$ rpki-client -vvf rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/8QiS-FRovwBO719OH6WRfwYyoEk.mft File: 8QiS-FRovwBO719OH6WRfwYyoEk.mft (raw, json) Hash identifier: VUpdsyZ0NnSA/axxjPDjJc9ngXdCjSao0FTb6iXVqhc= Subject key identifier: 40:05:32:11:39:C0:6D:D5:D5:6E:45:45:02:7B:FA:80:D3:98:70:21 Authority key identifier: F1:08:92:F8:54:68:BF:00:4E:EF:5F:4E:1F:A5:91:7F:06:32:A0:49 Certificate issuer: /CN=A915AF7A/serialNumber=F10892F85468BF004EEF5F4E1FA5917F0632A049 Certificate serial: 0140 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8QiS-FRovwBO719OH6WRfwYyoEk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/8QiS-FRovwBO719OH6WRfwYyoEk.mft Manifest number: 0722 Signing time: Mon 12 May 2025 22:50:07 +0000 Manifest this update: Mon 12 May 2025 22:50:07 +0000 Manifest next update: Mon 19 May 2025 22:50:07 +0000 Files and hashes: 1: 8QiS-FRovwBO719OH6WRfwYyoEk.crl (hash: 863gzznnDxJWnFJTGo8D+0WFaUJioLYwQdHoyG0Z0qs=) 2: 8280FB76969E11EF90AEE785C4F9AE02.roa (hash: KrHRF1GAdSejuwJPh8FeCiH4WaaXz6aXNUfwd0PIsqQ=) 3: 5B49C0145D3E11EE93D0E174C4F9AE02.roa (hash: aHhZ09FyTGWuPL21l6sEGdPpH/ZI8e7Ar6oNdRPw5Co=) 4: C73A1C1CEEC211EFBB3A3D30C4F9AE02.roa (hash: 2+pMen1/mVG17axHfaJf6K4zr5VFlLkq/JD7aEzO63s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/8QiS-FRovwBO719OH6WRfwYyoEk.crl rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/8QiS-FRovwBO719OH6WRfwYyoEk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8QiS-FRovwBO719OH6WRfwYyoEk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 22:50:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 320 (0x140) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915AF7A, serialNumber=F10892F85468BF004EEF5F4E1FA5917F0632A049 Validity Not Before: May 12 22:50:07 2025 GMT Not After : May 19 22:50:07 2025 GMT Subject: CN=68227b1f-9f99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:96:b5:77:e9:ab:25:97:a0:55:5e:1c:ce:43: f3:7d:66:41:65:f9:9e:5a:15:e3:66:52:5b:00:db: 14:87:77:76:be:47:2e:a0:c3:1b:a7:8e:da:52:26: c8:5c:67:c4:90:f9:f4:79:6f:0a:48:76:5e:2f:f5: f6:7d:67:f4:3f:4d:c4:e0:d8:8a:f1:9e:b5:85:ac: 1e:4b:58:29:48:fe:b8:a7:b2:e7:12:a2:ee:80:7f: 53:57:b4:aa:18:9e:0a:2f:72:b4:49:fc:ec:82:70: 7a:0e:e1:b6:b0:7d:63:3b:ee:10:2f:64:2a:06:16: 5d:18:46:fb:27:b2:88:84:8f:8a:7d:0f:74:d7:52: be:88:90:41:d2:ee:9d:29:dc:73:74:bc:32:d2:c9: 2e:e2:f9:3a:81:04:43:d0:c3:bb:39:9a:ef:38:0d: b3:6d:b8:1b:43:77:18:c4:6c:67:a5:22:3f:4a:ea: e0:5f:92:19:92:da:9e:c7:b8:ac:d0:9f:3a:97:1d: 99:20:24:d3:e2:cd:94:2f:ed:e4:69:96:24:59:c9: 14:88:0b:c7:3f:0d:59:5c:84:12:81:d9:02:59:39: 91:e3:57:ab:7d:56:c8:3c:af:65:30:a8:68:34:b6: 64:79:f9:ec:52:3d:f5:ca:91:ac:0c:68:6d:53:b6: 72:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:05:32:11:39:C0:6D:D5:D5:6E:45:45:02:7B:FA:80:D3:98:70:21 X509v3 Authority Key Identifier: keyid:F1:08:92:F8:54:68:BF:00:4E:EF:5F:4E:1F:A5:91:7F:06:32:A0:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/8QiS-FRovwBO719OH6WRfwYyoEk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8QiS-FRovwBO719OH6WRfwYyoEk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/8QiS-FRovwBO719OH6WRfwYyoEk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:6c:f6:30:6e:98:bd:85:4c:85:e2:e5:16:d1:c0:80:e2:fe: f6:d0:61:2b:6a:08:6a:59:b8:70:2d:f2:3e:35:a4:b5:2d:94: 14:70:86:1a:25:34:74:54:43:5d:c2:e8:bb:9c:2d:99:0e:92: b2:41:46:e1:24:0d:79:34:91:17:92:e2:48:3d:22:7e:d7:75: 4c:e0:c9:ef:e8:b5:5d:73:ce:15:e3:84:11:df:b9:14:f1:11: 8e:c2:0b:48:63:27:7f:20:e7:de:18:03:91:b3:4e:69:f8:a0: 61:9d:b2:17:1c:aa:56:d8:90:1b:89:bc:d5:63:1b:e7:2c:ef: 14:b8:c9:8d:cb:39:cf:01:25:13:ab:14:2e:74:31:c8:06:ae: c5:3d:cd:f0:14:98:d1:d4:b9:8e:3d:da:db:a2:25:09:ce:fe: e9:a8:f1:4a:c3:e6:f0:42:67:c0:d5:36:a0:0a:9c:cb:73:fc: 31:76:fe:3c:63:cb:9b:30:ed:c2:c0:39:8e:98:00:9f:6e:72: 6b:c7:63:46:89:75:f6:0e:e6:e6:1e:b8:fc:c8:27:af:61:76: e5:4b:83:cb:9a:ca:4e:18:3c:61:c1:c4:39:6b:3d:21:00:87: c9:53:68:77:da:98:36:62:da:e8:a1:24:59:06:91:10:d5:c4: f4:c8:91:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUFGN0ExMTAvBgNVBAUTKEYxMDg5MkY4NTQ2OEJGMDA0RUVGNUY0RTFGQTU5MTdG MDYzMkEwNDkwHhcNMjUwNTEyMjI1MDA3WhcNMjUwNTE5MjI1MDA3WjAYMRYwFAYD VQQDEw02ODIyN2IxZi05Zjk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0Ja1d+mrJZegVV4czkPzfWZBZfmeWhXjZlJbANsUh3d2vkcuoMMbp47aUibI XGfEkPn0eW8KSHZeL/X2fWf0P03E4NiK8Z61haweS1gpSP64p7LnEqLugH9TV7Sq GJ4KL3K0SfzsgnB6DuG2sH1jO+4QL2QqBhZdGEb7J7KIhI+KfQ9011K+iJBB0u6d KdxzdLwy0sku4vk6gQRD0MO7OZrvOA2zbbgbQ3cYxGxnpSI/SurgX5IZktqex7is 0J86lx2ZICTT4s2UL+3kaZYkWckUiAvHPw1ZXIQSgdkCWTmR41erfVbIPK9lMKho NLZkefnsUj31ypGsDGhtU7ZyEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEAFMhE5 wG3V1W5FRQJ7+oDTmHAhMB8GA1UdIwQYMBaAFPEIkvhUaL8ATu9fTh+lkX8GMqBJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QUY3QS9FMDUzMzMzNkJB QzkxMUVCQjgwN0Q1MUNDNEY5QUUwMi84UWlTLUZSb3Z3Qk83MTlPSDZXUmZ3WXlv RWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhRaVMtRlJvdndCTzcxOU9INldSZndZeW9Fay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QUY3QS9FMDUzMzMzNkJBQzkxMUVCQjgwN0Q1MUNDNEY5QUUwMi84UWlTLUZSb3Z3 Qk83MTlPSDZXUmZ3WXlvRWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKbPYwbpi9hUyF4uUW0cCA4v720GEraghqWbhwLfI+NaS1LZQUcIYa JTR0VENdwui7nC2ZDpKyQUbhJA15NJEXkuJIPSJ+13VM4Mnv6LVdc84V44QR37kU 8RGOwgtIYyd/IOfeGAORs05p+KBhnbIXHKpW2JAbibzVYxvnLO8UuMmNyznPASUT qxQudDHIBq7FPc3wFJjR1LmOPdrboiUJzv7pqPFKw+bwQmfA1TagCpzLc/wxdv48 Y8ubMO3CwDmOmACfbnJrx2NGiXX2DubmHrj8yCevYXblS4PLmspOGDxhwcQ5az0h AIfJU2h32pg2YtrooSRZBpEQ1cT0yJEQ -----END CERTIFICATE-----Generated at Tue May 13 05:27:23 2025 by rpki-client