$ rpki-client -vvf rpki.apnic.net/member_repository/A914C002/C8FE0808A92511EEAC4BDB57C4F9AE02/qUOt-S08RCBEEEWA1VuTUv3h1ok.mft File: qUOt-S08RCBEEEWA1VuTUv3h1ok.mft (raw, json) Hash identifier: 7MS59GppC5od8WEKVbeqgsAwfXvcnvGxpWdAvwYh5AM= Subject key identifier: 7A:34:2D:C0:07:B6:0A:3B:53:3F:82:73:BC:1F:D2:84:9E:CB:D2:B0 Authority key identifier: A9:43:AD:F9:2D:3C:44:20:44:10:45:80:D5:5B:93:52:FD:E1:D6:89 Certificate issuer: /CN=A914C002/serialNumber=A943ADF92D3C442044104580D55B9352FDE1D689 Certificate serial: FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qUOt-S08RCBEEEWA1VuTUv3h1ok.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C002/C8FE0808A92511EEAC4BDB57C4F9AE02/qUOt-S08RCBEEEWA1VuTUv3h1ok.mft Manifest number: FC Signing time: Sat 03 May 2025 04:30:06 +0000 Manifest this update: Sat 03 May 2025 04:30:06 +0000 Manifest next update: Sat 10 May 2025 04:30:06 +0000 Files and hashes: 1: qUOt-S08RCBEEEWA1VuTUv3h1ok.crl (hash: dHM28MOpA3f1atVgaV60IDlZ3uF8JZRA+JnQA0bt1uU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C002/C8FE0808A92511EEAC4BDB57C4F9AE02/qUOt-S08RCBEEEWA1VuTUv3h1ok.crl rsync://rpki.apnic.net/member_repository/A914C002/C8FE0808A92511EEAC4BDB57C4F9AE02/qUOt-S08RCBEEEWA1VuTUv3h1ok.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qUOt-S08RCBEEEWA1VuTUv3h1ok.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 04:30:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 252 (0xfc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C002, serialNumber=A943ADF92D3C442044104580D55B9352FDE1D689 Validity Not Before: May 3 04:30:06 2025 GMT Not After : May 10 04:30:06 2025 GMT Subject: CN=68159bce-9e8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:bb:6b:44:2f:04:47:db:b7:2e:d9:78:ba:f0: b3:67:7d:12:69:49:8f:97:41:17:91:ba:82:93:98: c8:cc:42:83:f2:a6:89:dd:75:50:3d:32:30:89:33: 43:17:1f:23:ed:0e:8b:21:54:02:20:c3:f9:57:3d: 7f:17:68:d8:76:92:8c:f0:6c:2b:bc:70:98:d6:a3: 54:23:e7:9f:6b:a2:76:1e:83:05:9a:ff:48:42:8f: 35:07:eb:6b:fc:f8:a9:9d:a1:8b:b7:c0:03:ef:b1: ff:e4:1e:a2:2f:66:5d:5a:60:79:fb:00:71:37:f5: 5f:c7:ce:3c:24:a7:ee:c6:e9:67:13:5e:d8:86:be: 68:98:d5:c0:02:1f:31:da:f8:a5:0e:46:87:69:a2: bc:b0:fe:0a:c4:a9:da:e7:fa:98:92:0a:9c:21:61: a2:f0:b6:3d:a5:a9:8f:bf:a5:9b:c5:57:40:de:30: 9b:ad:72:e9:17:fd:d3:15:15:db:7f:79:a3:46:c3: 48:ee:c2:ad:83:2e:e5:27:1d:9d:b6:39:bc:90:1a: 5c:6d:23:3c:29:37:58:92:43:9b:dc:12:7f:d3:35: 1a:c1:07:75:6d:04:55:ef:84:67:10:ed:29:fd:f4: 10:6b:10:21:82:29:2b:49:7e:eb:49:5d:49:ab:a0: 56:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:34:2D:C0:07:B6:0A:3B:53:3F:82:73:BC:1F:D2:84:9E:CB:D2:B0 X509v3 Authority Key Identifier: keyid:A9:43:AD:F9:2D:3C:44:20:44:10:45:80:D5:5B:93:52:FD:E1:D6:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C002/C8FE0808A92511EEAC4BDB57C4F9AE02/qUOt-S08RCBEEEWA1VuTUv3h1ok.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qUOt-S08RCBEEEWA1VuTUv3h1ok.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C002/C8FE0808A92511EEAC4BDB57C4F9AE02/qUOt-S08RCBEEEWA1VuTUv3h1ok.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c1:b2:db:78:31:2c:cf:ac:0e:78:88:aa:de:14:cf:e6:ad:03: 7e:3b:2f:69:3d:a6:5e:ad:74:3c:a1:e0:c4:2c:3f:13:03:e7: 87:48:be:a4:97:a1:2d:cf:00:81:87:28:88:dd:d5:a2:47:cb: 1d:5f:f5:1b:c1:92:11:ff:44:ce:50:82:85:97:05:3c:81:a0: 39:8a:42:a7:f7:b0:4f:31:d8:7a:d6:cd:50:c5:4e:c0:2f:55: 89:84:0d:b5:45:1f:37:07:0a:a2:6f:f0:29:4a:1f:ea:22:b0: 91:3b:82:83:89:72:57:89:4b:b9:4d:ca:e1:02:64:39:0b:94: e1:0f:76:06:2c:e6:83:35:96:58:d1:c6:38:0e:e6:17:02:e6: 6f:45:25:b6:bf:9d:f9:be:5a:8f:72:2e:89:04:7f:7d:b4:9c: 64:eb:25:d5:c0:bd:e4:a0:82:60:32:6b:91:cf:69:29:7b:b8: 26:88:86:24:de:33:02:3e:11:76:26:c5:19:af:cf:a6:da:96: 38:b4:1d:fe:10:53:a0:c5:75:d1:06:83:76:0f:75:a6:d4:07: 40:fe:e9:49:39:39:9b:75:2a:c9:bb:cf:1f:86:1b:6b:34:ec: 25:fd:bd:a8:5e:be:7d:4b:0d:ca:76:99:48:fd:c3:21:86:ee: 79:77:c2:d4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEMwMDIxMTAvBgNVBAUTKEE5NDNBREY5MkQzQzQ0MjA0NDEwNDU4MEQ1NUI5MzUy RkRFMUQ2ODkwHhcNMjUwNTAzMDQzMDA2WhcNMjUwNTEwMDQzMDA2WjAYMRYwFAYD VQQDEw02ODE1OWJjZS05ZThhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3btrRC8ER9u3Ltl4uvCzZ30SaUmPl0EXkbqCk5jIzEKD8qaJ3XVQPTIwiTND Fx8j7Q6LIVQCIMP5Vz1/F2jYdpKM8GwrvHCY1qNUI+efa6J2HoMFmv9IQo81B+tr /PipnaGLt8AD77H/5B6iL2ZdWmB5+wBxN/Vfx848JKfuxulnE17Yhr5omNXAAh8x 2vilDkaHaaK8sP4KxKna5/qYkgqcIWGi8LY9pamPv6WbxVdA3jCbrXLpF/3TFRXb f3mjRsNI7sKtgy7lJx2dtjm8kBpcbSM8KTdYkkOb3BJ/0zUawQd1bQRV74RnEO0p /fQQaxAhgikrSX7rSV1Jq6BW/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHo0LcAH tgo7Uz+Cc7wf0oSey9KwMB8GA1UdIwQYMBaAFKlDrfktPEQgRBBFgNVbk1L94daJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzAwMi9DOEZFMDgwOEE5 MjUxMUVFQUM0QkRCNTdDNEY5QUUwMi9xVU90LVMwOFJDQkVFRVdBMVZ1VFV2M2gx b2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FVT3QtUzA4UkNCRUVFV0ExVnVUVXYzaDFvay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzAwMi9DOEZFMDgwOEE5MjUxMUVFQUM0QkRCNTdDNEY5QUUwMi9xVU90LVMwOFJD QkVFRVdBMVZ1VFV2M2gxb2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDBstt4MSzPrA54iKreFM/mrQN+Oy9pPaZerXQ8oeDELD8TA+eHSL6k l6EtzwCBhyiI3dWiR8sdX/UbwZIR/0TOUIKFlwU8gaA5ikKn97BPMdh61s1QxU7A L1WJhA21RR83Bwqib/ApSh/qIrCRO4KDiXJXiUu5TcrhAmQ5C5ThD3YGLOaDNZZY 0cY4DuYXAuZvRSW2v535vlqPci6JBH99tJxk6yXVwL3koIJgMmuRz2kpe7gmiIYk 3jMCPhF2JsUZr8+m2pY4tB3+EFOgxXXRBoN2D3Wm1AdA/ulJOTmbdSrJu88fhhtr NOwl/b2oXr59Sw3KdplI/cMhhu55d8LU -----END CERTIFICATE-----Generated at Mon May 5 02:57:41 2025 by rpki-client