$ rpki-client -vvf rpki.apnic.net/member_repository/A916EF5E/F38DCF8A106B11E8B8CA020BC4F9AE02/QhgvX3GliYTOiFmuYKTKynP-g2E.mft File: QhgvX3GliYTOiFmuYKTKynP-g2E.mft (raw, json) Hash identifier: Ga82bNXwrPjuuQyWk6orGu7hFIuNE6kPONepqkLjZfM= Subject key identifier: 5F:B9:F5:F9:C1:38:C8:DD:77:90:7A:D1:A6:CA:E5:BE:4C:D9:B7:83 Authority key identifier: 42:18:2F:5F:71:A5:89:84:CE:88:59:AE:60:A4:CA:CA:73:FE:83:61 Certificate issuer: /CN=A916EF5E/serialNumber=42182F5F71A58984CE8859AE60A4CACA73FE8361 Certificate serial: 0FAF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QhgvX3GliYTOiFmuYKTKynP-g2E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916EF5E/F38DCF8A106B11E8B8CA020BC4F9AE02/QhgvX3GliYTOiFmuYKTKynP-g2E.mft Manifest number: 25AF Signing time: Fri 04 Apr 2025 16:48:31 +0000 Manifest this update: Fri 04 Apr 2025 16:48:31 +0000 Manifest next update: Fri 11 Apr 2025 16:48:31 +0000 Files and hashes: 1: QhgvX3GliYTOiFmuYKTKynP-g2E.crl (hash: 1KSmLCl+DLVG4Wf7/uYEniJjLgiBQmi9SBjR+AyFkSo=) 2: 258F8662BBDF11ED8CE89144C4F9AE02.roa (hash: gR4VIke3wzcLlwcHX1MfRQDB5DCCZYAeVJopuxrfT0I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916EF5E/F38DCF8A106B11E8B8CA020BC4F9AE02/QhgvX3GliYTOiFmuYKTKynP-g2E.crl rsync://rpki.apnic.net/member_repository/A916EF5E/F38DCF8A106B11E8B8CA020BC4F9AE02/QhgvX3GliYTOiFmuYKTKynP-g2E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QhgvX3GliYTOiFmuYKTKynP-g2E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 16:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4015 (0xfaf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916EF5E Validity Not Before: Apr 4 16:48:31 2025 GMT Not After : Apr 11 16:48:31 2025 GMT Subject: CN=67f00d5f-6acf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:e2:f9:29:a8:f6:60:fc:c7:5a:6a:60:52:48: c1:d5:db:81:7f:a4:ad:8e:f3:73:c4:ba:20:5d:69: 6b:70:88:c2:fd:6d:f6:3c:1d:8b:ca:f4:f2:a8:35: 6a:e1:67:0e:a0:35:76:bc:e2:76:06:a1:a9:92:10: f7:9d:d2:1c:76:36:05:f9:e5:3a:8a:9b:0f:ac:43: fe:4b:2c:7b:b0:0e:ef:f7:12:96:34:07:bc:98:27: 39:79:23:b7:ad:d6:48:62:af:30:48:89:66:88:48: ad:81:50:52:73:b9:de:56:5f:7f:59:05:85:94:8f: 7c:9b:e0:67:54:5d:81:a3:1a:de:0c:11:38:ea:a0: 4d:d9:57:49:dd:d4:73:96:8a:4e:d2:57:10:c0:e2: ba:fd:f8:96:03:37:28:82:cc:02:62:b5:17:2f:e9: ef:19:3b:41:15:50:0e:f5:57:a2:df:49:46:38:83: ab:64:db:b6:74:5e:8c:3b:77:56:09:82:f0:e5:80: 22:ed:16:06:ce:09:47:89:0d:4f:37:b3:86:a4:31: 12:0c:f6:25:02:89:31:21:6b:b5:de:13:46:9c:93: 4c:83:b5:90:94:a8:6f:db:4a:45:9b:8b:52:a7:33: ee:32:f5:41:0d:f7:23:1c:67:14:e8:dc:d0:8c:21: de:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:B9:F5:F9:C1:38:C8:DD:77:90:7A:D1:A6:CA:E5:BE:4C:D9:B7:83 X509v3 Authority Key Identifier: keyid:42:18:2F:5F:71:A5:89:84:CE:88:59:AE:60:A4:CA:CA:73:FE:83:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916EF5E/F38DCF8A106B11E8B8CA020BC4F9AE02/QhgvX3GliYTOiFmuYKTKynP-g2E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QhgvX3GliYTOiFmuYKTKynP-g2E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EF5E/F38DCF8A106B11E8B8CA020BC4F9AE02/QhgvX3GliYTOiFmuYKTKynP-g2E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:9b:8c:62:df:cd:f7:d0:b4:b8:25:2b:7f:70:ff:66:2e:10: d8:ef:8c:b5:88:ad:a4:e2:bd:85:4d:6d:ca:6a:9a:d6:03:db: 26:fd:ca:c2:be:32:bd:ba:2f:c8:40:d4:0d:9b:03:1d:da:a8: 0c:95:78:13:c5:2c:4c:da:16:1c:48:ea:ac:d8:da:54:76:80: d9:69:19:6d:61:08:3f:1a:b9:e5:bd:4a:45:52:bb:00:28:4b: 56:05:ca:c6:60:67:5a:18:30:b0:c1:96:bb:6e:82:8a:ce:07: fb:f2:a8:06:21:1c:1c:da:cb:46:2f:22:de:ea:68:c0:47:1f: 90:6e:b0:d4:4a:b9:92:46:04:29:29:37:3d:d4:00:95:cf:7d: 7f:b4:14:b1:56:92:9e:6c:15:db:93:9a:e3:01:a2:16:aa:ec: 5d:b2:3a:71:f3:40:b9:93:c4:e1:07:02:8b:e1:cf:bc:f0:49: d6:a6:bc:3f:cb:f1:76:8e:36:e6:b6:1f:e4:c8:8e:65:73:cf: d6:2c:e5:58:68:64:4c:c6:fc:ee:a5:65:9e:b8:e8:0e:54:fc: c5:30:d2:b7:5e:ea:79:56:03:8f:e9:d6:97:bb:f1:f4:a5:58: 4c:b1:b0:26:13:84:3d:21:ec:92:0c:21:35:98:ed:c7:59:a9: c8:54:c0:8a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD68wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkVGNUUxMTAvBgNVBAUTKDQyMTgyRjVGNzFBNTg5ODRDRTg4NTlBRTYwQTRDQUNB NzNGRTgzNjEwHhcNMjUwNDA0MTY0ODMxWhcNMjUwNDExMTY0ODMxWjAYMRYwFAYD VQQDEw02N2YwMGQ1Zi02YWNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxeL5Kaj2YPzHWmpgUkjB1duBf6StjvNzxLogXWlrcIjC/W32PB2LyvTyqDVq 4WcOoDV2vOJ2BqGpkhD3ndIcdjYF+eU6ipsPrEP+Syx7sA7v9xKWNAe8mCc5eSO3 rdZIYq8wSIlmiEitgVBSc7neVl9/WQWFlI98m+BnVF2BoxreDBE46qBN2VdJ3dRz lopO0lcQwOK6/fiWAzcogswCYrUXL+nvGTtBFVAO9Vei30lGOIOrZNu2dF6MO3dW CYLw5YAi7RYGzglHiQ1PN7OGpDESDPYlAokxIWu13hNGnJNMg7WQlKhv20pFm4tS pzPuMvVBDfcjHGcU6NzQjCHeowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF+59fnB OMjdd5B60abK5b5M2beDMB8GA1UdIwQYMBaAFEIYL19xpYmEzohZrmCkyspz/oNh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RUY1RS9GMzhEQ0Y4QTEw NkIxMUU4QjhDQTAyMEJDNEY5QUUwMi9RaGd2WDNHbGlZVE9pRm11WUtUS3luUC1n MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FoZ3ZYM0dsaVlUT2lGbXVZS1RLeW5QLWcyRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RUY1RS9GMzhEQ0Y4QTEwNkIxMUU4QjhDQTAyMEJDNEY5QUUwMi9RaGd2WDNHbGlZ VE9pRm11WUtUS3luUC1nMkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjm4xi38330LS4JSt/cP9mLhDY74y1iK2k4r2FTW3KaprWA9sm/crC vjK9ui/IQNQNmwMd2qgMlXgTxSxM2hYcSOqs2NpUdoDZaRltYQg/GrnlvUpFUrsA KEtWBcrGYGdaGDCwwZa7boKKzgf78qgGIRwc2stGLyLe6mjARx+QbrDUSrmSRgQp KTc91ACVz31/tBSxVpKebBXbk5rjAaIWquxdsjpx80C5k8ThBwKL4c+88EnWprw/ y/F2jjbmth/kyI5lc8/WLOVYaGRMxvzupWWeuOgOVPzFMNK3Xup5VgOP6daXu/H0 pVhMsbAmE4Q9IeySDCE1mO3HWanIVMCK -----END CERTIFICATE-----Generated at Fri Apr 4 21:58:22 2025 by rpki-client