$ rpki-client -vvf rpki.apnic.net/member_repository/A9156971/48C221861D9211E2ADB30BF508B02CD2/KQX7MhK9YWRvt69jPqGiV7w6Pew.mft File: KQX7MhK9YWRvt69jPqGiV7w6Pew.mft (raw, json) Hash identifier: V6iaPVi2/oh9uNQjVGGJbj3IV0WjYKGdar4fYIykV6A= Subject key identifier: B3:B6:A9:33:F0:10:7F:B2:A3:EE:21:5B:DB:7A:E2:B6:99:B0:61:DA Authority key identifier: 29:05:FB:32:12:BD:61:64:6F:B7:AF:63:3E:A1:A2:57:BC:3A:3D:EC Certificate issuer: /CN=A9156971/serialNumber=2905FB3212BD61646FB7AF633EA1A257BC3A3DEC Certificate serial: 3478 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KQX7MhK9YWRvt69jPqGiV7w6Pew.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156971/48C221861D9211E2ADB30BF508B02CD2/KQX7MhK9YWRvt69jPqGiV7w6Pew.mft Manifest number: 3473 Signing time: Wed 16 Apr 2025 14:44:43 +0000 Manifest this update: Wed 16 Apr 2025 14:44:42 +0000 Manifest next update: Wed 23 Apr 2025 14:44:42 +0000 Files and hashes: 1: KQX7MhK9YWRvt69jPqGiV7w6Pew.crl (hash: hiAWXi25a11Qx1nk5oOwvGIl/xgX3dH3CGQ6NbA9mfY=) 2: 4AF78A4AFEC611EF86B4765BC4F9AE02.roa (hash: fSvzoyKPYxxU75rpRzS9/7MEh8nKxr1lS94jPbqL5BE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156971/48C221861D9211E2ADB30BF508B02CD2/KQX7MhK9YWRvt69jPqGiV7w6Pew.crl rsync://rpki.apnic.net/member_repository/A9156971/48C221861D9211E2ADB30BF508B02CD2/KQX7MhK9YWRvt69jPqGiV7w6Pew.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KQX7MhK9YWRvt69jPqGiV7w6Pew.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Apr 2025 14:44:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13432 (0x3478) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156971, serialNumber=2905FB3212BD61646FB7AF633EA1A257BC3A3DEC Validity Not Before: Apr 16 14:44:42 2025 GMT Not After : Apr 23 14:44:42 2025 GMT Subject: CN=67ffc25a-43c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:fb:a0:c7:a7:e5:2b:55:b9:82:60:bc:e7:db: 69:e3:bf:72:24:e2:bb:53:65:e5:b1:fc:a1:65:ec: 81:7a:9c:22:e4:ca:cf:43:c0:1f:20:cb:7b:04:a6: f9:f0:ed:8e:e5:70:ae:bd:bf:07:51:59:a6:57:a9: 5e:37:13:8b:23:a7:77:21:99:33:e6:1f:53:85:84: 32:bb:ca:16:b9:5b:d3:14:fb:ea:5a:35:de:d2:50: 57:b6:da:fe:97:0a:25:87:f5:65:4b:d1:6a:74:42: af:a7:f3:6c:d7:29:a9:a3:b3:44:3e:fc:11:8f:ce: f5:c9:60:44:8a:84:78:23:c7:54:12:70:99:49:4c: f4:b9:51:14:50:cb:28:0f:3f:3c:f0:91:b3:4a:e4: 29:71:16:a7:f4:45:0d:b5:3c:88:0b:6c:1c:a8:f8: 94:18:2a:53:f3:20:d7:87:63:cc:6f:bd:d6:6f:3d: aa:29:e5:00:e9:5f:27:11:c2:66:20:89:11:c4:86: d9:d7:a4:7b:22:a0:74:72:29:4b:5b:74:63:78:12: 07:84:a2:3f:8a:87:c6:86:56:d9:ed:d7:99:74:b8: 07:59:41:fe:10:48:8b:c2:93:f9:fe:57:65:26:28: 73:45:28:1d:9b:be:f1:8e:d7:ff:7c:ba:78:4c:1a: eb:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:B6:A9:33:F0:10:7F:B2:A3:EE:21:5B:DB:7A:E2:B6:99:B0:61:DA X509v3 Authority Key Identifier: keyid:29:05:FB:32:12:BD:61:64:6F:B7:AF:63:3E:A1:A2:57:BC:3A:3D:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156971/48C221861D9211E2ADB30BF508B02CD2/KQX7MhK9YWRvt69jPqGiV7w6Pew.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KQX7MhK9YWRvt69jPqGiV7w6Pew.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156971/48C221861D9211E2ADB30BF508B02CD2/KQX7MhK9YWRvt69jPqGiV7w6Pew.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:83:cd:7a:a8:de:b5:f3:f7:a4:fc:69:a8:71:a0:ee:d5:22: 04:d7:0e:9b:f8:44:8b:db:06:8a:a2:4e:6e:17:c7:e1:a3:a0: 34:8f:89:b2:e0:3e:0d:a2:76:6a:89:50:57:c6:31:1a:c3:2f: 3a:d4:d6:08:8a:3c:c9:7c:4b:df:47:6b:d8:5f:26:80:04:62: 60:e8:30:4c:c2:5f:16:9a:cc:21:56:58:76:77:ee:79:fc:65: 64:cf:06:fa:fc:1d:51:94:38:55:bf:cb:17:3b:c3:fc:98:84: 3e:a6:5b:89:49:23:35:a3:69:ff:79:b1:fd:f5:62:b9:9f:2b: eb:5b:89:87:54:2b:b2:dc:ea:68:de:a4:95:4d:a0:31:95:6d: 2c:47:de:73:7f:75:19:f6:28:f8:15:34:ec:78:fc:81:40:e9: fc:24:03:d9:74:1b:06:e6:60:68:fa:4d:57:05:21:91:fd:b8: 8e:63:d6:65:a0:f9:07:9c:de:82:f0:29:03:12:0a:3e:b2:72: c6:97:c0:3f:4d:a0:75:d6:9d:14:06:23:85:eb:2b:09:a7:a0: 3b:09:d5:fa:9b:49:c4:97:67:e9:ca:2a:ad:17:2d:13:00:eb: 2f:2e:79:27:7b:54:19:4b:79:6b:69:22:38:0c:5b:c5:9c:fe: 59:6c:4a:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNHgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTY5NzExMTAvBgNVBAUTKDI5MDVGQjMyMTJCRDYxNjQ2RkI3QUY2MzNFQTFBMjU3 QkMzQTNERUMwHhcNMjUwNDE2MTQ0NDQyWhcNMjUwNDIzMTQ0NDQyWjAYMRYwFAYD VQQDEw02N2ZmYzI1YS00M2M2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4/ugx6flK1W5gmC859tp479yJOK7U2XlsfyhZeyBepwi5MrPQ8AfIMt7BKb5 8O2O5XCuvb8HUVmmV6leNxOLI6d3IZkz5h9ThYQyu8oWuVvTFPvqWjXe0lBXttr+ lwolh/VlS9FqdEKvp/Ns1ympo7NEPvwRj871yWBEioR4I8dUEnCZSUz0uVEUUMso Dz888JGzSuQpcRan9EUNtTyIC2wcqPiUGCpT8yDXh2PMb73Wbz2qKeUA6V8nEcJm IIkRxIbZ16R7IqB0cilLW3RjeBIHhKI/iofGhlbZ7deZdLgHWUH+EEiLwpP5/ldl JihzRSgdm77xjtf/fLp4TBrr5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLO2qTPw EH+yo+4hW9t64raZsGHaMB8GA1UdIwQYMBaAFCkF+zISvWFkb7evYz6hole8Oj3s MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Njk3MS80OEMyMjE4NjFE OTIxMUUyQURCMzBCRjUwOEIwMkNEMi9LUVg3TWhLOVlXUnZ0NjlqUHFHaVY3dzZQ ZXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tRWDdNaEs5WVdSdnQ2OWpQcUdpVjd3NlBldy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 Njk3MS80OEMyMjE4NjFEOTIxMUUyQURCMzBCRjUwOEIwMkNEMi9LUVg3TWhLOVlX UnZ0NjlqUHFHaVY3dzZQZXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/g816qN618/ek/GmocaDu1SIE1w6b+ESL2waKok5uF8fho6A0j4my 4D4NonZqiVBXxjEawy861NYIijzJfEvfR2vYXyaABGJg6DBMwl8WmswhVlh2d+55 /GVkzwb6/B1RlDhVv8sXO8P8mIQ+pluJSSM1o2n/ebH99WK5nyvrW4mHVCuy3Opo 3qSVTaAxlW0sR95zf3UZ9ij4FTTsePyBQOn8JAPZdBsG5mBo+k1XBSGR/biOY9Zl oPkHnN6C8CkDEgo+snLGl8A/TaB11p0UBiOF6ysJp6A7CdX6m0nEl2fpyiqtFy0T AOsvLnkne1QZS3lraSI4DFvFnP5ZbEpS -----END CERTIFICATE-----Generated at Wed Apr 16 17:15:24 2025 by rpki-client