$ rpki-client -vvf rpki.apnic.net/member_repository/A918779B/7CF59FAA4A7211E983912180C4F9AE02/lqQx7QZ8PrHkc8EwSsbfm3YiVaM.mft File: lqQx7QZ8PrHkc8EwSsbfm3YiVaM.mft (raw, json) Hash identifier: 4J43oKKagFaQ7sAwZA2iIdGa4u6s0qsva6bn5soxrKw= Subject key identifier: 63:30:BE:03:D7:EE:57:CF:96:C1:5A:30:23:53:42:CA:81:B5:F0:2B Authority key identifier: 96:A4:31:ED:06:7C:3E:B1:E4:73:C1:30:4A:C6:DF:9B:76:22:55:A3 Certificate issuer: /CN=A918779B/serialNumber=96A431ED067C3EB1E473C1304AC6DF9B762255A3 Certificate serial: 0FF4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lqQx7QZ8PrHkc8EwSsbfm3YiVaM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918779B/7CF59FAA4A7211E983912180C4F9AE02/lqQx7QZ8PrHkc8EwSsbfm3YiVaM.mft Manifest number: 16B7 Signing time: Wed 14 May 2025 17:34:53 +0000 Manifest this update: Wed 14 May 2025 17:34:53 +0000 Manifest next update: Wed 21 May 2025 17:34:53 +0000 Files and hashes: 1: lqQx7QZ8PrHkc8EwSsbfm3YiVaM.crl (hash: 3f5J7fPuemPY0GKwJ0g27ZDtPq5AXiASMvjseISApeQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918779B/7CF59FAA4A7211E983912180C4F9AE02/lqQx7QZ8PrHkc8EwSsbfm3YiVaM.crl rsync://rpki.apnic.net/member_repository/A918779B/7CF59FAA4A7211E983912180C4F9AE02/lqQx7QZ8PrHkc8EwSsbfm3YiVaM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lqQx7QZ8PrHkc8EwSsbfm3YiVaM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 17:34:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4084 (0xff4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918779B, serialNumber=96A431ED067C3EB1E473C1304AC6DF9B762255A3 Validity Not Before: May 14 17:34:53 2025 GMT Not After : May 21 17:34:53 2025 GMT Subject: CN=6824d43d-017b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:18:47:85:96:ab:cb:76:87:bc:a2:f3:58:49: cd:9d:47:3c:bf:cd:67:4c:24:14:fb:b8:b9:34:90: 49:b3:8f:e9:99:54:f3:c3:c7:82:bf:ed:ea:2e:d1: e7:33:95:0b:2f:d1:9c:75:4e:00:9b:bc:59:51:10: 1d:d4:05:f8:d7:0f:41:35:cd:e7:bf:81:aa:6f:8d: c2:c8:e9:93:97:d9:dd:f1:d0:14:44:cd:e8:2d:6c: 3f:a9:96:c4:ed:4a:9c:cd:9f:ce:d4:e3:1f:83:68: 05:be:90:b9:61:95:ca:17:27:bd:d2:8a:f7:d7:8a: 0d:a5:b1:26:6b:98:cd:39:69:89:49:34:88:5d:2c: 3f:9f:b7:03:27:02:d1:e2:bf:ac:21:e0:95:85:e1: 55:9f:cf:43:71:4c:ff:6e:7e:c7:dd:07:5d:99:65: 2a:3d:71:be:1a:c3:be:4d:e5:37:51:b2:f0:83:39: 2f:e8:88:da:10:52:7d:48:af:d4:18:5b:b5:ea:34: c0:ed:40:75:b1:8e:8b:59:cd:4a:d6:87:b1:f0:6c: 61:0e:dd:3d:56:39:2b:31:d8:36:3f:39:36:81:ec: ea:af:f9:71:18:53:b1:db:fd:1e:9f:4c:6e:4f:ee: 53:2a:0f:ff:d8:7f:6a:d0:40:2a:8b:50:79:98:c1: 3a:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:30:BE:03:D7:EE:57:CF:96:C1:5A:30:23:53:42:CA:81:B5:F0:2B X509v3 Authority Key Identifier: keyid:96:A4:31:ED:06:7C:3E:B1:E4:73:C1:30:4A:C6:DF:9B:76:22:55:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918779B/7CF59FAA4A7211E983912180C4F9AE02/lqQx7QZ8PrHkc8EwSsbfm3YiVaM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lqQx7QZ8PrHkc8EwSsbfm3YiVaM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918779B/7CF59FAA4A7211E983912180C4F9AE02/lqQx7QZ8PrHkc8EwSsbfm3YiVaM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:be:d0:68:e7:9b:07:03:2a:b4:4a:2f:69:7e:76:54:f5:9c: b9:55:55:dc:ad:89:95:77:9b:5c:81:e6:d8:ec:91:ac:37:c8: e0:6d:dc:0c:b3:4a:28:05:91:1a:1f:fb:f6:f1:5e:b2:df:a7: 7c:0d:7f:cf:e9:37:60:15:ba:44:54:65:ca:e3:b9:0f:77:28: 6c:af:55:c0:8a:0a:60:dc:be:1d:0c:b2:7b:81:66:2c:04:79: a3:0c:7c:3c:a5:2f:bb:cc:ac:2f:c8:07:6d:74:3a:f2:4f:45: 09:19:10:b5:b8:95:d1:65:b4:8d:41:cd:35:42:28:f5:90:f0: 6f:2b:22:8c:6a:cf:3f:ab:f4:c3:39:5b:84:dd:c0:9b:83:93: e1:8d:62:08:11:f2:d8:36:8b:b0:62:89:78:9e:15:bb:a0:3b: 0a:c2:c7:f0:1b:5c:a4:5f:56:b1:82:fe:5a:23:24:0b:be:fd: ad:64:b2:51:f2:6d:ef:cb:ec:16:af:c8:ad:e0:38:51:2c:ae: bb:cd:8b:6b:c2:5e:f2:6e:9f:c2:2c:68:bb:33:d8:a8:a0:1a: 2c:3d:fb:12:cd:34:39:79:4f:8c:a6:49:a3:de:89:a3:a7:f2: 70:d1:28:06:6c:94:5d:c0:42:f3:c6:18:45:ce:a7:ff:c1:09: 37:cc:d9:f3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD/QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODc3OUIxMTAvBgNVBAUTKDk2QTQzMUVEMDY3QzNFQjFFNDczQzEzMDRBQzZERjlC NzYyMjU1QTMwHhcNMjUwNTE0MTczNDUzWhcNMjUwNTIxMTczNDUzWjAYMRYwFAYD VQQDEw02ODI0ZDQzZC0wMTdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArxhHhZary3aHvKLzWEnNnUc8v81nTCQU+7i5NJBJs4/pmVTzw8eCv+3qLtHn M5ULL9GcdU4Am7xZURAd1AX41w9BNc3nv4Gqb43CyOmTl9nd8dAURM3oLWw/qZbE 7UqczZ/O1OMfg2gFvpC5YZXKFye90or314oNpbEma5jNOWmJSTSIXSw/n7cDJwLR 4r+sIeCVheFVn89DcUz/bn7H3QddmWUqPXG+GsO+TeU3UbLwgzkv6IjaEFJ9SK/U GFu16jTA7UB1sY6LWc1K1oex8GxhDt09VjkrMdg2Pzk2gezqr/lxGFOx2/0en0xu T+5TKg//2H9q0EAqi1B5mME6MwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGMwvgPX 7lfPlsFaMCNTQsqBtfArMB8GA1UdIwQYMBaAFJakMe0GfD6x5HPBMErG35t2IlWj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Nzc5Qi83Q0Y1OUZBQTRB NzIxMUU5ODM5MTIxODBDNEY5QUUwMi9scVF4N1FaOFBySGtjOEV3U3NiZm0zWWlW YU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xxUXg3UVo4UHJIa2M4RXdTc2JmbTNZaVZhTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Nzc5Qi83Q0Y1OUZBQTRBNzIxMUU5ODM5MTIxODBDNEY5QUUwMi9scVF4N1FaOFBy SGtjOEV3U3NiZm0zWWlWYU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCuvtBo55sHAyq0Si9pfnZU9Zy5VVXcrYmVd5tcgebY7JGsN8jgbdwM s0ooBZEaH/v28V6y36d8DX/P6TdgFbpEVGXK47kPdyhsr1XAigpg3L4dDLJ7gWYs BHmjDHw8pS+7zKwvyAdtdDryT0UJGRC1uJXRZbSNQc01Qij1kPBvKyKMas8/q/TD OVuE3cCbg5PhjWIIEfLYNouwYol4nhW7oDsKwsfwG1ykX1axgv5aIyQLvv2tZLJR 8m3vy+wWr8it4DhRLK67zYtrwl7ybp/CLGi7M9iooBosPfsSzTQ5eU+Mpkmj3omj p/Jw0SgGbJRdwELzxhhFzqf/wQk3zNnz -----END CERTIFICATE-----Generated at Fri May 16 11:57:04 2025 by rpki-client