$ rpki-client -vvf rpki.apnic.net/member_repository/A918779B/7CF59FAA4A7211E983912180C4F9AE02/lqQx7QZ8PrHkc8EwSsbfm3YiVaM.mft File: lqQx7QZ8PrHkc8EwSsbfm3YiVaM.mft (raw, json) Hash identifier: s7XyJ0jcvFyVjhj7cxX19B9xWXD4GudtQr+hR6qCk/E= Subject key identifier: 8A:3D:72:ED:5A:16:4D:21:61:1A:74:57:91:EF:E3:20:38:7C:8B:97 Authority key identifier: 96:A4:31:ED:06:7C:3E:B1:E4:73:C1:30:4A:C6:DF:9B:76:22:55:A3 Certificate issuer: /CN=A918779B/serialNumber=96A431ED067C3EB1E473C1304AC6DF9B762255A3 Certificate serial: 0FDF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lqQx7QZ8PrHkc8EwSsbfm3YiVaM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918779B/7CF59FAA4A7211E983912180C4F9AE02/lqQx7QZ8PrHkc8EwSsbfm3YiVaM.mft Manifest number: 168C Signing time: Wed 02 Apr 2025 17:33:47 +0000 Manifest this update: Wed 02 Apr 2025 17:33:46 +0000 Manifest next update: Wed 09 Apr 2025 17:33:46 +0000 Files and hashes: 1: lqQx7QZ8PrHkc8EwSsbfm3YiVaM.crl (hash: JTmMgRhHKsK/T4pX0Qm5ifenNcIUxWTu2H+o8F2PBB0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918779B/7CF59FAA4A7211E983912180C4F9AE02/lqQx7QZ8PrHkc8EwSsbfm3YiVaM.crl rsync://rpki.apnic.net/member_repository/A918779B/7CF59FAA4A7211E983912180C4F9AE02/lqQx7QZ8PrHkc8EwSsbfm3YiVaM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lqQx7QZ8PrHkc8EwSsbfm3YiVaM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 17:33:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4063 (0xfdf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918779B Validity Not Before: Apr 2 17:33:46 2025 GMT Not After : Apr 9 17:33:46 2025 GMT Subject: CN=67ed74fb-4a27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:29:f4:e6:2c:23:63:b1:11:41:d9:db:21:eb: 0f:29:6d:6a:b4:17:e4:e1:1c:a1:f4:23:ef:e3:97: cb:0c:af:f4:09:38:2a:c0:3b:0d:29:4c:c3:1c:b8: ee:32:15:73:9c:73:dc:d1:42:26:5c:66:fa:cd:a0: 72:df:c1:23:3d:cc:94:cc:95:da:95:74:56:47:96: c0:a0:fb:d7:5d:ea:7a:42:d6:41:20:81:ae:c0:1d: 65:f0:ef:bd:a0:c5:69:8d:51:b8:40:47:7a:48:aa: e2:5f:5c:c0:7c:64:a5:4c:3c:f9:ee:5a:79:dd:ca: d8:e8:42:fb:9a:02:ba:7b:6e:af:8e:d6:d1:d5:9a: 62:07:04:57:ff:47:ff:11:60:46:9b:41:b0:fb:6a: 17:6f:26:37:69:40:d0:5e:62:df:f6:a6:5e:cb:a6: cb:63:e6:98:54:7d:76:e1:d6:c7:a7:ab:c8:10:5d: 97:87:95:9c:04:22:a7:0f:3f:15:2c:3e:41:fc:8a: 8d:46:2d:8f:bf:ed:a5:4b:74:43:ae:d2:05:12:87: b8:a1:28:c8:18:82:35:e1:8f:f6:cc:0b:d7:0b:7c: 25:f2:d6:c4:22:45:71:0e:f6:ab:ad:1d:93:ea:aa: db:24:15:57:9a:d5:c7:28:36:37:24:f2:55:25:15: 6d:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:3D:72:ED:5A:16:4D:21:61:1A:74:57:91:EF:E3:20:38:7C:8B:97 X509v3 Authority Key Identifier: keyid:96:A4:31:ED:06:7C:3E:B1:E4:73:C1:30:4A:C6:DF:9B:76:22:55:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918779B/7CF59FAA4A7211E983912180C4F9AE02/lqQx7QZ8PrHkc8EwSsbfm3YiVaM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lqQx7QZ8PrHkc8EwSsbfm3YiVaM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918779B/7CF59FAA4A7211E983912180C4F9AE02/lqQx7QZ8PrHkc8EwSsbfm3YiVaM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:41:7e:44:ed:e4:17:79:3d:7f:bd:d2:4d:33:df:3c:f5:3d: 5a:e9:7a:cd:64:72:b5:84:1a:ff:3e:4b:3c:16:6f:c2:fb:06: 93:d6:51:17:9a:03:fa:80:3d:78:84:d2:1d:50:f4:d9:99:de: 81:e3:d9:72:d8:0b:8c:73:ec:3c:ef:9f:cd:dc:ab:f0:2e:68: b2:5a:24:50:ab:ac:68:41:7c:26:43:3a:02:59:0a:99:9b:89: ec:66:d2:cc:22:33:60:1a:0f:63:da:ee:d8:0d:8b:44:05:97: a4:d1:50:39:9c:41:f0:11:2c:fc:7c:fa:37:fb:90:68:9d:4a: 64:6e:06:8c:2c:d5:92:6e:2e:0a:29:47:b6:18:18:bb:3f:47: fd:ee:fd:eb:2b:bb:37:48:63:8e:1e:62:fd:91:0b:20:cd:d7: 07:8b:b8:e6:2b:45:43:cc:ee:19:b4:6b:ed:2e:49:38:db:ff: 22:01:95:5b:80:ea:6c:ed:34:7e:cc:ab:86:77:f8:86:f5:e8: 00:eb:3c:8f:e6:a1:14:2f:52:26:56:c9:10:b6:af:a1:63:bf: 77:61:63:27:40:16:18:c5:15:ca:e1:aa:c3:7d:65:b9:16:86: 1d:2f:c1:33:78:1e:90:8e:e3:98:60:fe:d9:84:b2:9c:81:cd: e0:4d:70:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD98wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODc3OUIxMTAvBgNVBAUTKDk2QTQzMUVEMDY3QzNFQjFFNDczQzEzMDRBQzZERjlC NzYyMjU1QTMwHhcNMjUwNDAyMTczMzQ2WhcNMjUwNDA5MTczMzQ2WjAYMRYwFAYD VQQDEw02N2VkNzRmYi00YTI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnin05iwjY7ERQdnbIesPKW1qtBfk4Ryh9CPv45fLDK/0CTgqwDsNKUzDHLju MhVznHPc0UImXGb6zaBy38EjPcyUzJXalXRWR5bAoPvXXep6QtZBIIGuwB1l8O+9 oMVpjVG4QEd6SKriX1zAfGSlTDz57lp53crY6EL7mgK6e26vjtbR1ZpiBwRX/0f/ EWBGm0Gw+2oXbyY3aUDQXmLf9qZey6bLY+aYVH124dbHp6vIEF2Xh5WcBCKnDz8V LD5B/IqNRi2Pv+2lS3RDrtIFEoe4oSjIGII14Y/2zAvXC3wl8tbEIkVxDvarrR2T 6qrbJBVXmtXHKDY3JPJVJRVtdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIo9cu1a Fk0hYRp0V5Hv4yA4fIuXMB8GA1UdIwQYMBaAFJakMe0GfD6x5HPBMErG35t2IlWj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Nzc5Qi83Q0Y1OUZBQTRB NzIxMUU5ODM5MTIxODBDNEY5QUUwMi9scVF4N1FaOFBySGtjOEV3U3NiZm0zWWlW YU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xxUXg3UVo4UHJIa2M4RXdTc2JmbTNZaVZhTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Nzc5Qi83Q0Y1OUZBQTRBNzIxMUU5ODM5MTIxODBDNEY5QUUwMi9scVF4N1FaOFBy SGtjOEV3U3NiZm0zWWlWYU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzQX5E7eQXeT1/vdJNM9889T1a6XrNZHK1hBr/Pks8Fm/C+waT1lEX mgP6gD14hNIdUPTZmd6B49ly2AuMc+w875/N3KvwLmiyWiRQq6xoQXwmQzoCWQqZ m4nsZtLMIjNgGg9j2u7YDYtEBZek0VA5nEHwESz8fPo3+5BonUpkbgaMLNWSbi4K KUe2GBi7P0f97v3rK7s3SGOOHmL9kQsgzdcHi7jmK0VDzO4ZtGvtLkk42/8iAZVb gOps7TR+zKuGd/iG9egA6zyP5qEUL1ImVskQtq+hY793YWMnQBYYxRXK4arDfWW5 FoYdL8EzeB6QjuOYYP7ZhLKcgc3gTXCq -----END CERTIFICATE-----Generated at Fri Apr 4 18:31:59 2025 by rpki-client