$ rpki-client -vvf rpki.apnic.net/member_repository/A9143FC4/B165A3A8295811E2B38D58FB08B02CD2/qafXPj7Y1cRm3LxsIJzUNTzemM8.mft File: qafXPj7Y1cRm3LxsIJzUNTzemM8.mft (raw, json) Hash identifier: HvxP/+HfXXw+IR+aFqQs6FbZ34brDjfC56XSfEMhkvI= Subject key identifier: 02:65:37:80:6A:16:32:73:71:6E:E9:BB:E7:57:98:FB:B4:CF:66:09 Authority key identifier: A9:A7:D7:3E:3E:D8:D5:C4:66:DC:BC:6C:20:9C:D4:35:3C:DE:98:CF Certificate issuer: /CN=A9143FC4/serialNumber=A9A7D73E3ED8D5C466DCBC6C209CD4353CDE98CF Certificate serial: 342C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qafXPj7Y1cRm3LxsIJzUNTzemM8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143FC4/B165A3A8295811E2B38D58FB08B02CD2/qafXPj7Y1cRm3LxsIJzUNTzemM8.mft Manifest number: 342C Signing time: Sat 12 Apr 2025 15:19:03 +0000 Manifest this update: Sat 12 Apr 2025 15:19:03 +0000 Manifest next update: Sat 19 Apr 2025 15:19:03 +0000 Files and hashes: 1: qafXPj7Y1cRm3LxsIJzUNTzemM8.crl (hash: xyTUgRWo/szf01cri8pr1Ku5gmLpIQSy/GFGmqnJp0A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143FC4/B165A3A8295811E2B38D58FB08B02CD2/qafXPj7Y1cRm3LxsIJzUNTzemM8.crl rsync://rpki.apnic.net/member_repository/A9143FC4/B165A3A8295811E2B38D58FB08B02CD2/qafXPj7Y1cRm3LxsIJzUNTzemM8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qafXPj7Y1cRm3LxsIJzUNTzemM8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 19 Apr 2025 15:19:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13356 (0x342c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143FC4, serialNumber=A9A7D73E3ED8D5C466DCBC6C209CD4353CDE98CF Validity Not Before: Apr 12 15:19:03 2025 GMT Not After : Apr 19 15:19:03 2025 GMT Subject: CN=67fa8467-6dac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:a9:0a:98:3a:f7:31:36:e6:ad:13:0d:0f:eb: 2c:1b:2c:ea:f4:99:ef:20:41:a3:9c:f1:d9:30:f6: b2:8a:76:03:80:e5:ca:6b:a9:2f:d9:7a:51:6a:3f: b6:61:04:b2:73:ea:9f:4a:ba:ac:b6:81:40:00:f3: e8:2c:59:df:84:57:ba:0f:4a:ac:1c:3f:da:cb:85: 87:76:d5:21:8e:50:f9:65:aa:5b:82:a3:6c:03:5e: bb:0d:04:8b:6d:3d:73:44:c4:ad:7e:11:1d:88:5e: d6:ab:4f:a4:48:25:0f:2c:46:f3:f8:06:8d:5d:49: e2:75:e1:c1:76:52:bf:45:fd:81:76:1d:47:00:c9: 84:38:78:3f:62:1f:55:da:01:4c:b9:df:ee:c8:5a: 98:77:be:62:24:99:ba:17:20:d9:27:b7:b7:55:71: 97:8a:23:46:60:0b:41:ff:49:50:87:65:44:3b:c2: e0:5b:b2:fc:1d:05:37:85:e7:03:0e:43:a3:a3:ce: d5:08:83:48:9a:ba:2f:4a:fd:af:5f:dd:a0:0b:0e: 8c:cd:d8:bc:a2:bf:ad:82:1d:ce:3f:57:a6:d6:66: 3d:fc:47:a4:08:28:6e:64:b0:19:43:46:3a:bb:3c: 7f:f0:7d:bb:e8:43:83:9f:ee:5a:02:84:e7:75:62: 06:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:65:37:80:6A:16:32:73:71:6E:E9:BB:E7:57:98:FB:B4:CF:66:09 X509v3 Authority Key Identifier: keyid:A9:A7:D7:3E:3E:D8:D5:C4:66:DC:BC:6C:20:9C:D4:35:3C:DE:98:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143FC4/B165A3A8295811E2B38D58FB08B02CD2/qafXPj7Y1cRm3LxsIJzUNTzemM8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qafXPj7Y1cRm3LxsIJzUNTzemM8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143FC4/B165A3A8295811E2B38D58FB08B02CD2/qafXPj7Y1cRm3LxsIJzUNTzemM8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:b4:c1:aa:62:86:20:1c:cf:9e:e2:f5:9b:00:24:af:5c:95: 0c:2b:d7:35:ed:af:46:3c:0b:69:4f:01:fd:ba:93:06:ec:3b: c4:54:67:6f:db:d4:99:d6:e6:ab:bd:f4:96:61:38:cf:4b:aa: 8d:83:3c:f7:6e:1e:7b:eb:b0:67:da:e2:ce:90:07:5a:78:c6: 3e:73:a7:1e:e4:60:96:2b:c4:7b:0b:36:35:7d:b5:5d:f5:c3: 41:48:b0:85:79:64:c8:ff:3a:a7:e6:8e:98:1b:7d:78:7c:3b: 03:18:2b:90:fd:0e:c5:b6:03:42:63:47:28:80:94:e4:89:45: 49:8f:a9:e5:0f:0a:01:cf:56:ca:54:2e:54:f4:8b:6d:85:40: 08:30:e6:59:52:0d:d8:cf:57:27:13:24:79:db:be:f4:e5:f6: dd:41:4d:21:1b:c7:2c:ae:0f:ae:02:52:20:f9:42:ed:f0:a4: c9:cd:5b:8f:0b:6a:04:28:ad:16:7d:b8:bb:bf:ae:76:29:8f: a4:e0:b2:8f:6a:0e:8a:64:d4:56:be:50:fd:0e:0a:f6:07:5f: 1c:15:fa:e5:c0:ce:18:95:61:ea:19:38:27:b7:98:7a:cb:5b: c9:fb:6d:ca:30:a2:0e:4f:93:0f:f9:f2:26:57:93:08:06:2d: ae:78:cb:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNCwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDNGQzQxMTAvBgNVBAUTKEE5QTdENzNFM0VEOEQ1QzQ2NkRDQkM2QzIwOUNENDM1 M0NERTk4Q0YwHhcNMjUwNDEyMTUxOTAzWhcNMjUwNDE5MTUxOTAzWjAYMRYwFAYD VQQDEw02N2ZhODQ2Ny02ZGFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA16kKmDr3MTbmrRMND+ssGyzq9JnvIEGjnPHZMPayinYDgOXKa6kv2XpRaj+2 YQSyc+qfSrqstoFAAPPoLFnfhFe6D0qsHD/ay4WHdtUhjlD5ZapbgqNsA167DQSL bT1zRMStfhEdiF7Wq0+kSCUPLEbz+AaNXUnideHBdlK/Rf2Bdh1HAMmEOHg/Yh9V 2gFMud/uyFqYd75iJJm6FyDZJ7e3VXGXiiNGYAtB/0lQh2VEO8LgW7L8HQU3hecD DkOjo87VCINImrovSv2vX92gCw6Mzdi8or+tgh3OP1em1mY9/EekCChuZLAZQ0Y6 uzx/8H276EODn+5aAoTndWIG7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAJlN4Bq FjJzcW7pu+dXmPu0z2YJMB8GA1UdIwQYMBaAFKmn1z4+2NXEZty8bCCc1DU83pjP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0M0ZDNC9CMTY1QTNBODI5 NTgxMUUyQjM4RDU4RkIwOEIwMkNEMi9xYWZYUGo3WTFjUm0zTHhzSUp6VU5UemVt TTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FhZlhQajdZMWNSbTNMeHNJSnpVTlR6ZW1NOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 M0ZDNC9CMTY1QTNBODI5NTgxMUUyQjM4RDU4RkIwOEIwMkNEMi9xYWZYUGo3WTFj Um0zTHhzSUp6VU5UemVtTTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYtMGqYoYgHM+e4vWbACSvXJUMK9c17a9GPAtpTwH9upMG7DvEVGdv 29SZ1uarvfSWYTjPS6qNgzz3bh5767Bn2uLOkAdaeMY+c6ce5GCWK8R7CzY1fbVd 9cNBSLCFeWTI/zqn5o6YG314fDsDGCuQ/Q7FtgNCY0cogJTkiUVJj6nlDwoBz1bK VC5U9ItthUAIMOZZUg3Yz1cnEyR527705fbdQU0hG8csrg+uAlIg+ULt8KTJzVuP C2oEKK0Wfbi7v652KY+k4LKPag6KZNRWvlD9Dgr2B18cFfrlwM4YlWHqGTgnt5h6 y1vJ+23KMKIOT5MP+fImV5MIBi2ueMuQ -----END CERTIFICATE-----Generated at Sun Apr 13 02:14:29 2025 by rpki-client