$ rpki-client -vvf rpki.apnic.net/member_repository/A917C1DC/B2D1DE20594F11EB88F7A73EC4F9AE02/qNV21K-7ZARbsClWQbmUJ9f4ePI.mft File: qNV21K-7ZARbsClWQbmUJ9f4ePI.mft (raw, json) Hash identifier: CwpALB4twyZsXJFth7XA7IKE25gU93QgqteRpOLKpsM= Subject key identifier: FF:A8:99:1A:68:C6:5C:34:5F:37:AF:04:CD:6C:EF:9D:FD:07:8A:28 Authority key identifier: A8:D5:76:D4:AF:BB:64:04:5B:B0:29:56:41:B9:94:27:D7:F8:78:F2 Certificate issuer: /CN=A917C1DC/serialNumber=A8D576D4AFBB64045BB0295641B99427D7F878F2 Certificate serial: 0739 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qNV21K-7ZARbsClWQbmUJ9f4ePI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C1DC/B2D1DE20594F11EB88F7A73EC4F9AE02/qNV21K-7ZARbsClWQbmUJ9f4ePI.mft Manifest number: 06F7 Signing time: Sat 10 May 2025 21:43:49 +0000 Manifest this update: Sat 10 May 2025 21:43:48 +0000 Manifest next update: Sat 17 May 2025 21:43:48 +0000 Files and hashes: 1: qNV21K-7ZARbsClWQbmUJ9f4ePI.crl (hash: gOwF7b3pomHxVgPDhhiuY2wcIyWLsCQNsxmQ9tgR9jM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C1DC/B2D1DE20594F11EB88F7A73EC4F9AE02/qNV21K-7ZARbsClWQbmUJ9f4ePI.crl rsync://rpki.apnic.net/member_repository/A917C1DC/B2D1DE20594F11EB88F7A73EC4F9AE02/qNV21K-7ZARbsClWQbmUJ9f4ePI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qNV21K-7ZARbsClWQbmUJ9f4ePI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 18:24:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1849 (0x739) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C1DC, serialNumber=A8D576D4AFBB64045BB0295641B99427D7F878F2 Validity Not Before: May 10 21:43:48 2025 GMT Not After : May 17 21:43:48 2025 GMT Subject: CN=681fc894-7f9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f3:7c:9b:03:ff:a0:d2:f5:c8:f6:4d:ae:1c: a0:b4:66:e5:2b:41:e9:5c:f6:0a:9e:55:58:b4:13: fb:90:05:b1:25:bf:cf:f2:4e:15:4b:b2:0a:38:ae: 63:c6:a3:d8:4f:ee:5b:99:82:58:5f:e2:b1:50:d3: 99:35:b6:06:2c:bb:f1:a2:b9:5e:58:e3:8b:4d:ac: 30:1b:95:c6:48:38:66:d2:17:e8:94:4a:2e:0b:ec: 61:00:68:33:97:75:dd:8c:ed:f4:f1:65:66:d0:55: a4:74:17:75:7b:80:4b:06:5d:09:91:1e:e8:5f:2d: 3e:58:09:2c:67:24:c1:33:ed:a0:c5:3a:46:a3:21: a3:da:fb:16:05:46:bd:12:80:5a:96:8b:10:ef:41: 0d:01:52:0a:67:95:f5:48:73:59:36:fb:ad:5e:76: 7a:f2:79:c9:45:8b:4b:0e:fe:c6:d4:d4:ec:be:63: 6d:92:53:38:a8:3e:7d:67:d7:79:bc:6c:82:d7:20: 13:78:a9:6f:b1:2a:e5:f1:88:4a:1a:b5:6a:5a:17: c0:3c:6c:c8:6a:2f:38:39:9d:2f:b0:bc:8a:44:18: 62:e1:b2:89:f2:de:46:87:7d:3b:97:5a:ca:17:52: 2b:ad:22:33:b1:9a:f3:ee:5e:06:39:71:69:a3:73: ae:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:A8:99:1A:68:C6:5C:34:5F:37:AF:04:CD:6C:EF:9D:FD:07:8A:28 X509v3 Authority Key Identifier: keyid:A8:D5:76:D4:AF:BB:64:04:5B:B0:29:56:41:B9:94:27:D7:F8:78:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C1DC/B2D1DE20594F11EB88F7A73EC4F9AE02/qNV21K-7ZARbsClWQbmUJ9f4ePI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qNV21K-7ZARbsClWQbmUJ9f4ePI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C1DC/B2D1DE20594F11EB88F7A73EC4F9AE02/qNV21K-7ZARbsClWQbmUJ9f4ePI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:e0:67:fe:18:5c:fe:97:97:bd:bc:28:00:bd:1a:05:02:54: 65:4c:80:e3:81:cd:66:8d:cb:de:02:67:64:07:6e:58:dd:ad: 25:4c:51:49:9c:27:a2:72:b1:d7:ac:65:a9:04:bc:3e:0b:5f: 6a:7d:19:59:5c:21:13:30:37:26:cf:8f:d9:21:be:e8:35:e5: a9:31:50:b5:cd:10:4f:02:56:10:ab:b8:2c:51:04:ce:02:37: af:d3:ba:57:7a:2a:62:36:5d:80:f2:94:86:1e:dc:ed:39:11: 24:65:52:03:95:a8:00:75:0a:eb:a4:47:a1:15:a6:f2:54:ca: dd:ff:12:ea:c4:1c:d6:56:6e:5c:af:88:a2:81:cb:d6:eb:55: a2:98:21:62:1c:65:00:d2:44:a9:d4:ca:79:c4:91:e2:21:5c: b8:02:33:01:5c:d2:57:e1:00:e7:59:6c:e2:03:c8:2a:09:6c: 54:a1:31:59:da:de:f2:a6:fc:d2:9a:b4:dd:d2:81:87:66:90: b0:8b:db:c6:1c:d8:4d:ea:2b:c6:0c:03:ce:25:9e:0b:cd:ca: 6d:93:df:bf:e8:8f:4f:8e:f8:07:fd:3e:a2:1b:8b:ed:48:9b: ba:aa:da:71:5d:bf:1a:65:02:bc:a2:e5:c0:b6:c0:17:58:c6: a5:b4:11:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBzkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0MxREMxMTAvBgNVBAUTKEE4RDU3NkQ0QUZCQjY0MDQ1QkIwMjk1NjQxQjk5NDI3 RDdGODc4RjIwHhcNMjUwNTEwMjE0MzQ4WhcNMjUwNTE3MjE0MzQ4WjAYMRYwFAYD VQQDEw02ODFmYzg5NC03ZjljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw/N8mwP/oNL1yPZNrhygtGblK0HpXPYKnlVYtBP7kAWxJb/P8k4VS7IKOK5j xqPYT+5bmYJYX+KxUNOZNbYGLLvxorleWOOLTawwG5XGSDhm0hfolEouC+xhAGgz l3XdjO308WVm0FWkdBd1e4BLBl0JkR7oXy0+WAksZyTBM+2gxTpGoyGj2vsWBUa9 EoBalosQ70ENAVIKZ5X1SHNZNvutXnZ68nnJRYtLDv7G1NTsvmNtklM4qD59Z9d5 vGyC1yATeKlvsSrl8YhKGrVqWhfAPGzIai84OZ0vsLyKRBhi4bKJ8t5Gh307l1rK F1IrrSIzsZrz7l4GOXFpo3OudwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP+omRpo xlw0XzevBM1s7539B4ooMB8GA1UdIwQYMBaAFKjVdtSvu2QEW7ApVkG5lCfX+Hjy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzFEQy9CMkQxREUyMDU5 NEYxMUVCODhGN0E3M0VDNEY5QUUwMi9xTlYyMUstN1pBUmJzQ2xXUWJtVUo5ZjRl UEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FOVjIxSy03WkFSYnNDbFdRYm1VSjlmNGVQSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzFEQy9CMkQxREUyMDU5NEYxMUVCODhGN0E3M0VDNEY5QUUwMi9xTlYyMUstN1pB UmJzQ2xXUWJtVUo5ZjRlUEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCs4Gf+GFz+l5e9vCgAvRoFAlRlTIDjgc1mjcveAmdkB25Y3a0lTFFJ nCeicrHXrGWpBLw+C19qfRlZXCETMDcmz4/ZIb7oNeWpMVC1zRBPAlYQq7gsUQTO Ajev07pXeipiNl2A8pSGHtztOREkZVIDlagAdQrrpEehFabyVMrd/xLqxBzWVm5c r4iigcvW61WimCFiHGUA0kSp1Mp5xJHiIVy4AjMBXNJX4QDnWWziA8gqCWxUoTFZ 2t7ypvzSmrTd0oGHZpCwi9vGHNhN6ivGDAPOJZ4Lzcptk9+/6I9PjvgH/T6iG4vt SJu6qtpxXb8aZQK8ouXAtsAXWMaltBGA -----END CERTIFICATE-----Generated at Sun May 11 00:54:56 2025 by rpki-client