$ rpki-client -vvf rpki.apnic.net/member_repository/A9188A46/D64E5A7EDC8411EFB908503BC4F9AE02/qI7iP_jXCCjO28cB54yAdH_8Eco.mft File: qI7iP_jXCCjO28cB54yAdH_8Eco.mft (raw, json) Hash identifier: hR7d8UwY+qTyaUhEbeq7rJ30+buMskN81oNZwazo2fI= Subject key identifier: 37:44:33:50:47:52:8D:05:15:0A:38:AA:63:A3:7D:74:22:E7:C7:61 Authority key identifier: A8:8E:E2:3F:F8:D7:08:28:CE:DB:C7:01:E7:8C:80:74:7F:FC:11:CA Certificate issuer: /CN=A9188A46/serialNumber=A88EE23FF8D70828CEDBC701E78C80747FFC11CA Certificate serial: 3B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qI7iP_jXCCjO28cB54yAdH_8Eco.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9188A46/D64E5A7EDC8411EFB908503BC4F9AE02/qI7iP_jXCCjO28cB54yAdH_8Eco.mft Manifest number: 39 Signing time: Sun 11 May 2025 06:18:41 +0000 Manifest this update: Sun 11 May 2025 06:18:41 +0000 Manifest next update: Sun 18 May 2025 06:18:41 +0000 Files and hashes: 1: qI7iP_jXCCjO28cB54yAdH_8Eco.crl (hash: Gm0bewwaiYh9mm8gO6N89XTerqFh3/vqihislN9DsF4=) 2: F3964710DC9611EF9965F120C4F9AE02.roa (hash: m1p9gDbyX7TV/W36Rz61piz8WXiRToAGwtHk1Dx3J+0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9188A46/D64E5A7EDC8411EFB908503BC4F9AE02/qI7iP_jXCCjO28cB54yAdH_8Eco.crl rsync://rpki.apnic.net/member_repository/A9188A46/D64E5A7EDC8411EFB908503BC4F9AE02/qI7iP_jXCCjO28cB54yAdH_8Eco.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qI7iP_jXCCjO28cB54yAdH_8Eco.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 06:18:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59 (0x3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9188A46, serialNumber=A88EE23FF8D70828CEDBC701E78C80747FFC11CA Validity Not Before: May 11 06:18:41 2025 GMT Not After : May 18 06:18:41 2025 GMT Subject: CN=68204141-3f50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:09:2e:bd:f8:07:28:d2:f2:06:49:6c:d5:16: 7f:d2:95:af:64:56:94:c6:aa:79:44:e8:67:78:25: 2c:6c:7d:c5:26:a8:13:b8:38:5a:cf:41:f3:a8:f7: 00:34:11:8b:d4:2e:d5:5d:3d:fc:48:b2:95:51:0a: 8f:b0:92:f0:c9:b3:42:f4:a8:d5:0d:c5:d1:55:f0: a5:ab:0d:46:e4:05:78:16:92:92:27:c5:c9:09:33: 03:b7:75:05:6d:64:69:20:ab:70:cb:f5:5a:61:72: 7a:05:5c:2c:7c:1c:f6:28:03:35:1f:ae:25:c1:01: 49:7e:66:49:06:82:87:22:ee:29:de:b2:c3:d4:0d: d9:71:1d:fa:7a:64:1e:fc:5c:e9:fd:11:0e:c8:e2: 12:a3:50:37:59:dd:6e:bf:19:b0:03:47:59:a0:a7: 0e:a5:1c:71:05:9e:08:95:fd:79:15:99:7b:cf:79: 24:3b:99:99:48:6c:90:c1:41:80:96:bd:fb:b8:19: 9b:ef:97:c8:30:8b:55:5a:d4:63:e9:a3:06:57:1b: 41:0e:32:b5:1b:da:3a:3e:0f:83:8b:99:8f:60:f2: 2c:16:28:58:96:73:78:3d:2d:39:b0:08:67:f4:1b: 10:c9:c8:e3:7b:90:75:29:80:ff:79:be:02:80:8a: f2:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:44:33:50:47:52:8D:05:15:0A:38:AA:63:A3:7D:74:22:E7:C7:61 X509v3 Authority Key Identifier: keyid:A8:8E:E2:3F:F8:D7:08:28:CE:DB:C7:01:E7:8C:80:74:7F:FC:11:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9188A46/D64E5A7EDC8411EFB908503BC4F9AE02/qI7iP_jXCCjO28cB54yAdH_8Eco.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qI7iP_jXCCjO28cB54yAdH_8Eco.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188A46/D64E5A7EDC8411EFB908503BC4F9AE02/qI7iP_jXCCjO28cB54yAdH_8Eco.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ca:10:d2:29:6b:c4:c0:ec:6b:87:7e:20:2a:2f:12:07:5b:2e: e1:3c:1d:e3:5f:66:6b:31:e0:af:dd:81:e4:cf:a1:db:8f:b8: 09:97:0d:5f:bf:b7:31:dd:77:73:d1:db:83:1b:13:65:44:cf: 8b:af:98:d6:4a:b7:dc:72:a4:e4:5f:8e:1e:5f:b7:16:9d:70: d2:2f:82:52:5a:83:3f:b1:0e:5e:fa:1d:0d:f8:fe:3f:dd:45: 1c:37:6d:c9:27:8a:72:ff:86:1d:47:9f:b1:7b:dc:b0:c4:90: 00:5b:0a:bf:a5:e7:9f:a4:de:d7:77:cf:86:6b:38:e8:fc:7a: 6c:fe:cc:bc:d8:b5:38:86:39:c4:5d:8c:ea:ec:78:75:70:39: 07:a4:4e:23:7b:e9:e1:e3:65:a0:70:bd:a0:13:e4:60:3c:26: 1e:92:bc:4f:c5:f9:57:fc:7c:8e:b7:21:04:3f:ff:8d:44:48: 12:3a:48:c2:86:86:95:1d:2f:93:c9:a6:34:a6:bc:69:20:e8: 07:0e:5d:f5:6d:02:84:0b:d3:fa:4b:8f:35:7c:fd:1e:4b:2d: 93:7e:b1:e5:32:6f:fd:7b:62:0b:70:64:1e:c9:50:c4:9d:ad: f8:b3:d2:33:6d:83:46:c8:af:35:94:ce:3a:4c:3f:d0:c3:85: b8:c3:90:30 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 OEE0NjExMC8GA1UEBRMoQTg4RUUyM0ZGOEQ3MDgyOENFREJDNzAxRTc4QzgwNzQ3 RkZDMTFDQTAeFw0yNTA1MTEwNjE4NDFaFw0yNTA1MTgwNjE4NDFaMBgxFjAUBgNV BAMTDTY4MjA0MTQxLTNmNTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+CS69+Aco0vIGSWzVFn/Sla9kVpTGqnlE6Gd4JSxsfcUmqBO4OFrPQfOo9wA0 EYvULtVdPfxIspVRCo+wkvDJs0L0qNUNxdFV8KWrDUbkBXgWkpInxckJMwO3dQVt ZGkgq3DL9VphcnoFXCx8HPYoAzUfriXBAUl+ZkkGgoci7inessPUDdlxHfp6ZB78 XOn9EQ7I4hKjUDdZ3W6/GbADR1mgpw6lHHEFngiV/XkVmXvPeSQ7mZlIbJDBQYCW vfu4GZvvl8gwi1Va1GPpowZXG0EOMrUb2jo+D4OLmY9g8iwWKFiWc3g9LTmwCGf0 GxDJyON7kHUpgP95vgKAivIHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUN0QzUEdS jQUVCjiqY6N9dCLnx2EwHwYDVR0jBBgwFoAUqI7iP/jXCCjO28cB54yAdH/8Ecow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg4QTQ2L0Q2NEU1QTdFREM4 NDExRUZCOTA4NTAzQkM0RjlBRTAyL3FJN2lQX2pYQ0NqTzI4Y0I1NHlBZEhfOEVj by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcUk3aVBfalhDQ2pPMjhjQjU0eUFkSF84RWNvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg4 QTQ2L0Q2NEU1QTdFREM4NDExRUZCOTA4NTAzQkM0RjlBRTAyL3FJN2lQX2pYQ0Nq TzI4Y0I1NHlBZEhfOEVjby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMoQ0ilrxMDsa4d+ICovEgdbLuE8HeNfZmsx4K/dgeTPoduPuAmXDV+/ tzHdd3PR24MbE2VEz4uvmNZKt9xypORfjh5ftxadcNIvglJagz+xDl76HQ34/j/d RRw3bckninL/hh1Hn7F73LDEkABbCr+l55+k3td3z4ZrOOj8emz+zLzYtTiGOcRd jOrseHVwOQekTiN76eHjZaBwvaAT5GA8Jh6SvE/F+Vf8fI63IQQ//41ESBI6SMKG hpUdL5PJpjSmvGkg6AcOXfVtAoQL0/pLjzV8/R5LLZN+seUyb/17YgtwZB7JUMSd rfiz0jNtg0bIrzWUzjpMP9DDhbjDkDA= -----END CERTIFICATE-----Generated at Tue May 13 01:43:12 2025 by rpki-client