$ rpki-client -vvf rpki.apnic.net/member_repository/A9188F72/CAAF0D4C0E2C11F08F1D6981C4F9AE02/qpCd6zVb4xTwVTIZQw0JrOLY53E.mft File: qpCd6zVb4xTwVTIZQw0JrOLY53E.mft (raw, json) Hash identifier: 8fNNB/9wlM4MpohS4d44j9E4iY/FE0yJ8QAaKAl5OQQ= Subject key identifier: 7F:27:8E:AB:5A:56:CA:C7:25:AF:86:C0:FF:4D:F9:89:28:7F:C5:49 Authority key identifier: AA:90:9D:EB:35:5B:E3:14:F0:55:32:19:43:0D:09:AC:E2:D8:E7:71 Certificate issuer: /CN=A9188F72/serialNumber=AA909DEB355BE314F0553219430D09ACE2D8E771 Certificate serial: 1A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qpCd6zVb4xTwVTIZQw0JrOLY53E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9188F72/CAAF0D4C0E2C11F08F1D6981C4F9AE02/qpCd6zVb4xTwVTIZQw0JrOLY53E.mft Manifest number: 1A Signing time: Tue 13 May 2025 07:13:22 +0000 Manifest this update: Tue 13 May 2025 07:13:21 +0000 Manifest next update: Tue 20 May 2025 07:13:21 +0000 Files and hashes: 1: qpCd6zVb4xTwVTIZQw0JrOLY53E.crl (hash: HWcViNBxL1dOW2gMW9ktgKtdmq7twN5sFd4qrJXDlNU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9188F72/CAAF0D4C0E2C11F08F1D6981C4F9AE02/qpCd6zVb4xTwVTIZQw0JrOLY53E.crl rsync://rpki.apnic.net/member_repository/A9188F72/CAAF0D4C0E2C11F08F1D6981C4F9AE02/qpCd6zVb4xTwVTIZQw0JrOLY53E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qpCd6zVb4xTwVTIZQw0JrOLY53E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 07:13:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26 (0x1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9188F72, serialNumber=AA909DEB355BE314F0553219430D09ACE2D8E771 Validity Not Before: May 13 07:13:21 2025 GMT Not After : May 20 07:13:21 2025 GMT Subject: CN=6822f112-c350 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:53:62:73:6a:f4:27:41:35:b8:6c:91:7a:ea: 23:b2:d2:88:e8:5f:c6:0f:ae:1a:0d:51:3f:4d:e4: aa:dd:19:a8:93:ec:a0:1a:41:0a:48:2a:8a:84:00: 12:04:31:5a:a8:03:e6:96:ce:71:2b:89:99:dd:36: 25:c5:83:35:0c:b8:5b:5f:29:6c:9e:cf:63:db:2c: af:24:f9:b5:98:0d:eb:07:b4:0e:83:82:ff:a9:48: 8a:49:40:9f:36:92:71:51:a9:7a:c5:4f:cf:bf:90: d1:b6:5f:5d:88:28:5b:09:05:af:59:78:73:5c:7a: d8:27:0c:6b:3d:70:9d:8c:21:da:4b:16:a9:35:ad: 43:2b:39:8e:52:fc:04:79:3e:9d:c5:53:2e:43:a9: 04:71:45:52:ba:ae:50:fa:39:0c:ac:a3:27:50:79: 4e:66:52:4a:14:70:5d:c2:60:be:d7:a0:49:f6:6f: cf:77:14:fe:44:4a:ad:71:eb:85:19:5a:ec:49:c1: 6b:f6:b3:38:db:bc:d7:e8:66:0d:b1:b7:26:d0:03: 32:81:be:60:d9:a1:40:cd:8a:6f:da:da:25:4e:91: aa:85:b6:5f:88:40:5a:c1:fd:68:06:60:54:34:2e: 45:d9:79:01:d2:2e:23:df:76:e0:72:da:a6:03:12: 59:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:27:8E:AB:5A:56:CA:C7:25:AF:86:C0:FF:4D:F9:89:28:7F:C5:49 X509v3 Authority Key Identifier: keyid:AA:90:9D:EB:35:5B:E3:14:F0:55:32:19:43:0D:09:AC:E2:D8:E7:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9188F72/CAAF0D4C0E2C11F08F1D6981C4F9AE02/qpCd6zVb4xTwVTIZQw0JrOLY53E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qpCd6zVb4xTwVTIZQw0JrOLY53E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188F72/CAAF0D4C0E2C11F08F1D6981C4F9AE02/qpCd6zVb4xTwVTIZQw0JrOLY53E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:96:eb:13:a3:8a:5c:4e:9e:5e:54:ca:d1:34:a3:88:4a:1d: 32:69:a0:3b:a1:33:10:70:c9:e2:8e:ac:0a:e5:94:d5:90:c2: b8:6b:ed:f5:0b:76:bf:80:00:46:67:c7:e4:7a:ca:01:f9:7f: ed:7c:85:7c:df:85:13:bd:ae:85:22:69:b5:d2:35:28:90:7e: 50:24:fa:ae:b9:81:65:08:e9:cd:9a:75:94:7a:a3:8a:d0:cb: 8a:57:ae:e1:a8:c1:b2:cd:81:63:39:91:94:af:d5:c3:92:bf: 5d:b8:bd:3a:69:e6:e9:02:83:91:a8:23:c4:32:92:c0:ca:b6: e0:64:ce:a3:05:99:ab:8a:32:e7:e1:5c:a2:d4:c9:75:0d:9e: 23:67:b5:99:cb:ee:bb:fa:63:10:f4:4f:89:87:75:48:ed:b5: 23:47:25:18:ce:0d:e4:a9:2d:f0:af:ab:4c:2a:91:6b:42:6f: 97:73:7a:99:6a:3f:a9:d1:d4:33:bd:ff:21:1b:0f:f0:22:4b: 86:47:c6:db:d6:01:4b:c4:81:a0:a8:0f:af:46:0f:17:86:92: ce:f0:ff:29:ce:27:ae:3d:fd:74:65:99:cd:11:8c:94:ad:7a: a6:60:d1:d7:2c:1f:bd:83:36:e6:36:04:4f:26:b7:8a:24:60: 49:5e:6b:15 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 OEY3MjExMC8GA1UEBRMoQUE5MDlERUIzNTVCRTMxNEYwNTUzMjE5NDMwRDA5QUNF MkQ4RTc3MTAeFw0yNTA1MTMwNzEzMjFaFw0yNTA1MjAwNzEzMjFaMBgxFjAUBgNV BAMTDTY4MjJmMTEyLWMzNTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDIU2JzavQnQTW4bJF66iOy0ojoX8YPrhoNUT9N5KrdGaiT7KAaQQpIKoqEABIE MVqoA+aWznEriZndNiXFgzUMuFtfKWyez2PbLK8k+bWYDesHtA6Dgv+pSIpJQJ82 knFRqXrFT8+/kNG2X12IKFsJBa9ZeHNcetgnDGs9cJ2MIdpLFqk1rUMrOY5S/AR5 Pp3FUy5DqQRxRVK6rlD6OQysoydQeU5mUkoUcF3CYL7XoEn2b893FP5ESq1x64UZ WuxJwWv2szjbvNfoZg2xtybQAzKBvmDZoUDNim/a2iVOkaqFtl+IQFrB/WgGYFQ0 LkXZeQHSLiPfduBy2qYDElkvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUfyeOq1pW ysclr4bA/035iSh/xUkwHwYDVR0jBBgwFoAUqpCd6zVb4xTwVTIZQw0JrOLY53Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg4RjcyL0NBQUYwRDRDMEUy QzExRjA4RjFENjk4MUM0RjlBRTAyL3FwQ2Q2elZiNHhUd1ZUSVpRdzBKck9MWTUz RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcXBDZDZ6VmI0eFR3VlRJWlF3MEpyT0xZNTNFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg4 RjcyL0NBQUYwRDRDMEUyQzExRjA4RjFENjk4MUM0RjlBRTAyL3FwQ2Q2elZiNHhU d1ZUSVpRdzBKck9MWTUzRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACmW6xOjilxOnl5UytE0o4hKHTJpoDuhMxBwyeKOrArllNWQwrhr7fUL dr+AAEZnx+R6ygH5f+18hXzfhRO9roUiabXSNSiQflAk+q65gWUI6c2adZR6o4rQ y4pXruGowbLNgWM5kZSv1cOSv124vTpp5ukCg5GoI8QyksDKtuBkzqMFmauKMufh XKLUyXUNniNntZnL7rv6YxD0T4mHdUjttSNHJRjODeSpLfCvq0wqkWtCb5dzeplq P6nR1DO9/yEbD/AiS4ZHxtvWAUvEgaCoD69GDxeGks7w/ynOJ649/XRlmc0RjJSt eqZg0dcsH72DNuY2BE8mt4okYEleaxU= -----END CERTIFICATE-----Generated at Tue May 13 17:19:39 2025 by rpki-client