$ rpki-client -vvf rpki.apnic.net/member_repository/A9186D9F/A936E4402E0411EF86F29D79C4F9AE02/Q_dCP5PWuglpQFn7I974Uo0mSZ0.mft File: Q_dCP5PWuglpQFn7I974Uo0mSZ0.mft (raw, json) Hash identifier: ElaUG8aXFG+BpHnVlLRJzxlbTq/J36wYOjIhk2V324s= Subject key identifier: 4E:91:8D:AC:67:0D:BA:A9:14:22:D3:5E:49:BF:0E:91:9D:EE:CE:A7 Authority key identifier: 43:F7:42:3F:93:D6:BA:09:69:40:59:FB:23:DE:F8:52:8D:26:49:9D Certificate issuer: /CN=A9186D9F/serialNumber=43F7423F93D6BA09694059FB23DEF8528D26499D Certificate serial: 9B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q_dCP5PWuglpQFn7I974Uo0mSZ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186D9F/A936E4402E0411EF86F29D79C4F9AE02/Q_dCP5PWuglpQFn7I974Uo0mSZ0.mft Manifest number: 99 Signing time: Wed 09 Apr 2025 05:08:34 +0000 Manifest this update: Wed 09 Apr 2025 05:08:33 +0000 Manifest next update: Wed 16 Apr 2025 05:08:33 +0000 Files and hashes: 1: Q_dCP5PWuglpQFn7I974Uo0mSZ0.crl (hash: 2iFHvCQ14+5I/GHX+0KqNOb/u7BZVuFktoEkXs81w+w=) 2: 17EA0C7A38DF11EF8EEDB25EC4F9AE02.roa (hash: sflqoJJiQSUE3/D/FoYHXfA8MjGPanF4iuCvuWOV/9c=) 3: A63A2DFA2F5411EF9A12027FC4F9AE02.roa (hash: 3L8GR/TKBQutwByYr9Yt28Y5Yf6Lgn2PEAhMb4FmV9A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186D9F/A936E4402E0411EF86F29D79C4F9AE02/Q_dCP5PWuglpQFn7I974Uo0mSZ0.crl rsync://rpki.apnic.net/member_repository/A9186D9F/A936E4402E0411EF86F29D79C4F9AE02/Q_dCP5PWuglpQFn7I974Uo0mSZ0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q_dCP5PWuglpQFn7I974Uo0mSZ0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 16 Apr 2025 05:08:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 155 (0x9b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186D9F Validity Not Before: Apr 9 05:08:33 2025 GMT Not After : Apr 16 05:08:33 2025 GMT Subject: CN=67f600d2-9183 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:25:fc:a1:09:f0:27:99:c8:22:50:ac:c9:47: 39:2b:31:90:ec:62:4f:57:7f:51:9d:db:07:8f:5a: 3f:a8:27:04:42:fd:29:e2:50:5a:6e:fe:b3:65:8a: 03:88:15:7a:14:e2:17:75:a3:ba:f0:18:75:c5:a6: 22:e7:96:db:2c:96:78:71:22:a6:0a:7d:6b:81:c2: 74:e6:9f:8e:d4:a3:1c:2a:c8:f0:0c:df:d9:d9:46: f8:8c:4e:e5:c7:ba:36:8e:86:08:b3:c4:ee:88:e7: dd:95:2c:4b:5b:b7:9e:72:51:c6:24:18:ae:2a:8f: 8b:e3:15:a9:e1:02:47:54:aa:d8:69:a4:5e:42:7f: 51:33:fd:8e:fb:39:d8:f4:98:50:ce:a6:b2:20:75: 94:21:67:ef:4e:1d:ca:b1:1e:4d:34:89:76:e4:36: 32:17:6d:a1:e5:6b:8c:0c:90:6c:a5:25:be:73:60: 2c:66:2b:db:5c:d5:02:7a:e4:0b:e9:41:2a:cf:c3: c9:73:c3:83:cb:d2:b8:a4:4e:0b:b1:e1:20:b1:dd: fd:09:a3:ad:28:46:bb:2e:ce:b1:47:a8:77:2a:92: de:92:a4:ef:4a:69:fe:f4:98:c3:4d:cf:1b:29:92: 72:75:d3:fa:57:4f:57:90:b3:52:a3:c3:db:4f:9e: c4:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:91:8D:AC:67:0D:BA:A9:14:22:D3:5E:49:BF:0E:91:9D:EE:CE:A7 X509v3 Authority Key Identifier: keyid:43:F7:42:3F:93:D6:BA:09:69:40:59:FB:23:DE:F8:52:8D:26:49:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186D9F/A936E4402E0411EF86F29D79C4F9AE02/Q_dCP5PWuglpQFn7I974Uo0mSZ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q_dCP5PWuglpQFn7I974Uo0mSZ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186D9F/A936E4402E0411EF86F29D79C4F9AE02/Q_dCP5PWuglpQFn7I974Uo0mSZ0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:de:08:ec:13:38:88:32:e3:32:15:52:b2:5f:43:69:0c:3c: b8:cf:2d:e8:17:6c:24:0a:04:17:75:60:54:d9:6b:20:50:a9: c4:e8:23:29:41:f0:87:db:1f:5c:24:bb:f8:75:9d:33:f6:8d: c6:98:a4:09:fc:2c:fa:9f:77:6b:66:3b:3f:89:ad:10:66:65: 97:7e:03:f8:37:03:90:b2:a4:db:2b:b1:0c:75:07:a5:a0:4f: f0:01:a5:c8:c1:1d:86:bd:85:60:98:bc:02:cf:e2:d4:79:69: 42:72:b4:16:67:1d:f0:85:0c:ee:5d:80:08:1a:13:f5:ec:65: 77:17:82:6d:00:3d:b1:a8:5b:a0:3b:eb:dd:c2:36:72:5a:97: 3b:3e:d1:05:e6:95:03:d1:78:72:03:60:26:a4:79:4e:e1:c6: bb:44:29:73:d6:8d:a9:dd:59:26:19:ad:20:bc:0a:a5:99:f5: 52:e7:33:dc:fa:37:29:8e:9b:1a:26:e3:b2:70:29:6f:23:0d: ee:ea:70:e7:cd:98:b9:ea:67:ac:84:36:d3:db:1d:75:cf:c7: 8f:fc:02:6b:3f:19:82:c8:d4:81:3a:68:0e:6e:d2:f2:59:69: d1:84:79:39:4e:3e:09:e8:46:ca:44:5e:3d:9b:51:49:7e:2c: 7b:5c:f5:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODZEOUYxMTAvBgNVBAUTKDQzRjc0MjNGOTNENkJBMDk2OTQwNTlGQjIzREVGODUy OEQyNjQ5OUQwHhcNMjUwNDA5MDUwODMzWhcNMjUwNDE2MDUwODMzWjAYMRYwFAYD VQQDEw02N2Y2MDBkMi05MTgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsyX8oQnwJ5nIIlCsyUc5KzGQ7GJPV39RndsHj1o/qCcEQv0p4lBabv6zZYoD iBV6FOIXdaO68Bh1xaYi55bbLJZ4cSKmCn1rgcJ05p+O1KMcKsjwDN/Z2Ub4jE7l x7o2joYIs8TuiOfdlSxLW7eeclHGJBiuKo+L4xWp4QJHVKrYaaReQn9RM/2O+znY 9JhQzqayIHWUIWfvTh3KsR5NNIl25DYyF22h5WuMDJBspSW+c2AsZivbXNUCeuQL 6UEqz8PJc8ODy9K4pE4LseEgsd39CaOtKEa7Ls6xR6h3KpLekqTvSmn+9JjDTc8b KZJyddP6V09XkLNSo8PbT57ENwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE6Rjaxn DbqpFCLTXkm/DpGd7s6nMB8GA1UdIwQYMBaAFEP3Qj+T1roJaUBZ+yPe+FKNJkmd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkQ5Ri9BOTM2RTQ0MDJF MDQxMUVGODZGMjlENzlDNEY5QUUwMi9RX2RDUDVQV3VnbHBRRm43STk3NFVvMG1T WjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1FfZENQNVBXdWdscFFGbjdJOTc0VW8wbVNaMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NkQ5Ri9BOTM2RTQ0MDJFMDQxMUVGODZGMjlENzlDNEY5QUUwMi9RX2RDUDVQV3Vn bHBRRm43STk3NFVvMG1TWjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBW3gjsEziIMuMyFVKyX0NpDDy4zy3oF2wkCgQXdWBU2WsgUKnE6CMp QfCH2x9cJLv4dZ0z9o3GmKQJ/Cz6n3drZjs/ia0QZmWXfgP4NwOQsqTbK7EMdQel oE/wAaXIwR2GvYVgmLwCz+LUeWlCcrQWZx3whQzuXYAIGhP17GV3F4JtAD2xqFug O+vdwjZyWpc7PtEF5pUD0XhyA2AmpHlO4ca7RClz1o2p3VkmGa0gvAqlmfVS5zPc +jcpjpsaJuOycClvIw3u6nDnzZi56meshDbT2x11z8eP/AJrPxmCyNSBOmgObtLy WWnRhHk5Tj4J6EbKRF49m1FJfix7XPUa -----END CERTIFICATE-----Generated at Thu Apr 10 23:59:30 2025 by rpki-client