$ rpki-client -vvf rpki.apnic.net/member_repository/A914E026/D6B26304F56A11E9BF2AE684C4F9AE02/qw2Hl8WKg6W0nAd6Mu9nMock5BI.mft File: qw2Hl8WKg6W0nAd6Mu9nMock5BI.mft (raw, json) Hash identifier: qMVs+Kgz4+tG/1uYWhPl33mgzyAU4SIK0Ktr1L+4wRs= Subject key identifier: 3A:4E:8F:44:CE:60:40:A1:85:8E:72:29:C3:C6:39:8E:70:D8:17:5B Authority key identifier: AB:0D:87:97:C5:8A:83:A5:B4:9C:07:7A:32:EF:67:32:87:24:E4:12 Certificate issuer: /CN=A914E026/serialNumber=AB0D8797C58A83A5B49C077A32EF67328724E412 Certificate serial: 0C83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qw2Hl8WKg6W0nAd6Mu9nMock5BI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E026/D6B26304F56A11E9BF2AE684C4F9AE02/qw2Hl8WKg6W0nAd6Mu9nMock5BI.mft Manifest number: 0C83 Signing time: Thu 08 May 2025 18:14:12 +0000 Manifest this update: Thu 08 May 2025 18:14:11 +0000 Manifest next update: Thu 15 May 2025 18:14:11 +0000 Files and hashes: 1: qw2Hl8WKg6W0nAd6Mu9nMock5BI.crl (hash: n0wwiJOYwcAxrv/8DvwHftyR0FJ5iQIoJE1cPOqdfeI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E026/D6B26304F56A11E9BF2AE684C4F9AE02/qw2Hl8WKg6W0nAd6Mu9nMock5BI.crl rsync://rpki.apnic.net/member_repository/A914E026/D6B26304F56A11E9BF2AE684C4F9AE02/qw2Hl8WKg6W0nAd6Mu9nMock5BI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qw2Hl8WKg6W0nAd6Mu9nMock5BI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 May 2025 18:14:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3203 (0xc83) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E026, serialNumber=AB0D8797C58A83A5B49C077A32EF67328724E412 Validity Not Before: May 8 18:14:11 2025 GMT Not After : May 15 18:14:11 2025 GMT Subject: CN=681cf473-e774 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:02:86:9c:16:a2:59:d6:2f:f8:aa:ef:75:a3: e0:84:77:c6:7d:1d:ba:a9:ec:f7:03:83:f7:33:21: e3:9f:be:9e:aa:36:13:de:b8:91:74:de:fb:f6:5c: e4:cf:0b:43:3b:af:cf:d9:11:8a:64:23:10:2c:f0: 15:49:0c:c1:4a:55:09:5d:b7:6b:fa:3c:54:90:5e: bb:40:a8:a3:0b:35:44:4d:b8:90:78:57:12:b8:cf: 64:95:e8:ba:ae:1e:a2:05:23:6b:99:4d:14:b0:ec: e8:c2:7b:81:63:a7:46:f8:df:17:49:b5:90:f5:bd: b3:c5:8d:7e:cf:ef:0a:9b:58:8f:10:07:f8:1a:b7: 04:bf:50:56:f8:df:5e:f8:18:14:99:3d:fd:a1:0f: be:f3:58:f2:da:aa:7a:7c:3a:1e:23:be:63:66:d1: 6c:64:97:ea:19:3b:72:e1:b6:09:2d:9e:8d:94:c6: 63:ab:2c:39:a1:c2:c1:96:ec:78:65:d3:d0:03:fc: da:a5:d8:7d:ec:02:72:76:33:ed:c8:ab:6c:91:e4: b1:44:05:e8:2e:0c:b0:8c:84:ed:15:52:2a:2c:95: 16:4f:0d:d6:98:fe:6a:60:e6:01:1a:96:1a:68:62: 92:bc:29:25:19:08:a1:83:d8:e0:98:87:f3:a8:c3: da:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:4E:8F:44:CE:60:40:A1:85:8E:72:29:C3:C6:39:8E:70:D8:17:5B X509v3 Authority Key Identifier: keyid:AB:0D:87:97:C5:8A:83:A5:B4:9C:07:7A:32:EF:67:32:87:24:E4:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E026/D6B26304F56A11E9BF2AE684C4F9AE02/qw2Hl8WKg6W0nAd6Mu9nMock5BI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qw2Hl8WKg6W0nAd6Mu9nMock5BI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E026/D6B26304F56A11E9BF2AE684C4F9AE02/qw2Hl8WKg6W0nAd6Mu9nMock5BI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:5a:cb:00:1d:7f:2f:ff:ba:49:63:54:c3:92:ff:62:6a:d6: 20:dd:bc:71:e9:5c:f8:db:ac:0d:e3:7b:e1:85:44:40:53:ab: 4e:54:c0:20:03:de:9e:4c:f2:73:39:47:e9:b4:db:c6:39:d4: 5a:18:94:c3:d0:90:65:01:e7:75:10:74:31:a2:90:45:14:a0: d7:b1:a6:f6:ac:cb:58:c4:a9:4e:f1:95:b2:22:e9:0e:4d:44: 4d:93:0e:af:58:76:b1:a2:97:5c:79:85:fc:92:12:37:d3:4f: 78:13:af:05:e8:b3:d8:8c:3e:61:81:ae:5f:68:c4:a1:61:1c: e4:fe:5c:0f:c6:3d:66:f3:62:8d:9b:01:3d:02:3b:98:64:3a: 98:eb:1c:ab:af:01:3d:16:dd:51:76:6f:99:fc:ed:83:a4:9a: 48:4f:a0:e2:7c:0f:db:9c:ca:99:e5:6b:85:0e:c6:41:1c:a8: 5b:83:42:3e:1a:e8:02:a0:84:96:79:0c:d7:08:2d:d0:72:12: de:19:df:c0:ce:26:59:f2:ec:ec:0d:47:58:65:a3:d5:81:ca: 71:58:d0:30:cc:59:f2:7b:68:22:42:e3:51:6f:4e:93:fa:f8: c5:04:60:20:83:80:bf:7f:64:65:f8:46:f0:13:6b:f1:89:38: c3:dc:0a:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDIMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEUwMjYxMTAvBgNVBAUTKEFCMEQ4Nzk3QzU4QTgzQTVCNDlDMDc3QTMyRUY2NzMy ODcyNEU0MTIwHhcNMjUwNTA4MTgxNDExWhcNMjUwNTE1MTgxNDExWjAYMRYwFAYD VQQDEw02ODFjZjQ3My1lNzc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwQKGnBaiWdYv+KrvdaPghHfGfR26qez3A4P3MyHjn76eqjYT3riRdN779lzk zwtDO6/P2RGKZCMQLPAVSQzBSlUJXbdr+jxUkF67QKijCzVETbiQeFcSuM9klei6 rh6iBSNrmU0UsOzownuBY6dG+N8XSbWQ9b2zxY1+z+8Km1iPEAf4GrcEv1BW+N9e +BgUmT39oQ++81jy2qp6fDoeI75jZtFsZJfqGTty4bYJLZ6NlMZjqyw5ocLBlux4 ZdPQA/zapdh97AJydjPtyKtskeSxRAXoLgywjITtFVIqLJUWTw3WmP5qYOYBGpYa aGKSvCklGQihg9jgmIfzqMPa3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDpOj0TO YEChhY5yKcPGOY5w2BdbMB8GA1UdIwQYMBaAFKsNh5fFioOltJwHejLvZzKHJOQS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTAyNi9ENkIyNjMwNEY1 NkExMUU5QkYyQUU2ODRDNEY5QUUwMi9xdzJIbDhXS2c2VzBuQWQ2TXU5bk1vY2s1 QkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3F3MkhsOFdLZzZXMG5BZDZNdTluTW9jazVCSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTAyNi9ENkIyNjMwNEY1NkExMUU5QkYyQUU2ODRDNEY5QUUwMi9xdzJIbDhXS2c2 VzBuQWQ2TXU5bk1vY2s1QkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWWssAHX8v/7pJY1TDkv9iatYg3bxx6Vz426wN43vhhURAU6tOVMAg A96eTPJzOUfptNvGOdRaGJTD0JBlAed1EHQxopBFFKDXsab2rMtYxKlO8ZWyIukO TURNkw6vWHaxopdceYX8khI30094E68F6LPYjD5hga5faMShYRzk/lwPxj1m82KN mwE9AjuYZDqY6xyrrwE9Ft1Rdm+Z/O2DpJpIT6DifA/bnMqZ5WuFDsZBHKhbg0I+ GugCoISWeQzXCC3QchLeGd/AziZZ8uzsDUdYZaPVgcpxWNAwzFnye2giQuNRb06T +vjFBGAgg4C/f2Rl+EbwE2vxiTjD3Arv -----END CERTIFICATE-----Generated at Fri May 9 23:55:28 2025 by rpki-client