$ rpki-client -vvf rpki.apnic.net/member_repository/A9176E1D/FE8835BCF9F011EFB77A8C6EC4F9AE02/CqbkgyhCXhJMVhwqwYfIoZYkcRA.mft File: CqbkgyhCXhJMVhwqwYfIoZYkcRA.mft (raw, json) Hash identifier: GuOzeKaiYbQ5qENutYwcaHlQx0W99ReqgB9vmTbO8h0= Subject key identifier: E0:3F:0A:4F:71:FB:37:17:70:D8:ED:FF:6C:6A:75:0E:23:C2:34:BF Authority key identifier: 0A:A6:E4:83:28:42:5E:12:4C:56:1C:2A:C1:87:C8:A1:96:24:71:10 Certificate issuer: /CN=A9176E1D/serialNumber=0AA6E48328425E124C561C2AC187C8A196247110 Certificate serial: 18 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqbkgyhCXhJMVhwqwYfIoZYkcRA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9176E1D/FE8835BCF9F011EFB77A8C6EC4F9AE02/CqbkgyhCXhJMVhwqwYfIoZYkcRA.mft Manifest number: 15 Signing time: Thu 03 Apr 2025 07:18:31 +0000 Manifest this update: Thu 03 Apr 2025 07:18:31 +0000 Manifest next update: Thu 10 Apr 2025 07:18:30 +0000 Files and hashes: 1: CqbkgyhCXhJMVhwqwYfIoZYkcRA.crl (hash: VDR56IfmuccmOf9ztGyPyvq60fQqjDAzvtCDAATWVx0=) 2: 8A5CF8F0FB7411EF83C11685C4F9AE02.roa (hash: gNUxEstcyYM8bAYzOWKSq0siVBhwvrTxTLZTCsVvFik=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9176E1D/FE8835BCF9F011EFB77A8C6EC4F9AE02/CqbkgyhCXhJMVhwqwYfIoZYkcRA.crl rsync://rpki.apnic.net/member_repository/A9176E1D/FE8835BCF9F011EFB77A8C6EC4F9AE02/CqbkgyhCXhJMVhwqwYfIoZYkcRA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqbkgyhCXhJMVhwqwYfIoZYkcRA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 07:18:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24 (0x18) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9176E1D Validity Not Before: Apr 3 07:18:31 2025 GMT Not After : Apr 10 07:18:30 2025 GMT Subject: CN=67ee3647-9af2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:11:04:38:df:c7:2b:61:a8:df:af:5a:7c:c0: 84:81:78:33:74:6f:21:ad:af:81:c3:a2:be:89:27: 1f:9a:c4:07:fb:db:06:3a:ad:eb:f7:89:27:83:11: 5e:79:26:c4:c5:54:74:22:23:39:0d:15:05:64:53: 2c:78:ec:ac:fb:ff:7f:14:d2:f9:30:e9:64:3a:11: 3d:d9:63:5c:34:c3:d6:51:43:17:f6:f5:13:f1:0f: 5e:e6:b6:80:66:17:a1:b5:fd:e5:85:13:81:2b:5b: b1:94:c7:50:be:5a:ae:49:b1:63:41:48:10:96:89: 57:98:8e:c8:d9:4d:0e:f8:81:12:67:2d:d7:71:da: 82:f8:47:ce:a1:98:1b:bb:87:cc:e8:85:d3:fe:d3: 1e:be:44:a7:ae:e5:f5:00:ec:cb:45:f4:75:a8:79: 04:46:7c:14:90:fd:21:63:89:57:92:bc:27:ed:3d: c3:85:20:d9:b6:cb:43:3e:d7:a4:ea:cc:73:be:f0: d0:b7:06:a0:37:9d:1d:ee:f8:97:54:1d:40:40:2b: 6e:ce:2e:c8:0f:bd:94:d0:2c:2b:2c:7e:2f:b9:2a: 87:1e:f4:6e:93:31:e0:85:08:28:62:aa:51:77:70: 97:b4:c6:f4:48:54:90:e8:47:1a:52:a4:11:75:91: e0:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:3F:0A:4F:71:FB:37:17:70:D8:ED:FF:6C:6A:75:0E:23:C2:34:BF X509v3 Authority Key Identifier: keyid:0A:A6:E4:83:28:42:5E:12:4C:56:1C:2A:C1:87:C8:A1:96:24:71:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9176E1D/FE8835BCF9F011EFB77A8C6EC4F9AE02/CqbkgyhCXhJMVhwqwYfIoZYkcRA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqbkgyhCXhJMVhwqwYfIoZYkcRA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176E1D/FE8835BCF9F011EFB77A8C6EC4F9AE02/CqbkgyhCXhJMVhwqwYfIoZYkcRA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:a4:84:76:19:42:0f:6e:ef:54:d9:c1:57:ae:5c:80:34:17: 19:ea:11:67:2f:9d:6b:43:dd:a7:d9:e9:3f:84:ca:b9:fd:25: 48:70:b7:78:c0:b3:08:20:4e:68:bc:cd:48:50:18:0b:7d:0c: e4:c3:1f:db:2d:93:93:3c:f6:22:47:60:41:0d:3f:34:24:cb: c1:09:cd:3c:54:ec:7b:cd:b7:75:65:3a:47:6c:d1:ce:3c:e2: 45:2f:6e:3c:8c:85:36:99:e0:c2:04:98:68:1a:31:c7:70:ef: c6:07:19:47:d3:a6:25:32:ee:99:ab:2e:db:f7:a8:58:3b:ac: eb:d2:b0:76:e7:cf:c9:bd:95:55:70:d5:03:de:bf:18:18:40: a9:b3:53:e5:d1:cb:e4:32:25:c9:bb:e9:c0:ba:47:24:bf:8a: 3c:9a:e2:a4:b4:16:dd:97:ab:de:23:1c:fb:4b:0e:5c:ac:9b: d7:f0:b5:bd:50:b7:cb:20:24:4e:5b:69:38:b7:21:5c:1b:1b: 1b:7a:cd:4e:75:63:d1:2f:7a:0a:3a:78:51:90:b8:ca:a5:02: 0d:03:0f:c7:42:13:e7:d2:be:b9:a6:d8:5b:d8:8a:21:79:6d: af:fd:98:d2:dc:43:4a:24:8b:f5:43:54:90:d1:05:53:37:62: 84:4b:4e:4b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 NkUxRDExMC8GA1UEBRMoMEFBNkU0ODMyODQyNUUxMjRDNTYxQzJBQzE4N0M4QTE5 NjI0NzExMDAeFw0yNTA0MDMwNzE4MzFaFw0yNTA0MTAwNzE4MzBaMBgxFjAUBgNV BAMTDTY3ZWUzNjQ3LTlhZjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDlEQQ438crYajfr1p8wISBeDN0byGtr4HDor6JJx+axAf72wY6rev3iSeDEV55 JsTFVHQiIzkNFQVkUyx47Kz7/38U0vkw6WQ6ET3ZY1w0w9ZRQxf29RPxD17mtoBm F6G1/eWFE4ErW7GUx1C+Wq5JsWNBSBCWiVeYjsjZTQ74gRJnLddx2oL4R86hmBu7 h8zohdP+0x6+RKeu5fUA7MtF9HWoeQRGfBSQ/SFjiVeSvCftPcOFINm2y0M+16Tq zHO+8NC3BqA3nR3u+JdUHUBAK27OLsgPvZTQLCssfi+5Koce9G6TMeCFCChiqlF3 cJe0xvRIVJDoRxpSpBF1keC5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU4D8KT3H7 Nxdw2O3/bGp1DiPCNL8wHwYDVR0jBBgwFoAUCqbkgyhCXhJMVhwqwYfIoZYkcRAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc2RTFEL0ZFODgzNUJDRjlG MDExRUZCNzdBOEM2RUM0RjlBRTAyL0NxYmtneWhDWGhKTVZod3F3WWZJb1pZa2NS QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQ3Fia2d5aENYaEpNVmh3cXdZZklvWllrY1JBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc2 RTFEL0ZFODgzNUJDRjlGMDExRUZCNzdBOEM2RUM0RjlBRTAyL0NxYmtneWhDWGhK TVZod3F3WWZJb1pZa2NSQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABGkhHYZQg9u71TZwVeuXIA0FxnqEWcvnWtD3afZ6T+Eyrn9JUhwt3jA swggTmi8zUhQGAt9DOTDH9stk5M89iJHYEENPzQky8EJzTxU7HvNt3VlOkds0c48 4kUvbjyMhTaZ4MIEmGgaMcdw78YHGUfTpiUy7pmrLtv3qFg7rOvSsHbnz8m9lVVw 1QPevxgYQKmzU+XRy+QyJcm76cC6RyS/ijya4qS0Ft2Xq94jHPtLDlysm9fwtb1Q t8sgJE5baTi3IVwbGxt6zU51Y9Evego6eFGQuMqlAg0DD8dCE+fSvrmm2FvYiiF5 ba/9mNLcQ0oki/VDVJDRBVM3YoRLTks= -----END CERTIFICATE-----Generated at Sat Apr 5 05:25:04 2025 by rpki-client