$ rpki-client -vvf rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/Qg2MLsPSR5xUI6v_dHgriopLfeo.mft File: Qg2MLsPSR5xUI6v_dHgriopLfeo.mft (raw, json) Hash identifier: FTIs/8RgrHJuSyHGCDe97AmrgYr03nbBPN7QcSlcFhU= Subject key identifier: 8E:52:64:9E:4B:F9:47:CB:AB:7F:55:3A:97:60:CA:E4:49:60:B3:CF Authority key identifier: 42:0D:8C:2E:C3:D2:47:9C:54:23:AB:FF:74:78:2B:8A:8A:4B:7D:EA Certificate issuer: /CN=A9182F75/serialNumber=420D8C2EC3D2479C5423ABFF74782B8A8A4B7DEA Certificate serial: 1BD7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qg2MLsPSR5xUI6v_dHgriopLfeo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/Qg2MLsPSR5xUI6v_dHgriopLfeo.mft Manifest number: 1BB9 Signing time: Fri 04 Apr 2025 16:18:14 +0000 Manifest this update: Fri 04 Apr 2025 16:18:14 +0000 Manifest next update: Fri 11 Apr 2025 16:18:14 +0000 Files and hashes: 1: Qg2MLsPSR5xUI6v_dHgriopLfeo.crl (hash: ewYRz4j9fRaA1l8e62RJFl62OPLgRcB5uYdV526WyfE=) 2: A770EFB01E5611EFAF3FCB38C4F9AE02.roa (hash: jYWA9vZBVLNTWKsb/4RkVGFc8be6iId97wIVAZN/PKs=) 3: A3B7573EF01A11EE935E4329C4F9AE02.roa (hash: WA5ikv41pY4Bzl1xNf46w/nTz1YDB+6f/VZ1EYjQOB8=) 4: DD55266E1E5611EFAFFD4839C4F9AE02.roa (hash: S8vJZLV3hFYN28UQC6htxXLXCqBEue/8E9M498OKSjo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/Qg2MLsPSR5xUI6v_dHgriopLfeo.crl rsync://rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/Qg2MLsPSR5xUI6v_dHgriopLfeo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qg2MLsPSR5xUI6v_dHgriopLfeo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 16:18:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7127 (0x1bd7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9182F75 Validity Not Before: Apr 4 16:18:14 2025 GMT Not After : Apr 11 16:18:14 2025 GMT Subject: CN=67f00646-c723 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:1f:96:84:32:14:2b:33:c1:68:0f:46:8e:50: a6:e7:6a:9b:76:87:8d:ca:b5:4a:b4:75:f4:62:56: 97:d8:49:65:dc:50:4b:d8:e9:7c:bb:cb:13:25:52: 42:b3:3d:f0:d8:91:f9:59:23:10:97:6d:e6:ed:2e: b3:8c:c9:5d:d1:7b:1d:df:68:53:77:79:9a:08:e7: 1d:06:fc:3f:0b:48:c3:fc:73:cb:76:33:2f:11:1e: d8:6f:17:44:30:fe:8f:d1:dc:6a:a7:17:eb:98:a0: 5b:74:c0:c4:62:a0:e1:14:ce:34:db:dd:d3:59:cc: 11:05:0f:c1:d6:24:e8:e4:61:a7:13:89:e8:e0:23: a1:9d:c2:a8:2d:60:99:e9:5e:30:98:03:41:6b:c1: f2:fb:6c:b7:cb:8b:b3:8c:03:4b:cd:78:e0:51:71: 6e:0f:14:f2:b3:b5:fb:d0:be:f2:be:2a:63:10:1e: ce:dd:14:5a:e6:7e:88:aa:a3:45:79:89:ea:da:00: f5:ea:36:50:4d:18:6e:3c:bf:03:54:f2:35:15:7c: 75:80:9c:c2:4f:21:81:f4:95:bf:48:1c:ed:64:3b: 05:7f:9c:b3:57:3a:0d:dc:08:5b:50:c4:35:e4:24: 69:ab:ab:69:ac:60:8a:0b:ba:15:04:0c:69:f4:00: 72:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:52:64:9E:4B:F9:47:CB:AB:7F:55:3A:97:60:CA:E4:49:60:B3:CF X509v3 Authority Key Identifier: keyid:42:0D:8C:2E:C3:D2:47:9C:54:23:AB:FF:74:78:2B:8A:8A:4B:7D:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/Qg2MLsPSR5xUI6v_dHgriopLfeo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qg2MLsPSR5xUI6v_dHgriopLfeo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/Qg2MLsPSR5xUI6v_dHgriopLfeo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:4d:53:70:31:5d:a0:4c:24:77:be:89:da:ec:da:4b:48:8f: ab:7f:1b:53:88:87:37:8e:e3:5b:4f:8e:ed:28:b5:33:01:f7: b5:91:72:6f:85:e1:1d:ce:33:f6:e4:03:12:9f:42:f2:b9:1d: 8b:66:d3:fe:ef:b0:bd:00:ae:08:ec:5d:00:f3:4e:a4:84:58: af:cd:23:09:13:a4:1b:f7:60:7c:7a:f5:94:54:d1:19:5e:a8: 2a:a5:c8:a5:7c:d6:2a:e8:ab:00:cf:d0:77:28:ba:fe:9f:92: e4:8e:8c:55:4d:6b:2d:31:67:ef:60:f3:0e:00:ad:ec:01:26: d4:73:89:ee:3b:3e:6f:08:12:72:e3:e9:5d:6b:3b:ee:29:6d: 9c:83:ab:b6:06:c5:db:34:d0:79:6d:84:13:23:91:d3:ab:c5: 33:3f:0f:dd:a2:7d:09:30:3b:00:f9:10:11:12:f3:87:0c:a2: c8:f5:65:c7:74:8c:e7:fb:8d:30:6a:fc:92:40:b8:20:7c:85: 60:b3:e1:d9:3f:c5:86:77:89:69:30:e5:09:d5:8b:04:1c:8e: 02:31:af:a2:7a:f7:bd:f0:70:82:07:40:94:e8:c7:a3:fc:86: 98:b1:99:7c:c2:67:b5:c5:40:8a:ac:42:5b:cf:8c:92:04:33: e8:bc:02:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICG9cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODJGNzUxMTAvBgNVBAUTKDQyMEQ4QzJFQzNEMjQ3OUM1NDIzQUJGRjc0NzgyQjhB OEE0QjdERUEwHhcNMjUwNDA0MTYxODE0WhcNMjUwNDExMTYxODE0WjAYMRYwFAYD VQQDEw02N2YwMDY0Ni1jNzIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwB+WhDIUKzPBaA9GjlCm52qbdoeNyrVKtHX0YlaX2Ell3FBL2Ol8u8sTJVJC sz3w2JH5WSMQl23m7S6zjMld0Xsd32hTd3maCOcdBvw/C0jD/HPLdjMvER7YbxdE MP6P0dxqpxfrmKBbdMDEYqDhFM40293TWcwRBQ/B1iTo5GGnE4no4COhncKoLWCZ 6V4wmANBa8Hy+2y3y4uzjANLzXjgUXFuDxTys7X70L7yvipjEB7O3RRa5n6IqqNF eYnq2gD16jZQTRhuPL8DVPI1FXx1gJzCTyGB9JW/SBztZDsFf5yzVzoN3AhbUMQ1 5CRpq6tprGCKC7oVBAxp9AByDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI5SZJ5L +UfLq39VOpdgyuRJYLPPMB8GA1UdIwQYMBaAFEINjC7D0kecVCOr/3R4K4qKS33q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MkY3NS8zQzhDRjYzRUZD QkQxMUU2ODhEMzEyNUVDNEY5QUUwMi9RZzJNTHNQU1I1eFVJNnZfZEhncmlvcExm ZW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FnMk1Mc1BTUjV4VUk2dl9kSGdyaW9wTGZlby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MkY3NS8zQzhDRjYzRUZDQkQxMUU2ODhEMzEyNUVDNEY5QUUwMi9RZzJNTHNQU1I1 eFVJNnZfZEhncmlvcExmZW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgTVNwMV2gTCR3vona7NpLSI+rfxtTiIc3juNbT47tKLUzAfe1kXJv heEdzjP25AMSn0LyuR2LZtP+77C9AK4I7F0A806khFivzSMJE6Qb92B8evWUVNEZ XqgqpcilfNYq6KsAz9B3KLr+n5LkjoxVTWstMWfvYPMOAK3sASbUc4nuOz5vCBJy 4+ldazvuKW2cg6u2BsXbNNB5bYQTI5HTq8UzPw/don0JMDsA+RAREvOHDKLI9WXH dIzn+40wavySQLggfIVgs+HZP8WGd4lpMOUJ1YsEHI4CMa+ieve98HCCB0CU6Mej /IaYsZl8wme1xUCKrEJbz4ySBDPovAKW -----END CERTIFICATE-----Generated at Sat Apr 5 16:51:25 2025 by rpki-client