$ rpki-client -vvf rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.mft File: mqwVb6kYtDBXQdrp1duikzdGzoc.mft (raw, json) Hash identifier: KcgV9FBnSCNTMxxAKngTRRYmNNb5Jq0XPcwH/3R1Wo4= Subject key identifier: D8:B9:FC:9A:0B:15:BC:AA:84:FB:48:22:0D:20:FC:17:58:7E:1F:CD Authority key identifier: 9A:AC:15:6F:A9:18:B4:30:57:41:DA:E9:D5:DB:A2:93:37:46:CE:87 Certificate issuer: /CN=A9133CD2/serialNumber=9AAC156FA918B4305741DAE9D5DBA2933746CE87 Certificate serial: 01B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mqwVb6kYtDBXQdrp1duikzdGzoc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.mft Manifest number: 01A5 Signing time: Sat 19 Apr 2025 02:40:38 +0000 Manifest this update: Sat 19 Apr 2025 02:40:37 +0000 Manifest next update: Sat 26 Apr 2025 02:40:37 +0000 Files and hashes: 1: mqwVb6kYtDBXQdrp1duikzdGzoc.crl (hash: KojFTwwJohEl0QgL4EnJjsP97nU+JpdmumlY92T0AwA=) 2: A46B24207D3811EF8EE86E6BC4F9AE02.roa (hash: q4NWMO7W6lRpux2uN6ng9OrQyUZmWgx1UYeF7qqy2kQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.crl rsync://rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mqwVb6kYtDBXQdrp1duikzdGzoc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 02:40:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 432 (0x1b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9133CD2, serialNumber=9AAC156FA918B4305741DAE9D5DBA2933746CE87 Validity Not Before: Apr 19 02:40:37 2025 GMT Not After : Apr 26 02:40:37 2025 GMT Subject: CN=68030d26-a6b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:62:e4:7b:9a:4b:32:58:c2:1b:53:e7:8e:9d: 78:e9:e1:f9:ea:2c:09:c7:5d:57:e1:46:e6:35:57: d6:f2:59:93:43:a0:58:2f:7e:0c:88:56:b4:19:70: 3f:0d:d3:1e:c7:b8:16:3a:52:8f:9a:9c:60:56:f9: bb:d7:8e:eb:58:f3:ae:91:87:66:5b:b3:fb:f7:cb: 42:ea:fb:53:5d:f2:d5:bd:ab:c7:db:ca:48:c7:6a: 07:85:99:2b:97:1a:07:46:ab:7e:00:fc:97:92:fa: 18:60:b1:60:ea:8b:00:45:09:49:0d:65:f2:ab:d4: bd:b5:4f:79:60:84:d3:10:bc:f2:bc:42:89:01:da: 0b:52:ce:54:2a:fb:81:46:f6:23:1e:fb:f2:78:f8: 8c:f1:38:18:c1:f0:c4:01:1a:4b:bd:e5:bd:98:0c: f1:3d:a5:65:c5:fd:65:58:71:3c:ec:fe:a6:97:b7: 7e:a7:4d:c4:69:21:2e:fa:16:3e:27:c0:13:0b:aa: 31:e7:07:c0:9a:a3:b0:da:b1:5b:be:c5:43:ea:36: 83:55:f5:15:dd:89:2f:d1:b3:6c:81:ba:75:0f:ec: c0:32:b0:cb:e2:8d:29:0f:27:da:51:eb:aa:7f:c9: e4:1f:9f:05:48:c5:f5:59:47:8f:64:b8:0d:dc:5a: 2d:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:B9:FC:9A:0B:15:BC:AA:84:FB:48:22:0D:20:FC:17:58:7E:1F:CD X509v3 Authority Key Identifier: keyid:9A:AC:15:6F:A9:18:B4:30:57:41:DA:E9:D5:DB:A2:93:37:46:CE:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mqwVb6kYtDBXQdrp1duikzdGzoc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:d9:47:59:8d:88:b8:df:f1:e2:85:8b:5d:f6:c6:79:84:b7: 6e:59:63:4c:45:96:83:99:08:8b:be:ae:11:dc:ea:51:c8:d7: 64:1e:ad:43:0e:75:d6:c3:80:7f:45:cd:e2:a4:dd:04:5f:86: 7a:ec:ea:e3:f1:6f:61:7a:55:0a:c5:75:e5:5a:cd:28:e2:10: 37:94:35:52:d0:dc:e8:2b:b7:99:3f:45:fc:d3:7d:09:b1:f8: 1c:27:ca:4c:7a:f2:fb:cd:13:d0:12:0c:4b:fc:72:ad:4a:37: 18:6d:65:fe:e8:f3:a1:d8:3e:4e:b4:fa:41:5a:8d:92:35:e2: 43:77:31:83:7c:ff:22:38:d5:9b:84:e2:e0:28:e5:7a:2c:dd: 60:d6:2c:ee:18:56:12:01:97:b1:a5:69:35:a8:50:8f:e6:18: fa:ad:ad:6a:18:3c:03:26:47:b6:2d:10:7a:cd:3c:60:83:60: 06:14:8d:c0:01:43:81:b2:8f:45:3c:f0:fa:85:35:52:a2:c4: 44:4f:85:c3:25:7d:0e:21:da:60:c4:17:77:12:7f:5e:03:23: 3f:19:f1:cd:f9:6c:6d:ec:a0:86:ee:4b:0b:25:95:75:6e:01: 1e:df:6c:86:da:db:b2:0a:c2:9b:df:8a:b3:d5:f4:af:2e:54: 8f:ff:00:23 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzNDRDIxMTAvBgNVBAUTKDlBQUMxNTZGQTkxOEI0MzA1NzQxREFFOUQ1REJBMjkz Mzc0NkNFODcwHhcNMjUwNDE5MDI0MDM3WhcNMjUwNDI2MDI0MDM3WjAYMRYwFAYD VQQDEw02ODAzMGQyNi1hNmIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5mLke5pLMljCG1Pnjp146eH56iwJx11X4UbmNVfW8lmTQ6BYL34MiFa0GXA/ DdMex7gWOlKPmpxgVvm7147rWPOukYdmW7P798tC6vtTXfLVvavH28pIx2oHhZkr lxoHRqt+APyXkvoYYLFg6osARQlJDWXyq9S9tU95YITTELzyvEKJAdoLUs5UKvuB RvYjHvvyePiM8TgYwfDEARpLveW9mAzxPaVlxf1lWHE87P6ml7d+p03EaSEu+hY+ J8ATC6ox5wfAmqOw2rFbvsVD6jaDVfUV3Ykv0bNsgbp1D+zAMrDL4o0pDyfaUeuq f8nkH58FSMX1WUePZLgN3Fot3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNi5/JoL FbyqhPtIIg0g/BdYfh/NMB8GA1UdIwQYMBaAFJqsFW+pGLQwV0Ha6dXbopM3Rs6H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzM0NEMi80NUYzQUE3RUFD MTYxMUVEQjk0N0I4NjBDNEY5QUUwMi9tcXdWYjZrWXREQlhRZHJwMWR1aWt6ZEd6 b2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21xd1ZiNmtZdERCWFFkcnAxZHVpa3pkR3pvYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz M0NEMi80NUYzQUE3RUFDMTYxMUVEQjk0N0I4NjBDNEY5QUUwMi9tcXdWYjZrWXRE QlhRZHJwMWR1aWt6ZEd6b2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCv2UdZjYi43/HihYtd9sZ5hLduWWNMRZaDmQiLvq4R3OpRyNdkHq1D DnXWw4B/Rc3ipN0EX4Z67Orj8W9helUKxXXlWs0o4hA3lDVS0NzoK7eZP0X8030J sfgcJ8pMevL7zRPQEgxL/HKtSjcYbWX+6POh2D5OtPpBWo2SNeJDdzGDfP8iONWb hOLgKOV6LN1g1izuGFYSAZexpWk1qFCP5hj6ra1qGDwDJke2LRB6zTxgg2AGFI3A AUOBso9FPPD6hTVSosRET4XDJX0OIdpgxBd3En9eAyM/GfHN+Wxt7KCG7ksLJZV1 bgEe32yG2tuyCsKb34qz1fSvLlSP/wAj -----END CERTIFICATE-----Generated at Sat Apr 19 14:42:02 2025 by rpki-client