$ rpki-client -vvf rpki.apnic.net/member_repository/A9145D4C/F422FD12325811EDBD16D624C4F9AE02/QNg3fKpabquREz6WLv9-IbURPbk.mft File: QNg3fKpabquREz6WLv9-IbURPbk.mft (raw, json) Hash identifier: AL6OMERO9Z20+byNxJk/889HNRTM32Tx4geEAVEhrBw= Subject key identifier: 55:E0:EF:04:E7:42:FB:01:8F:48:77:10:C7:1E:86:0B:0F:6D:7D:88 Authority key identifier: 40:D8:37:7C:AA:5A:6E:AB:91:13:3E:96:2E:FF:7E:21:B5:11:3D:B9 Certificate issuer: /CN=A9145D4C/serialNumber=40D8377CAA5A6EAB91133E962EFF7E21B5113DB9 Certificate serial: 020C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QNg3fKpabquREz6WLv9-IbURPbk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145D4C/F422FD12325811EDBD16D624C4F9AE02/QNg3fKpabquREz6WLv9-IbURPbk.mft Manifest number: 0204 Signing time: Sat 29 Mar 2025 02:17:50 +0000 Manifest this update: Sat 29 Mar 2025 02:17:50 +0000 Manifest next update: Sat 05 Apr 2025 02:17:50 +0000 Files and hashes: 1: QNg3fKpabquREz6WLv9-IbURPbk.crl (hash: lsVj/UAJvbHGqITnLSPlzd1l2agTonhErUtfoHk4djI=) 2: 5E24BEAADA7C11ED8156D867C4F9AE02.roa (hash: ktK9vCE7vIpwa3GinrPFia6DHxl96KzteCFThN1eca8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145D4C/F422FD12325811EDBD16D624C4F9AE02/QNg3fKpabquREz6WLv9-IbURPbk.crl rsync://rpki.apnic.net/member_repository/A9145D4C/F422FD12325811EDBD16D624C4F9AE02/QNg3fKpabquREz6WLv9-IbURPbk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QNg3fKpabquREz6WLv9-IbURPbk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 02:17:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 524 (0x20c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145D4C Validity Not Before: Mar 29 02:17:50 2025 GMT Not After : Apr 5 02:17:50 2025 GMT Subject: CN=67e7584e-ddd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:35:04:c9:95:16:84:9e:c7:62:c8:70:ff:e0: e4:38:5d:bc:4c:20:ba:f2:ed:6c:0c:a3:23:d6:a4: 3e:fe:4f:dc:89:c8:da:31:21:f8:86:e8:72:dc:ee: 67:22:20:ec:02:4a:62:37:1b:4a:29:30:f1:ad:d3: 79:88:8d:d1:f8:63:df:e2:b0:d3:b3:e6:c8:4c:78: 62:b2:63:7a:1a:a6:20:11:f7:41:da:a6:f9:a7:9c: 21:d8:8c:77:df:75:68:5e:ed:e7:01:06:2e:35:64: 65:4d:46:88:e9:b6:bd:46:d3:bb:84:1d:b5:7b:3e: a6:8d:79:bf:17:65:bb:dd:11:0b:e5:a8:3a:3a:26: cd:72:e4:9d:d8:97:eb:8c:7c:2d:dc:5e:bf:94:91: be:e2:57:c5:0b:28:c6:c1:6a:b9:a6:d6:fb:0e:cf: ed:e0:55:55:de:06:72:a0:84:81:ff:5f:fd:0f:c2: 1b:bd:85:72:aa:2b:72:5e:4c:4a:41:43:f5:f5:8f: 3b:34:e4:2f:c0:50:18:18:49:ef:1e:22:f8:72:30: e3:25:eb:51:b2:26:3d:a3:85:ca:29:84:7f:23:b2: e8:3c:ea:41:90:f5:2f:76:d1:bf:d8:e3:ea:fc:41: 26:2d:b7:31:bb:cf:4a:64:f7:b5:8d:bf:81:2f:7f: 23:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:E0:EF:04:E7:42:FB:01:8F:48:77:10:C7:1E:86:0B:0F:6D:7D:88 X509v3 Authority Key Identifier: keyid:40:D8:37:7C:AA:5A:6E:AB:91:13:3E:96:2E:FF:7E:21:B5:11:3D:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145D4C/F422FD12325811EDBD16D624C4F9AE02/QNg3fKpabquREz6WLv9-IbURPbk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QNg3fKpabquREz6WLv9-IbURPbk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145D4C/F422FD12325811EDBD16D624C4F9AE02/QNg3fKpabquREz6WLv9-IbURPbk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:f8:b2:36:0e:4a:aa:59:cc:1d:e5:83:36:dc:1a:8f:b7:4d: a1:61:64:ca:fa:7e:77:54:01:93:e3:dc:14:a5:7c:f3:17:5f: 4c:c7:e0:fd:57:a1:8a:95:9c:28:94:c0:98:b9:66:93:b7:fe: ea:97:7e:a8:4b:84:52:a7:41:7a:2c:33:68:5f:2a:f0:e4:75: 63:fe:c6:e4:3e:af:30:bb:ac:00:bd:35:30:d8:e1:29:5a:62: 86:f1:f3:f1:e1:18:63:b6:45:7b:1f:a7:a4:96:1a:ce:28:e4: 10:0d:26:c6:22:60:e6:ae:c3:b6:17:67:7a:10:f4:2a:50:b1: a6:f5:14:be:22:73:08:d4:ea:9e:c9:70:0b:da:44:25:4f:56: db:26:fb:eb:b5:7f:7e:a9:29:51:9c:3e:89:50:0b:3e:82:3b: 33:81:e1:b5:45:db:3c:b5:20:9c:2d:44:c5:2c:6b:0f:46:47: b9:26:b5:45:ce:9c:42:f4:a4:4d:27:15:bc:e9:e9:d6:ab:8c: 33:67:ea:2a:20:0d:db:de:2b:7f:fc:09:c0:ab:00:4c:3b:9c: 5f:a3:57:7f:ee:ad:f6:ba:50:27:dc:ce:39:21:2a:39:61:68: 2f:23:67:94:1c:57:03:18:c8:8e:00:c0:36:46:04:ee:2d:61: e4:1c:10:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDVENEMxMTAvBgNVBAUTKDQwRDgzNzdDQUE1QTZFQUI5MTEzM0U5NjJFRkY3RTIx QjUxMTNEQjkwHhcNMjUwMzI5MDIxNzUwWhcNMjUwNDA1MDIxNzUwWjAYMRYwFAYD VQQDEw02N2U3NTg0ZS1kZGQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArzUEyZUWhJ7HYshw/+DkOF28TCC68u1sDKMj1qQ+/k/cicjaMSH4huhy3O5n IiDsAkpiNxtKKTDxrdN5iI3R+GPf4rDTs+bITHhismN6GqYgEfdB2qb5p5wh2Ix3 33VoXu3nAQYuNWRlTUaI6ba9RtO7hB21ez6mjXm/F2W73REL5ag6OibNcuSd2Jfr jHwt3F6/lJG+4lfFCyjGwWq5ptb7Ds/t4FVV3gZyoISB/1/9D8IbvYVyqityXkxK QUP19Y87NOQvwFAYGEnvHiL4cjDjJetRsiY9o4XKKYR/I7LoPOpBkPUvdtG/2OPq /EEmLbcxu89KZPe1jb+BL38jgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFXg7wTn QvsBj0h3EMcehgsPbX2IMB8GA1UdIwQYMBaAFEDYN3yqWm6rkRM+li7/fiG1ET25 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NUQ0Qy9GNDIyRkQxMjMy NTgxMUVEQkQxNkQ2MjRDNEY5QUUwMi9RTmczZktwYWJxdVJFejZXTHY5LUliVVJQ YmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FOZzNmS3BhYnF1UkV6NldMdjktSWJVUlBiay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NUQ0Qy9GNDIyRkQxMjMyNTgxMUVEQkQxNkQ2MjRDNEY5QUUwMi9RTmczZktwYWJx dVJFejZXTHY5LUliVVJQYmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAP+LI2DkqqWcwd5YM23BqPt02hYWTK+n53VAGT49wUpXzzF19Mx+D9 V6GKlZwolMCYuWaTt/7ql36oS4RSp0F6LDNoXyrw5HVj/sbkPq8wu6wAvTUw2OEp WmKG8fPx4RhjtkV7H6eklhrOKOQQDSbGImDmrsO2F2d6EPQqULGm9RS+InMI1Oqe yXAL2kQlT1bbJvvrtX9+qSlRnD6JUAs+gjszgeG1Rds8tSCcLUTFLGsPRke5JrVF zpxC9KRNJxW86enWq4wzZ+oqIA3b3it//AnAqwBMO5xfo1d/7q32ulAn3M45ISo5 YWgvI2eUHFcDGMiOAMA2RgTuLWHkHBAt -----END CERTIFICATE-----Generated at Fri Apr 4 22:10:56 2025 by rpki-client