$ rpki-client -vvf rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/sQG1q1GcKuZKv61qVvhD3AmQqFM.mft File: sQG1q1GcKuZKv61qVvhD3AmQqFM.mft (raw, json) Hash identifier: pZHaJWvIpgcVfws4j6qm4RphTwgsAXOPij0n1r7sji0= Subject key identifier: 83:D4:B4:11:5A:A8:F1:C9:EE:EE:78:10:52:E8:B9:AF:AF:A1:41:82 Authority key identifier: B1:01:B5:AB:51:9C:2A:E6:4A:BF:AD:6A:56:F8:43:DC:09:90:A8:53 Certificate issuer: /CN=A919B06C/serialNumber=B101B5AB519C2AE64ABFAD6A56F843DC0990A853 Certificate serial: 1172 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sQG1q1GcKuZKv61qVvhD3AmQqFM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/sQG1q1GcKuZKv61qVvhD3AmQqFM.mft Manifest number: 1F6D Signing time: Mon 12 May 2025 17:10:38 +0000 Manifest this update: Mon 12 May 2025 17:10:38 +0000 Manifest next update: Mon 19 May 2025 17:10:38 +0000 Files and hashes: 1: sQG1q1GcKuZKv61qVvhD3AmQqFM.crl (hash: rLi3+Ygj2dfUV5iZFWtdxZsEfSGObzHKB7xGuwDE3rM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/sQG1q1GcKuZKv61qVvhD3AmQqFM.crl rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/sQG1q1GcKuZKv61qVvhD3AmQqFM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sQG1q1GcKuZKv61qVvhD3AmQqFM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 17:10:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4466 (0x1172) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919B06C, serialNumber=B101B5AB519C2AE64ABFAD6A56F843DC0990A853 Validity Not Before: May 12 17:10:38 2025 GMT Not After : May 19 17:10:38 2025 GMT Subject: CN=68222b8e-376b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:9e:c8:47:88:7d:11:e2:4f:5a:0a:ba:ba:d7: aa:15:c7:80:6c:37:de:90:e6:19:8c:3f:70:c7:bc: a9:da:73:2f:74:3d:6f:1a:95:b2:d7:da:0f:84:48: 8c:12:a9:fd:48:9b:49:ed:f4:4b:00:68:67:c8:13: 68:e1:b9:94:66:5c:0d:50:fd:c4:3a:db:65:68:5b: ee:16:da:1e:05:cb:ac:1b:d8:bf:26:25:60:fa:20: 78:3c:e5:b6:07:11:32:9b:2f:53:48:2d:7a:85:ff: 05:18:db:1d:b6:ba:a1:23:fd:ef:d3:c3:7d:79:cd: 56:7c:25:e5:1d:b8:af:c5:53:c7:b8:10:40:74:10: 46:16:e8:b3:6a:58:bd:51:9f:89:c5:88:ec:05:86: 1a:b4:4d:87:c2:2a:c0:94:a2:8b:ba:b6:67:60:49: cf:ec:70:bd:cc:2c:d2:7a:08:bf:c1:a2:7c:7e:d8: 20:a9:5d:16:ff:c4:68:46:e7:87:ab:db:a2:98:f5: a7:ae:81:36:07:a3:8b:ac:36:82:13:18:6c:b9:b4: fd:d1:99:30:f4:eb:be:09:75:9a:48:44:38:20:dc: 93:b1:bd:b0:61:7b:f7:03:3b:94:a5:02:f0:90:ed: 3a:ee:59:9a:24:4d:a7:cb:13:e4:7e:2d:ac:06:31: 7a:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:D4:B4:11:5A:A8:F1:C9:EE:EE:78:10:52:E8:B9:AF:AF:A1:41:82 X509v3 Authority Key Identifier: keyid:B1:01:B5:AB:51:9C:2A:E6:4A:BF:AD:6A:56:F8:43:DC:09:90:A8:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/sQG1q1GcKuZKv61qVvhD3AmQqFM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sQG1q1GcKuZKv61qVvhD3AmQqFM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/sQG1q1GcKuZKv61qVvhD3AmQqFM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:bf:95:24:a1:ac:4e:3d:2d:a0:ca:fa:2d:9b:fb:7f:51:87: dd:77:82:e3:47:82:a1:22:80:32:2f:2d:1e:1c:bc:d0:f7:fd: 74:98:b2:2f:94:74:e2:1d:c4:cd:8c:a2:4f:59:06:b7:7e:06: b5:3f:88:88:1c:fb:a1:78:da:3b:ee:84:5d:8f:06:c1:be:cc: d0:5b:60:fa:c5:b6:5a:56:2a:66:2b:cd:fb:45:c8:26:d1:dc: 22:d1:c9:5f:b3:7f:db:a4:28:aa:78:9e:35:1f:f8:3a:6a:32: 1f:0c:62:38:82:fd:14:94:3c:9e:87:21:1f:64:8d:0e:d4:a6: 06:3b:be:f2:3d:3f:3c:bf:a1:19:78:a3:09:83:44:21:cb:26: 9c:f9:8c:69:c5:28:a5:7f:02:a8:3a:9b:8c:d5:cb:72:75:cb: b2:e5:a0:76:82:13:99:6b:19:35:5d:4f:8c:d8:2a:7f:f9:0f: 48:7d:31:e9:8f:b6:6f:60:2e:2f:85:39:de:79:eb:63:69:f4: 68:ec:b9:2d:4e:0b:b5:c4:8d:9d:3c:f5:10:a1:6a:1b:8b:eb: ae:f4:c3:8d:81:03:72:d6:1c:a0:a9:db:5e:e3:64:2b:fb:4a: 18:37:84:97:85:5c:0e:31:c5:6c:d2:32:a5:23:9c:ef:6b:fc: 2f:57:3b:f9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEXIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUIwNkMxMTAvBgNVBAUTKEIxMDFCNUFCNTE5QzJBRTY0QUJGQUQ2QTU2Rjg0M0RD MDk5MEE4NTMwHhcNMjUwNTEyMTcxMDM4WhcNMjUwNTE5MTcxMDM4WjAYMRYwFAYD VQQDEw02ODIyMmI4ZS0zNzZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAop7IR4h9EeJPWgq6uteqFceAbDfekOYZjD9wx7yp2nMvdD1vGpWy19oPhEiM Eqn9SJtJ7fRLAGhnyBNo4bmUZlwNUP3EOttlaFvuFtoeBcusG9i/JiVg+iB4POW2 BxEymy9TSC16hf8FGNsdtrqhI/3v08N9ec1WfCXlHbivxVPHuBBAdBBGFuizali9 UZ+JxYjsBYYatE2HwirAlKKLurZnYEnP7HC9zCzSegi/waJ8ftggqV0W/8RoRueH q9uimPWnroE2B6OLrDaCExhsubT90Zkw9Ou+CXWaSEQ4INyTsb2wYXv3AzuUpQLw kO067lmaJE2nyxPkfi2sBjF6WQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIPUtBFa qPHJ7u54EFLoua+voUGCMB8GA1UdIwQYMBaAFLEBtatRnCrmSr+talb4Q9wJkKhT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QjA2Qy9FOUQ2MkU3NEZF QUUxMUU4OTEwRDRENjZDNEY5QUUwMi9zUUcxcTFHY0t1Wkt2NjFxVnZoRDNBbVFx Rk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NRRzFxMUdjS3VaS3Y2MXFWdmhEM0FtUXFGTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QjA2Qy9FOUQ2MkU3NEZFQUUxMUU4OTEwRDRENjZDNEY5QUUwMi9zUUcxcTFHY0t1 Wkt2NjFxVnZoRDNBbVFxRk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMv5UkoaxOPS2gyvotm/t/UYfdd4LjR4KhIoAyLy0eHLzQ9/10mLIv lHTiHcTNjKJPWQa3fga1P4iIHPuheNo77oRdjwbBvszQW2D6xbZaVipmK837Rcgm 0dwi0clfs3/bpCiqeJ41H/g6ajIfDGI4gv0UlDyehyEfZI0O1KYGO77yPT88v6EZ eKMJg0Qhyyac+YxpxSilfwKoOpuM1ctydcuy5aB2ghOZaxk1XU+M2Cp/+Q9IfTHp j7ZvYC4vhTneeetjafRo7LktTgu1xI2dPPUQoWobi+uu9MONgQNy1hygqdte42Qr +0oYN4SXhVwOMcVs0jKlI5zva/wvVzv5 -----END CERTIFICATE-----Generated at Wed May 14 03:43:25 2025 by rpki-client