtuCXWq7TmEP4AE5dv2JcpmobqaSlR+T7V9 avMbGF07210JU+8uPez00UpAVvOecjtz -----END CERTIFICATE-----Generated at Thu May 15 00:07:14 2025 by rpki-client