$ rpki-client -vvf rpki.apnic.net/member_repository/A914A49B/B94F6936015111EF9857C01EC4F9AE02/1QN6-WnIrOoBtXD8ZK3UgorAZBQ.mft File: 1QN6-WnIrOoBtXD8ZK3UgorAZBQ.mft (raw, json) Hash identifier: /qoEBhPolPejvo+RKGHEcJH+MFKzt+5PAX0Z9WB0Cbo= Subject key identifier: A5:9C:6B:29:99:3F:0D:EF:40:B1:C1:48:F0:43:EA:6F:EF:04:80:A1 Authority key identifier: D5:03:7A:F9:69:C8:AC:EA:01:B5:70:FC:64:AD:D4:82:8A:C0:64:14 Certificate issuer: /CN=A914A49B/serialNumber=D5037AF969C8ACEA01B570FC64ADD4828AC06414 Certificate serial: C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1QN6-WnIrOoBtXD8ZK3UgorAZBQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A49B/B94F6936015111EF9857C01EC4F9AE02/1QN6-WnIrOoBtXD8ZK3UgorAZBQ.mft Manifest number: BC Signing time: Sat 19 Apr 2025 05:01:59 +0000 Manifest this update: Sat 19 Apr 2025 05:01:59 +0000 Manifest next update: Sat 26 Apr 2025 05:01:59 +0000 Files and hashes: 1: 1QN6-WnIrOoBtXD8ZK3UgorAZBQ.crl (hash: Y8uFfeJd8sTClU1Zk/b9zeczwMzLYlGpaP5ewfnrjfQ=) 2: 2907520205DA11EF974A6A0BC4F9AE02.roa (hash: OrAHJTjZ/RqHAwIjIMccBjE+JqFUpBNrVGrdl3fQy10=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A49B/B94F6936015111EF9857C01EC4F9AE02/1QN6-WnIrOoBtXD8ZK3UgorAZBQ.crl rsync://rpki.apnic.net/member_repository/A914A49B/B94F6936015111EF9857C01EC4F9AE02/1QN6-WnIrOoBtXD8ZK3UgorAZBQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1QN6-WnIrOoBtXD8ZK3UgorAZBQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 05:01:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 192 (0xc0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A49B, serialNumber=D5037AF969C8ACEA01B570FC64ADD4828AC06414 Validity Not Before: Apr 19 05:01:59 2025 GMT Not After : Apr 26 05:01:59 2025 GMT Subject: CN=68032e47-ca61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:fb:0e:5a:2c:90:2c:40:ea:f9:e2:08:86:8c: 87:4a:cc:35:4a:b9:fa:03:0d:d7:92:ec:ee:7a:d9: c8:53:1d:2b:e3:dc:52:cd:cd:0d:1b:90:02:69:20: 62:eb:16:d2:20:58:56:bb:bd:1e:32:83:3c:a1:f8: a8:f2:88:5f:d3:26:28:ae:33:b7:76:ed:6b:db:39: 15:ef:2d:6e:57:be:4d:8c:c3:63:36:24:f0:09:05: 6e:da:8d:29:be:5e:cd:08:21:6c:7c:4d:ca:1d:98: 4c:7b:56:81:ce:12:ac:f4:ab:cb:52:ab:05:45:39: 77:71:ae:de:34:75:8d:76:f7:4d:8a:04:7e:d0:c2: 64:9b:bd:33:17:5a:4c:83:d6:fa:39:e9:f3:b2:b4: 6e:1c:8e:3d:96:d5:db:fd:71:f7:11:d2:82:e1:df: 69:32:c1:1d:6d:a8:53:1b:2a:3d:c7:53:f8:31:f1: 25:3c:d8:28:71:7e:0d:b2:4a:69:d6:e5:a2:63:e0: 30:8d:d6:f4:54:a5:04:ec:7e:e5:07:ee:fd:f3:a7: 29:bb:4a:b1:d5:69:8e:c9:27:1f:94:47:e3:46:f4: 36:71:d4:15:8d:b3:5f:e8:47:31:f0:17:db:64:b3: 40:1b:9f:2e:76:cd:2a:3b:cc:f4:db:9a:e5:8f:b4: c6:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:9C:6B:29:99:3F:0D:EF:40:B1:C1:48:F0:43:EA:6F:EF:04:80:A1 X509v3 Authority Key Identifier: keyid:D5:03:7A:F9:69:C8:AC:EA:01:B5:70:FC:64:AD:D4:82:8A:C0:64:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A49B/B94F6936015111EF9857C01EC4F9AE02/1QN6-WnIrOoBtXD8ZK3UgorAZBQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1QN6-WnIrOoBtXD8ZK3UgorAZBQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A49B/B94F6936015111EF9857C01EC4F9AE02/1QN6-WnIrOoBtXD8ZK3UgorAZBQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:14:af:fa:2e:9a:34:a9:b7:a3:60:b5:23:e3:40:d7:33:84: 47:99:d7:38:6f:05:58:43:43:60:08:b5:a5:18:18:ec:26:66: 9d:ff:c2:a8:d7:2d:0d:22:1e:f9:4f:13:10:1e:29:91:23:fd: e1:ed:c8:b3:b4:87:dc:61:16:90:8f:db:d4:98:88:3c:c2:98: 49:65:7d:5b:f9:a7:d8:39:5c:61:0a:20:3d:b6:f8:1d:80:b8: 93:75:70:85:55:e3:61:a1:e5:d4:a5:f0:5f:7e:bb:46:c9:b7: df:f9:49:05:a7:d4:62:81:ab:c9:7e:52:b1:fd:5a:e4:89:25: f4:ce:59:dd:d5:20:b0:79:31:d7:4d:0b:d8:15:64:e9:5a:19: 1f:31:c4:24:0b:a5:b7:43:1b:c5:a6:35:39:af:a7:4f:d5:8e: 36:85:3d:67:e6:20:61:5f:33:48:5c:1e:0d:33:f9:13:5a:18: 77:89:01:9a:9d:cd:d2:ec:14:57:d6:44:f9:fc:77:88:53:86: 82:02:85:13:d0:ac:7e:0f:d1:7a:36:06:b5:0e:0d:fc:9b:38: fe:3c:51:82:ff:2a:ed:70:6b:bd:e5:d0:bc:e1:28:94:78:86: 6f:4e:b6:35:61:ab:80:5f:c8:20:73:09:0a:a5:ac:14:87:8c: 33:41:05:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEE0OUIxMTAvBgNVBAUTKEQ1MDM3QUY5NjlDOEFDRUEwMUI1NzBGQzY0QURENDgy OEFDMDY0MTQwHhcNMjUwNDE5MDUwMTU5WhcNMjUwNDI2MDUwMTU5WjAYMRYwFAYD VQQDEw02ODAzMmU0Ny1jYTYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5vsOWiyQLEDq+eIIhoyHSsw1Srn6Aw3XkuzuetnIUx0r49xSzc0NG5ACaSBi 6xbSIFhWu70eMoM8ofio8ohf0yYorjO3du1r2zkV7y1uV75NjMNjNiTwCQVu2o0p vl7NCCFsfE3KHZhMe1aBzhKs9KvLUqsFRTl3ca7eNHWNdvdNigR+0MJkm70zF1pM g9b6OenzsrRuHI49ltXb/XH3EdKC4d9pMsEdbahTGyo9x1P4MfElPNgocX4Nskpp 1uWiY+Awjdb0VKUE7H7lB+7986cpu0qx1WmOyScflEfjRvQ2cdQVjbNf6Ecx8Bfb ZLNAG58uds0qO8z025rlj7TGTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKWcaymZ Pw3vQLHBSPBD6m/vBIChMB8GA1UdIwQYMBaAFNUDevlpyKzqAbVw/GSt1IKKwGQU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTQ5Qi9COTRGNjkzNjAx NTExMUVGOTg1N0MwMUVDNEY5QUUwMi8xUU42LVduSXJPb0J0WEQ4WkszVWdvckFa QlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFRTjYtV25Jck9vQnRYRDhaSzNVZ29yQVpCUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QTQ5Qi9COTRGNjkzNjAxNTExMUVGOTg1N0MwMUVDNEY5QUUwMi8xUU42LVduSXJP b0J0WEQ4WkszVWdvckFaQlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDFK/6Lpo0qbejYLUj40DXM4RHmdc4bwVYQ0NgCLWlGBjsJmad/8Ko 1y0NIh75TxMQHimRI/3h7ciztIfcYRaQj9vUmIg8wphJZX1b+afYOVxhCiA9tvgd gLiTdXCFVeNhoeXUpfBffrtGybff+UkFp9RigavJflKx/VrkiSX0zlnd1SCweTHX TQvYFWTpWhkfMcQkC6W3QxvFpjU5r6dP1Y42hT1n5iBhXzNIXB4NM/kTWhh3iQGa nc3S7BRX1kT5/HeIU4aCAoUT0Kx+D9F6Nga1Dg38mzj+PFGC/yrtcGu95dC84SiU eIZvTrY1YauAX8ggcwkKpawUh4wzQQWc -----END CERTIFICATE-----Generated at Sun Apr 20 20:52:11 2025 by rpki-client