$ rpki-client -vvf rpki.apnic.net/member_repository/A917E4BA/D06BF32852DC11EA82601B0FC4F9AE02/qkNqr8aIBFv1FIhhVG-j_cqYQI4.mft File: qkNqr8aIBFv1FIhhVG-j_cqYQI4.mft (raw, json) Hash identifier: pFoWOL/ZujKC7J2Gpq5qsmifXF1RKqfFd6VqvY5JpDo= Subject key identifier: 41:0E:F0:F6:A8:16:EE:71:74:B8:05:E3:34:FF:5E:0D:23:7F:C8:DD Authority key identifier: AA:43:6A:AF:C6:88:04:5B:F5:14:88:61:54:6F:A3:FD:CA:98:40:8E Certificate issuer: /CN=A917E4BA/serialNumber=AA436AAFC688045BF5148861546FA3FDCA98408E Certificate serial: 0ACB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkNqr8aIBFv1FIhhVG-j_cqYQI4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E4BA/D06BF32852DC11EA82601B0FC4F9AE02/qkNqr8aIBFv1FIhhVG-j_cqYQI4.mft Manifest number: 0ABD Signing time: Mon 12 May 2025 19:21:47 +0000 Manifest this update: Mon 12 May 2025 19:21:46 +0000 Manifest next update: Mon 19 May 2025 19:21:46 +0000 Files and hashes: 1: qkNqr8aIBFv1FIhhVG-j_cqYQI4.crl (hash: xG7Xbta8SMn1NWiurY1AiEpEqqtqjZNoC8EDczr08Jc=) 2: 2512D04C22BE11EC9240097DC4F9AE02.roa (hash: En9dIPtNAsqzocSYMmtm97H1ooZs8MGknLuErJdgZyg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E4BA/D06BF32852DC11EA82601B0FC4F9AE02/qkNqr8aIBFv1FIhhVG-j_cqYQI4.crl rsync://rpki.apnic.net/member_repository/A917E4BA/D06BF32852DC11EA82601B0FC4F9AE02/qkNqr8aIBFv1FIhhVG-j_cqYQI4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkNqr8aIBFv1FIhhVG-j_cqYQI4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 19:21:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2763 (0xacb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E4BA, serialNumber=AA436AAFC688045BF5148861546FA3FDCA98408E Validity Not Before: May 12 19:21:46 2025 GMT Not After : May 19 19:21:46 2025 GMT Subject: CN=68224a4a-bfa1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:6f:1b:b4:e5:b5:05:a3:4d:c5:19:15:55:f3: 4f:e8:c5:4d:bf:0e:fd:2b:97:a2:57:f1:ad:88:bd: 31:ff:71:09:cd:08:d1:29:51:1d:67:fb:bf:0e:ec: 0e:b6:9a:c1:0a:8c:e8:ee:b8:57:eb:84:68:9f:0d: fb:bf:64:b7:a6:e7:f7:9d:a7:3b:4f:5e:3b:13:4f: d4:47:fa:98:7e:f6:4a:4c:a7:a3:b2:b1:ed:ee:6a: 1d:02:69:83:21:40:23:64:c3:47:26:63:6f:64:02: 5b:ca:6d:d9:a3:c6:35:81:62:90:fe:06:32:ef:02: 23:2f:83:ac:3b:1a:c0:e8:77:ae:8c:74:ee:6a:40: be:23:ad:29:29:a4:3f:c9:7c:2f:26:55:46:15:9e: c9:0f:97:ec:b6:cd:78:09:e8:5c:c6:a1:99:5e:cf: 50:e5:46:78:42:3d:f4:e6:18:52:90:e3:02:c0:66: 9c:0d:7e:8f:ad:2a:b9:23:3f:0f:af:43:78:0c:d0: 7d:ec:b6:34:6e:ba:0c:75:ed:8a:e5:c2:10:be:cb: 02:50:71:d7:4d:6d:83:08:51:92:85:2b:ee:04:29: 9c:97:5c:2d:7e:f7:09:74:dc:8f:4a:46:2a:aa:55: ff:a9:77:60:be:74:e4:f2:29:ab:fe:e3:fe:8e:9d: 8d:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:0E:F0:F6:A8:16:EE:71:74:B8:05:E3:34:FF:5E:0D:23:7F:C8:DD X509v3 Authority Key Identifier: keyid:AA:43:6A:AF:C6:88:04:5B:F5:14:88:61:54:6F:A3:FD:CA:98:40:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E4BA/D06BF32852DC11EA82601B0FC4F9AE02/qkNqr8aIBFv1FIhhVG-j_cqYQI4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkNqr8aIBFv1FIhhVG-j_cqYQI4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E4BA/D06BF32852DC11EA82601B0FC4F9AE02/qkNqr8aIBFv1FIhhVG-j_cqYQI4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:06:fd:42:eb:c5:78:18:47:4c:e1:64:77:99:4c:08:82:49: de:58:49:69:53:3c:90:a6:7f:05:24:2c:37:86:6c:13:02:1d: 62:4f:b0:75:5e:69:c0:0d:54:82:23:67:73:ca:78:21:a9:54: 6b:95:df:14:0a:4b:40:5d:0e:a6:60:01:e8:a4:69:fb:f1:8a: 8c:5b:f5:2c:36:de:ee:c3:65:30:cb:59:8c:8c:a7:c0:fc:b8: 6a:22:9c:3f:c9:f7:9a:6c:06:d1:e2:6e:fc:ec:f5:59:b7:ff: 1c:35:a6:fb:6a:9f:98:f6:08:f2:60:13:5f:a9:10:87:58:0e: e8:0c:c1:2a:a9:87:9d:f1:9f:b8:71:68:4c:f1:86:b1:28:37: f1:70:2c:90:95:4c:fc:1d:ea:27:ba:8a:03:93:39:ac:3b:44: 5f:b3:3e:9a:e6:79:e9:75:bc:ed:1e:d6:e9:5f:f4:7d:a3:a1: 40:a2:b0:47:66:b0:0f:21:1f:19:b6:11:8b:ea:78:71:59:b6: 66:5d:84:47:b6:84:76:30:75:f1:66:52:06:65:b1:4e:42:7e: e8:71:5c:3b:63:1e:3b:bd:ee:09:80:26:ef:0d:d4:b5:96:6d: b2:8c:0c:46:4a:17:fb:14:51:eb:6e:a4:73:0a:c7:b6:38:ac: 98:d1:47:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCsswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0U0QkExMTAvBgNVBAUTKEFBNDM2QUFGQzY4ODA0NUJGNTE0ODg2MTU0NkZBM0ZE Q0E5ODQwOEUwHhcNMjUwNTEyMTkyMTQ2WhcNMjUwNTE5MTkyMTQ2WjAYMRYwFAYD VQQDEw02ODIyNGE0YS1iZmExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyW8btOW1BaNNxRkVVfNP6MVNvw79K5eiV/GtiL0x/3EJzQjRKVEdZ/u/DuwO tprBCozo7rhX64Ronw37v2S3puf3nac7T147E0/UR/qYfvZKTKejsrHt7modAmmD IUAjZMNHJmNvZAJbym3Zo8Y1gWKQ/gYy7wIjL4OsOxrA6HeujHTuakC+I60pKaQ/ yXwvJlVGFZ7JD5fsts14CehcxqGZXs9Q5UZ4Qj305hhSkOMCwGacDX6PrSq5Iz8P r0N4DNB97LY0broMde2K5cIQvssCUHHXTW2DCFGShSvuBCmcl1wtfvcJdNyPSkYq qlX/qXdgvnTk8imr/uP+jp2NwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEEO8Pao Fu5xdLgF4zT/Xg0jf8jdMB8GA1UdIwQYMBaAFKpDaq/GiARb9RSIYVRvo/3KmECO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTRCQS9EMDZCRjMyODUy REMxMUVBODI2MDFCMEZDNEY5QUUwMi9xa05xcjhhSUJGdjFGSWhoVkctal9jcVlR STQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FrTnFyOGFJQkZ2MUZJaGhWRy1qX2NxWVFJNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTRCQS9EMDZCRjMyODUyREMxMUVBODI2MDFCMEZDNEY5QUUwMi9xa05xcjhhSUJG djFGSWhoVkctal9jcVlRSTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABBv1C68V4GEdM4WR3mUwIgkneWElpUzyQpn8FJCw3hmwTAh1iT7B1 XmnADVSCI2dzynghqVRrld8UCktAXQ6mYAHopGn78YqMW/UsNt7uw2Uwy1mMjKfA /LhqIpw/yfeabAbR4m787PVZt/8cNab7ap+Y9gjyYBNfqRCHWA7oDMEqqYed8Z+4 cWhM8YaxKDfxcCyQlUz8HeonuooDkzmsO0Rfsz6a5nnpdbztHtbpX/R9o6FAorBH ZrAPIR8ZthGL6nhxWbZmXYRHtoR2MHXxZlIGZbFOQn7ocVw7Yx47ve4JgCbvDdS1 lm2yjAxGShf7FFHrbqRzCse2OKyY0UcK -----END CERTIFICATE-----Generated at Tue May 13 12:25:03 2025 by rpki-client