$ rpki-client -vvf rpki.apnic.net/member_repository/A9192A47/E5BFEA46B82011EFAAE6F567C4F9AE02/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.mft File: Q7Ii_jvkka1wWL7TgEIUQl1pQbc.mft (raw, json) Hash identifier: Erwn4MVnP3lCPx9q+D4iZMpi2WQ+oI+8w9jzHIl1QoA= Subject key identifier: 4C:B1:7D:24:23:A9:C9:88:49:90:32:24:26:C5:55:49:1D:FE:F1:20 Authority key identifier: 43:B2:22:FE:3B:E4:91:AD:70:58:BE:D3:80:42:14:42:5D:69:41:B7 Certificate issuer: /CN=A9192A47/serialNumber=43B222FE3BE491AD7058BED3804214425D6941B7 Certificate serial: 51 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192A47/E5BFEA46B82011EFAAE6F567C4F9AE02/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.mft Manifest number: 51 Signing time: Thu 15 May 2025 06:35:27 +0000 Manifest this update: Thu 15 May 2025 06:35:26 +0000 Manifest next update: Thu 22 May 2025 06:35:26 +0000 Files and hashes: 1: Q7Ii_jvkka1wWL7TgEIUQl1pQbc.crl (hash: 8yuQQ5dKCPBpqYLoZON606VJWoKl8n4owT1zP17r3bc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192A47/E5BFEA46B82011EFAAE6F567C4F9AE02/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.crl rsync://rpki.apnic.net/member_repository/A9192A47/E5BFEA46B82011EFAAE6F567C4F9AE02/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 06:35:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 81 (0x51) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192A47, serialNumber=43B222FE3BE491AD7058BED3804214425D6941B7 Validity Not Before: May 15 06:35:26 2025 GMT Not After : May 22 06:35:26 2025 GMT Subject: CN=68258b2e-b39f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:71:a4:35:fe:7e:f6:ba:6c:23:41:6c:27:90: 43:2b:93:23:85:d0:fb:72:83:21:94:5e:57:80:08: 92:1a:35:d0:e8:99:6e:ff:dc:a7:43:ea:b2:97:13: 0f:c5:a2:20:96:2f:85:8b:1f:28:29:56:1d:a2:3d: 5d:35:7c:7d:c3:f8:9a:04:fb:ce:51:c6:04:71:ad: 5c:8c:d3:77:94:35:d9:10:ac:33:b1:65:82:b7:f6: 35:8f:50:48:7a:32:50:bc:38:dd:56:34:55:37:88: 9a:ef:d2:74:5c:c2:3a:4a:db:71:fd:94:07:1a:2f: a2:19:4b:c0:b3:f1:66:52:97:89:8e:f6:9f:d6:4b: cf:37:3f:63:54:da:af:f8:a3:b2:a2:36:6f:d8:1b: 39:ba:16:68:ed:11:b8:07:aa:d2:d4:41:b8:c0:e7: 0a:64:65:69:13:f9:d1:96:f2:52:98:84:44:b2:08: 75:cf:21:3e:8e:18:cd:9b:4d:36:6a:44:48:ac:e6: a0:cd:3b:75:41:84:88:d2:7f:77:92:73:0b:b1:af: 95:4d:36:fa:8d:79:e2:f0:76:df:c7:f5:2f:b1:5b: 6e:84:a7:4a:cf:cd:41:46:59:0e:d6:a8:e3:32:82: e4:7f:2b:7f:f9:44:5a:81:47:99:a8:fa:98:89:c0: 52:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:B1:7D:24:23:A9:C9:88:49:90:32:24:26:C5:55:49:1D:FE:F1:20 X509v3 Authority Key Identifier: keyid:43:B2:22:FE:3B:E4:91:AD:70:58:BE:D3:80:42:14:42:5D:69:41:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192A47/E5BFEA46B82011EFAAE6F567C4F9AE02/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192A47/E5BFEA46B82011EFAAE6F567C4F9AE02/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:34:fd:89:1c:66:bf:43:14:f2:18:36:63:4a:e8:da:7a:bb: b7:0d:d8:e5:5f:9c:0a:25:a4:e0:70:cb:68:81:52:e5:c5:02: bb:f2:9f:dc:eb:12:48:9e:47:1f:6c:80:6a:4f:49:11:49:96: 6b:ca:7b:0f:e0:cb:73:7a:b1:e6:85:53:02:1a:66:fe:d0:8f: ad:a4:d9:34:bb:df:66:c4:1a:de:db:8c:a9:6c:14:c7:07:89: 4d:13:cd:a1:ba:8e:e1:11:a1:9c:19:92:a5:75:ad:ae:d2:63: f2:9e:b0:21:cb:86:5c:96:c7:fa:7c:88:8c:3f:a4:35:b2:84: a3:9c:16:f5:26:fa:67:56:cf:67:a3:19:01:f0:13:bc:85:68: a3:89:83:7e:92:e0:5e:45:81:8b:7b:98:0e:05:f4:05:f9:5d: 10:be:11:f7:8e:f5:d1:4c:ca:43:3e:59:29:7d:b4:83:17:36: e2:53:51:1e:78:e7:81:76:45:fe:a0:a6:74:a6:c4:ff:16:d8: 52:1a:9e:95:af:6a:86:8c:0f:06:7d:89:e9:d3:31:0c:ba:da: 42:9e:1d:03:b7:70:11:52:d8:51:75:10:44:90:21:b0:4b:43: 79:24:d8:18:d4:77:a9:9f:02:2b:57:16:22:73:aa:a8:3e:33: f6:ac:3a:cc -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 MkE0NzExMC8GA1UEBRMoNDNCMjIyRkUzQkU0OTFBRDcwNThCRUQzODA0MjE0NDI1 RDY5NDFCNzAeFw0yNTA1MTUwNjM1MjZaFw0yNTA1MjIwNjM1MjZaMBgxFjAUBgNV BAMTDTY4MjU4YjJlLWIzOWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDDcaQ1/n72umwjQWwnkEMrkyOF0PtygyGUXleACJIaNdDomW7/3KdD6rKXEw/F oiCWL4WLHygpVh2iPV01fH3D+JoE+85RxgRxrVyM03eUNdkQrDOxZYK39jWPUEh6 MlC8ON1WNFU3iJrv0nRcwjpK23H9lAcaL6IZS8Cz8WZSl4mO9p/WS883P2NU2q/4 o7KiNm/YGzm6FmjtEbgHqtLUQbjA5wpkZWkT+dGW8lKYhESyCHXPIT6OGM2bTTZq REis5qDNO3VBhIjSf3eScwuxr5VNNvqNeeLwdt/H9S+xW26Ep0rPzUFGWQ7WqOMy guR/K3/5RFqBR5mo+piJwFLhAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUTLF9JCOp yYhJkDIkJsVVSR3+8SAwHwYDVR0jBBgwFoAUQ7Ii/jvkka1wWL7TgEIUQl1pQbcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkyQTQ3L0U1QkZFQTQ2Qjgy MDExRUZBQUU2RjU2N0M0RjlBRTAyL1E3SWlfanZra2Exd1dMN1RnRUlVUWwxcFFi Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvUTdJaV9qdmtrYTF3V0w3VGdFSVVRbDFwUWJjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTky QTQ3L0U1QkZFQTQ2QjgyMDExRUZBQUU2RjU2N0M0RjlBRTAyL1E3SWlfanZra2Ex d1dMN1RnRUlVUWwxcFFiYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAI00/YkcZr9DFPIYNmNK6Np6u7cN2OVfnAolpOBwy2iBUuXFArvyn9zr EkieRx9sgGpPSRFJlmvKew/gy3N6seaFUwIaZv7Qj62k2TS732bEGt7bjKlsFMcH iU0TzaG6juERoZwZkqV1ra7SY/KesCHLhlyWx/p8iIw/pDWyhKOcFvUm+mdWz2ej GQHwE7yFaKOJg36S4F5FgYt7mA4F9AX5XRC+EfeO9dFMykM+WSl9tIMXNuJTUR54 54F2Rf6gpnSmxP8W2FIanpWvaoaMDwZ9ienTMQy62kKeHQO3cBFS2FF1EESQIbBL Q3kk2BjUd6mfAitXFiJzqqg+M/asOsw= -----END CERTIFICATE-----Generated at Fri May 16 14:41:29 2025 by rpki-client