$ rpki-client -vvf rpki.apnic.net/member_repository/A915C325/8CE7DE76137411E9A1DC1053C4F9AE02/Q0pJF1lSFr8Igp3FLC7TqPKCBIs.mft File: Q0pJF1lSFr8Igp3FLC7TqPKCBIs.mft (raw, json) Hash identifier: RgzjRdAMwUg6pN3qEbwa/gECzf0TkKFbSHEc3o/9NyA= Subject key identifier: 10:25:51:AA:39:F1:5F:1D:CD:9D:8C:41:C5:54:9F:50:20:93:E1:BA Authority key identifier: 43:4A:49:17:59:52:16:BF:08:82:9D:C5:2C:2E:D3:A8:F2:82:04:8B Certificate issuer: /CN=A915C325/serialNumber=434A4917595216BF08829DC52C2ED3A8F282048B Certificate serial: 1113 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q0pJF1lSFr8Igp3FLC7TqPKCBIs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915C325/8CE7DE76137411E9A1DC1053C4F9AE02/Q0pJF1lSFr8Igp3FLC7TqPKCBIs.mft Manifest number: 110A Signing time: Wed 14 May 2025 17:24:37 +0000 Manifest this update: Wed 14 May 2025 17:24:37 +0000 Manifest next update: Wed 21 May 2025 17:24:37 +0000 Files and hashes: 1: Q0pJF1lSFr8Igp3FLC7TqPKCBIs.crl (hash: 1MqE97cqfJSo4kuF65breK62lKHM8lR3gNQ8vfmJseM=) 2: 1ED040D0137511E98DD28353C4F9AE02.roa (hash: KtVDjjSzHPLYoect4ZHiTibts9NkJOtiflrVSKdNkLA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915C325/8CE7DE76137411E9A1DC1053C4F9AE02/Q0pJF1lSFr8Igp3FLC7TqPKCBIs.crl rsync://rpki.apnic.net/member_repository/A915C325/8CE7DE76137411E9A1DC1053C4F9AE02/Q0pJF1lSFr8Igp3FLC7TqPKCBIs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q0pJF1lSFr8Igp3FLC7TqPKCBIs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 17:24:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4371 (0x1113) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915C325, serialNumber=434A4917595216BF08829DC52C2ED3A8F282048B Validity Not Before: May 14 17:24:37 2025 GMT Not After : May 21 17:24:37 2025 GMT Subject: CN=6824d1d5-9915 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:a8:87:39:0e:2f:e1:6e:3a:19:d0:74:48:5f: 56:f7:8e:da:d6:e8:42:48:2c:e9:f7:d3:23:be:0f: fc:99:83:5b:8b:20:a3:1e:95:59:0d:1b:a2:54:0e: 4d:cf:f6:04:f1:0b:86:be:09:0d:a8:fa:ac:fd:c9: 2f:d1:c7:d2:f8:d0:a4:57:2c:26:69:b7:c3:50:e8: b6:c1:c2:54:dc:47:c4:94:50:1e:70:7e:c6:80:28: 6e:64:13:42:fa:5b:d4:2f:28:10:49:36:a7:ab:d6: 84:13:0f:d3:69:93:06:69:09:72:58:51:9e:9e:00: cc:3d:9d:01:ef:d8:bd:70:05:a2:6e:59:c7:64:ac: 70:81:cb:d4:c0:ff:24:5a:31:8e:91:72:92:56:5b: 35:10:1e:60:c7:1f:66:00:3d:49:ac:7b:90:e1:5b: 99:ed:c4:d8:66:61:4d:fa:71:95:58:8b:7f:9d:40: 67:f2:a5:dd:3c:32:0c:22:35:2a:0c:ba:2b:44:c5: e1:98:fc:07:fe:4c:04:a7:42:02:0b:54:29:d2:68: 54:fd:7e:76:d5:2c:e1:a7:ff:a6:29:da:7e:d8:66: d1:63:74:cd:49:36:ff:e2:72:67:0f:73:7f:1d:1f: 26:00:45:bf:0f:9d:c1:5e:09:f0:1a:5b:78:0d:e8: 88:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:25:51:AA:39:F1:5F:1D:CD:9D:8C:41:C5:54:9F:50:20:93:E1:BA X509v3 Authority Key Identifier: keyid:43:4A:49:17:59:52:16:BF:08:82:9D:C5:2C:2E:D3:A8:F2:82:04:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915C325/8CE7DE76137411E9A1DC1053C4F9AE02/Q0pJF1lSFr8Igp3FLC7TqPKCBIs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q0pJF1lSFr8Igp3FLC7TqPKCBIs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C325/8CE7DE76137411E9A1DC1053C4F9AE02/Q0pJF1lSFr8Igp3FLC7TqPKCBIs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:97:4c:01:ae:3e:09:62:21:67:11:8e:58:c1:45:e6:76:6e: ff:51:3d:da:30:f7:62:a6:0d:45:ce:15:42:b9:e0:f8:6e:3a: 62:6d:b7:8e:33:f8:f5:80:0e:28:9d:77:de:65:f9:1f:34:82: b4:91:52:5b:35:18:30:e2:9f:b5:33:1c:aa:b6:61:18:bb:1f: 20:ce:4f:61:a3:ec:7e:a6:4a:54:47:2d:c9:83:f1:24:40:4d: 35:44:32:33:ef:6e:a6:9d:23:fc:4b:4f:ba:b2:2d:74:33:48: 3b:ba:a3:51:83:9d:fa:53:bb:da:3c:1c:8f:42:68:e5:9e:6d: c4:51:c1:97:ff:1d:9d:0c:ad:8c:1d:c3:4e:01:2f:b0:8d:c0: 0e:7f:97:b6:5b:b3:2f:63:75:64:ce:28:14:18:8b:66:3d:b4: d5:0d:76:fc:5b:15:0b:7f:07:dd:01:4e:e8:1f:cc:cc:5d:6e: f6:c0:2b:97:65:fb:0d:ae:9b:55:67:bb:eb:85:2a:d4:9c:46: db:02:0d:85:25:ae:74:7a:3a:0c:47:81:7e:95:61:46:15:c4: b3:09:d4:eb:ad:c6:79:29:37:62:a7:07:8a:21:d4:85:4d:6e: cd:38:25:49:9e:f9:da:57:77:a4:24:ae:be:22:94:3c:37:b2: c3:2c:81:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICERMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUMzMjUxMTAvBgNVBAUTKDQzNEE0OTE3NTk1MjE2QkYwODgyOURDNTJDMkVEM0E4 RjI4MjA0OEIwHhcNMjUwNTE0MTcyNDM3WhcNMjUwNTIxMTcyNDM3WjAYMRYwFAYD VQQDEw02ODI0ZDFkNS05OTE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn6iHOQ4v4W46GdB0SF9W947a1uhCSCzp99Mjvg/8mYNbiyCjHpVZDRuiVA5N z/YE8QuGvgkNqPqs/ckv0cfS+NCkVywmabfDUOi2wcJU3EfElFAecH7GgChuZBNC +lvULygQSTanq9aEEw/TaZMGaQlyWFGengDMPZ0B79i9cAWiblnHZKxwgcvUwP8k WjGOkXKSVls1EB5gxx9mAD1JrHuQ4VuZ7cTYZmFN+nGVWIt/nUBn8qXdPDIMIjUq DLorRMXhmPwH/kwEp0ICC1Qp0mhU/X521Szhp/+mKdp+2GbRY3TNSTb/4nJnD3N/ HR8mAEW/D53BXgnwGlt4DeiIuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBAlUao5 8V8dzZ2MQcVUn1Agk+G6MB8GA1UdIwQYMBaAFENKSRdZUha/CIKdxSwu06jyggSL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QzMyNS84Q0U3REU3NjEz NzQxMUU5QTFEQzEwNTNDNEY5QUUwMi9RMHBKRjFsU0ZyOElncDNGTEM3VHFQS0NC SXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1EwcEpGMWxTRnI4SWdwM0ZMQzdUcVBLQ0JJcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QzMyNS84Q0U3REU3NjEzNzQxMUU5QTFEQzEwNTNDNEY5QUUwMi9RMHBKRjFsU0Zy OElncDNGTEM3VHFQS0NCSXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCTl0wBrj4JYiFnEY5YwUXmdm7/UT3aMPdipg1FzhVCueD4bjpibbeO M/j1gA4onXfeZfkfNIK0kVJbNRgw4p+1MxyqtmEYux8gzk9ho+x+pkpURy3Jg/Ek QE01RDIz726mnSP8S0+6si10M0g7uqNRg536U7vaPByPQmjlnm3EUcGX/x2dDK2M HcNOAS+wjcAOf5e2W7MvY3VkzigUGItmPbTVDXb8WxULfwfdAU7oH8zMXW72wCuX ZfsNrptVZ7vrhSrUnEbbAg2FJa50ejoMR4F+lWFGFcSzCdTrrcZ5KTdipweKIdSF TW7NOCVJnvnaV3ekJK6+IpQ8N7LDLIEM -----END CERTIFICATE-----Generated at Fri May 16 02:43:13 2025 by rpki-client