$ rpki-client -vvf rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.mft File: qxHoCfK8ZrDR5guKMfhrW4LgDjk.mft (raw, json) Hash identifier: yliOw9hD+FzvQ0zoaKsJjh2vuvBy2l32OfN6hfffK5c= Subject key identifier: E7:A0:13:8A:24:B8:6E:D7:FC:AA:89:A9:58:CD:E6:4F:7A:82:3B:E8 Authority key identifier: AB:11:E8:09:F2:BC:66:B0:D1:E6:0B:8A:31:F8:6B:5B:82:E0:0E:39 Certificate issuer: /CN=A9191FA5/serialNumber=AB11E809F2BC66B0D1E60B8A31F86B5B82E00E39 Certificate serial: 360B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.mft Manifest number: 3556 Signing time: Thu 08 May 2025 14:28:53 +0000 Manifest this update: Thu 08 May 2025 14:28:53 +0000 Manifest next update: Thu 15 May 2025 14:28:53 +0000 Files and hashes: 1: qxHoCfK8ZrDR5guKMfhrW4LgDjk.crl (hash: mDBVIZx53gEVjELBWW/NcdJq8x1GWoY1ahJFEJwj9ks=) 2: FF09B6BEC2E511EBBDB1B180C4F9AE02.roa (hash: UZZtq0Dq01P92PMAlRpFWd+m2fzHte7Vnx91o/rKWY0=) 3: B8E7D994D00711EAB66A1255C4F9AE02.roa (hash: NTDwpkNkDHYvPlbXgriI89H0onb/SkI96RAfrzWAkp8=) 4: FDE510BCC2E511EBBDB1B180C4F9AE02.roa (hash: 20lxG5YaQGKYCeNDIccsMuS2DiiyPh+IbwNarzaaMG8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.crl rsync://rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 May 2025 14:28:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13835 (0x360b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191FA5, serialNumber=AB11E809F2BC66B0D1E60B8A31F86B5B82E00E39 Validity Not Before: May 8 14:28:53 2025 GMT Not After : May 15 14:28:53 2025 GMT Subject: CN=681cbfa5-b09d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:b0:73:a3:7a:c3:a0:ab:14:1e:b6:50:d3:33: 92:80:48:0a:cc:3f:53:67:58:b3:27:0b:9f:5c:69: 0f:a9:07:b0:e0:8d:46:9b:07:79:ae:bd:f5:04:27: e4:b9:6d:c3:e2:20:b1:f3:fd:01:a0:22:ba:3b:38: 4f:c4:65:55:cf:5a:c8:29:c8:33:4b:1d:08:33:1a: 4c:fc:05:ac:f6:40:b5:85:a1:e6:82:a3:16:80:b8: 1a:20:7c:d2:b0:4b:ac:91:13:54:a1:8a:02:b3:67: 20:e4:11:93:f4:42:d0:38:02:64:e1:20:7e:38:9b: 00:4b:3d:ac:5b:64:cc:53:92:14:b4:40:e8:fd:22: 2c:a0:64:5a:6b:0b:30:8e:22:21:77:b0:48:bd:0a: 79:9d:a4:16:6f:7e:fa:cf:b6:90:7d:39:fc:02:3a: 0f:f1:ff:60:ea:0f:47:39:79:f7:f4:a4:85:72:a7: 01:fe:44:2b:3c:70:fb:bc:44:08:ca:b9:ef:aa:2f: ec:18:96:2b:cf:20:c7:97:b8:fd:69:aa:d0:12:8a: 7a:e0:d4:90:d5:b5:37:c2:4c:69:75:05:3c:c0:94: 2d:48:21:fd:f1:4b:e2:2c:17:28:13:0e:fc:2a:54: a6:c4:c9:d9:1d:75:4e:8f:0a:b5:83:fb:48:a5:be: 04:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:A0:13:8A:24:B8:6E:D7:FC:AA:89:A9:58:CD:E6:4F:7A:82:3B:E8 X509v3 Authority Key Identifier: keyid:AB:11:E8:09:F2:BC:66:B0:D1:E6:0B:8A:31:F8:6B:5B:82:E0:0E:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:52:7d:09:31:46:15:b1:f8:e5:a1:6e:03:df:63:e6:cd:47: ab:3e:59:e4:67:38:e2:9f:3a:69:ca:52:19:39:9b:51:2d:a4: 19:d1:cc:e3:fd:d7:d4:59:fb:bf:a9:be:ac:63:7b:3d:b1:d8: d6:dd:79:7d:b7:6e:4e:fa:5d:47:38:44:b9:57:34:54:0b:12: 84:09:bd:53:3d:21:18:44:b9:65:70:2c:f4:47:b1:6a:d8:fe: ac:98:a3:32:fe:0f:5f:78:c0:e6:fc:db:2e:33:9f:1e:8f:e0: 8d:b1:d8:64:c2:2e:a3:bd:be:ae:e8:2f:72:44:33:46:0c:06: 71:e7:84:d0:54:da:0e:34:94:9c:20:5f:6f:d6:6f:25:03:34: 70:af:c8:1a:5f:72:4a:4a:e4:6f:14:a9:3a:8a:02:4a:3b:01: 6a:a4:d3:f9:e9:67:56:0c:5e:99:9d:9d:b5:81:95:1f:c1:e2: 75:ab:8b:7c:78:63:66:50:1c:cb:37:5d:51:e1:6f:95:b0:8f: d1:49:38:f9:76:7c:0c:d7:bc:ac:e3:60:33:e1:22:e7:2a:ef: fd:0d:d4:d1:ff:d6:9f:7f:91:25:71:e4:dc:40:f0:5a:fb:38: 04:01:2e:47:35:72:93:90:39:12:e7:18:cd:f9:0e:bf:10:b6: 27:1c:75:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNgswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTFGQTUxMTAvBgNVBAUTKEFCMTFFODA5RjJCQzY2QjBEMUU2MEI4QTMxRjg2QjVC ODJFMDBFMzkwHhcNMjUwNTA4MTQyODUzWhcNMjUwNTE1MTQyODUzWjAYMRYwFAYD VQQDEw02ODFjYmZhNS1iMDlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0LBzo3rDoKsUHrZQ0zOSgEgKzD9TZ1izJwufXGkPqQew4I1Gmwd5rr31BCfk uW3D4iCx8/0BoCK6OzhPxGVVz1rIKcgzSx0IMxpM/AWs9kC1haHmgqMWgLgaIHzS sEuskRNUoYoCs2cg5BGT9ELQOAJk4SB+OJsASz2sW2TMU5IUtEDo/SIsoGRaawsw jiIhd7BIvQp5naQWb376z7aQfTn8AjoP8f9g6g9HOXn39KSFcqcB/kQrPHD7vEQI yrnvqi/sGJYrzyDHl7j9aarQEop64NSQ1bU3wkxpdQU8wJQtSCH98UviLBcoEw78 KlSmxMnZHXVOjwq1g/tIpb4EhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOegE4ok uG7X/KqJqVjN5k96gjvoMB8GA1UdIwQYMBaAFKsR6AnyvGaw0eYLijH4a1uC4A45 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MUZBNS8wODA1NkNFNDFE ODcxMUUyOUREM0M2REUwOEIwMkNEMi9xeEhvQ2ZLOFpyRFI1Z3VLTWZoclc0TGdE amsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3F4SG9DZks4WnJEUjVndUtNZmhyVzRMZ0Rqay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MUZBNS8wODA1NkNFNDFEODcxMUUyOUREM0M2REUwOEIwMkNEMi9xeEhvQ2ZLOFpy RFI1Z3VLTWZoclc0TGdEamsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBaUn0JMUYVsfjloW4D32PmzUerPlnkZzjinzppylIZOZtRLaQZ0czj /dfUWfu/qb6sY3s9sdjW3Xl9t25O+l1HOES5VzRUCxKECb1TPSEYRLllcCz0R7Fq 2P6smKMy/g9feMDm/NsuM58ej+CNsdhkwi6jvb6u6C9yRDNGDAZx54TQVNoONJSc IF9v1m8lAzRwr8gaX3JKSuRvFKk6igJKOwFqpNP56WdWDF6ZnZ21gZUfweJ1q4t8 eGNmUBzLN11R4W+VsI/RSTj5dnwM17ys42Az4SLnKu/9DdTR/9aff5ElceTcQPBa +zgEAS5HNXKTkDkS5xjN+Q6/ELYnHHWz -----END CERTIFICATE-----Generated at Thu May 8 23:42:51 2025 by rpki-client