$ rpki-client -vvf rpki.apnic.net/member_repository/A914D6FC/88759182432F11EDBBD98F5CC4F9AE02/qL9U9ggZZyIZNcsXzBPr-4QaYMI.mft File: qL9U9ggZZyIZNcsXzBPr-4QaYMI.mft (raw, json) Hash identifier: d172Nto0SaezI7AuWCWgso2Aa5avgil8EC4LsaLbpUA= Subject key identifier: 78:F4:E4:28:D2:93:3A:01:1B:AD:76:05:C4:78:EE:D4:17:7A:34:86 Authority key identifier: A8:BF:54:F6:08:19:67:22:19:35:CB:17:CC:13:EB:FB:84:1A:60:C2 Certificate issuer: /CN=A914D6FC/serialNumber=A8BF54F6081967221935CB17CC13EBFB841A60C2 Certificate serial: 01FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qL9U9ggZZyIZNcsXzBPr-4QaYMI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914D6FC/88759182432F11EDBBD98F5CC4F9AE02/qL9U9ggZZyIZNcsXzBPr-4QaYMI.mft Manifest number: 01F1 Signing time: Tue 13 May 2025 01:53:11 +0000 Manifest this update: Tue 13 May 2025 01:53:11 +0000 Manifest next update: Tue 20 May 2025 01:53:11 +0000 Files and hashes: 1: qL9U9ggZZyIZNcsXzBPr-4QaYMI.crl (hash: s8tIC4uV+RIh4T0lbAkZuMEa8aq05S7A0i4A7GQMVjU=) 2: 11EC50B48B8F11EF8DE96E60C4F9AE02.roa (hash: dBzmelJqZJRJwarLr24Qo4vmuBT6QmKRJnEzxT0UO6A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914D6FC/88759182432F11EDBBD98F5CC4F9AE02/qL9U9ggZZyIZNcsXzBPr-4QaYMI.crl rsync://rpki.apnic.net/member_repository/A914D6FC/88759182432F11EDBBD98F5CC4F9AE02/qL9U9ggZZyIZNcsXzBPr-4QaYMI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qL9U9ggZZyIZNcsXzBPr-4QaYMI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 01:53:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 506 (0x1fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914D6FC, serialNumber=A8BF54F6081967221935CB17CC13EBFB841A60C2 Validity Not Before: May 13 01:53:11 2025 GMT Not After : May 20 01:53:11 2025 GMT Subject: CN=6822a607-eaf6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:b3:c3:f7:96:6f:ee:5e:4f:a7:8d:75:cd:23: bc:ef:34:1b:c2:21:c0:be:2b:93:87:7c:70:17:0d: e1:1c:89:a9:1a:96:5a:cd:1d:5a:cf:44:16:ed:ee: 96:6d:5b:bd:09:b2:03:68:9f:fc:e5:e0:5e:34:74: 95:0c:ff:6c:3f:b4:6e:9c:91:a3:02:19:ce:fa:b6: 88:10:ea:5d:23:d4:0c:46:32:4e:dd:08:03:a1:b9: 2b:fc:68:6e:97:1f:6d:e0:90:b8:ed:8d:b5:da:ba: 6b:11:18:57:12:11:11:04:5d:db:7d:29:e8:c7:5e: 1f:7e:c1:c6:9a:80:76:5b:cc:fa:4f:0a:e4:7f:14: 88:5f:a9:24:96:66:5f:ac:0f:de:f9:8c:dd:60:e6: 28:08:06:b4:15:5f:d4:e5:08:bb:b6:2e:4a:a4:8d: 08:38:57:d7:83:db:5f:32:58:33:42:b2:d9:e8:42: 59:d8:49:ea:d0:05:06:54:f6:4c:6e:24:f0:8e:a9: c0:34:54:1f:a6:9c:54:50:ab:41:94:ef:e1:f7:2d: 09:8c:60:69:ad:f7:d3:e3:70:c9:cb:95:dc:72:e3: 90:b9:24:ec:a0:d7:69:f1:6c:50:b6:0c:aa:26:ab: 4b:07:df:19:a9:68:e1:92:dc:1d:37:2e:c5:d9:92: ba:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:F4:E4:28:D2:93:3A:01:1B:AD:76:05:C4:78:EE:D4:17:7A:34:86 X509v3 Authority Key Identifier: keyid:A8:BF:54:F6:08:19:67:22:19:35:CB:17:CC:13:EB:FB:84:1A:60:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914D6FC/88759182432F11EDBBD98F5CC4F9AE02/qL9U9ggZZyIZNcsXzBPr-4QaYMI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qL9U9ggZZyIZNcsXzBPr-4QaYMI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D6FC/88759182432F11EDBBD98F5CC4F9AE02/qL9U9ggZZyIZNcsXzBPr-4QaYMI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:d9:8d:83:2c:b4:89:90:e3:d9:7c:ef:44:37:b3:5d:51:cf: 1b:0f:9a:2e:6d:bc:3a:ea:b8:b7:41:01:a7:27:d5:a5:b3:01: 5f:96:81:4c:95:a6:36:2c:55:19:5e:ef:fa:ed:65:19:f6:c5: c1:a3:bc:e0:e7:a8:57:6d:fb:2c:af:d0:e6:7e:df:2e:fb:41: 16:2f:13:66:32:00:6a:f1:a9:da:e6:63:39:5f:c5:6e:b2:c1: 50:b9:07:09:ff:86:71:7a:a1:ae:e4:17:de:90:08:a6:21:5a: 01:20:cd:46:12:df:20:dc:d6:23:23:ab:cf:4f:2c:11:a1:26: d9:d0:67:10:b6:55:93:b4:d5:05:62:49:8a:85:35:c0:c1:03: 5d:19:b3:85:87:38:69:75:d1:9a:d1:68:66:57:d6:6b:5a:70: 19:da:8b:df:a7:f4:3c:c7:59:d1:81:58:6a:36:e4:9e:d9:71: 17:1b:03:60:b3:0d:7b:23:04:e3:b2:a5:ce:17:76:40:e1:72: bb:66:15:9d:c2:4f:9f:79:d7:0c:09:bb:16:2e:22:b9:09:27: 8c:3e:ae:89:96:6b:4a:d8:e6:ba:a6:66:42:40:92:8c:4c:62: 10:14:d1:f8:38:0f:a2:c2:4b:cc:2c:a2:a8:9c:73:d1:5f:19: 7f:3d:4a:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEQ2RkMxMTAvBgNVBAUTKEE4QkY1NEY2MDgxOTY3MjIxOTM1Q0IxN0NDMTNFQkZC ODQxQTYwQzIwHhcNMjUwNTEzMDE1MzExWhcNMjUwNTIwMDE1MzExWjAYMRYwFAYD VQQDEw02ODIyYTYwNy1lYWY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4bPD95Zv7l5Pp411zSO87zQbwiHAviuTh3xwFw3hHImpGpZazR1az0QW7e6W bVu9CbIDaJ/85eBeNHSVDP9sP7RunJGjAhnO+raIEOpdI9QMRjJO3QgDobkr/Ghu lx9t4JC47Y212rprERhXEhERBF3bfSnox14ffsHGmoB2W8z6TwrkfxSIX6kklmZf rA/e+YzdYOYoCAa0FV/U5Qi7ti5KpI0IOFfXg9tfMlgzQrLZ6EJZ2Enq0AUGVPZM biTwjqnANFQfppxUUKtBlO/h9y0JjGBprffT43DJy5XccuOQuSTsoNdp8WxQtgyq JqtLB98ZqWjhktwdNy7F2ZK6JQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHj05CjS kzoBG612BcR47tQXejSGMB8GA1UdIwQYMBaAFKi/VPYIGWciGTXLF8wT6/uEGmDC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RDZGQy84ODc1OTE4MjQz MkYxMUVEQkJEOThGNUNDNEY5QUUwMi9xTDlVOWdnWlp5SVpOY3NYekJQci00UWFZ TUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FMOVU5Z2daWnlJWk5jc1h6QlByLTRRYVlNSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RDZGQy84ODc1OTE4MjQzMkYxMUVEQkJEOThGNUNDNEY5QUUwMi9xTDlVOWdnWlp5 SVpOY3NYekJQci00UWFZTUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAl2Y2DLLSJkOPZfO9EN7NdUc8bD5oubbw66ri3QQGnJ9WlswFfloFM laY2LFUZXu/67WUZ9sXBo7zg56hXbfssr9Dmft8u+0EWLxNmMgBq8ana5mM5X8Vu ssFQuQcJ/4ZxeqGu5BfekAimIVoBIM1GEt8g3NYjI6vPTywRoSbZ0GcQtlWTtNUF YkmKhTXAwQNdGbOFhzhpddGa0WhmV9ZrWnAZ2ovfp/Q8x1nRgVhqNuSe2XEXGwNg sw17IwTjsqXOF3ZA4XK7ZhWdwk+fedcMCbsWLiK5CSeMPq6JlmtK2Oa6pmZCQJKM TGIQFNH4OA+iwkvMLKKonHPRXxl/PUoA -----END CERTIFICATE-----Generated at Thu May 15 00:24:38 2025 by rpki-client