$ rpki-client -vvf rpki.apnic.net/member_repository/A9150080/223E3A50469A11ECBE81360FC4F9AE02/bqB70D6DR6gFulr0iLMrL5oULvk.mft File: bqB70D6DR6gFulr0iLMrL5oULvk.mft (raw, json) Hash identifier: TXZKB8xC9YNCraf/IdSmbjqCcYQEpy2H0wNs9vBPIpU= Subject key identifier: B2:E4:2E:16:05:85:13:B0:B1:65:0F:58:0A:45:C3:35:1C:98:AD:1F Authority key identifier: 6E:A0:7B:D0:3E:83:47:A8:05:BA:5A:F4:88:B3:2B:2F:9A:14:2E:F9 Certificate issuer: /CN=A9150080/serialNumber=6EA07BD03E8347A805BA5AF488B32B2F9A142EF9 Certificate serial: 047D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bqB70D6DR6gFulr0iLMrL5oULvk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150080/223E3A50469A11ECBE81360FC4F9AE02/bqB70D6DR6gFulr0iLMrL5oULvk.mft Manifest number: 0476 Signing time: Thu 15 May 2025 00:09:26 +0000 Manifest this update: Thu 15 May 2025 00:09:26 +0000 Manifest next update: Thu 22 May 2025 00:09:26 +0000 Files and hashes: 1: bqB70D6DR6gFulr0iLMrL5oULvk.crl (hash: c8B++3V3NeYyzTa2sB3admt8slLVIfI7WU6McN0B6CM=) 2: A29B8E5A46A911EC8F95FC6EC4F9AE02.roa (hash: ep6/NjkJNZJDWkEDthfqanztHTbJuX44L/+Atn4MZWc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150080/223E3A50469A11ECBE81360FC4F9AE02/bqB70D6DR6gFulr0iLMrL5oULvk.crl rsync://rpki.apnic.net/member_repository/A9150080/223E3A50469A11ECBE81360FC4F9AE02/bqB70D6DR6gFulr0iLMrL5oULvk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bqB70D6DR6gFulr0iLMrL5oULvk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 00:09:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1149 (0x47d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150080, serialNumber=6EA07BD03E8347A805BA5AF488B32B2F9A142EF9 Validity Not Before: May 15 00:09:26 2025 GMT Not After : May 22 00:09:26 2025 GMT Subject: CN=682530b6-8359 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:08:80:75:db:b6:83:8f:a8:a4:21:4a:c5:50: d3:42:ca:2d:03:dc:0d:df:d4:d4:04:c8:b0:3d:5f: c7:eb:f6:76:75:d0:ff:91:5d:b1:2d:64:18:b2:59: fd:98:80:ae:fa:38:1c:8c:0f:42:cd:69:fb:b2:ce: 61:fb:95:6d:d6:fd:31:13:e6:ea:a3:c3:7d:42:51: 86:67:c7:fb:75:e4:f9:26:da:fd:c8:0c:e0:42:22: 61:25:1e:4f:db:2f:31:3b:f9:6e:65:29:99:aa:c8: 11:6f:c7:f8:d6:40:fb:ef:0d:a6:e7:a2:2b:8f:94: 4d:69:b8:1c:0f:3a:ec:d1:35:4c:46:ec:00:01:32: 7d:b3:1e:2f:94:73:22:e4:3b:33:34:15:59:2e:0f: aa:4f:46:25:9d:05:61:f4:e1:c5:c1:b8:9f:dc:28: df:1e:dd:ae:1f:4d:a3:9d:ce:df:e6:d0:3d:96:47: 48:af:b4:5c:22:9b:d7:5f:b0:63:59:8f:59:64:6d: f6:6f:48:f0:1d:9b:69:9d:73:ec:25:de:d7:ce:68: 78:43:14:33:a0:43:09:00:eb:9c:92:a7:2a:3f:b9: 51:a9:fc:36:e1:23:2e:7f:53:84:13:7f:c7:e2:0c: b3:93:e4:50:75:11:0b:b5:9f:50:8d:c2:95:96:2a: e3:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:E4:2E:16:05:85:13:B0:B1:65:0F:58:0A:45:C3:35:1C:98:AD:1F X509v3 Authority Key Identifier: keyid:6E:A0:7B:D0:3E:83:47:A8:05:BA:5A:F4:88:B3:2B:2F:9A:14:2E:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150080/223E3A50469A11ECBE81360FC4F9AE02/bqB70D6DR6gFulr0iLMrL5oULvk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bqB70D6DR6gFulr0iLMrL5oULvk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150080/223E3A50469A11ECBE81360FC4F9AE02/bqB70D6DR6gFulr0iLMrL5oULvk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:c1:02:25:12:5f:74:27:24:b8:4d:48:8b:f3:c7:3b:1d:73: 24:48:7c:0f:57:f0:33:b0:69:81:93:2f:2d:8f:a0:ab:ac:be: 4a:8b:1a:5b:5f:b3:12:04:be:31:c0:ef:da:74:2d:7a:90:22: 0f:a1:4f:33:3d:f3:9e:e5:e5:28:f6:67:e1:c2:e7:cc:50:6c: d4:38:c0:c6:8b:71:a7:b5:20:a8:0c:16:4b:b9:43:a2:4a:0b: 01:c2:40:80:d2:0f:08:4a:31:3d:6b:d0:ed:81:06:1f:54:37: 06:f7:4c:3c:dd:cd:b5:3e:32:13:4c:9b:c6:09:ea:89:4a:03: 55:77:cd:78:26:05:c6:ae:b3:9f:86:f3:68:4b:5b:96:13:1a: 8e:cf:7d:38:24:b9:91:f8:7a:eb:2a:2d:28:dc:21:c3:68:ac: b3:f8:f6:2b:1e:92:62:40:eb:80:96:3c:2f:9e:a1:60:8d:e4: 19:cd:e2:08:1c:b0:78:ef:d4:21:80:19:5d:9a:a9:eb:8d:e7: f4:84:db:9f:89:de:ac:03:b1:9b:c7:f4:79:2a:3e:4c:ec:ec: 34:ff:4d:0d:1a:22:4f:20:da:9e:c7:e6:2c:2b:02:c1:95:0f: 79:ef:9e:71:2a:14:0d:30:d8:14:11:a3:8d:b7:35:5b:25:b4: 97:3f:3c:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBH0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTAwODAxMTAvBgNVBAUTKDZFQTA3QkQwM0U4MzQ3QTgwNUJBNUFGNDg4QjMyQjJG OUExNDJFRjkwHhcNMjUwNTE1MDAwOTI2WhcNMjUwNTIyMDAwOTI2WjAYMRYwFAYD VQQDEw02ODI1MzBiNi04MzU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAugiAddu2g4+opCFKxVDTQsotA9wN39TUBMiwPV/H6/Z2ddD/kV2xLWQYsln9 mICu+jgcjA9CzWn7ss5h+5Vt1v0xE+bqo8N9QlGGZ8f7deT5Jtr9yAzgQiJhJR5P 2y8xO/luZSmZqsgRb8f41kD77w2m56Irj5RNabgcDzrs0TVMRuwAATJ9sx4vlHMi 5DszNBVZLg+qT0YlnQVh9OHFwbif3CjfHt2uH02jnc7f5tA9lkdIr7RcIpvXX7Bj WY9ZZG32b0jwHZtpnXPsJd7Xzmh4QxQzoEMJAOuckqcqP7lRqfw24SMuf1OEE3/H 4gyzk+RQdRELtZ9QjcKVlirj1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLLkLhYF hROwsWUPWApFwzUcmK0fMB8GA1UdIwQYMBaAFG6ge9A+g0eoBbpa9IizKy+aFC75 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDA4MC8yMjNFM0E1MDQ2 OUExMUVDQkU4MTM2MEZDNEY5QUUwMi9icUI3MEQ2RFI2Z0Z1bHIwaUxNckw1b1VM dmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JxQjcwRDZEUjZnRnVscjBpTE1yTDVvVUx2ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MDA4MC8yMjNFM0E1MDQ2OUExMUVDQkU4MTM2MEZDNEY5QUUwMi9icUI3MEQ2RFI2 Z0Z1bHIwaUxNckw1b1VMdmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBYwQIlEl90JyS4TUiL88c7HXMkSHwPV/AzsGmBky8tj6CrrL5Kixpb X7MSBL4xwO/adC16kCIPoU8zPfOe5eUo9mfhwufMUGzUOMDGi3GntSCoDBZLuUOi SgsBwkCA0g8ISjE9a9DtgQYfVDcG90w83c21PjITTJvGCeqJSgNVd814JgXGrrOf hvNoS1uWExqOz304JLmR+HrrKi0o3CHDaKyz+PYrHpJiQOuAljwvnqFgjeQZzeII HLB479QhgBldmqnrjef0hNufid6sA7Gbx/R5Kj5M7Ow0/00NGiJPINqex+YsKwLB lQ95755xKhQNMNgUEaONtzVbJbSXPzyx -----END CERTIFICATE-----Generated at Fri May 16 13:54:50 2025 by rpki-client