$ rpki-client -vvf rpki.apnic.net/member_repository/A9131D5E/56DD48DED94711EB9A1A0D71C4F9AE02/QeLjUgZMov-eIcSENVrALkQHJY0.mft File: QeLjUgZMov-eIcSENVrALkQHJY0.mft (raw, json) Hash identifier: Uaz0ApnWNHTqSe1HtAblMuBIAJmtLXWpeuV1q6VwXMY= Subject key identifier: FA:4B:AC:5B:4A:5B:DF:9D:30:09:A5:F3:1C:DD:39:01:D9:78:D8:A5 Authority key identifier: 41:E2:E3:52:06:4C:A2:FF:9E:21:C4:84:35:5A:C0:2E:44:07:25:8D Certificate issuer: /CN=A9131D5E/serialNumber=41E2E352064CA2FF9E21C484355AC02E4407258D Certificate serial: 0578 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QeLjUgZMov-eIcSENVrALkQHJY0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131D5E/56DD48DED94711EB9A1A0D71C4F9AE02/QeLjUgZMov-eIcSENVrALkQHJY0.mft Manifest number: 0571 Signing time: Sat 12 Apr 2025 22:58:17 +0000 Manifest this update: Sat 12 Apr 2025 22:58:17 +0000 Manifest next update: Sat 19 Apr 2025 22:58:17 +0000 Files and hashes: 1: QeLjUgZMov-eIcSENVrALkQHJY0.crl (hash: OX+dlbnyhWuqaBVC6OFrz+8zgt+L/LBRPmtpROVFCYk=) 2: 9B41336A9ABB11EC9D11861FC4F9AE02.roa (hash: JjNvo6+sKFXJO5jB79ObwXmzISqdgMEQqhlFwLrXnJs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131D5E/56DD48DED94711EB9A1A0D71C4F9AE02/QeLjUgZMov-eIcSENVrALkQHJY0.crl rsync://rpki.apnic.net/member_repository/A9131D5E/56DD48DED94711EB9A1A0D71C4F9AE02/QeLjUgZMov-eIcSENVrALkQHJY0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QeLjUgZMov-eIcSENVrALkQHJY0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 19 Apr 2025 22:58:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1400 (0x578) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131D5E, serialNumber=41E2E352064CA2FF9E21C484355AC02E4407258D Validity Not Before: Apr 12 22:58:17 2025 GMT Not After : Apr 19 22:58:17 2025 GMT Subject: CN=67faf009-b23c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:59:e4:f3:19:91:a4:f9:b0:16:e8:ba:d1:5c: df:83:af:40:c2:56:b8:48:64:9e:ec:56:06:13:0e: bd:14:f8:cf:e8:af:73:2b:90:ae:1d:00:eb:f0:c4: 14:7d:80:e7:f1:6a:a5:8d:26:19:65:1f:ab:7f:57: 6f:82:eb:97:a3:a7:a2:62:52:7c:93:5d:bc:00:ba: 34:ea:0c:1e:04:b3:10:b1:98:c0:bb:33:13:06:8e: b9:14:9b:1f:8b:4e:bc:83:fa:91:c7:ce:60:df:99: b6:64:06:97:b2:a5:e3:03:75:5f:c9:5f:f5:8c:2c: ca:a9:ee:91:1b:8d:3f:81:c6:f9:dd:c9:eb:d1:7f: b7:36:fa:b5:b1:97:37:3e:48:d9:6b:62:39:fd:9e: 46:e8:6f:f6:48:03:9e:ed:aa:dd:c4:63:bb:1f:0d: db:d2:ee:db:48:70:2a:5a:7f:45:61:66:78:aa:21: 4d:47:eb:df:c5:48:d0:6b:dd:21:6c:ba:79:e7:60: bf:e8:d7:7c:4f:2a:25:98:3a:c6:bf:c4:19:23:ed: 6c:5d:af:b5:74:ae:8a:20:d4:94:6e:d0:ac:53:16: 85:a5:63:b6:9b:1e:07:dc:79:2b:94:ae:65:ac:f1: 08:3b:12:4a:46:54:ce:45:87:56:4c:4a:ab:5a:26: df:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:4B:AC:5B:4A:5B:DF:9D:30:09:A5:F3:1C:DD:39:01:D9:78:D8:A5 X509v3 Authority Key Identifier: keyid:41:E2:E3:52:06:4C:A2:FF:9E:21:C4:84:35:5A:C0:2E:44:07:25:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131D5E/56DD48DED94711EB9A1A0D71C4F9AE02/QeLjUgZMov-eIcSENVrALkQHJY0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QeLjUgZMov-eIcSENVrALkQHJY0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131D5E/56DD48DED94711EB9A1A0D71C4F9AE02/QeLjUgZMov-eIcSENVrALkQHJY0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:fc:5d:b9:57:df:39:51:7e:fb:9b:13:3c:45:d6:2d:61:f9: 2e:ad:6c:86:93:91:e8:14:4f:b3:d0:56:90:53:7c:1d:e9:4e: 33:a1:00:88:44:60:78:ae:67:3b:d5:08:43:fc:83:68:34:3b: 69:fb:d8:65:c2:8b:f5:3f:84:2a:43:7c:c1:59:84:de:7f:6e: 58:d7:e2:86:84:d5:46:2d:59:11:20:8f:40:f0:f8:fc:8a:20: f9:2e:ce:db:79:26:6f:87:27:dd:f7:25:ba:51:bc:bc:8c:07: 80:7d:3d:33:5f:98:9c:e3:a1:76:37:23:ea:b2:a7:46:63:cd: ba:3e:d6:e8:b7:99:12:19:81:cf:ee:4f:52:3c:05:47:24:f8: 8c:ee:cf:c5:74:3b:f0:e3:9c:1e:25:d6:3b:6f:5e:64:5b:9c: 37:0f:65:30:9e:62:86:df:c1:5a:60:52:6c:f8:9e:6a:ea:7b: 9a:13:db:4e:79:52:d6:d2:71:3d:44:e4:27:5b:f5:66:79:c9: 8e:e6:06:ce:64:96:22:40:96:71:f4:5d:71:a6:00:40:6c:fe: 10:bb:39:61:e2:82:d9:79:ff:75:3b:49:0c:1d:95:6a:f1:66: 39:61:13:6e:cc:3b:27:c5:cd:ab:3a:14:95:98:64:33:e4:af: 46:c7:f4:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBXgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzFENUUxMTAvBgNVBAUTKDQxRTJFMzUyMDY0Q0EyRkY5RTIxQzQ4NDM1NUFDMDJF NDQwNzI1OEQwHhcNMjUwNDEyMjI1ODE3WhcNMjUwNDE5MjI1ODE3WjAYMRYwFAYD VQQDEw02N2ZhZjAwOS1iMjNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvlnk8xmRpPmwFui60Vzfg69Awla4SGSe7FYGEw69FPjP6K9zK5CuHQDr8MQU fYDn8WqljSYZZR+rf1dvguuXo6eiYlJ8k128ALo06gweBLMQsZjAuzMTBo65FJsf i068g/qRx85g35m2ZAaXsqXjA3VfyV/1jCzKqe6RG40/gcb53cnr0X+3Nvq1sZc3 PkjZa2I5/Z5G6G/2SAOe7ardxGO7Hw3b0u7bSHAqWn9FYWZ4qiFNR+vfxUjQa90h bLp552C/6Nd8TyolmDrGv8QZI+1sXa+1dK6KINSUbtCsUxaFpWO2mx4H3HkrlK5l rPEIOxJKRlTORYdWTEqrWibfswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPpLrFtK W9+dMAml8xzdOQHZeNilMB8GA1UdIwQYMBaAFEHi41IGTKL/niHEhDVawC5EByWN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMUQ1RS81NkRENDhERUQ5 NDcxMUVCOUExQTBENzFDNEY5QUUwMi9RZUxqVWdaTW92LWVJY1NFTlZyQUxrUUhK WTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FlTGpVZ1pNb3YtZUljU0VOVnJBTGtRSEpZMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MUQ1RS81NkRENDhERUQ5NDcxMUVCOUExQTBENzFDNEY5QUUwMi9RZUxqVWdaTW92 LWVJY1NFTlZyQUxrUUhKWTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC9/F25V985UX77mxM8RdYtYfkurWyGk5HoFE+z0FaQU3wd6U4zoQCI RGB4rmc71QhD/INoNDtp+9hlwov1P4QqQ3zBWYTef25Y1+KGhNVGLVkRII9A8Pj8 iiD5Ls7beSZvhyfd9yW6Uby8jAeAfT0zX5ic46F2NyPqsqdGY826Ptbot5kSGYHP 7k9SPAVHJPiM7s/FdDvw45weJdY7b15kW5w3D2UwnmKG38FaYFJs+J5q6nuaE9tO eVLW0nE9ROQnW/VmecmO5gbOZJYiQJZx9F1xpgBAbP4Quzlh4oLZef91O0kMHZVq 8WY5YRNuzDsnxc2rOhSVmGQz5K9Gx/Ra -----END CERTIFICATE-----Generated at Sun Apr 13 18:20:24 2025 by rpki-client