$ rpki-client -vvf rpki.apnic.net/member_repository/A913E9AD/FD723C50A43111EAB7721E6AC4F9AE02/QWpUTLUK6kcDnxO8WMNBDH_miM4.mft File: QWpUTLUK6kcDnxO8WMNBDH_miM4.mft (raw, json) Hash identifier: JmXXBw1p7RDcbQLwKtVCJ0vJaiRLSRwDA/o/EtGBXEw= Subject key identifier: 69:3E:E2:CC:3F:AF:55:8D:9C:D7:93:BC:42:B7:8B:B5:FE:DF:FA:88 Authority key identifier: 41:6A:54:4C:B5:0A:EA:47:03:9F:13:BC:58:C3:41:0C:7F:E6:88:CE Certificate issuer: /CN=A913E9AD/serialNumber=416A544CB50AEA47039F13BC58C3410C7FE688CE Certificate serial: 08FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QWpUTLUK6kcDnxO8WMNBDH_miM4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E9AD/FD723C50A43111EAB7721E6AC4F9AE02/QWpUTLUK6kcDnxO8WMNBDH_miM4.mft Manifest number: 08F5 Signing time: Fri 04 Apr 2025 20:31:56 +0000 Manifest this update: Fri 04 Apr 2025 20:31:55 +0000 Manifest next update: Fri 11 Apr 2025 20:31:55 +0000 Files and hashes: 1: QWpUTLUK6kcDnxO8WMNBDH_miM4.crl (hash: 9PQz1oVt6F+/EWyusboWcu/MXWSP/cyaDPAbbgfcyo4=) 2: 04758F0AA43411EAA22B0871C4F9AE02.roa (hash: gLtq1uRfz9P1m1h8+/+e4fI782kx3+paUmd4vGjKTlg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E9AD/FD723C50A43111EAB7721E6AC4F9AE02/QWpUTLUK6kcDnxO8WMNBDH_miM4.crl rsync://rpki.apnic.net/member_repository/A913E9AD/FD723C50A43111EAB7721E6AC4F9AE02/QWpUTLUK6kcDnxO8WMNBDH_miM4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QWpUTLUK6kcDnxO8WMNBDH_miM4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 19:54:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2300 (0x8fc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E9AD Validity Not Before: Apr 4 20:31:55 2025 GMT Not After : Apr 11 20:31:55 2025 GMT Subject: CN=67f041bb-6dd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:8f:e9:54:9a:11:f6:13:b3:73:36:7f:87:a0: e3:ea:ac:52:e6:1c:7a:fe:cc:8e:61:52:63:fb:f3: 04:8a:9a:ea:38:e4:59:d7:c1:9d:47:c8:c5:30:92: 9d:f4:08:dd:68:cd:6f:9e:17:28:b8:f9:c3:8f:c6: 16:52:46:34:96:81:25:b8:ac:16:11:93:55:98:fa: 5c:81:73:51:7e:11:3f:b7:e6:73:a4:4c:53:c2:4d: e6:9d:d2:32:b0:7b:04:67:92:94:d2:f1:ff:6d:97: 86:a5:ba:b2:75:8c:25:dc:a0:44:bc:ff:e7:94:a7: ad:2d:8a:fa:09:34:ff:48:f8:12:a2:28:63:bd:4c: 28:d9:f0:20:2c:3b:82:2e:eb:25:fe:48:de:2c:bc: ef:bd:45:63:3c:1e:37:68:0c:9c:78:94:90:f6:39: d2:a8:f0:a8:3a:06:83:8b:ba:cc:5b:fa:a6:9c:8a: 4e:4e:9d:81:4f:ca:c7:77:bc:d5:6a:e3:4a:39:2b: 24:73:1d:61:74:7a:24:0b:f4:d2:51:52:b9:88:ac: 3b:04:51:95:94:e1:5f:3f:c0:ee:12:23:07:96:a2: 1b:34:67:ba:64:4d:12:fb:84:f9:ec:1c:19:31:84: e2:b0:af:b5:3a:68:0d:65:28:cc:6b:be:19:32:ef: 7c:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:3E:E2:CC:3F:AF:55:8D:9C:D7:93:BC:42:B7:8B:B5:FE:DF:FA:88 X509v3 Authority Key Identifier: keyid:41:6A:54:4C:B5:0A:EA:47:03:9F:13:BC:58:C3:41:0C:7F:E6:88:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E9AD/FD723C50A43111EAB7721E6AC4F9AE02/QWpUTLUK6kcDnxO8WMNBDH_miM4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QWpUTLUK6kcDnxO8WMNBDH_miM4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E9AD/FD723C50A43111EAB7721E6AC4F9AE02/QWpUTLUK6kcDnxO8WMNBDH_miM4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:22:bc:d6:14:5e:6b:bb:32:b5:15:1e:53:ef:40:43:23:25: 61:69:b8:84:9e:44:c7:2c:55:87:98:ca:f2:84:f0:29:21:12: 80:4a:c4:90:f5:96:e6:19:58:2f:7d:f2:d0:fc:b0:ec:eb:ef: ad:b5:1c:cf:d9:19:e4:ec:23:43:e3:26:02:dd:e5:fd:9b:b7: 0d:90:63:7a:f8:7a:9d:7b:86:a6:f0:7b:5b:ce:9e:cd:89:05: f6:2b:08:ee:1f:b6:9c:56:fd:4f:7d:db:88:5c:48:d7:48:d6: 72:d0:09:fd:9b:45:c9:47:f7:d9:d5:df:84:f2:46:3b:dd:04: cc:50:56:85:89:94:69:bd:07:5d:89:0e:44:4f:01:68:38:88: e6:c6:7b:78:52:bf:1d:24:54:ee:e5:29:15:74:f0:d1:e3:4b: dc:ed:9f:fe:10:42:8e:c3:5d:31:ae:b3:9e:54:4d:31:20:58: d0:f4:fe:75:c8:eb:d2:a7:90:f3:15:2e:60:45:65:01:e0:b8: 3c:41:a6:3a:3d:14:1e:f7:b6:d8:67:ad:36:26:d5:41:b4:99: 52:24:41:1e:0e:19:7d:1c:13:8f:ab:99:c0:40:52:f3:8e:b1: d9:c2:94:51:7f:47:42:d4:f9:c4:6b:25:c7:91:5e:03:bd:14: ae:e5:3e:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCPwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0U5QUQxMTAvBgNVBAUTKDQxNkE1NDRDQjUwQUVBNDcwMzlGMTNCQzU4QzM0MTBD N0ZFNjg4Q0UwHhcNMjUwNDA0MjAzMTU1WhcNMjUwNDExMjAzMTU1WjAYMRYwFAYD VQQDEw02N2YwNDFiYi02ZGQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA14/pVJoR9hOzczZ/h6Dj6qxS5hx6/syOYVJj+/MEiprqOORZ18GdR8jFMJKd 9AjdaM1vnhcouPnDj8YWUkY0loEluKwWEZNVmPpcgXNRfhE/t+ZzpExTwk3mndIy sHsEZ5KU0vH/bZeGpbqydYwl3KBEvP/nlKetLYr6CTT/SPgSoihjvUwo2fAgLDuC Lusl/kjeLLzvvUVjPB43aAyceJSQ9jnSqPCoOgaDi7rMW/qmnIpOTp2BT8rHd7zV auNKOSskcx1hdHokC/TSUVK5iKw7BFGVlOFfP8DuEiMHlqIbNGe6ZE0S+4T57BwZ MYTisK+1OmgNZSjMa74ZMu98DwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGk+4sw/ r1WNnNeTvEK3i7X+3/qIMB8GA1UdIwQYMBaAFEFqVEy1CupHA58TvFjDQQx/5ojO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRTlBRC9GRDcyM0M1MEE0 MzExMUVBQjc3MjFFNkFDNEY5QUUwMi9RV3BVVExVSzZrY0RueE84V01OQkRIX21p TTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FXcFVUTFVLNmtjRG54TzhXTU5CREhfbWlNNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RTlBRC9GRDcyM0M1MEE0MzExMUVBQjc3MjFFNkFDNEY5QUUwMi9RV3BVVExVSzZr Y0RueE84V01OQkRIX21pTTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGIrzWFF5ruzK1FR5T70BDIyVhabiEnkTHLFWHmMryhPApIRKASsSQ 9ZbmGVgvffLQ/LDs6++ttRzP2Rnk7CND4yYC3eX9m7cNkGN6+Hqde4am8Htbzp7N iQX2KwjuH7acVv1PfduIXEjXSNZy0An9m0XJR/fZ1d+E8kY73QTMUFaFiZRpvQdd iQ5ETwFoOIjmxnt4Ur8dJFTu5SkVdPDR40vc7Z/+EEKOw10xrrOeVE0xIFjQ9P51 yOvSp5DzFS5gRWUB4Lg8QaY6PRQe97bYZ602JtVBtJlSJEEeDhl9HBOPq5nAQFLz jrHZwpRRf0dC1PnEayXHkV4DvRSu5T7D -----END CERTIFICATE-----Generated at Fri Apr 4 22:04:23 2025 by rpki-client