$ rpki-client -vvf rpki.apnic.net/member_repository/A9167F95/7D33FD3812E711F0BDB9454DC4F9AE02/qDvPbbKI6WRw000Yr7PkqBJ5GGc.mft File: qDvPbbKI6WRw000Yr7PkqBJ5GGc.mft (raw, json) Hash identifier: jeRYt0radyRO863kDRInDWX1v/MK+s9Gl5RZtFMHz54= Subject key identifier: D3:10:E8:56:BC:E8:82:BA:BE:A8:F3:09:95:22:36:8B:9D:16:5D:A7 Authority key identifier: A8:3B:CF:6D:B2:88:E9:64:70:D3:4D:18:AF:B3:E4:A8:12:79:18:67 Certificate issuer: /CN=A9167F95/serialNumber=A83BCF6DB288E96470D34D18AFB3E4A812791867 Certificate serial: 18 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qDvPbbKI6WRw000Yr7PkqBJ5GGc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167F95/7D33FD3812E711F0BDB9454DC4F9AE02/qDvPbbKI6WRw000Yr7PkqBJ5GGc.mft Manifest number: 16 Signing time: Sun 11 May 2025 06:44:46 +0000 Manifest this update: Sun 11 May 2025 06:44:45 +0000 Manifest next update: Sun 18 May 2025 06:44:45 +0000 Files and hashes: 1: qDvPbbKI6WRw000Yr7PkqBJ5GGc.crl (hash: cjimTSLVZZa0neJjBsRTCQR9AoKXyCCTyZQUaV9TqeA=) 2: CB67B90812E811F0B8DAD875C4F9AE02.roa (hash: ghA9EEgI0e+9HlkDLrK1eM2MR4ZuQ4ALmiWbqOT3M5E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167F95/7D33FD3812E711F0BDB9454DC4F9AE02/qDvPbbKI6WRw000Yr7PkqBJ5GGc.crl rsync://rpki.apnic.net/member_repository/A9167F95/7D33FD3812E711F0BDB9454DC4F9AE02/qDvPbbKI6WRw000Yr7PkqBJ5GGc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qDvPbbKI6WRw000Yr7PkqBJ5GGc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 06:44:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24 (0x18) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167F95, serialNumber=A83BCF6DB288E96470D34D18AFB3E4A812791867 Validity Not Before: May 11 06:44:45 2025 GMT Not After : May 18 06:44:45 2025 GMT Subject: CN=6820475e-7faf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b1:ba:c4:b7:2e:16:73:3a:89:9c:ed:2b:07: aa:e4:80:b5:76:f8:71:0b:ad:85:21:95:13:c9:e1: be:0c:a0:19:86:b9:87:d2:a9:ce:a3:41:a6:8a:48: 48:a8:1c:08:42:46:fc:91:5b:c8:ef:33:54:cd:2d: 27:34:13:b1:57:85:82:f0:82:09:94:1e:2c:4f:51: f8:97:25:82:3e:8e:1b:d2:81:64:f3:39:3b:ef:e8: e8:b1:f3:6f:68:5a:0e:46:10:5d:d2:b9:ea:2d:06: b5:43:4b:63:d7:3c:ff:ec:e2:70:28:bd:f2:ef:fc: df:12:96:1c:bc:9b:4b:be:e3:4a:ba:24:c9:69:fe: 08:ce:cd:a1:08:75:e4:69:49:9b:d6:67:76:6a:ca: a8:c8:8f:c9:7f:3e:d8:fc:2c:28:06:2f:82:12:fd: 6d:a6:51:b9:b4:42:86:6a:95:2f:2c:10:31:14:16: 84:78:f2:88:0b:86:fd:8b:c3:46:26:c3:81:b6:19: e9:6a:3a:16:9b:8b:97:ad:59:00:ef:5a:3f:51:8d: dc:06:b5:26:73:ed:b7:9e:91:00:5e:19:ca:52:51: f5:c7:5a:d6:d9:b9:73:49:1f:04:9f:b4:52:05:7e: 7f:ea:bf:1f:12:8e:82:b6:64:34:83:19:18:3c:8b: 74:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:10:E8:56:BC:E8:82:BA:BE:A8:F3:09:95:22:36:8B:9D:16:5D:A7 X509v3 Authority Key Identifier: keyid:A8:3B:CF:6D:B2:88:E9:64:70:D3:4D:18:AF:B3:E4:A8:12:79:18:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167F95/7D33FD3812E711F0BDB9454DC4F9AE02/qDvPbbKI6WRw000Yr7PkqBJ5GGc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qDvPbbKI6WRw000Yr7PkqBJ5GGc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167F95/7D33FD3812E711F0BDB9454DC4F9AE02/qDvPbbKI6WRw000Yr7PkqBJ5GGc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:46:e7:76:c3:6d:ca:ba:28:79:6b:2f:08:28:e2:90:66:75: 6b:20:9e:8a:d3:a8:2e:02:10:ad:71:10:93:4d:2a:3e:f3:41: bf:08:8c:c6:83:c7:a0:ce:36:6e:51:db:0f:e1:88:79:2e:e5: 0e:51:34:bd:47:70:dd:d5:02:ec:dd:ac:53:6e:64:8c:1b:16: 37:84:98:a5:44:1c:e2:c6:ab:a4:05:91:85:1d:b9:50:f9:93: af:2b:02:00:83:1c:a4:83:4b:b2:1d:2a:86:da:fa:33:bd:54: 1d:80:ad:04:a8:70:a4:4a:b4:8a:a0:c4:e1:45:b9:86:86:1e: 03:c7:19:ea:43:6d:ed:cf:66:90:99:12:25:79:08:a3:eb:8c: 3b:d2:67:77:5c:45:2f:fe:1c:78:40:cb:23:6f:67:16:ba:e7: ff:76:7b:ae:ed:cd:1c:3f:d2:3d:bb:95:26:2d:99:a9:44:97: 33:ca:17:ca:02:18:97:53:e1:82:bc:f4:8d:66:72:b5:e2:32: 69:56:14:ba:a5:4d:4b:68:67:a6:f0:21:49:82:1d:2e:fa:03: 57:3b:16:92:33:97:0d:b2:61:9b:d6:c9:11:40:b6:38:05:1a: 05:4b:ef:94:d7:8d:a8:d0:40:98:9d:61:2c:c8:34:98:53:1d: 74:97:d8:35 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 N0Y5NTExMC8GA1UEBRMoQTgzQkNGNkRCMjg4RTk2NDcwRDM0RDE4QUZCM0U0QTgx Mjc5MTg2NzAeFw0yNTA1MTEwNjQ0NDVaFw0yNTA1MTgwNjQ0NDVaMBgxFjAUBgNV BAMTDTY4MjA0NzVlLTdmYWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCosbrEty4WczqJnO0rB6rkgLV2+HELrYUhlRPJ4b4MoBmGuYfSqc6jQaaKSEio HAhCRvyRW8jvM1TNLSc0E7FXhYLwggmUHixPUfiXJYI+jhvSgWTzOTvv6Oix829o Wg5GEF3SueotBrVDS2PXPP/s4nAovfLv/N8Slhy8m0u+40q6JMlp/gjOzaEIdeRp SZvWZ3ZqyqjIj8l/Ptj8LCgGL4IS/W2mUbm0QoZqlS8sEDEUFoR48ogLhv2Lw0Ym w4G2GelqOhabi5etWQDvWj9RjdwGtSZz7beekQBeGcpSUfXHWtbZuXNJHwSftFIF fn/qvx8SjoK2ZDSDGRg8i3TlAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU0xDoVrzo grq+qPMJlSI2i50WXacwHwYDVR0jBBgwFoAUqDvPbbKI6WRw000Yr7PkqBJ5GGcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY3Rjk1LzdEMzNGRDM4MTJF NzExRjBCREI5NDU0REM0RjlBRTAyL3FEdlBiYktJNldSdzAwMFlyN1BrcUJKNUdH Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcUR2UGJiS0k2V1J3MDAwWXI3UGtxQko1R0djLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY3 Rjk1LzdEMzNGRDM4MTJFNzExRjBCREI5NDU0REM0RjlBRTAyL3FEdlBiYktJNldS dzAwMFlyN1BrcUJKNUdHYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALFG53bDbcq6KHlrLwgo4pBmdWsgnorTqC4CEK1xEJNNKj7zQb8IjMaD x6DONm5R2w/hiHku5Q5RNL1HcN3VAuzdrFNuZIwbFjeEmKVEHOLGq6QFkYUduVD5 k68rAgCDHKSDS7IdKoba+jO9VB2ArQSocKRKtIqgxOFFuYaGHgPHGepDbe3PZpCZ EiV5CKPrjDvSZ3dcRS/+HHhAyyNvZxa65/92e67tzRw/0j27lSYtmalElzPKF8oC GJdT4YK89I1mcrXiMmlWFLqlTUtoZ6bwIUmCHS76A1c7FpIzlw2yYZvWyRFAtjgF GgVL75TXjajQQJidYSzINJhTHXSX2DU= -----END CERTIFICATE-----Generated at Tue May 13 01:42:18 2025 by rpki-client