$ rpki-client -vvf rpki.apnic.net/member_repository/A917E7C7/1A59F78E16B311EF89CFE30EC4F9AE02/sq1Q81cb2h7sB8xI2gHT83VFjSQ.mft File: sq1Q81cb2h7sB8xI2gHT83VFjSQ.mft (raw, json) Hash identifier: u2gnYn5BDejkNSdJwm9aItPcQz+GheVi3MgTwKwyjOU= Subject key identifier: 69:E7:BD:70:34:7B:08:BB:C6:76:67:31:05:DD:3C:2F:6A:4B:8F:95 Authority key identifier: B2:AD:50:F3:57:1B:DA:1E:EC:07:CC:48:DA:01:D3:F3:75:45:8D:24 Certificate issuer: /CN=A917E7C7/serialNumber=B2AD50F3571BDA1EEC07CC48DA01D3F375458D24 Certificate serial: BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sq1Q81cb2h7sB8xI2gHT83VFjSQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E7C7/1A59F78E16B311EF89CFE30EC4F9AE02/sq1Q81cb2h7sB8xI2gHT83VFjSQ.mft Manifest number: BA Signing time: Sun 11 May 2025 04:43:22 +0000 Manifest this update: Sun 11 May 2025 04:43:21 +0000 Manifest next update: Sun 18 May 2025 04:43:21 +0000 Files and hashes: 1: sq1Q81cb2h7sB8xI2gHT83VFjSQ.crl (hash: VJebMoZTuSw3SL3agaps/+K9PtU7Z4zNy0ugSDprE7o=) 2: 55291FA016B511EFA244974BC4F9AE02.roa (hash: 4G05qDBih2f7QXu4EvcFu/Hi3cjZoiJAPBz1/2wvj2Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E7C7/1A59F78E16B311EF89CFE30EC4F9AE02/sq1Q81cb2h7sB8xI2gHT83VFjSQ.crl rsync://rpki.apnic.net/member_repository/A917E7C7/1A59F78E16B311EF89CFE30EC4F9AE02/sq1Q81cb2h7sB8xI2gHT83VFjSQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sq1Q81cb2h7sB8xI2gHT83VFjSQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 04:43:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 188 (0xbc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E7C7, serialNumber=B2AD50F3571BDA1EEC07CC48DA01D3F375458D24 Validity Not Before: May 11 04:43:21 2025 GMT Not After : May 18 04:43:21 2025 GMT Subject: CN=68202ae9-1fd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:8d:d2:f3:89:e0:d6:2f:f2:30:5d:cb:ed:90: 2a:c0:6d:6c:58:42:80:0b:09:ec:d5:64:d1:36:dd: 9a:16:a5:3a:45:68:67:69:2d:b1:fa:52:dd:fb:4a: 55:62:0a:68:20:24:81:4b:6c:ed:6f:14:ac:19:9b: fa:7c:55:fe:ca:38:1e:ed:6f:3e:91:ba:64:48:97: 30:53:c3:65:98:50:4d:f6:f6:f9:91:b7:b0:9a:39: 6b:99:60:b3:7a:bc:47:c5:e8:55:cd:c3:41:41:df: 7b:63:76:a6:8f:60:f6:61:7e:e3:3f:31:bc:1a:49: c7:56:1b:a6:3b:3d:24:17:a2:14:6e:50:f7:e6:cd: 43:13:c9:6d:d0:a1:34:90:05:66:90:fe:42:21:82: e4:f0:1f:cc:6d:df:a2:3b:fe:be:d5:13:1e:0d:6c: 2b:6f:ec:64:eb:7e:db:40:c8:15:83:ec:5f:50:0a: 30:cf:5f:01:db:5f:dc:0b:6b:37:03:da:95:56:04: 9f:aa:c6:d9:08:7a:cb:72:7e:96:02:1e:b1:3f:fd: fc:6f:b2:37:88:68:37:08:69:b2:6d:39:ca:ad:70: 91:8e:40:8c:da:3e:6e:62:5d:5d:5c:db:af:4c:a2: 9d:32:11:7c:00:0b:9e:fc:98:f2:3f:fe:a8:5b:3d: 5a:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:E7:BD:70:34:7B:08:BB:C6:76:67:31:05:DD:3C:2F:6A:4B:8F:95 X509v3 Authority Key Identifier: keyid:B2:AD:50:F3:57:1B:DA:1E:EC:07:CC:48:DA:01:D3:F3:75:45:8D:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E7C7/1A59F78E16B311EF89CFE30EC4F9AE02/sq1Q81cb2h7sB8xI2gHT83VFjSQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sq1Q81cb2h7sB8xI2gHT83VFjSQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E7C7/1A59F78E16B311EF89CFE30EC4F9AE02/sq1Q81cb2h7sB8xI2gHT83VFjSQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:17:05:76:d5:20:f2:8e:b0:86:3d:75:8e:a8:c9:1b:c3:cb: cf:d4:bc:67:74:fd:5c:9f:ca:f7:88:74:7e:a8:36:18:95:2e: 36:82:16:55:1d:d5:76:65:61:ca:3c:70:d9:41:32:b0:8d:dd: 5d:90:8b:ac:d8:cf:23:a1:e3:63:9d:78:98:37:b9:44:89:0c: 1b:6d:7d:a8:5b:cf:00:53:f6:8e:9f:84:c5:b3:9d:89:6f:8b: a7:05:cd:f8:88:43:d7:f1:a4:5d:01:bc:90:57:e0:65:6f:90: 68:a4:f9:7b:d5:07:59:37:c0:0f:49:05:c1:86:e6:53:e4:f7: a9:e1:97:63:70:cf:d3:98:18:bd:5b:32:c5:d3:a9:d0:f3:1a: bc:f1:fd:a5:17:46:3f:b6:e2:e3:87:69:80:10:b9:36:98:e6: d2:90:19:6b:a3:87:26:05:7d:f3:f0:53:67:df:11:55:7b:f0: e5:a2:08:93:13:6f:85:0c:0f:1d:12:3d:57:a2:fe:a8:0e:66: 80:c8:b9:77:6c:0d:1d:17:70:bb:87:1f:7e:bf:dd:f7:86:63: ac:b0:81:4f:41:f3:5b:96:e4:ba:d5:87:fd:94:52:ad:bf:c1: 07:67:86:7b:f1:cc:5c:41:95:d1:05:8a:bf:5c:41:8e:7e:6b: 48:68:25:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0U3QzcxMTAvBgNVBAUTKEIyQUQ1MEYzNTcxQkRBMUVFQzA3Q0M0OERBMDFEM0Yz NzU0NThEMjQwHhcNMjUwNTExMDQ0MzIxWhcNMjUwNTE4MDQ0MzIxWjAYMRYwFAYD VQQDEw02ODIwMmFlOS0xZmQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAso3S84ng1i/yMF3L7ZAqwG1sWEKACwns1WTRNt2aFqU6RWhnaS2x+lLd+0pV YgpoICSBS2ztbxSsGZv6fFX+yjge7W8+kbpkSJcwU8NlmFBN9vb5kbewmjlrmWCz erxHxehVzcNBQd97Y3amj2D2YX7jPzG8GknHVhumOz0kF6IUblD35s1DE8lt0KE0 kAVmkP5CIYLk8B/Mbd+iO/6+1RMeDWwrb+xk637bQMgVg+xfUAowz18B21/cC2s3 A9qVVgSfqsbZCHrLcn6WAh6xP/38b7I3iGg3CGmybTnKrXCRjkCM2j5uYl1dXNuv TKKdMhF8AAue/JjyP/6oWz1aGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGnnvXA0 ewi7xnZnMQXdPC9qS4+VMB8GA1UdIwQYMBaAFLKtUPNXG9oe7AfMSNoB0/N1RY0k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTdDNy8xQTU5Rjc4RTE2 QjMxMUVGODlDRkUzMEVDNEY5QUUwMi9zcTFRODFjYjJoN3NCOHhJMmdIVDgzVkZq U1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NxMVE4MWNiMmg3c0I4eEkyZ0hUODNWRmpTUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTdDNy8xQTU5Rjc4RTE2QjMxMUVGODlDRkUzMEVDNEY5QUUwMi9zcTFRODFjYjJo N3NCOHhJMmdIVDgzVkZqU1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC2FwV21SDyjrCGPXWOqMkbw8vP1LxndP1cn8r3iHR+qDYYlS42ghZV HdV2ZWHKPHDZQTKwjd1dkIus2M8joeNjnXiYN7lEiQwbbX2oW88AU/aOn4TFs52J b4unBc34iEPX8aRdAbyQV+Blb5BopPl71QdZN8APSQXBhuZT5Pep4ZdjcM/TmBi9 WzLF06nQ8xq88f2lF0Y/tuLjh2mAELk2mObSkBlro4cmBX3z8FNn3xFVe/DlogiT E2+FDA8dEj1Xov6oDmaAyLl3bA0dF3C7hx9+v933hmOssIFPQfNbluS61Yf9lFKt v8EHZ4Z78cxcQZXRBYq/XEGOfmtIaCXC -----END CERTIFICATE-----Generated at Mon May 12 22:13:20 2025 by rpki-client