$ rpki-client -vvf rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/tqI-MrRTWVFhXOpKsbaBZQ1pTLc.mft File: tqI-MrRTWVFhXOpKsbaBZQ1pTLc.mft (raw, json) Hash identifier: kOrkkzvJZMV898diggAaJ7p7z0dMJ+1hcUaaQ3Y3CbM= Subject key identifier: 10:CE:1C:2F:FC:BF:22:0B:F6:5A:0F:AE:50:07:4A:57:F4:32:73:10 Authority key identifier: B6:A2:3E:32:B4:53:59:51:61:5C:EA:4A:B1:B6:81:65:0D:69:4C:B7 Certificate issuer: /CN=A9185B41/serialNumber=B6A23E32B4535951615CEA4AB1B681650D694CB7 Certificate serial: 0A3B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tqI-MrRTWVFhXOpKsbaBZQ1pTLc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/tqI-MrRTWVFhXOpKsbaBZQ1pTLc.mft Manifest number: 122E Signing time: Sat 10 May 2025 19:28:22 +0000 Manifest this update: Sat 10 May 2025 19:28:22 +0000 Manifest next update: Sat 17 May 2025 19:28:22 +0000 Files and hashes: 1: tqI-MrRTWVFhXOpKsbaBZQ1pTLc.crl (hash: LgEiCt8PK5uaUCgXnvJL6yD+cx59seEHK5WqN38wLxY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/tqI-MrRTWVFhXOpKsbaBZQ1pTLc.crl rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/tqI-MrRTWVFhXOpKsbaBZQ1pTLc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tqI-MrRTWVFhXOpKsbaBZQ1pTLc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 19:28:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2619 (0xa3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185B41, serialNumber=B6A23E32B4535951615CEA4AB1B681650D694CB7 Validity Not Before: May 10 19:28:22 2025 GMT Not After : May 17 19:28:22 2025 GMT Subject: CN=681fa8d6-b7f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:25:cc:2e:66:45:b8:27:a7:31:8a:a5:b2:5a: 4f:7a:da:ab:b0:f1:44:f9:2b:83:72:7e:2c:63:8c: e8:44:62:cd:cd:9b:44:ca:03:c9:39:4c:e9:ca:d8: 55:3f:85:f8:10:d8:39:cf:29:84:f7:b1:fc:d3:d7: 1a:7b:27:7d:5f:d8:aa:3c:90:b5:78:96:df:5f:94: c5:6c:b8:0d:57:08:94:d4:e5:54:41:fb:99:2e:b3: bf:71:e3:8e:ff:f0:53:34:0c:d7:9c:fd:0b:83:36: 77:8b:89:3c:c0:e6:08:3d:63:d1:98:db:3e:aa:d6: 23:a8:2c:4a:9a:ab:d1:57:db:b6:30:bc:5b:82:2b: 23:ad:25:6b:6f:00:23:c8:b7:40:99:1a:ea:70:74: 7c:ec:5e:6d:8e:d7:4b:2a:af:d0:1f:4f:47:11:c2: 6a:e0:6d:1d:b6:3c:ef:95:c2:5d:e6:64:cf:8c:cb: 14:cc:1c:7c:ff:9d:b9:46:be:24:26:df:50:ba:97: ce:bc:2d:38:48:57:9c:9b:65:f8:9b:69:45:54:ca: 8d:15:a8:af:e8:27:55:6d:ad:19:75:88:54:73:c8: db:26:55:85:65:71:33:e0:e2:f0:4c:70:bd:f0:e4: 0c:55:c3:e7:c2:13:c1:d1:d8:d0:c3:03:a1:8d:a3: 1a:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:CE:1C:2F:FC:BF:22:0B:F6:5A:0F:AE:50:07:4A:57:F4:32:73:10 X509v3 Authority Key Identifier: keyid:B6:A2:3E:32:B4:53:59:51:61:5C:EA:4A:B1:B6:81:65:0D:69:4C:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/tqI-MrRTWVFhXOpKsbaBZQ1pTLc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tqI-MrRTWVFhXOpKsbaBZQ1pTLc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/tqI-MrRTWVFhXOpKsbaBZQ1pTLc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:ad:6d:ac:10:c4:da:09:ae:e9:f4:9f:22:7e:b7:c3:f8:a9: 31:66:8e:28:45:d5:c6:08:dd:f7:d0:b5:e1:05:6b:a8:7e:63: 3d:81:c7:be:c6:e5:b2:46:a8:93:72:a9:5c:72:bc:81:22:2f: 6d:35:57:e9:7b:44:4f:a8:75:68:3d:7c:06:45:70:bf:7f:f3: 1d:c5:50:e6:37:6c:35:39:cc:d8:8a:b2:58:68:06:a1:a8:e6: 13:58:99:c7:af:64:2d:be:6d:81:ae:61:77:4d:f6:32:ab:64: d0:0c:0d:fe:d7:0c:a4:31:2e:ab:e9:6a:e2:e8:50:6f:52:f1: d5:fd:10:87:14:3f:71:ff:56:90:1d:54:4c:bb:79:be:23:40: 6b:bb:b7:ca:cb:a6:20:6d:0f:3f:20:67:6a:f2:ff:14:1f:12: 31:1c:64:32:c2:5b:d0:a4:91:1e:d3:71:ed:ec:f9:d7:16:aa: e4:49:67:53:0f:7a:58:9b:83:5b:56:de:f2:70:05:8e:62:d1: 53:72:3a:54:34:b2:90:5a:0a:35:02:1f:23:87:7e:86:ba:7f: 49:b2:85:04:1a:7e:9f:c8:21:a7:9c:ab:8f:cb:d3:39:29:d5: c1:83:5d:bf:ee:08:8c:81:e5:d7:40:72:40:f3:0e:1e:bb:91: ac:4d:2e:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCjswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODVCNDExMTAvBgNVBAUTKEI2QTIzRTMyQjQ1MzU5NTE2MTVDRUE0QUIxQjY4MTY1 MEQ2OTRDQjcwHhcNMjUwNTEwMTkyODIyWhcNMjUwNTE3MTkyODIyWjAYMRYwFAYD VQQDEw02ODFmYThkNi1iN2Y3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxSXMLmZFuCenMYqlslpPetqrsPFE+SuDcn4sY4zoRGLNzZtEygPJOUzpythV P4X4ENg5zymE97H809caeyd9X9iqPJC1eJbfX5TFbLgNVwiU1OVUQfuZLrO/ceOO //BTNAzXnP0LgzZ3i4k8wOYIPWPRmNs+qtYjqCxKmqvRV9u2MLxbgisjrSVrbwAj yLdAmRrqcHR87F5tjtdLKq/QH09HEcJq4G0dtjzvlcJd5mTPjMsUzBx8/525Rr4k Jt9QupfOvC04SFecm2X4m2lFVMqNFaiv6CdVba0ZdYhUc8jbJlWFZXEz4OLwTHC9 8OQMVcPnwhPB0djQwwOhjaMaMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBDOHC/8 vyIL9loPrlAHSlf0MnMQMB8GA1UdIwQYMBaAFLaiPjK0U1lRYVzqSrG2gWUNaUy3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUI0MS9BMUVEQ0ZGRTY3 OTkxMUVBQjY3QjM0ODRDNEY5QUUwMi90cUktTXJSVFdWRmhYT3BLc2JhQlpRMXBU TGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RxSS1NclJUV1ZGaFhPcEtzYmFCWlExcFRMYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NUI0MS9BMUVEQ0ZGRTY3OTkxMUVBQjY3QjM0ODRDNEY5QUUwMi90cUktTXJSVFdW RmhYT3BLc2JhQlpRMXBUTGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJrW2sEMTaCa7p9J8ifrfD+KkxZo4oRdXGCN330LXhBWuofmM9gce+ xuWyRqiTcqlccryBIi9tNVfpe0RPqHVoPXwGRXC/f/MdxVDmN2w1OczYirJYaAah qOYTWJnHr2Qtvm2BrmF3TfYyq2TQDA3+1wykMS6r6Wri6FBvUvHV/RCHFD9x/1aQ HVRMu3m+I0Bru7fKy6YgbQ8/IGdq8v8UHxIxHGQywlvQpJEe03Ht7PnXFqrkSWdT D3pYm4NbVt7ycAWOYtFTcjpUNLKQWgo1Ah8jh36Gun9JsoUEGn6fyCGnnKuPy9M5 KdXBg12/7giMgeXXQHJA8w4eu5GsTS5y -----END CERTIFICATE-----Generated at Mon May 12 20:48:56 2025 by rpki-client