$ rpki-client -vvf rpki.apnic.net/member_repository/A918D0E6/D8ADD9423F3711EAA786434BC4F9AE02/dQWoa19PqlBUPSSMbwhUxQWu3A8.mft File: dQWoa19PqlBUPSSMbwhUxQWu3A8.mft (raw, json) Hash identifier: o5ey9+3mU/XUxshZIgy3+8WdjAezwMYZTDluKlUoEs0= Subject key identifier: 09:82:D6:0E:9C:5B:FA:F7:3D:57:FF:7D:4F:E6:49:16:C6:30:4E:66 Authority key identifier: 75:05:A8:6B:5F:4F:AA:50:54:3D:24:8C:6F:08:54:C5:05:AE:DC:0F Certificate issuer: /CN=A918D0E6/serialNumber=7505A86B5F4FAA50543D248C6F0854C505AEDC0F Certificate serial: 0B2D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dQWoa19PqlBUPSSMbwhUxQWu3A8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D0E6/D8ADD9423F3711EAA786434BC4F9AE02/dQWoa19PqlBUPSSMbwhUxQWu3A8.mft Manifest number: 0B1E Signing time: Sat 10 May 2025 19:01:22 +0000 Manifest this update: Sat 10 May 2025 19:01:21 +0000 Manifest next update: Sat 17 May 2025 19:01:21 +0000 Files and hashes: 1: dQWoa19PqlBUPSSMbwhUxQWu3A8.crl (hash: j5TA+1ilMzMoiH+pvSFiLcQVFnDXXhXDhOPII5pQX5o=) 2: 4B1D295E9EA211EB901A9532C4F9AE02.roa (hash: 6+05b8G0TEW8X4nNCgb84dRnZnbGJzRjWgQsJpxv0jY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D0E6/D8ADD9423F3711EAA786434BC4F9AE02/dQWoa19PqlBUPSSMbwhUxQWu3A8.crl rsync://rpki.apnic.net/member_repository/A918D0E6/D8ADD9423F3711EAA786434BC4F9AE02/dQWoa19PqlBUPSSMbwhUxQWu3A8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dQWoa19PqlBUPSSMbwhUxQWu3A8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 18:24:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2861 (0xb2d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D0E6, serialNumber=7505A86B5F4FAA50543D248C6F0854C505AEDC0F Validity Not Before: May 10 19:01:21 2025 GMT Not After : May 17 19:01:21 2025 GMT Subject: CN=681fa281-8ee4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:46:72:a9:d7:39:8d:ae:84:e3:bf:1f:cb:d3: bc:6a:58:04:41:95:59:06:a4:b5:d0:99:c5:b6:e1: 89:92:a6:9a:cf:0e:20:03:0f:0e:9f:ae:91:34:eb: dd:08:65:56:b8:05:04:87:18:5a:da:bb:07:fd:b8: cd:65:7d:dd:92:f3:60:9d:91:a0:09:8d:86:6c:3a: 38:4e:49:0e:86:73:9b:f7:23:f0:cd:cb:86:0f:2e: 55:c8:58:ac:f5:27:3d:79:0f:f6:fc:70:0e:a9:27: 8a:d4:66:f4:e9:4b:bd:1a:0b:8b:59:ef:63:29:f6: de:61:91:8b:a8:d4:7e:3c:a4:3b:3a:5f:f1:46:48: 10:0d:58:11:a5:06:b2:94:29:da:86:da:e2:c4:eb: 57:1e:cb:ed:4c:8b:9b:fd:70:4c:a5:45:e2:d1:62: d4:82:40:5f:4e:e2:7c:4d:8a:b9:65:d0:52:1f:4b: 5b:48:98:38:8d:07:e9:3a:bd:31:5e:dc:bd:3c:ad: 21:96:72:4a:bc:1f:34:6d:78:2d:ef:18:4b:0e:dd: ed:14:5c:7a:91:0e:d5:ce:1c:e9:43:6c:ab:76:29: 8d:2f:e4:5d:df:0d:3f:ae:cb:03:2d:11:88:90:96: b8:d0:82:41:06:b4:2d:df:fe:2c:ad:3c:be:5e:29: e3:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:82:D6:0E:9C:5B:FA:F7:3D:57:FF:7D:4F:E6:49:16:C6:30:4E:66 X509v3 Authority Key Identifier: keyid:75:05:A8:6B:5F:4F:AA:50:54:3D:24:8C:6F:08:54:C5:05:AE:DC:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D0E6/D8ADD9423F3711EAA786434BC4F9AE02/dQWoa19PqlBUPSSMbwhUxQWu3A8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dQWoa19PqlBUPSSMbwhUxQWu3A8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D0E6/D8ADD9423F3711EAA786434BC4F9AE02/dQWoa19PqlBUPSSMbwhUxQWu3A8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:ff:1b:c0:1d:85:a6:d3:27:60:49:12:20:8e:4a:34:4b:ab: ab:f4:b3:ba:f3:d9:66:ed:28:e2:c7:e6:f0:e3:30:ac:dc:11: 1c:73:74:43:03:8a:e7:fb:5f:af:ac:ea:f3:b8:86:60:bb:0e: 4a:f4:2e:2f:db:a3:0f:8c:2d:5c:ce:ce:b0:5b:30:4d:ea:92: 1e:1a:a3:dc:e3:46:25:d1:87:62:44:66:1c:c1:ad:e1:85:38: f2:55:88:ed:39:d1:fc:c7:a4:f7:13:ae:af:1a:43:61:08:aa: f3:c8:77:b4:1a:3b:86:a1:ba:e7:02:4b:13:7e:8a:41:62:46: 08:e0:bd:91:d2:50:8c:1c:64:de:25:d5:67:82:dd:46:15:a9: 96:25:d7:23:f8:dc:f6:2c:39:7c:e6:dd:2b:d1:e5:77:da:7b: ed:12:d5:bc:e2:57:35:cb:cd:80:32:0f:19:f5:94:a2:86:ab: 2f:ad:74:c8:57:00:b5:e7:d1:e4:fd:2f:b3:7e:0c:36:81:0f: ac:6e:9f:17:5d:8a:0d:b7:24:e1:bd:3c:31:cf:8e:7d:f5:97: 84:d6:43:1f:f0:bb:ab:b2:88:02:ec:20:20:35:7a:fb:2b:08: f0:35:3d:38:30:bc:b5:95:56:45:8c:c3:31:80:7c:52:19:60: d4:c2:45:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCy0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQwRTYxMTAvBgNVBAUTKDc1MDVBODZCNUY0RkFBNTA1NDNEMjQ4QzZGMDg1NEM1 MDVBRURDMEYwHhcNMjUwNTEwMTkwMTIxWhcNMjUwNTE3MTkwMTIxWjAYMRYwFAYD VQQDEw02ODFmYTI4MS04ZWU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAskZyqdc5ja6E478fy9O8algEQZVZBqS10JnFtuGJkqaazw4gAw8On66RNOvd CGVWuAUEhxha2rsH/bjNZX3dkvNgnZGgCY2GbDo4TkkOhnOb9yPwzcuGDy5VyFis 9Sc9eQ/2/HAOqSeK1Gb06Uu9GguLWe9jKfbeYZGLqNR+PKQ7Ol/xRkgQDVgRpQay lCnahtrixOtXHsvtTIub/XBMpUXi0WLUgkBfTuJ8TYq5ZdBSH0tbSJg4jQfpOr0x Xty9PK0hlnJKvB80bXgt7xhLDt3tFFx6kQ7VzhzpQ2yrdimNL+Rd3w0/rssDLRGI kJa40IJBBrQt3/4srTy+XinjvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAmC1g6c W/r3PVf/fU/mSRbGME5mMB8GA1UdIwQYMBaAFHUFqGtfT6pQVD0kjG8IVMUFrtwP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDBFNi9EOEFERDk0MjNG MzcxMUVBQTc4NjQzNEJDNEY5QUUwMi9kUVdvYTE5UHFsQlVQU1NNYndoVXhRV3Uz QTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RRV29hMTlQcWxCVVBTU01id2hVeFFXdTNBOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RDBFNi9EOEFERDk0MjNGMzcxMUVBQTc4NjQzNEJDNEY5QUUwMi9kUVdvYTE5UHFs QlVQU1NNYndoVXhRV3UzQTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBK/xvAHYWm0ydgSRIgjko0S6ur9LO689lm7Sjix+bw4zCs3BEcc3RD A4rn+1+vrOrzuIZguw5K9C4v26MPjC1czs6wWzBN6pIeGqPc40Yl0YdiRGYcwa3h hTjyVYjtOdH8x6T3E66vGkNhCKrzyHe0GjuGobrnAksTfopBYkYI4L2R0lCMHGTe JdVngt1GFamWJdcj+Nz2LDl85t0r0eV32nvtEtW84lc1y82AMg8Z9ZSihqsvrXTI VwC159Hk/S+zfgw2gQ+sbp8XXYoNtyThvTwxz4599ZeE1kMf8LursogC7CAgNXr7 KwjwNT04MLy1lVZFjMMxgHxSGWDUwkXk -----END CERTIFICATE-----Generated at Sun May 11 04:26:34 2025 by rpki-client