$ rpki-client -vvf rpki.apnic.net/member_repository/A918B5FE/32C300286A9E11EBB6762318C4F9AE02/q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.mft File: q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.mft (raw, json) Hash identifier: 1KJUugAGw6/HZyh/sbKQ1eILMETX7zI+T3GUkvU/UK4= Subject key identifier: 0E:5A:EF:CF:46:79:3F:C0:CC:11:BA:4B:1F:87:13:68:B5:4C:80:DE Authority key identifier: AB:90:5D:DC:0A:FB:BD:15:49:F6:6E:FE:81:17:AE:15:00:0A:5E:0F Certificate issuer: /CN=A918B5FE/serialNumber=AB905DDC0AFBBD1549F66EFE8117AE15000A5E0F Certificate serial: 06A2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918B5FE/32C300286A9E11EBB6762318C4F9AE02/q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.mft Manifest number: 0690 Signing time: Fri 18 Apr 2025 22:17:04 +0000 Manifest this update: Fri 18 Apr 2025 22:17:03 +0000 Manifest next update: Fri 25 Apr 2025 22:17:03 +0000 Files and hashes: 1: q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.crl (hash: LwMUV8zJsmfHX7S5NnUoRO+pDa7MczUwpR0+0KMsE48=) 2: DAE15A7248F911EC9F04C439C4F9AE02.roa (hash: CcS2RgyDh/Mt65cyyvz7PDgLBgmPqkXqjVn09wN+d7I=) 3: DBB4BB6A48F911EC9F04C439C4F9AE02.roa (hash: sB2xN+NI3UCkCts4i5bUwtcZvKVfZaogReZtF2ClOtM=) 4: DCC969B048F911EC9F04C439C4F9AE02.roa (hash: Ey7sXMoZK5X/9B/g0P4vb+TT1dBxjAAcErSKVPBVZ8c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918B5FE/32C300286A9E11EBB6762318C4F9AE02/q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.crl rsync://rpki.apnic.net/member_repository/A918B5FE/32C300286A9E11EBB6762318C4F9AE02/q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Apr 2025 22:17:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1698 (0x6a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918B5FE, serialNumber=AB905DDC0AFBBD1549F66EFE8117AE15000A5E0F Validity Not Before: Apr 18 22:17:03 2025 GMT Not After : Apr 25 22:17:03 2025 GMT Subject: CN=6802cf5f-d233 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:0b:5b:62:1c:18:e6:dc:ac:88:99:ac:95:90: d5:ab:63:5c:e2:4a:4f:e6:fb:26:fb:31:51:88:9f: dd:45:0f:67:d6:5b:41:c6:24:bf:45:79:52:66:cd: e5:0e:1b:00:62:8c:f5:b2:28:d5:0b:9b:91:3f:fa: 00:e3:67:a7:00:5b:63:1f:3c:d1:4e:e1:49:f4:24: 56:82:59:1c:3c:1c:10:48:fc:25:dd:d2:e3:5e:a7: d2:1e:73:68:eb:66:cb:29:07:60:4b:4c:97:78:c8: 17:9c:50:c2:cb:c5:d0:c1:c3:d9:d7:1d:bd:49:d1: bb:68:fa:7b:94:bf:46:9b:1c:23:fd:b5:d1:e6:92: d7:00:ed:4a:24:a4:1b:6a:8c:a4:77:5f:18:fe:8b: fb:b5:16:1c:fb:be:bd:a1:6e:45:a6:f3:be:d7:78: f7:a7:aa:6a:aa:ad:17:4f:3c:c6:b0:3c:d4:ec:21: 8d:15:31:85:73:ec:9c:ff:ed:01:59:52:5e:60:4a: 9a:03:6a:a3:a9:1a:af:da:13:b5:9f:1d:c6:cc:a9: 89:16:08:06:21:02:db:fa:8b:d4:1e:c5:ba:f5:34: b8:b0:62:c9:b9:45:81:53:7e:a2:3a:9e:cc:9c:ae: c1:bd:04:b1:47:df:83:3e:9a:20:e8:05:d3:d7:7d: 7c:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:5A:EF:CF:46:79:3F:C0:CC:11:BA:4B:1F:87:13:68:B5:4C:80:DE X509v3 Authority Key Identifier: keyid:AB:90:5D:DC:0A:FB:BD:15:49:F6:6E:FE:81:17:AE:15:00:0A:5E:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918B5FE/32C300286A9E11EBB6762318C4F9AE02/q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B5FE/32C300286A9E11EBB6762318C4F9AE02/q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:90:b0:0b:23:41:d6:77:d9:78:32:e4:17:c8:65:3f:63:52: 32:53:0d:27:92:12:33:be:ed:6c:20:26:4c:bc:ec:f9:22:49: 2e:90:17:08:8e:68:36:09:d1:f8:8c:0d:79:ff:19:b0:0d:40: 7b:1f:28:ef:f4:68:4b:c3:c0:86:74:e2:0b:48:b3:32:13:b9: a9:08:71:0f:ad:95:97:26:5d:51:f0:9d:36:f6:17:d6:7f:17: 73:76:b5:ea:20:bc:25:78:74:12:75:21:76:c2:fc:a9:2f:a0: 49:05:69:2e:16:a2:bf:64:87:48:00:d7:8b:68:99:2e:a7:f9: b4:61:42:a5:1b:95:52:f4:40:53:5f:98:52:c9:7e:ee:6b:84: 92:37:7a:53:e0:12:86:74:e8:46:b4:9e:5b:c1:7c:10:61:a9: 29:bb:6b:aa:ed:d8:9e:bb:0e:4d:a0:7a:d5:ea:ca:0a:3e:58: e8:e5:38:bd:9b:5f:16:3b:d1:d8:43:ea:0a:88:10:fa:00:d7: 9a:a8:cf:41:80:82:49:17:d9:f8:ba:d6:ae:60:b8:78:e2:b6: 47:f8:d4:d1:ac:2f:12:8c:c9:7d:33:02:60:9b:c1:c3:94:2e: c0:02:e7:7b:79:60:66:a9:99:be:72:44:4e:8b:f4:30:f1:52: 4e:f3:3f:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBqIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEI1RkUxMTAvBgNVBAUTKEFCOTA1RERDMEFGQkJEMTU0OUY2NkVGRTgxMTdBRTE1 MDAwQTVFMEYwHhcNMjUwNDE4MjIxNzAzWhcNMjUwNDI1MjIxNzAzWjAYMRYwFAYD VQQDEw02ODAyY2Y1Zi1kMjMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0AtbYhwY5tysiJmslZDVq2Nc4kpP5vsm+zFRiJ/dRQ9n1ltBxiS/RXlSZs3l DhsAYoz1sijVC5uRP/oA42enAFtjHzzRTuFJ9CRWglkcPBwQSPwl3dLjXqfSHnNo 62bLKQdgS0yXeMgXnFDCy8XQwcPZ1x29SdG7aPp7lL9Gmxwj/bXR5pLXAO1KJKQb aoykd18Y/ov7tRYc+769oW5FpvO+13j3p6pqqq0XTzzGsDzU7CGNFTGFc+yc/+0B WVJeYEqaA2qjqRqv2hO1nx3GzKmJFggGIQLb+ovUHsW69TS4sGLJuUWBU36iOp7M nK7BvQSxR9+DPpog6AXT1318RwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA5a789G eT/AzBG6Sx+HE2i1TIDeMB8GA1UdIwQYMBaAFKuQXdwK+70VSfZu/oEXrhUACl4P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QjVGRS8zMkMzMDAyODZB OUUxMUVCQjY3NjIzMThDNEY5QUUwMi9xNUJkM0FyN3ZSVko5bTctZ1JldUZRQUtY ZzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3E1QmQzQXI3dlJWSjltNy1nUmV1RlFBS1hnOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QjVGRS8zMkMzMDAyODZBOUUxMUVCQjY3NjIzMThDNEY5QUUwMi9xNUJkM0FyN3ZS Vko5bTctZ1JldUZRQUtYZzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC4kLALI0HWd9l4MuQXyGU/Y1IyUw0nkhIzvu1sICZMvOz5IkkukBcI jmg2CdH4jA15/xmwDUB7Hyjv9GhLw8CGdOILSLMyE7mpCHEPrZWXJl1R8J029hfW fxdzdrXqILwleHQSdSF2wvypL6BJBWkuFqK/ZIdIANeLaJkup/m0YUKlG5VS9EBT X5hSyX7ua4SSN3pT4BKGdOhGtJ5bwXwQYakpu2uq7dieuw5NoHrV6soKPljo5Ti9 m18WO9HYQ+oKiBD6ANeaqM9BgIJJF9n4utauYLh44rZH+NTRrC8SjMl9MwJgm8HD lC7AAud7eWBmqZm+ckROi/Qw8VJO8z9m -----END CERTIFICATE-----Generated at Sat Apr 19 06:37:58 2025 by rpki-client