$ rpki-client -vvf rpki.apnic.net/member_repository/A919D1D9/6A39A0DEC33811E98048FB7DC4F9AE02/qAw2f5IilG-YuDa86PbQA2SIHHw.mft File: qAw2f5IilG-YuDa86PbQA2SIHHw.mft (raw, json) Hash identifier: zKZBDlMs7i43fck0G9Z3mxL/8ZPfIPF+V13KpfftIj4= Subject key identifier: 4F:52:F0:88:C2:A8:7A:C1:0D:2B:3E:81:55:F0:26:37:DB:47:22:AF Authority key identifier: A8:0C:36:7F:92:22:94:6F:98:B8:36:BC:E8:F6:D0:03:64:88:1C:7C Certificate issuer: /CN=A919D1D9/serialNumber=A80C367F9222946F98B836BCE8F6D00364881C7C Certificate serial: 0DC9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qAw2f5IilG-YuDa86PbQA2SIHHw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D1D9/6A39A0DEC33811E98048FB7DC4F9AE02/qAw2f5IilG-YuDa86PbQA2SIHHw.mft Manifest number: 0DA8 Signing time: Mon 12 May 2025 17:49:59 +0000 Manifest this update: Mon 12 May 2025 17:49:59 +0000 Manifest next update: Mon 19 May 2025 17:49:59 +0000 Files and hashes: 1: qAw2f5IilG-YuDa86PbQA2SIHHw.crl (hash: RHjdARaPCrWUPZv8sqQSkU0awse+6xdfTri96D4A1Go=) 2: C2ED1EEE617111EBBC678459C4F9AE02.roa (hash: fGrUYT1O2dItK4fIwYgIfLvCsJmlCIF/jYJCGwsc26A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D1D9/6A39A0DEC33811E98048FB7DC4F9AE02/qAw2f5IilG-YuDa86PbQA2SIHHw.crl rsync://rpki.apnic.net/member_repository/A919D1D9/6A39A0DEC33811E98048FB7DC4F9AE02/qAw2f5IilG-YuDa86PbQA2SIHHw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qAw2f5IilG-YuDa86PbQA2SIHHw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 17:49:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3529 (0xdc9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D1D9, serialNumber=A80C367F9222946F98B836BCE8F6D00364881C7C Validity Not Before: May 12 17:49:59 2025 GMT Not After : May 19 17:49:59 2025 GMT Subject: CN=682234c7-0546 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:8c:78:b1:82:1e:a5:d4:61:11:56:21:ad:ff: 4e:6e:5a:f5:0f:f7:98:36:73:d9:56:37:d1:61:c3: 99:8a:a5:ae:c1:a5:a5:59:98:b9:f1:4e:09:03:50: bb:c2:9b:6e:82:9e:7c:90:9b:07:9b:13:df:e9:31: 10:67:e2:e5:0a:e5:e8:29:00:6f:de:46:ef:27:3f: ee:24:9e:4b:57:ee:bd:02:c2:53:47:4d:85:79:56: f4:ab:90:45:6e:1c:4d:28:f4:47:b5:d2:5f:f1:e8: a4:b3:35:5d:41:9c:1d:dd:63:e5:07:37:a2:7c:10: 34:fd:d7:b3:af:9a:af:54:ba:42:b1:19:fa:1e:d2: 38:93:13:ce:f9:f4:3c:3d:51:6c:18:01:46:65:9e: 06:7f:8a:d3:17:c3:39:e4:ea:01:c6:da:16:10:53: 6d:9b:0c:d5:3a:4c:09:aa:74:e1:c6:92:03:02:82: ae:16:32:ec:ed:4d:78:1f:8a:74:16:6c:aa:e0:e1: 2f:88:ac:b6:15:d7:fe:08:5f:87:40:07:c9:15:34: ca:19:fc:b9:ef:bd:b9:1d:f7:86:45:7c:de:ed:5b: ec:40:4d:f5:96:99:65:15:f6:7e:57:69:11:2f:0b: 10:88:f2:47:d7:44:1b:b5:03:68:62:b8:43:70:45: 9d:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:52:F0:88:C2:A8:7A:C1:0D:2B:3E:81:55:F0:26:37:DB:47:22:AF X509v3 Authority Key Identifier: keyid:A8:0C:36:7F:92:22:94:6F:98:B8:36:BC:E8:F6:D0:03:64:88:1C:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D1D9/6A39A0DEC33811E98048FB7DC4F9AE02/qAw2f5IilG-YuDa86PbQA2SIHHw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qAw2f5IilG-YuDa86PbQA2SIHHw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D1D9/6A39A0DEC33811E98048FB7DC4F9AE02/qAw2f5IilG-YuDa86PbQA2SIHHw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:75:bc:4d:93:ce:e5:8b:a1:54:1c:cb:65:f8:2d:15:67:f8: a3:4c:4d:fd:c3:28:18:ae:cb:25:e9:34:9c:28:38:3f:93:10: 50:52:33:ea:a4:33:19:a8:22:31:25:de:4c:b6:6d:d9:1b:bb: d0:c3:38:f1:a8:e5:7f:e7:5c:f5:4c:08:7d:92:1d:88:0f:1f: 52:99:81:50:dd:d2:f0:3f:b5:55:06:3b:e9:57:e3:13:58:57: e3:16:3f:b7:94:a4:88:a7:1e:09:c2:c3:f3:e5:07:9e:39:c0: 1b:92:e2:67:82:87:31:c9:37:6e:f9:17:c2:2f:40:85:ee:fb: bc:99:1f:e1:7f:86:d1:b9:86:15:e5:66:81:b9:25:6d:f8:04: 11:9c:e2:20:60:62:92:01:20:d6:9d:66:86:0d:ce:f6:e2:f1: 43:97:b4:3b:7c:ed:e1:1d:78:26:8b:eb:53:9c:98:b1:8e:f7: 94:72:9d:e2:86:8d:d5:93:fe:0a:25:50:8e:e7:e7:3d:b7:a8: 24:1c:d4:52:be:72:fe:49:d0:b5:9d:26:f2:0f:81:c6:60:5f: d0:af:9e:61:f7:93:56:9a:cc:10:dc:0e:6d:97:ee:45:7f:e2: e3:82:9e:26:02:25:fb:17:88:a9:e0:94:61:77:a6:93:f2:72: 70:84:1b:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDckwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQxRDkxMTAvBgNVBAUTKEE4MEMzNjdGOTIyMjk0NkY5OEI4MzZCQ0U4RjZEMDAz NjQ4ODFDN0MwHhcNMjUwNTEyMTc0OTU5WhcNMjUwNTE5MTc0OTU5WjAYMRYwFAYD VQQDEw02ODIyMzRjNy0wNTQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwox4sYIepdRhEVYhrf9Oblr1D/eYNnPZVjfRYcOZiqWuwaWlWZi58U4JA1C7 wptugp58kJsHmxPf6TEQZ+LlCuXoKQBv3kbvJz/uJJ5LV+69AsJTR02FeVb0q5BF bhxNKPRHtdJf8eikszVdQZwd3WPlBzeifBA0/dezr5qvVLpCsRn6HtI4kxPO+fQ8 PVFsGAFGZZ4Gf4rTF8M55OoBxtoWEFNtmwzVOkwJqnThxpIDAoKuFjLs7U14H4p0 Fmyq4OEviKy2Fdf+CF+HQAfJFTTKGfy57725HfeGRXze7VvsQE31lpllFfZ+V2kR LwsQiPJH10QbtQNoYrhDcEWdYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE9S8IjC qHrBDSs+gVXwJjfbRyKvMB8GA1UdIwQYMBaAFKgMNn+SIpRvmLg2vOj20ANkiBx8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDFEOS82QTM5QTBERUMz MzgxMUU5ODA0OEZCN0RDNEY5QUUwMi9xQXcyZjVJaWxHLVl1RGE4NlBiUUEyU0lI SHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FBdzJmNUlpbEctWXVEYTg2UGJRQTJTSUhIdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDFEOS82QTM5QTBERUMzMzgxMUU5ODA0OEZCN0RDNEY5QUUwMi9xQXcyZjVJaWxH LVl1RGE4NlBiUUEyU0lISHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARdbxNk87li6FUHMtl+C0VZ/ijTE39wygYrssl6TScKDg/kxBQUjPq pDMZqCIxJd5Mtm3ZG7vQwzjxqOV/51z1TAh9kh2IDx9SmYFQ3dLwP7VVBjvpV+MT WFfjFj+3lKSIpx4JwsPz5QeeOcAbkuJngocxyTdu+RfCL0CF7vu8mR/hf4bRuYYV 5WaBuSVt+AQRnOIgYGKSASDWnWaGDc724vFDl7Q7fO3hHXgmi+tTnJixjveUcp3i ho3Vk/4KJVCO5+c9t6gkHNRSvnL+SdC1nSbyD4HGYF/Qr55h95NWmswQ3A5tl+5F f+Ljgp4mAiX7F4ip4JRhd6aT8nJwhBvC -----END CERTIFICATE-----Generated at Tue May 13 20:43:55 2025 by rpki-client