$ rpki-client -vvf rpki.apnic.net/member_repository/A9136CB3/A5FD84F2571B11EEB418AB3EC4F9AE02/q0Xb_DVXfyfJn89Ao5s4azI1Cto.mft File: q0Xb_DVXfyfJn89Ao5s4azI1Cto.mft (raw, json) Hash identifier: uVr6H+LPwd8RCfeSqebWGiPJYYTvot2xjLTudpIyU7c= Subject key identifier: DC:3D:77:50:EF:33:E8:4F:4B:29:DE:B7:43:13:DC:CA:66:7E:E2:6B Authority key identifier: AB:45:DB:FC:35:57:7F:27:C9:9F:CF:40:A3:9B:38:6B:32:35:0A:DA Certificate issuer: /CN=A9136CB3/serialNumber=AB45DBFC35577F27C99FCF40A39B386B32350ADA Certificate serial: 012F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q0Xb_DVXfyfJn89Ao5s4azI1Cto.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136CB3/A5FD84F2571B11EEB418AB3EC4F9AE02/q0Xb_DVXfyfJn89Ao5s4azI1Cto.mft Manifest number: 0127 Signing time: Thu 03 Apr 2025 03:56:12 +0000 Manifest this update: Thu 03 Apr 2025 03:56:12 +0000 Manifest next update: Thu 10 Apr 2025 03:56:12 +0000 Files and hashes: 1: q0Xb_DVXfyfJn89Ao5s4azI1Cto.crl (hash: JAWCG9tPQUdhhkIO3nngx3UZp/2ojj6UrGE0BVPo098=) 2: B210BF28D1BF11EF95281B83C4F9AE02.roa (hash: ZnF+YTP2pRwfo0eUOGSGb1Y71fB7TRDK5QfyiO+cZbM=) 3: 20DA8B7E571D11EEAA430244C4F9AE02.roa (hash: dRKaSZEwPfTmZ9fnNDPlpvp0Ujh9QZMuM+RN8ZLvFSw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136CB3/A5FD84F2571B11EEB418AB3EC4F9AE02/q0Xb_DVXfyfJn89Ao5s4azI1Cto.crl rsync://rpki.apnic.net/member_repository/A9136CB3/A5FD84F2571B11EEB418AB3EC4F9AE02/q0Xb_DVXfyfJn89Ao5s4azI1Cto.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q0Xb_DVXfyfJn89Ao5s4azI1Cto.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 03:56:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 303 (0x12f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136CB3 Validity Not Before: Apr 3 03:56:12 2025 GMT Not After : Apr 10 03:56:12 2025 GMT Subject: CN=67ee06dc-f2d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:48:ed:4b:c8:83:b8:b3:99:01:e1:db:ff:12: 4e:d7:2a:8f:df:99:19:ed:b7:60:db:47:d3:40:9b: 5b:02:da:26:3d:7f:4f:d0:b8:61:d6:7e:79:95:bd: ba:8f:2d:8c:fe:19:24:70:57:86:e4:cf:53:45:ae: d5:fb:0f:da:ba:54:b7:c4:0d:64:83:62:64:87:1c: 22:31:97:36:63:ce:00:d3:3d:da:88:ee:e2:c7:dc: 46:b6:ec:bb:c5:90:d0:be:d1:cc:19:af:05:c1:80: eb:89:b4:0f:99:f1:63:fb:6e:d4:2f:bf:de:7d:5f: 2b:d2:bd:bb:df:b1:2d:e5:90:3a:51:8e:3e:cd:32: 02:40:b5:7d:9d:a0:d0:ee:79:ff:fe:22:89:a4:36: df:25:e8:8f:6f:24:b4:87:91:0d:1a:07:10:98:24: 26:0d:a3:6b:87:a9:dc:8c:9b:27:2f:68:d5:d4:76: dc:33:21:63:be:c8:fb:16:d6:fb:4b:d2:92:a8:e0: 31:e0:d0:a5:c5:c5:64:55:42:82:7f:7f:2b:fc:bd: 56:88:60:f0:2f:7a:b6:26:aa:2c:bf:11:38:63:04: 9a:04:dd:f0:1b:f7:fc:ff:07:9a:95:af:38:60:39: ea:14:48:1e:33:6b:49:0d:6f:16:b6:96:98:42:e6: 0c:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:3D:77:50:EF:33:E8:4F:4B:29:DE:B7:43:13:DC:CA:66:7E:E2:6B X509v3 Authority Key Identifier: keyid:AB:45:DB:FC:35:57:7F:27:C9:9F:CF:40:A3:9B:38:6B:32:35:0A:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136CB3/A5FD84F2571B11EEB418AB3EC4F9AE02/q0Xb_DVXfyfJn89Ao5s4azI1Cto.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q0Xb_DVXfyfJn89Ao5s4azI1Cto.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136CB3/A5FD84F2571B11EEB418AB3EC4F9AE02/q0Xb_DVXfyfJn89Ao5s4azI1Cto.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:d3:2e:fa:16:80:d3:e4:f4:7c:02:97:32:e0:28:5a:f4:ed: 98:68:30:51:1a:98:65:e1:1d:1f:ce:3b:01:11:fd:3b:40:4c: 6f:a0:dd:90:50:42:6f:32:24:7e:76:2f:65:3e:e6:14:a3:f5: 0f:de:ae:e5:75:59:7b:7f:1b:5d:3b:54:96:c3:23:ab:0a:17: 2d:74:39:6e:8f:91:86:03:f3:a7:f3:d9:f3:63:9f:88:75:a9: 27:f5:ba:bd:63:63:d3:59:cd:f5:23:fa:b8:d9:b3:6e:17:17: 49:d6:bc:47:b4:20:d9:e8:30:5c:33:a8:91:ac:22:1c:b2:46: 3b:98:25:84:d9:e4:99:1b:38:00:e0:cd:40:8e:24:e2:4c:51: 59:1a:f0:ca:de:38:13:94:07:1d:b9:7f:5a:49:dd:62:ee:1c: a2:db:89:07:ee:a1:2c:88:f4:95:be:e6:98:ce:2e:e2:36:54: 2b:f3:e9:cd:3d:f5:8b:f8:10:d3:b6:cf:31:c1:45:aa:4a:40: 12:46:97:0e:a7:62:be:b9:97:0b:c4:17:2a:69:40:91:b9:46: 9b:4f:91:05:24:5f:8c:f7:2a:19:30:e8:3d:1d:1e:b5:bf:75: b1:a3:1b:af:84:0f:f2:77:a2:2e:af:81:38:d1:1a:8f:64:93: 47:a1:01:eb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAS8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzZDQjMxMTAvBgNVBAUTKEFCNDVEQkZDMzU1NzdGMjdDOTlGQ0Y0MEEzOUIzODZC MzIzNTBBREEwHhcNMjUwNDAzMDM1NjEyWhcNMjUwNDEwMDM1NjEyWjAYMRYwFAYD VQQDEw02N2VlMDZkYy1mMmQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA70jtS8iDuLOZAeHb/xJO1yqP35kZ7bdg20fTQJtbAtomPX9P0Lhh1n55lb26 jy2M/hkkcFeG5M9TRa7V+w/aulS3xA1kg2JkhxwiMZc2Y84A0z3aiO7ix9xGtuy7 xZDQvtHMGa8FwYDribQPmfFj+27UL7/efV8r0r2737Et5ZA6UY4+zTICQLV9naDQ 7nn//iKJpDbfJeiPbyS0h5ENGgcQmCQmDaNrh6ncjJsnL2jV1HbcMyFjvsj7Ftb7 S9KSqOAx4NClxcVkVUKCf38r/L1WiGDwL3q2JqosvxE4YwSaBN3wG/f8/weala84 YDnqFEgeM2tJDW8WtpaYQuYMuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNw9d1Dv M+hPSynet0MT3MpmfuJrMB8GA1UdIwQYMBaAFKtF2/w1V38nyZ/PQKObOGsyNQra MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkNCMy9BNUZEODRGMjU3 MUIxMUVFQjQxOEFCM0VDNEY5QUUwMi9xMFhiX0RWWGZ5ZkpuODlBbzVzNGF6STFD dG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3EwWGJfRFZYZnlmSm44OUFvNXM0YXpJMUN0by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NkNCMy9BNUZEODRGMjU3MUIxMUVFQjQxOEFCM0VDNEY5QUUwMi9xMFhiX0RWWGZ5 ZkpuODlBbzVzNGF6STFDdG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBt0y76FoDT5PR8Apcy4Cha9O2YaDBRGphl4R0fzjsBEf07QExvoN2Q UEJvMiR+di9lPuYUo/UP3q7ldVl7fxtdO1SWwyOrChctdDluj5GGA/On89nzY5+I dakn9bq9Y2PTWc31I/q42bNuFxdJ1rxHtCDZ6DBcM6iRrCIcskY7mCWE2eSZGzgA 4M1AjiTiTFFZGvDK3jgTlAcduX9aSd1i7hyi24kH7qEsiPSVvuaYzi7iNlQr8+nN PfWL+BDTts8xwUWqSkASRpcOp2K+uZcLxBcqaUCRuUabT5EFJF+M9yoZMOg9HR61 v3WxoxuvhA/yd6Iur4E40RqPZJNHoQHr -----END CERTIFICATE-----Generated at Fri Apr 4 18:18:30 2025 by rpki-client