$ rpki-client -vvf rpki.apnic.net/member_repository/A9184324/EAA9CCD47B1C11EFAC109416C4F9AE02/qFaPUnk8w0hXhQxPLtOK4LGJcPg.mft File: qFaPUnk8w0hXhQxPLtOK4LGJcPg.mft (raw, json) Hash identifier: ByL7jh9EpNHYLsFsjsbvX++1c8aXAfVRup1lIoVHop4= Subject key identifier: 5E:46:9F:29:9F:F4:5C:89:0D:31:39:1D:38:F6:99:6F:BE:8C:7A:79 Authority key identifier: A8:56:8F:52:79:3C:C3:48:57:85:0C:4F:2E:D3:8A:E0:B1:89:70:F8 Certificate issuer: /CN=A9184324/serialNumber=A8568F52793CC34857850C4F2ED38AE0B18970F8 Certificate serial: 81 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qFaPUnk8w0hXhQxPLtOK4LGJcPg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9184324/EAA9CCD47B1C11EFAC109416C4F9AE02/qFaPUnk8w0hXhQxPLtOK4LGJcPg.mft Manifest number: 7C Signing time: Tue 13 May 2025 05:55:48 +0000 Manifest this update: Tue 13 May 2025 05:55:48 +0000 Manifest next update: Tue 20 May 2025 05:55:48 +0000 Files and hashes: 1: qFaPUnk8w0hXhQxPLtOK4LGJcPg.crl (hash: Qo2RlIDryuTsNluuWQOzxk0YJrkp6AOxcprmfZgZhRU=) 2: 4C575EBA7C4911EF8E4FFA2CC4F9AE02.roa (hash: 98w4yl1iX/DBuRnZm4wgf0B6PYVS6iqXA6ulWZHNh70=) 3: 5C8F63FE7C4911EF81434A2DC4F9AE02.roa (hash: xISmEUj+M4vxMbA55xtFZk8Qasu4uZXOcEk4pXZEXDI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9184324/EAA9CCD47B1C11EFAC109416C4F9AE02/qFaPUnk8w0hXhQxPLtOK4LGJcPg.crl rsync://rpki.apnic.net/member_repository/A9184324/EAA9CCD47B1C11EFAC109416C4F9AE02/qFaPUnk8w0hXhQxPLtOK4LGJcPg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qFaPUnk8w0hXhQxPLtOK4LGJcPg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 05:55:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 129 (0x81) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9184324, serialNumber=A8568F52793CC34857850C4F2ED38AE0B18970F8 Validity Not Before: May 13 05:55:48 2025 GMT Not After : May 20 05:55:48 2025 GMT Subject: CN=6822dee4-890f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:2f:76:0d:c3:c6:fb:51:c3:9a:56:24:4a:c3: d1:70:26:99:26:a5:f2:7b:b4:97:52:06:8f:4d:b8: f8:2e:2c:10:de:06:b6:31:9a:bd:d1:91:5f:3c:f8: 40:15:8a:4c:70:ee:3d:2e:f7:12:24:45:ba:be:42: ce:9d:fa:f0:5d:b2:a8:0b:24:82:99:e4:95:a2:79: 04:61:58:e5:a6:de:d0:1a:86:13:1f:6f:77:64:f4: 6b:02:ae:aa:84:36:3c:a3:92:ce:0b:99:d0:48:d9: a2:49:f9:39:a2:05:4d:32:25:d3:a8:e8:1f:3b:32: bc:e8:6b:86:51:ec:25:8d:07:36:fb:d6:b5:df:5d: 3b:18:56:65:77:a8:45:51:3f:c9:83:22:61:55:1f: d7:d0:b7:96:52:47:17:96:f7:35:ab:92:65:cd:61: 31:bc:db:00:fe:97:fa:99:e9:9f:10:72:a9:2c:db: 64:be:87:75:6a:9f:ee:c7:25:6a:24:76:ad:72:24: 9e:a2:2d:42:f9:e7:8d:fc:10:5e:46:5b:b9:5c:ee: 43:cc:e7:1e:ef:a2:18:45:d6:06:d2:1c:14:36:9a: cf:91:53:0e:74:a6:4b:8d:af:11:0b:4b:04:65:4c: 21:ed:45:56:c3:22:90:2d:58:82:6b:cb:3a:35:92: 0e:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:46:9F:29:9F:F4:5C:89:0D:31:39:1D:38:F6:99:6F:BE:8C:7A:79 X509v3 Authority Key Identifier: keyid:A8:56:8F:52:79:3C:C3:48:57:85:0C:4F:2E:D3:8A:E0:B1:89:70:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9184324/EAA9CCD47B1C11EFAC109416C4F9AE02/qFaPUnk8w0hXhQxPLtOK4LGJcPg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qFaPUnk8w0hXhQxPLtOK4LGJcPg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184324/EAA9CCD47B1C11EFAC109416C4F9AE02/qFaPUnk8w0hXhQxPLtOK4LGJcPg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:c1:64:9e:2a:bb:5e:a8:c8:36:8a:f4:ef:b4:7d:54:fe:c0: 50:47:04:51:d3:bf:96:bf:d6:d3:5b:81:ff:31:9a:79:09:65: 87:13:00:c9:ce:6e:fa:e0:82:6e:4d:3e:ca:85:0a:09:e4:b9: 67:d1:16:b1:ed:4a:b8:ea:1d:a0:87:eb:1d:47:0f:6c:f6:4d: 8b:12:fb:2d:b8:33:05:3a:9b:c3:c3:88:ea:7a:61:c7:17:9a: 10:81:74:d8:c8:60:f4:d1:9d:3a:db:33:7b:d0:9d:ad:ae:e5: 8f:4a:76:5d:db:16:97:45:ed:38:36:8a:f5:ef:db:3d:85:bb: bd:2d:a2:b9:3d:1c:59:5b:fc:aa:b2:c8:b4:a5:2e:56:fc:89: e3:be:07:05:27:ed:15:25:17:be:c8:6b:0c:68:15:44:e2:a7: 48:ba:df:04:8a:b5:b7:b9:00:d4:f0:3e:1d:8d:e4:40:59:ba: cb:66:8d:22:e4:ef:ac:c8:d9:a6:b1:48:e6:b2:77:60:ee:77: f8:ec:07:6b:ca:61:f1:fb:7b:1f:41:ee:5f:c6:e6:08:e3:ab: d9:6a:0a:66:b8:6d:e7:e1:91:6c:d2:e7:ef:39:2f:26:96:45: 9b:c1:4f:20:91:5e:8d:23:71:a8:1c:bd:cd:e7:09:e3:f9:e1: 8d:89:7f:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQzMjQxMTAvBgNVBAUTKEE4NTY4RjUyNzkzQ0MzNDg1Nzg1MEM0RjJFRDM4QUUw QjE4OTcwRjgwHhcNMjUwNTEzMDU1NTQ4WhcNMjUwNTIwMDU1NTQ4WjAYMRYwFAYD VQQDEw02ODIyZGVlNC04OTBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAty92DcPG+1HDmlYkSsPRcCaZJqXye7SXUgaPTbj4LiwQ3ga2MZq90ZFfPPhA FYpMcO49LvcSJEW6vkLOnfrwXbKoCySCmeSVonkEYVjlpt7QGoYTH293ZPRrAq6q hDY8o5LOC5nQSNmiSfk5ogVNMiXTqOgfOzK86GuGUewljQc2+9a13107GFZld6hF UT/JgyJhVR/X0LeWUkcXlvc1q5JlzWExvNsA/pf6memfEHKpLNtkvod1ap/uxyVq JHatciSeoi1C+eeN/BBeRlu5XO5DzOce76IYRdYG0hwUNprPkVMOdKZLja8RC0sE ZUwh7UVWwyKQLViCa8s6NZIOtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF5Gnymf 9FyJDTE5HTj2mW++jHp5MB8GA1UdIwQYMBaAFKhWj1J5PMNIV4UMTy7TiuCxiXD4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDMyNC9FQUE5Q0NENDdC MUMxMUVGQUMxMDk0MTZDNEY5QUUwMi9xRmFQVW5rOHcwaFhoUXhQTHRPSzRMR0pj UGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3FGYVBVbms4dzBoWGhReFBMdE9LNExHSmNQZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDMyNC9FQUE5Q0NENDdCMUMxMUVGQUMxMDk0MTZDNEY5QUUwMi9xRmFQVW5rOHcw aFhoUXhQTHRPSzRMR0pjUGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkwWSeKrteqMg2ivTvtH1U/sBQRwRR07+Wv9bTW4H/MZp5CWWHEwDJ zm764IJuTT7KhQoJ5Lln0Rax7Uq46h2gh+sdRw9s9k2LEvstuDMFOpvDw4jqemHH F5oQgXTYyGD00Z062zN70J2truWPSnZd2xaXRe04Nor179s9hbu9LaK5PRxZW/yq ssi0pS5W/InjvgcFJ+0VJRe+yGsMaBVE4qdIut8EirW3uQDU8D4djeRAWbrLZo0i 5O+syNmmsUjmsndg7nf47AdrymHx+3sfQe5fxuYI46vZagpmuG3n4ZFs0ufvOS8m lkWbwU8gkV6NI3GoHL3N5wnj+eGNiX+F -----END CERTIFICATE-----Generated at Wed May 14 17:52:58 2025 by rpki-client