$ rpki-client -vvf rpki.apnic.net/member_repository/A914C002/C8FE0808A92511EEAC4BDB57C4F9AE02/qUOt-S08RCBEEEWA1VuTUv3h1ok.mft File: qUOt-S08RCBEEEWA1VuTUv3h1ok.mft (raw, json) Hash identifier: lYGz8SR+rW55qW1gyQ+1y8bKjPgBumr6+PdIzjqLSgY= Subject key identifier: F4:2D:55:FD:81:47:54:70:69:17:92:3D:73:7B:66:FD:34:EC:3D:6E Authority key identifier: A9:43:AD:F9:2D:3C:44:20:44:10:45:80:D5:5B:93:52:FD:E1:D6:89 Certificate issuer: /CN=A914C002/serialNumber=A943ADF92D3C442044104580D55B9352FDE1D689 Certificate serial: F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qUOt-S08RCBEEEWA1VuTUv3h1ok.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C002/C8FE0808A92511EEAC4BDB57C4F9AE02/qUOt-S08RCBEEEWA1VuTUv3h1ok.mft Manifest number: F1 Signing time: Fri 11 Apr 2025 04:31:12 +0000 Manifest this update: Fri 11 Apr 2025 04:31:12 +0000 Manifest next update: Fri 18 Apr 2025 04:31:12 +0000 Files and hashes: 1: qUOt-S08RCBEEEWA1VuTUv3h1ok.crl (hash: jlujUqRPA2PiO+25CzwuMq8Lblha0brBcOQ/J8p1zPQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C002/C8FE0808A92511EEAC4BDB57C4F9AE02/qUOt-S08RCBEEEWA1VuTUv3h1ok.crl rsync://rpki.apnic.net/member_repository/A914C002/C8FE0808A92511EEAC4BDB57C4F9AE02/qUOt-S08RCBEEEWA1VuTUv3h1ok.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qUOt-S08RCBEEEWA1VuTUv3h1ok.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 04:31:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 241 (0xf1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C002, serialNumber=A943ADF92D3C442044104580D55B9352FDE1D689 Validity Not Before: Apr 11 04:31:12 2025 GMT Not After : Apr 18 04:31:12 2025 GMT Subject: CN=67f89b10-766d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:8d:9a:43:a6:b3:c7:0a:12:8a:a5:c5:4e:5c: 0f:6f:40:b9:5f:df:4b:9d:87:08:be:d8:e8:f4:b6: b7:30:b1:19:2b:89:0c:36:25:ee:64:a8:c8:ca:f1: fe:48:4e:f6:ef:7d:d3:74:b9:9f:01:97:b9:2b:9b: 6b:5f:f7:50:b5:aa:e7:59:0e:62:9f:70:37:92:59: 0c:d7:10:60:4f:ee:c6:5b:88:34:56:2e:9c:7d:42: 08:2d:53:f9:6f:7a:53:11:91:e4:ec:b8:0a:b4:73: 70:75:3a:c9:f9:a1:e5:7b:63:73:31:03:ae:0e:50: ca:f9:14:6f:5d:3b:71:56:26:ad:ce:a6:a8:f2:a8: 87:cd:7a:2d:4d:96:f2:e5:f7:40:2c:58:18:23:d6: 44:73:28:90:cb:90:43:c0:59:9f:1b:a7:34:59:1d: 3e:04:46:a0:a4:c9:1c:3d:df:a5:a0:4d:a5:f1:12: 8c:70:40:f0:f1:ef:78:3c:f3:9e:eb:19:c0:fd:ac: db:02:80:98:6f:10:1b:cc:25:17:6e:fc:4c:20:60: 61:98:f1:59:be:0c:f6:7c:98:84:1b:c6:00:2f:d4: fa:45:43:2a:2d:53:62:3e:63:3a:27:33:53:a6:23: 2a:f8:a1:59:fe:f6:75:c5:c7:1a:bc:98:c0:af:a3: fd:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:2D:55:FD:81:47:54:70:69:17:92:3D:73:7B:66:FD:34:EC:3D:6E X509v3 Authority Key Identifier: keyid:A9:43:AD:F9:2D:3C:44:20:44:10:45:80:D5:5B:93:52:FD:E1:D6:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C002/C8FE0808A92511EEAC4BDB57C4F9AE02/qUOt-S08RCBEEEWA1VuTUv3h1ok.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qUOt-S08RCBEEEWA1VuTUv3h1ok.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C002/C8FE0808A92511EEAC4BDB57C4F9AE02/qUOt-S08RCBEEEWA1VuTUv3h1ok.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:7c:24:e6:d3:73:dc:24:22:6f:54:e2:ba:90:a5:b0:7a:9f: d6:d4:83:bd:55:d5:55:97:4d:b9:28:62:a5:c0:93:f3:23:20: 50:17:8d:9f:79:ae:8b:1f:93:e2:ea:85:99:38:04:5a:ac:1b: 01:d8:61:e3:3d:6f:83:d8:33:a8:89:11:61:75:ec:81:df:76: 9b:a5:4f:9c:c2:8e:68:78:6d:4c:4b:82:db:63:17:26:34:b4: 72:84:ce:22:01:b2:76:de:b7:c9:6d:23:36:cc:41:6a:2f:de: a3:be:07:26:fa:62:8b:f7:c4:b2:ea:5b:b8:6d:b7:a4:9b:20: 0e:b9:81:91:e8:ba:ea:d9:7c:1e:60:45:7f:2e:00:40:f9:ec: 67:d6:9c:41:bc:7d:a1:62:9f:a0:b6:c9:d0:f0:b2:3a:a5:d5: 9b:33:70:ff:59:9f:1b:23:96:45:a6:54:3d:04:78:53:b9:c4: 38:49:6f:d2:30:93:aa:fe:14:da:91:a8:5d:c2:49:4a:65:f1: 9c:a1:b9:2a:6e:c1:2f:a8:38:74:b0:04:f7:39:5a:13:f8:41: d2:c6:aa:1c:a7:1f:41:26:de:41:47:26:b4:81:34:b2:26:bc: 01:a9:57:65:96:f9:8b:d7:11:ca:d0:78:74:f5:9f:5f:57:a2: 5b:e5:e3:5e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEMwMDIxMTAvBgNVBAUTKEE5NDNBREY5MkQzQzQ0MjA0NDEwNDU4MEQ1NUI5MzUy RkRFMUQ2ODkwHhcNMjUwNDExMDQzMTEyWhcNMjUwNDE4MDQzMTEyWjAYMRYwFAYD VQQDEw02N2Y4OWIxMC03NjZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs42aQ6azxwoSiqXFTlwPb0C5X99LnYcIvtjo9La3MLEZK4kMNiXuZKjIyvH+ SE72733TdLmfAZe5K5trX/dQtarnWQ5in3A3klkM1xBgT+7GW4g0Vi6cfUIILVP5 b3pTEZHk7LgKtHNwdTrJ+aHle2NzMQOuDlDK+RRvXTtxViatzqao8qiHzXotTZby 5fdALFgYI9ZEcyiQy5BDwFmfG6c0WR0+BEagpMkcPd+loE2l8RKMcEDw8e94PPOe 6xnA/azbAoCYbxAbzCUXbvxMIGBhmPFZvgz2fJiEG8YAL9T6RUMqLVNiPmM6JzNT piMq+KFZ/vZ1xccavJjAr6P9zQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPQtVf2B R1RwaReSPXN7Zv007D1uMB8GA1UdIwQYMBaAFKlDrfktPEQgRBBFgNVbk1L94daJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzAwMi9DOEZFMDgwOEE5 MjUxMUVFQUM0QkRCNTdDNEY5QUUwMi9xVU90LVMwOFJDQkVFRVdBMVZ1VFV2M2gx b2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FVT3QtUzA4UkNCRUVFV0ExVnVUVXYzaDFvay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzAwMi9DOEZFMDgwOEE5MjUxMUVFQUM0QkRCNTdDNEY5QUUwMi9xVU90LVMwOFJD QkVFRVdBMVZ1VFV2M2gxb2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnfCTm03PcJCJvVOK6kKWwep/W1IO9VdVVl025KGKlwJPzIyBQF42f ea6LH5Pi6oWZOARarBsB2GHjPW+D2DOoiRFhdeyB33abpU+cwo5oeG1MS4LbYxcm NLRyhM4iAbJ23rfJbSM2zEFqL96jvgcm+mKL98Sy6lu4bbekmyAOuYGR6Lrq2Xwe YEV/LgBA+exn1pxBvH2hYp+gtsnQ8LI6pdWbM3D/WZ8bI5ZFplQ9BHhTucQ4SW/S MJOq/hTakahdwklKZfGcobkqbsEvqDh0sAT3OVoT+EHSxqocpx9BJt5BRya0gTSy JrwBqVdllvmL1xHK0Hh09Z9fV6Jb5eNe -----END CERTIFICATE-----Generated at Sat Apr 12 17:29:12 2025 by rpki-client