$ rpki-client -vvf rpki.apnic.net/member_repository/A914D6FC/88759182432F11EDBBD98F5CC4F9AE02/qL9U9ggZZyIZNcsXzBPr-4QaYMI.mft File: qL9U9ggZZyIZNcsXzBPr-4QaYMI.mft (raw, json) Hash identifier: zF84YhTUNIhvTx0XMTbdTBtI0svpqBw8C05fVHnnKqw= Subject key identifier: FA:2B:87:87:FB:3C:E0:CB:7C:F5:53:AB:0B:D2:14:1E:97:F3:09:ED Authority key identifier: A8:BF:54:F6:08:19:67:22:19:35:CB:17:CC:13:EB:FB:84:1A:60:C2 Certificate issuer: /CN=A914D6FC/serialNumber=A8BF54F6081967221935CB17CC13EBFB841A60C2 Certificate serial: 01EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qL9U9ggZZyIZNcsXzBPr-4QaYMI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914D6FC/88759182432F11EDBBD98F5CC4F9AE02/qL9U9ggZZyIZNcsXzBPr-4QaYMI.mft Manifest number: 01E6 Signing time: Mon 21 Apr 2025 01:43:38 +0000 Manifest this update: Mon 21 Apr 2025 01:43:38 +0000 Manifest next update: Mon 28 Apr 2025 01:43:38 +0000 Files and hashes: 1: qL9U9ggZZyIZNcsXzBPr-4QaYMI.crl (hash: kA/kutIpeHAt+uUSUKI3djCjvZ/vMdXti+PkXGjv944=) 2: 11EC50B48B8F11EF8DE96E60C4F9AE02.roa (hash: dBzmelJqZJRJwarLr24Qo4vmuBT6QmKRJnEzxT0UO6A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914D6FC/88759182432F11EDBBD98F5CC4F9AE02/qL9U9ggZZyIZNcsXzBPr-4QaYMI.crl rsync://rpki.apnic.net/member_repository/A914D6FC/88759182432F11EDBBD98F5CC4F9AE02/qL9U9ggZZyIZNcsXzBPr-4QaYMI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qL9U9ggZZyIZNcsXzBPr-4QaYMI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 01:43:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 495 (0x1ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914D6FC, serialNumber=A8BF54F6081967221935CB17CC13EBFB841A60C2 Validity Not Before: Apr 21 01:43:38 2025 GMT Not After : Apr 28 01:43:38 2025 GMT Subject: CN=6805a2ca-0645 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:bd:8e:9a:84:c7:cc:d6:13:63:2d:a3:af:73: a2:b1:8e:41:19:2e:fe:10:5b:11:4c:62:7c:c4:3b: c5:3a:4e:b4:6b:32:65:48:e0:ff:3a:d1:dd:ab:24: 55:4c:d9:9d:1f:59:e1:f3:2f:d8:26:38:cf:31:f7: b7:5f:c3:bb:1b:f0:57:55:ad:12:37:d8:06:bd:ae: b1:f4:0c:f8:52:84:55:f5:d9:98:12:1a:72:f9:4a: 46:38:42:93:87:64:e0:d2:e8:05:ef:f9:c2:af:9d: 29:e0:43:80:3e:21:5f:37:70:91:9c:c5:14:7a:9a: c8:1b:88:93:58:6f:a5:3c:e2:04:44:4a:2f:77:f5: 3b:31:94:e0:ec:21:3c:ee:f9:35:d4:21:30:db:f7: 55:10:03:40:d2:23:57:82:f9:5b:95:d2:83:8e:f0: 06:a4:e5:48:be:41:20:07:83:1d:d8:cb:50:77:95: aa:0d:98:38:b4:a1:45:53:d2:cc:c4:a5:72:4e:67: 96:d1:6f:de:39:0e:83:86:36:34:60:2f:51:a1:4f: a8:57:94:85:82:7e:48:03:73:81:0c:48:ef:05:62: 69:47:e5:41:ae:38:cb:a4:62:23:0a:e4:a6:6d:9f: 5c:98:90:bd:99:9d:8d:b6:07:83:fc:90:49:bb:04: b9:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:2B:87:87:FB:3C:E0:CB:7C:F5:53:AB:0B:D2:14:1E:97:F3:09:ED X509v3 Authority Key Identifier: keyid:A8:BF:54:F6:08:19:67:22:19:35:CB:17:CC:13:EB:FB:84:1A:60:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914D6FC/88759182432F11EDBBD98F5CC4F9AE02/qL9U9ggZZyIZNcsXzBPr-4QaYMI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qL9U9ggZZyIZNcsXzBPr-4QaYMI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D6FC/88759182432F11EDBBD98F5CC4F9AE02/qL9U9ggZZyIZNcsXzBPr-4QaYMI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:16:7a:69:66:18:57:f5:af:3e:77:5c:0a:06:0c:24:27:7e: b7:7d:45:cf:aa:d5:f0:8a:f2:f0:08:eb:66:a3:68:3d:91:86: 64:75:ec:07:13:fb:54:6a:d0:b6:05:a1:96:9a:3e:52:e5:ed: b2:03:94:37:e3:6a:ac:61:a5:c6:27:53:0e:7e:95:a7:bd:e6: c4:00:ef:b0:ea:aa:3e:a3:81:d2:c2:c5:00:bd:d8:a1:90:6f: fc:af:bb:1a:35:3a:f9:ee:43:57:58:73:35:a2:9f:e0:a2:15: 41:63:af:e6:25:bf:7e:38:73:8f:a6:23:b1:8f:33:67:a4:41: 91:b9:de:e1:54:8e:fc:67:c4:7d:7f:2c:ca:2f:fb:0e:e4:6e: f4:19:4a:a2:5e:01:f5:33:26:22:96:9b:53:5b:bd:8a:2d:92: f6:16:65:e5:65:43:da:ee:0e:a5:c1:19:a6:e2:20:26:f0:8f: 82:66:63:b1:60:53:c2:77:9d:c9:fb:45:f2:69:e0:55:2c:66: cd:cc:68:67:7b:7e:60:66:30:ce:e1:c4:fa:52:50:dd:5a:be: a4:6a:a2:4c:f3:71:e7:9f:68:78:74:0c:47:11:21:db:e1:9f: f8:35:26:3a:34:87:74:d2:67:c8:94:03:32:d6:65:2e:07:c8: a2:3b:19:cf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAe8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEQ2RkMxMTAvBgNVBAUTKEE4QkY1NEY2MDgxOTY3MjIxOTM1Q0IxN0NDMTNFQkZC ODQxQTYwQzIwHhcNMjUwNDIxMDE0MzM4WhcNMjUwNDI4MDE0MzM4WjAYMRYwFAYD VQQDEw02ODA1YTJjYS0wNjQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmb2OmoTHzNYTYy2jr3OisY5BGS7+EFsRTGJ8xDvFOk60azJlSOD/OtHdqyRV TNmdH1nh8y/YJjjPMfe3X8O7G/BXVa0SN9gGva6x9Az4UoRV9dmYEhpy+UpGOEKT h2Tg0ugF7/nCr50p4EOAPiFfN3CRnMUUeprIG4iTWG+lPOIEREovd/U7MZTg7CE8 7vk11CEw2/dVEANA0iNXgvlbldKDjvAGpOVIvkEgB4Md2MtQd5WqDZg4tKFFU9LM xKVyTmeW0W/eOQ6DhjY0YC9RoU+oV5SFgn5IA3OBDEjvBWJpR+VBrjjLpGIjCuSm bZ9cmJC9mZ2NtgeD/JBJuwS5gQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPorh4f7 PODLfPVTqwvSFB6X8wntMB8GA1UdIwQYMBaAFKi/VPYIGWciGTXLF8wT6/uEGmDC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RDZGQy84ODc1OTE4MjQz MkYxMUVEQkJEOThGNUNDNEY5QUUwMi9xTDlVOWdnWlp5SVpOY3NYekJQci00UWFZ TUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FMOVU5Z2daWnlJWk5jc1h6QlByLTRRYVlNSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RDZGQy84ODc1OTE4MjQzMkYxMUVEQkJEOThGNUNDNEY5QUUwMi9xTDlVOWdnWlp5 SVpOY3NYekJQci00UWFZTUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMFnppZhhX9a8+d1wKBgwkJ363fUXPqtXwivLwCOtmo2g9kYZkdewH E/tUatC2BaGWmj5S5e2yA5Q342qsYaXGJ1MOfpWnvebEAO+w6qo+o4HSwsUAvdih kG/8r7saNTr57kNXWHM1op/gohVBY6/mJb9+OHOPpiOxjzNnpEGRud7hVI78Z8R9 fyzKL/sO5G70GUqiXgH1MyYilptTW72KLZL2FmXlZUPa7g6lwRmm4iAm8I+CZmOx YFPCd53J+0XyaeBVLGbNzGhne35gZjDO4cT6UlDdWr6kaqJM83Hnn2h4dAxHESHb 4Z/4NSY6NId00mfIlAMy1mUuB8iiOxnP -----END CERTIFICATE-----Generated at Tue Apr 22 05:45:23 2025 by rpki-client