$ rpki-client -vvf rpki.apnic.net/member_repository/A914EAE4/5ECC15AA257511E7AC0D172AC4F9AE02/Qp7OGTjMiSSxEQllyc9PlkhgIBg.mft File: Qp7OGTjMiSSxEQllyc9PlkhgIBg.mft (raw, json) Hash identifier: uxGoF01SvqeCuzrJ4izU7ljXtHom2L+ohHhPrztPV8E= Subject key identifier: EA:2B:C4:C4:06:77:BC:38:4A:0E:85:F9:62:1A:64:CC:67:91:9F:69 Authority key identifier: 42:9E:CE:19:38:CC:89:24:B1:11:09:65:C9:CF:4F:96:48:60:20:18 Certificate issuer: /CN=A914EAE4/serialNumber=429ECE1938CC8924B1110965C9CF4F9648602018 Certificate serial: 1AF3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qp7OGTjMiSSxEQllyc9PlkhgIBg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914EAE4/5ECC15AA257511E7AC0D172AC4F9AE02/Qp7OGTjMiSSxEQllyc9PlkhgIBg.mft Manifest number: 1AEF Signing time: Fri 04 Apr 2025 16:21:52 +0000 Manifest this update: Fri 04 Apr 2025 16:21:52 +0000 Manifest next update: Fri 11 Apr 2025 16:21:52 +0000 Files and hashes: 1: Qp7OGTjMiSSxEQllyc9PlkhgIBg.crl (hash: 3KDjozwD0d3FHzqUUiAwdrqIkRYcDKz/mI4dw9HFZ0s=) 2: 7E1ADD74E00E11EDA7E1B640C4F9AE02.roa (hash: l8rbVcrxpBL4K1nr5JzCpQg12eUyxOnsIOK36gYUlKo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914EAE4/5ECC15AA257511E7AC0D172AC4F9AE02/Qp7OGTjMiSSxEQllyc9PlkhgIBg.crl rsync://rpki.apnic.net/member_repository/A914EAE4/5ECC15AA257511E7AC0D172AC4F9AE02/Qp7OGTjMiSSxEQllyc9PlkhgIBg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qp7OGTjMiSSxEQllyc9PlkhgIBg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 16:21:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6899 (0x1af3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EAE4 Validity Not Before: Apr 4 16:21:52 2025 GMT Not After : Apr 11 16:21:52 2025 GMT Subject: CN=67f00720-ff5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:75:98:b2:58:c1:be:2d:8c:f5:f2:69:76:60: 8c:00:0d:14:9a:72:ca:23:d5:ba:7e:f1:02:b8:eb: da:fb:d3:e2:e9:d5:e2:e8:dc:a1:57:0c:0c:d7:13: d5:67:c6:84:62:b9:7f:d3:01:ef:a3:8a:0b:56:59: 15:f7:ff:bc:47:ef:a4:66:17:b9:24:ea:19:cf:db: f7:33:54:b6:2b:8f:ad:75:14:4c:03:17:1e:42:2d: 64:26:22:a1:79:12:c8:7b:58:5b:ab:c8:bb:1c:54: 43:89:65:7c:67:7b:d1:21:a8:d7:f3:05:0c:66:0e: af:7c:ed:5e:01:d9:a5:8f:a9:91:d5:77:4c:aa:48: f6:e7:6e:8e:cc:5f:c5:9b:3c:06:6b:03:d5:95:f4: 49:5b:4f:58:c9:d6:bd:0b:6c:30:9b:e8:94:09:e4: 07:3b:15:95:ae:78:b9:31:40:81:ea:ec:c0:ee:3b: 24:1c:fd:c0:94:cd:15:6f:10:d5:21:d6:1d:d5:91: 1d:7e:69:05:b1:8a:5e:bf:92:68:31:3d:de:fe:b5: c0:66:d9:4d:88:cb:a2:e2:6c:82:fc:ca:ad:be:65: 4e:ef:07:13:73:1f:c8:32:1d:ac:f1:0d:93:29:bf: 2d:85:69:01:5e:8f:99:4c:4b:a5:d0:cd:be:df:df: dd:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:2B:C4:C4:06:77:BC:38:4A:0E:85:F9:62:1A:64:CC:67:91:9F:69 X509v3 Authority Key Identifier: keyid:42:9E:CE:19:38:CC:89:24:B1:11:09:65:C9:CF:4F:96:48:60:20:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914EAE4/5ECC15AA257511E7AC0D172AC4F9AE02/Qp7OGTjMiSSxEQllyc9PlkhgIBg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qp7OGTjMiSSxEQllyc9PlkhgIBg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EAE4/5ECC15AA257511E7AC0D172AC4F9AE02/Qp7OGTjMiSSxEQllyc9PlkhgIBg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:74:67:0c:78:61:e5:6c:a3:07:6f:b7:4c:d8:87:39:75:48: cf:10:79:34:7a:7e:88:d8:9a:9e:b8:41:55:fd:ff:a0:b0:e3: f6:0e:d4:73:c1:e2:c9:1e:93:ef:ed:8b:27:bd:44:6c:4a:2e: fc:0d:2b:e6:7e:dc:34:8e:69:0b:9e:85:d8:97:d3:39:80:a4: 1d:75:55:87:cf:77:2e:7e:83:dc:b5:83:c4:ee:7d:20:76:93: 67:fa:45:ab:e7:88:43:a6:52:c5:82:47:66:c1:93:59:21:f1: 8d:7d:4d:58:a6:2f:46:43:15:34:55:62:75:89:d9:66:20:53: 1e:7c:96:e1:bf:da:b6:77:22:20:bb:41:74:10:3a:02:85:45: 4f:6c:a1:b8:e0:78:8c:c0:08:d4:5f:60:6a:8b:28:4e:d3:22: e6:7a:65:66:cf:76:50:d8:f5:6b:f7:0a:d9:16:93:7c:09:0d: 49:f0:80:55:50:28:40:23:51:c8:e5:2c:cf:f4:97:4a:30:f4: 1a:c5:75:ea:78:e8:72:b0:6a:97:d9:65:c1:75:b0:35:37:68: 64:3a:f5:a8:b2:42:93:b8:85:73:6c:68:5b:69:ab:a8:0f:d7: e3:ca:aa:44:23:df:c5:3b:dd:d3:d0:24:64:53:98:89:c1:c6: 6b:00:40:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGvMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEVBRTQxMTAvBgNVBAUTKDQyOUVDRTE5MzhDQzg5MjRCMTExMDk2NUM5Q0Y0Rjk2 NDg2MDIwMTgwHhcNMjUwNDA0MTYyMTUyWhcNMjUwNDExMTYyMTUyWjAYMRYwFAYD VQQDEw02N2YwMDcyMC1mZjVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoXWYsljBvi2M9fJpdmCMAA0UmnLKI9W6fvECuOva+9Pi6dXi6NyhVwwM1xPV Z8aEYrl/0wHvo4oLVlkV9/+8R++kZhe5JOoZz9v3M1S2K4+tdRRMAxceQi1kJiKh eRLIe1hbq8i7HFRDiWV8Z3vRIajX8wUMZg6vfO1eAdmlj6mR1XdMqkj2526OzF/F mzwGawPVlfRJW09Yyda9C2wwm+iUCeQHOxWVrni5MUCB6uzA7jskHP3AlM0VbxDV IdYd1ZEdfmkFsYpev5JoMT3e/rXAZtlNiMui4myC/MqtvmVO7wcTcx/IMh2s8Q2T Kb8thWkBXo+ZTEul0M2+39/dnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOorxMQG d7w4Sg6F+WIaZMxnkZ9pMB8GA1UdIwQYMBaAFEKezhk4zIkksREJZcnPT5ZIYCAY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUFFNC81RUNDMTVBQTI1 NzUxMUU3QUMwRDE3MkFDNEY5QUUwMi9RcDdPR1RqTWlTU3hFUWxseWM5UGxraGdJ QmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1FwN09HVGpNaVNTeEVRbGx5YzlQbGtoZ0lCZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RUFFNC81RUNDMTVBQTI1NzUxMUU3QUMwRDE3MkFDNEY5QUUwMi9RcDdPR1RqTWlT U3hFUWxseWM5UGxraGdJQmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApdGcMeGHlbKMHb7dM2Ic5dUjPEHk0en6I2JqeuEFV/f+gsOP2DtRz weLJHpPv7YsnvURsSi78DSvmftw0jmkLnoXYl9M5gKQddVWHz3cufoPctYPE7n0g dpNn+kWr54hDplLFgkdmwZNZIfGNfU1Ypi9GQxU0VWJ1idlmIFMefJbhv9q2dyIg u0F0EDoChUVPbKG44HiMwAjUX2BqiyhO0yLmemVmz3ZQ2PVr9wrZFpN8CQ1J8IBV UChAI1HI5SzP9JdKMPQaxXXqeOhysGqX2WXBdbA1N2hkOvWoskKTuIVzbGhbaauo D9fjyqpEI9/FO93T0CRkU5iJwcZrAEBX -----END CERTIFICATE-----Generated at Sat Apr 5 22:09:24 2025 by rpki-client