$ rpki-client -vvf rpki.apnic.net/member_repository/A916E501/2B2D88042FB311EBB58A463DC4F9AE02/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.mft File: Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.mft (raw, json) Hash identifier: rwl5cmuCSJaiVTBf6+ca2craee+dZb4B3BxlEhFeKls= Subject key identifier: 46:93:2D:62:AC:A1:BB:11:FB:95:D7:0D:F5:A5:35:A3:86:46:E2:47 Authority key identifier: 43:B3:9C:8F:A3:34:6D:63:19:EA:49:BC:5A:06:7E:EF:E0:D3:44:6D Certificate issuer: /CN=A916E501/serialNumber=43B39C8FA3346D6319EA49BC5A067EEFE0D3446D Certificate serial: 0724 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916E501/2B2D88042FB311EBB58A463DC4F9AE02/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.mft Manifest number: 071F Signing time: Fri 18 Apr 2025 21:52:41 +0000 Manifest this update: Fri 18 Apr 2025 21:52:40 +0000 Manifest next update: Fri 25 Apr 2025 21:52:40 +0000 Files and hashes: 1: Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.crl (hash: xmyqnj8IzbSxaWxskvUgXBdlBMm9Tw4xr/krcYeA+GI=) 2: 765EF4EC2FB411EB9720723EC4F9AE02.roa (hash: oa3l32ZpDHfSSJrhkDdT2fWfIq3w4o01a+Ike5oehX8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916E501/2B2D88042FB311EBB58A463DC4F9AE02/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.crl rsync://rpki.apnic.net/member_repository/A916E501/2B2D88042FB311EBB58A463DC4F9AE02/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Apr 2025 18:24:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1828 (0x724) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916E501, serialNumber=43B39C8FA3346D6319EA49BC5A067EEFE0D3446D Validity Not Before: Apr 18 21:52:40 2025 GMT Not After : Apr 25 21:52:40 2025 GMT Subject: CN=6802c9a8-5717 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:7c:af:7d:c3:6c:77:6b:b2:49:1e:27:46:c7: 27:1e:4c:b6:b4:d2:35:82:57:e1:b7:84:c7:07:a6: 62:4a:b8:93:d4:5b:04:91:30:f2:af:5d:11:18:68: 40:58:49:c8:37:88:c4:a8:70:96:b6:66:2b:79:15: 85:cd:6e:15:88:60:0c:a3:a5:1d:2a:91:2d:82:0f: 09:12:c0:3c:a2:e4:4b:b1:cd:47:af:c4:5f:6c:33: 64:d3:50:38:be:f5:b0:47:c3:5c:a8:f6:01:b7:3a: 19:9f:76:e6:f8:0a:69:bc:e7:9b:5f:61:5a:3d:80: 0b:52:fe:57:cd:0c:af:dd:0b:83:fe:9e:f9:f7:3f: 9b:dc:e6:e3:b3:a2:fe:91:aa:aa:35:c5:cf:5d:f8: cc:e0:0b:ff:8e:a3:e6:b6:be:9c:37:cf:98:39:94: a8:7d:bc:56:70:8c:bf:08:ec:fe:d6:65:6a:07:97: 0d:a7:8f:8d:03:74:6a:f2:73:96:55:72:1b:a0:7a: f9:7c:4c:f6:cc:5a:54:7a:ab:ea:48:84:1f:d3:e2: 50:f2:70:ab:ba:d9:6c:1e:b6:06:ba:92:a3:d1:c3: 48:da:cf:b5:35:41:4e:fb:6c:09:e6:cf:6e:95:ba: 44:ae:d6:4d:6c:b9:a9:ae:c2:52:69:c9:0f:ed:e1: 5f:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:93:2D:62:AC:A1:BB:11:FB:95:D7:0D:F5:A5:35:A3:86:46:E2:47 X509v3 Authority Key Identifier: keyid:43:B3:9C:8F:A3:34:6D:63:19:EA:49:BC:5A:06:7E:EF:E0:D3:44:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916E501/2B2D88042FB311EBB58A463DC4F9AE02/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E501/2B2D88042FB311EBB58A463DC4F9AE02/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:de:07:32:57:92:a2:08:de:d5:1c:d6:f6:73:53:86:6c:ed: 8a:d2:d4:05:31:3b:25:83:42:13:15:66:d7:d8:2e:9b:50:58: 2f:03:c9:f0:fb:76:ae:eb:0f:b5:03:53:f3:3b:a2:e6:fd:b4: e5:7a:fe:a4:53:e4:46:fc:20:37:d6:35:58:91:84:de:ad:86: 97:8b:1d:96:76:ed:9f:0a:c9:13:b0:0b:00:f1:af:fb:b2:9f: 76:f7:c1:c0:6d:e5:ec:ab:11:ca:de:69:d5:65:68:55:be:ff: 40:1d:bc:a8:2f:a7:d6:a5:af:3c:5b:a3:96:fb:84:47:99:f0: 52:d0:36:35:fb:0b:90:f2:8c:d7:9a:2e:51:d5:13:ba:13:68: 3e:d4:d7:d8:c9:ad:6b:77:88:e6:c7:3f:a1:92:05:e0:42:22: 9b:c3:fe:80:43:ae:24:58:e1:f9:5d:8c:f9:9e:07:41:6b:d5: aa:16:6c:ac:4c:06:03:e9:e3:d3:f8:7b:c9:1b:ba:b9:2f:01: 65:19:b8:37:fb:3f:90:1c:43:ca:f9:bc:be:7f:dc:41:2f:0d: d7:6c:6f:85:a5:3f:53:9b:0b:d0:0a:d1:85:d5:7e:61:5f:2d: 4a:0c:00:1a:48:e3:86:16:ef:53:c8:75:60:a7:33:4e:ec:1a: 30:bb:1f:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICByQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkU1MDExMTAvBgNVBAUTKDQzQjM5QzhGQTMzNDZENjMxOUVBNDlCQzVBMDY3RUVG RTBEMzQ0NkQwHhcNMjUwNDE4MjE1MjQwWhcNMjUwNDI1MjE1MjQwWjAYMRYwFAYD VQQDEw02ODAyYzlhOC01NzE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsnyvfcNsd2uySR4nRscnHky2tNI1glfht4THB6ZiSriT1FsEkTDyr10RGGhA WEnIN4jEqHCWtmYreRWFzW4ViGAMo6UdKpEtgg8JEsA8ouRLsc1Hr8RfbDNk01A4 vvWwR8NcqPYBtzoZn3bm+AppvOebX2FaPYALUv5XzQyv3QuD/p759z+b3Objs6L+ kaqqNcXPXfjM4Av/jqPmtr6cN8+YOZSofbxWcIy/COz+1mVqB5cNp4+NA3Rq8nOW VXIboHr5fEz2zFpUeqvqSIQf0+JQ8nCrutlsHrYGupKj0cNI2s+1NUFO+2wJ5s9u lbpErtZNbLmprsJSackP7eFfmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEaTLWKs obsR+5XXDfWlNaOGRuJHMB8GA1UdIwQYMBaAFEOznI+jNG1jGepJvFoGfu/g00Rt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RTUwMS8yQjJEODgwNDJG QjMxMUVCQjU4QTQ2M0RDNEY5QUUwMi9RN09jajZNMGJXTVo2a204V2daLTctRFRS RzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1E3T2NqNk0wYldNWjZrbThXZ1otNy1EVFJHMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RTUwMS8yQjJEODgwNDJGQjMxMUVCQjU4QTQ2M0RDNEY5QUUwMi9RN09jajZNMGJX TVo2a204V2daLTctRFRSRzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAy3gcyV5KiCN7VHNb2c1OGbO2K0tQFMTslg0ITFWbX2C6bUFgvA8nw +3au6w+1A1PzO6Lm/bTlev6kU+RG/CA31jVYkYTerYaXix2Wdu2fCskTsAsA8a/7 sp9298HAbeXsqxHK3mnVZWhVvv9AHbyoL6fWpa88W6OW+4RHmfBS0DY1+wuQ8ozX mi5R1RO6E2g+1NfYya1rd4jmxz+hkgXgQiKbw/6AQ64kWOH5XYz5ngdBa9WqFmys TAYD6ePT+HvJG7q5LwFlGbg3+z+QHEPK+by+f9xBLw3XbG+FpT9TmwvQCtGF1X5h Xy1KDAAaSOOGFu9TyHVgpzNO7Bowux9j -----END CERTIFICATE-----Generated at Sat Apr 19 02:07:19 2025 by rpki-client