$ rpki-client -vvf rpki.apnic.net/member_repository/A914524B/B51022D6F88F11EE976C1E2AC4F9AE02/Qnks9D39tIategexI8sqYaM-I-M.mft File: Qnks9D39tIategexI8sqYaM-I-M.mft (raw, json) Hash identifier: f+VOeM82aj+9LEh5Gra1g8Ac4SEX2HQ3U0Srb8szQAA= Subject key identifier: 59:42:0E:BF:DE:05:2A:2C:D5:F4:AD:30:D7:99:58:46:26:5D:57:10 Authority key identifier: 42:79:2C:F4:3D:FD:B4:86:AD:7A:07:B1:23:CB:2A:61:A3:3E:23:E3 Certificate issuer: /CN=A914524B/serialNumber=42792CF43DFDB486AD7A07B123CB2A61A33E23E3 Certificate serial: C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qnks9D39tIategexI8sqYaM-I-M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914524B/B51022D6F88F11EE976C1E2AC4F9AE02/Qnks9D39tIategexI8sqYaM-I-M.mft Manifest number: BB Signing time: Thu 03 Apr 2025 05:15:12 +0000 Manifest this update: Thu 03 Apr 2025 05:15:12 +0000 Manifest next update: Thu 10 Apr 2025 05:15:12 +0000 Files and hashes: 1: Qnks9D39tIategexI8sqYaM-I-M.crl (hash: ILArD5VRUxsjAn/osBgoe0iLKuvSqBt1Avd7uf1zbvY=) 2: A16739B2F89011EE9EB9D42BC4F9AE02.roa (hash: ey0oQHiSGpH4+EnFGwizJ9b66lbUXNoAkMqUMUf/z8g=) 3: 138E2452F89011EE8B2FC42AC4F9AE02.roa (hash: /QO+4V0fLYx8g3hL0Bgq9nBiIuvSmIV2wmk+9euyuaI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914524B/B51022D6F88F11EE976C1E2AC4F9AE02/Qnks9D39tIategexI8sqYaM-I-M.crl rsync://rpki.apnic.net/member_repository/A914524B/B51022D6F88F11EE976C1E2AC4F9AE02/Qnks9D39tIategexI8sqYaM-I-M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qnks9D39tIategexI8sqYaM-I-M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 05:15:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 193 (0xc1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914524B Validity Not Before: Apr 3 05:15:12 2025 GMT Not After : Apr 10 05:15:12 2025 GMT Subject: CN=67ee1960-97a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:8a:55:81:d6:1e:ef:02:b8:08:ff:8d:a7:f0: 89:51:4f:27:ef:f6:a9:e6:cd:80:75:42:41:e0:85: 6c:6d:59:e1:55:48:b7:df:39:f3:e3:19:25:cf:fc: 4c:3b:b1:35:a5:40:b4:0b:2c:33:5c:20:1e:ed:5c: eb:f4:00:4f:ec:7b:91:82:20:23:71:c0:44:80:ab: c7:1f:fd:81:e7:5f:38:2b:42:1e:11:aa:3b:b0:56: 65:36:82:9d:c9:33:11:d9:b6:82:c1:89:ff:ab:e7: 01:a6:84:5e:63:cd:e6:33:dc:b1:32:84:a8:58:4e: 86:4f:96:4a:62:1f:c6:fc:86:6d:30:57:ee:ec:6b: ce:c1:48:c6:72:15:80:e7:5c:c6:a9:08:ff:4d:24: 31:32:d7:97:f6:e7:a4:22:a9:f5:6a:a1:b3:3b:97: fd:15:2d:e7:3f:01:b4:35:11:be:de:85:96:c2:15: 3d:b3:60:8d:d6:1c:ac:fa:3b:82:b9:cb:d8:d6:12: 79:7e:18:ea:b3:6e:c4:3b:86:3f:c0:6e:7b:b9:db: ea:0f:15:74:21:3e:84:ac:1a:4e:30:97:ac:b4:00: e6:60:b8:fd:f9:b9:87:d3:1d:20:44:ff:79:9a:40: 7f:bf:1e:e9:1f:9b:9b:16:43:a0:46:a9:fd:9f:2a: 2c:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:42:0E:BF:DE:05:2A:2C:D5:F4:AD:30:D7:99:58:46:26:5D:57:10 X509v3 Authority Key Identifier: keyid:42:79:2C:F4:3D:FD:B4:86:AD:7A:07:B1:23:CB:2A:61:A3:3E:23:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914524B/B51022D6F88F11EE976C1E2AC4F9AE02/Qnks9D39tIategexI8sqYaM-I-M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qnks9D39tIategexI8sqYaM-I-M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914524B/B51022D6F88F11EE976C1E2AC4F9AE02/Qnks9D39tIategexI8sqYaM-I-M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:be:24:fd:9f:6c:ba:ff:44:07:0a:b7:0d:cd:bf:f5:bf:47: f8:44:e9:a9:02:cb:61:bc:7c:98:04:a1:75:46:5b:42:30:b0: c6:8d:c6:bc:fc:2d:d4:eb:bf:0b:1f:a5:af:3e:b7:94:10:1a: 9b:3c:2c:2c:fb:de:a4:e3:63:70:97:6a:32:8a:93:1c:1a:32: a3:02:f1:e8:53:f6:1a:f4:dd:b3:15:fd:45:97:75:d7:f4:7d: 0d:0c:08:bd:3f:a3:69:24:0f:8b:a4:66:87:30:e2:12:67:8a: 48:75:d0:c0:a1:b5:36:fa:e6:3d:16:ed:3a:65:18:ee:dd:c1: 57:54:13:1a:0d:e5:51:4f:cc:3f:1c:ea:c8:8b:b8:06:d9:d7: 7f:be:3d:d7:1a:c5:03:ba:a0:66:80:e6:a8:ff:92:e5:70:ee: 07:44:d3:9a:2b:d1:10:6e:1b:2a:97:52:4d:1d:12:92:19:ca: 55:31:89:35:ec:89:b3:04:a7:59:85:d0:66:c5:40:70:ea:5e: c0:8d:51:f8:67:83:a0:b9:dd:73:8d:52:22:e5:88:e5:8b:d8: 7d:60:0d:a2:d5:bc:0b:1b:62:3b:3b:fe:87:b5:62:ca:a9:6b: 62:32:bf:5e:d1:44:60:93:0a:cb:90:33:3e:61:bb:bf:6a:be: d6:f2:3a:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDUyNEIxMTAvBgNVBAUTKDQyNzkyQ0Y0M0RGREI0ODZBRDdBMDdCMTIzQ0IyQTYx QTMzRTIzRTMwHhcNMjUwNDAzMDUxNTEyWhcNMjUwNDEwMDUxNTEyWjAYMRYwFAYD VQQDEw02N2VlMTk2MC05N2E4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1opVgdYe7wK4CP+Np/CJUU8n7/ap5s2AdUJB4IVsbVnhVUi33znz4xklz/xM O7E1pUC0CywzXCAe7Vzr9ABP7HuRgiAjccBEgKvHH/2B5184K0IeEao7sFZlNoKd yTMR2baCwYn/q+cBpoReY83mM9yxMoSoWE6GT5ZKYh/G/IZtMFfu7GvOwUjGchWA 51zGqQj/TSQxMteX9uekIqn1aqGzO5f9FS3nPwG0NRG+3oWWwhU9s2CN1hys+juC ucvY1hJ5fhjqs27EO4Y/wG57udvqDxV0IT6ErBpOMJestADmYLj9+bmH0x0gRP95 mkB/vx7pH5ubFkOgRqn9nyoskwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFlCDr/e BSos1fStMNeZWEYmXVcQMB8GA1UdIwQYMBaAFEJ5LPQ9/bSGrXoHsSPLKmGjPiPj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTI0Qi9CNTEwMjJENkY4 OEYxMUVFOTc2QzFFMkFDNEY5QUUwMi9RbmtzOUQzOXRJYXRlZ2V4SThzcVlhTS1J LU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Fua3M5RDM5dElhdGVnZXhJOHNxWWFNLUktTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NTI0Qi9CNTEwMjJENkY4OEYxMUVFOTc2QzFFMkFDNEY5QUUwMi9RbmtzOUQzOXRJ YXRlZ2V4SThzcVlhTS1JLU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8viT9n2y6/0QHCrcNzb/1v0f4ROmpAsthvHyYBKF1RltCMLDGjca8 /C3U678LH6WvPreUEBqbPCws+96k42Nwl2oyipMcGjKjAvHoU/Ya9N2zFf1Fl3XX 9H0NDAi9P6NpJA+LpGaHMOISZ4pIddDAobU2+uY9Fu06ZRju3cFXVBMaDeVRT8w/ HOrIi7gG2dd/vj3XGsUDuqBmgOao/5LlcO4HRNOaK9EQbhsql1JNHRKSGcpVMYk1 7ImzBKdZhdBmxUBw6l7AjVH4Z4Ogud1zjVIi5Yjli9h9YA2i1bwLG2I7O/6HtWLK qWtiMr9e0URgkwrLkDM+Ybu/ar7W8joV -----END CERTIFICATE-----Generated at Fri Apr 4 22:17:55 2025 by rpki-client