$ rpki-client -vvf rpki.apnic.net/member_repository/A9165C64/425B423CFFA311E98735A685C4F9AE02/QOvCWgi6XnVBzhQtK8KK5Pgoiks.mft File: QOvCWgi6XnVBzhQtK8KK5Pgoiks.mft (raw, json) Hash identifier: Wtzs2UyZvjJPeVqilPXtYJl9pL189fBxEpb402fOIyc= Subject key identifier: 70:EC:88:31:B3:C6:69:41:4A:D3:0D:5F:29:B5:80:09:99:C5:E8:6E Authority key identifier: 40:EB:C2:5A:08:BA:5E:75:41:CE:14:2D:2B:C2:8A:E4:F8:28:8A:4B Certificate issuer: /CN=A9165C64/serialNumber=40EBC25A08BA5E7541CE142D2BC28AE4F8288A4B Certificate serial: 0C55 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOvCWgi6XnVBzhQtK8KK5Pgoiks.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165C64/425B423CFFA311E98735A685C4F9AE02/QOvCWgi6XnVBzhQtK8KK5Pgoiks.mft Manifest number: 0C4B Signing time: Fri 04 Apr 2025 18:26:22 +0000 Manifest this update: Fri 04 Apr 2025 18:26:22 +0000 Manifest next update: Fri 11 Apr 2025 18:26:22 +0000 Files and hashes: 1: QOvCWgi6XnVBzhQtK8KK5Pgoiks.crl (hash: 2bVipX6za1VF9DAZbSegTMrl8zqGpeTj2x5TGbYOlU8=) 2: FD9E07EAAB1111EF89574855C4F9AE02.roa (hash: NrdZbVMd1dHy2FEEAMNxWeknBO6BNRI5lNG3a+z4IPk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165C64/425B423CFFA311E98735A685C4F9AE02/QOvCWgi6XnVBzhQtK8KK5Pgoiks.crl rsync://rpki.apnic.net/member_repository/A9165C64/425B423CFFA311E98735A685C4F9AE02/QOvCWgi6XnVBzhQtK8KK5Pgoiks.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOvCWgi6XnVBzhQtK8KK5Pgoiks.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 18:26:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3157 (0xc55) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165C64 Validity Not Before: Apr 4 18:26:22 2025 GMT Not After : Apr 11 18:26:22 2025 GMT Subject: CN=67f0244e-0a46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:9d:05:c1:f6:7f:9f:c6:06:88:59:97:12:af: 58:a4:fe:9e:45:f2:a0:6e:62:93:82:e4:6b:a9:ab: a6:81:73:c5:57:b5:0e:3c:ef:b0:cc:b9:4d:9f:97: 02:f8:26:72:d4:ad:aa:cb:46:17:37:1f:68:c1:70: 4f:1d:5a:fa:6d:76:78:38:6f:05:4d:3b:8c:9d:95: 6e:70:43:5e:75:5b:c5:ca:a1:0d:fd:fc:b5:54:c5: 16:b6:1b:fe:fe:25:e3:46:a8:90:b4:3d:17:20:ce: de:03:dc:bd:03:b7:a6:71:80:cf:08:bc:a7:8d:d9: 35:45:2f:da:19:a3:30:d8:41:f9:0d:13:af:d7:4b: 84:86:9b:ca:66:73:16:11:fd:b1:f4:cf:f4:8c:45: f8:0d:d1:95:0f:07:9e:4d:83:66:4d:44:2b:54:82: 10:1c:3e:34:cb:2c:be:36:3d:17:53:3c:89:f5:60: 59:03:68:33:2b:99:06:0a:06:9e:9d:87:cc:ca:46: 97:95:d6:e7:7d:4f:f3:6d:e6:13:43:1b:65:45:44: c7:3b:e2:96:e1:16:93:d5:a0:43:92:5e:77:b3:33: cf:38:de:bf:84:ba:68:8f:97:d1:70:23:f1:e4:91: 6c:97:43:da:fb:23:23:2c:1d:95:d3:4c:09:0a:5a: d8:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:EC:88:31:B3:C6:69:41:4A:D3:0D:5F:29:B5:80:09:99:C5:E8:6E X509v3 Authority Key Identifier: keyid:40:EB:C2:5A:08:BA:5E:75:41:CE:14:2D:2B:C2:8A:E4:F8:28:8A:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165C64/425B423CFFA311E98735A685C4F9AE02/QOvCWgi6XnVBzhQtK8KK5Pgoiks.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOvCWgi6XnVBzhQtK8KK5Pgoiks.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165C64/425B423CFFA311E98735A685C4F9AE02/QOvCWgi6XnVBzhQtK8KK5Pgoiks.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:7d:8d:ab:b1:5a:18:cb:16:78:8b:e1:7c:0e:96:2d:92:7a: d4:f6:35:40:90:7c:ba:22:51:1b:35:6d:be:45:99:9a:bb:19: 9c:c3:c3:e9:47:ed:3c:ca:96:9c:e1:bb:29:03:dc:40:d3:f7: 46:65:0a:ee:66:06:98:5b:fc:27:16:96:d4:0b:22:e3:45:40: 68:ff:16:62:3c:97:09:3e:b7:ba:b0:ed:63:46:dd:ac:49:fd: 7c:58:d4:8b:d7:6b:a3:c8:14:36:87:ca:77:5e:84:42:dd:68: 95:c0:e2:86:19:e2:1e:61:0d:6d:54:68:c2:45:3d:a1:0d:ee: 39:ac:67:a7:37:78:66:19:fc:5c:45:f4:ba:06:3e:aa:7f:2e: 7d:8b:c7:cf:06:83:4e:ea:5d:27:b1:36:c6:21:a1:f5:d9:a1: f2:a1:20:6d:c6:54:7b:5d:85:75:a9:ac:a3:0e:66:fb:d2:13: ce:10:b3:19:27:c3:fa:02:da:99:52:c0:8a:f2:41:ab:c7:40: e9:f2:ca:e8:75:ba:39:30:a9:84:cf:ee:b9:28:e7:35:ab:dd: d6:e1:cb:3a:1b:a8:7d:b6:db:d4:da:f9:08:e0:ae:64:71:40: 89:bb:f2:18:43:75:7a:28:b3:b0:ca:1a:97:b6:a4:83:8d:9b: 62:13:b6:fe -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDFUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjVDNjQxMTAvBgNVBAUTKDQwRUJDMjVBMDhCQTVFNzU0MUNFMTQyRDJCQzI4QUU0 RjgyODhBNEIwHhcNMjUwNDA0MTgyNjIyWhcNMjUwNDExMTgyNjIyWjAYMRYwFAYD VQQDEw02N2YwMjQ0ZS0wYTQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3Z0FwfZ/n8YGiFmXEq9YpP6eRfKgbmKTguRrqaumgXPFV7UOPO+wzLlNn5cC +CZy1K2qy0YXNx9owXBPHVr6bXZ4OG8FTTuMnZVucENedVvFyqEN/fy1VMUWthv+ /iXjRqiQtD0XIM7eA9y9A7emcYDPCLynjdk1RS/aGaMw2EH5DROv10uEhpvKZnMW Ef2x9M/0jEX4DdGVDweeTYNmTUQrVIIQHD40yyy+Nj0XUzyJ9WBZA2gzK5kGCgae nYfMykaXldbnfU/zbeYTQxtlRUTHO+KW4RaT1aBDkl53szPPON6/hLpoj5fRcCPx 5JFsl0Pa+yMjLB2V00wJClrYqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHDsiDGz xmlBStMNXym1gAmZxehuMB8GA1UdIwQYMBaAFEDrwloIul51Qc4ULSvCiuT4KIpL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NUM2NC80MjVCNDIzQ0ZG QTMxMUU5ODczNUE2ODVDNEY5QUUwMi9RT3ZDV2dpNlhuVkJ6aFF0SzhLSzVQZ29p a3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FPdkNXZ2k2WG5WQnpoUXRLOEtLNVBnb2lrcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NUM2NC80MjVCNDIzQ0ZGQTMxMUU5ODczNUE2ODVDNEY5QUUwMi9RT3ZDV2dpNlhu VkJ6aFF0SzhLSzVQZ29pa3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBEfY2rsVoYyxZ4i+F8DpYtknrU9jVAkHy6IlEbNW2+RZmauxmcw8Pp R+08ypac4bspA9xA0/dGZQruZgaYW/wnFpbUCyLjRUBo/xZiPJcJPre6sO1jRt2s Sf18WNSL12ujyBQ2h8p3XoRC3WiVwOKGGeIeYQ1tVGjCRT2hDe45rGenN3hmGfxc RfS6Bj6qfy59i8fPBoNO6l0nsTbGIaH12aHyoSBtxlR7XYV1qayjDmb70hPOELMZ J8P6AtqZUsCK8kGrx0Dp8srodbo5MKmEz+65KOc1q93W4cs6G6h9ttvU2vkI4K5k cUCJu/IYQ3V6KLOwyhqXtqSDjZtiE7b+ -----END CERTIFICATE-----Generated at Fri Apr 4 22:13:41 2025 by rpki-client