$ rpki-client -vvf rpki.apnic.net/member_repository/A919F55C/9F19F96E370F11ECBEB72A42C4F9AE02/rQbbzFM0xtdRNy-xeVT0qq3cnD8.mft File: rQbbzFM0xtdRNy-xeVT0qq3cnD8.mft (raw, json) Hash identifier: KmbnrfEYuFYIBguGoQCoojp/Brv7PG/KLQppwP2asAY= Subject key identifier: AC:84:2D:F0:F0:CC:AD:F4:5F:EE:5D:3D:4C:5D:AF:DE:BE:1E:61:15 Authority key identifier: AD:06:DB:CC:53:34:C6:D7:51:37:2F:B1:79:54:F4:AA:AD:DC:9C:3F Certificate issuer: /CN=A919F55C/serialNumber=AD06DBCC5334C6D751372FB17954F4AAADDC9C3F Certificate serial: 048D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQbbzFM0xtdRNy-xeVT0qq3cnD8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919F55C/9F19F96E370F11ECBEB72A42C4F9AE02/rQbbzFM0xtdRNy-xeVT0qq3cnD8.mft Manifest number: 0488 Signing time: Wed 16 Apr 2025 23:40:56 +0000 Manifest this update: Wed 16 Apr 2025 23:40:55 +0000 Manifest next update: Wed 23 Apr 2025 23:40:55 +0000 Files and hashes: 1: rQbbzFM0xtdRNy-xeVT0qq3cnD8.crl (hash: PpKu1ntedQvnsrFLQIlotc+gVJ3/Yx+zABplUVtSL9Y=) 2: 0EC6A7E0372D11ECA616091EC4F9AE02.roa (hash: xRvy8+EZ4EWMUGqE/C33LsDCdW9x6WHrip13g/dJz5k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919F55C/9F19F96E370F11ECBEB72A42C4F9AE02/rQbbzFM0xtdRNy-xeVT0qq3cnD8.crl rsync://rpki.apnic.net/member_repository/A919F55C/9F19F96E370F11ECBEB72A42C4F9AE02/rQbbzFM0xtdRNy-xeVT0qq3cnD8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQbbzFM0xtdRNy-xeVT0qq3cnD8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Apr 2025 23:40:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1165 (0x48d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919F55C, serialNumber=AD06DBCC5334C6D751372FB17954F4AAADDC9C3F Validity Not Before: Apr 16 23:40:55 2025 GMT Not After : Apr 23 23:40:55 2025 GMT Subject: CN=68004008-7c5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:49:88:1c:66:91:59:3d:b0:72:ae:02:56:4f: 99:f2:e5:85:9a:8b:e0:ca:c9:10:2e:4d:71:f8:d6: 27:d3:84:11:cb:6e:08:ad:d5:f4:75:18:94:53:88: 1b:33:03:02:a2:c9:4a:e4:11:a5:a7:99:95:07:36: 37:da:5d:26:9b:63:a5:67:2d:af:84:99:1c:fd:9e: ee:fd:2c:ac:b5:46:e1:d7:de:56:9e:68:68:05:ae: 3f:89:ba:5c:89:3c:ae:d3:75:16:fb:49:66:d6:5d: 43:3a:2c:a7:b6:40:31:2f:2c:9c:5a:79:f3:64:de: 7b:d8:a7:f6:97:0a:d2:ad:ea:e3:93:08:2e:e0:63: 86:cf:f9:18:50:1d:56:da:47:49:4a:6d:bd:0f:12: f9:ee:5c:e5:65:ea:2e:08:85:d5:46:c3:66:d4:bc: e1:fa:31:7a:51:84:dc:2a:5c:29:0d:fa:17:6e:f1: 0e:ec:dd:d0:bc:2c:d3:a6:54:f3:bb:bc:e4:da:5b: 83:92:de:15:cc:70:a4:49:dd:af:6e:f8:7c:4f:5e: ba:80:7b:07:00:4a:a2:1d:02:0c:a0:e1:ed:45:69: 09:da:8c:26:d6:05:99:bf:00:87:21:d1:54:43:55: 4f:f4:20:15:c9:cc:78:1a:cb:b3:88:fc:cb:79:5b: 9f:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:84:2D:F0:F0:CC:AD:F4:5F:EE:5D:3D:4C:5D:AF:DE:BE:1E:61:15 X509v3 Authority Key Identifier: keyid:AD:06:DB:CC:53:34:C6:D7:51:37:2F:B1:79:54:F4:AA:AD:DC:9C:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919F55C/9F19F96E370F11ECBEB72A42C4F9AE02/rQbbzFM0xtdRNy-xeVT0qq3cnD8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQbbzFM0xtdRNy-xeVT0qq3cnD8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F55C/9F19F96E370F11ECBEB72A42C4F9AE02/rQbbzFM0xtdRNy-xeVT0qq3cnD8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:00:25:58:30:57:9f:50:5d:72:64:3a:46:35:19:66:6f:05: 81:8e:2c:2e:3e:cf:3d:f9:c0:1d:05:bc:ad:41:b3:e0:aa:8a: 49:7c:f3:67:c2:b7:00:94:e4:88:31:c4:37:17:fe:f4:c2:42: 8b:b7:b7:95:b0:71:fb:fd:dc:d6:79:24:ef:da:48:51:36:a6: ad:d6:24:c5:6d:f6:90:02:97:7b:15:f3:9f:c9:91:63:90:d1: e3:1d:4d:29:95:2f:b3:cf:5c:c6:d9:4b:df:7a:b9:42:0e:7f: f4:84:10:4d:b6:c7:78:e4:1d:8e:bf:67:d7:98:fa:be:52:a9: 27:68:e4:b6:e9:71:6a:84:eb:a5:99:79:bb:d3:2e:3a:7f:b9: c8:2d:da:99:c8:ce:28:a6:16:38:48:90:84:51:d6:b8:73:68: 6d:1f:f8:84:08:12:9f:64:7d:8f:86:8b:c3:c6:9e:92:bc:23: 74:3e:95:ee:3a:9e:68:37:8b:ce:62:4e:86:ad:c3:0b:34:9d: 8e:10:ca:b7:82:65:a5:21:da:57:45:7a:6b:c5:d9:13:9f:c8: 05:d7:ea:d2:31:f3:87:69:20:c5:72:dd:91:3e:62:2f:ee:d7: 9b:7e:da:f3:59:12:3b:13:db:6d:cb:f2:0c:69:09:76:d7:c5: 92:f0:e0:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBI0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUY1NUMxMTAvBgNVBAUTKEFEMDZEQkNDNTMzNEM2RDc1MTM3MkZCMTc5NTRGNEFB QUREQzlDM0YwHhcNMjUwNDE2MjM0MDU1WhcNMjUwNDIzMjM0MDU1WjAYMRYwFAYD VQQDEw02ODAwNDAwOC03YzVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7EmIHGaRWT2wcq4CVk+Z8uWFmovgyskQLk1x+NYn04QRy24IrdX0dRiUU4gb MwMCoslK5BGlp5mVBzY32l0mm2OlZy2vhJkc/Z7u/SystUbh195WnmhoBa4/ibpc iTyu03UW+0lm1l1DOiyntkAxLyycWnnzZN572Kf2lwrSrerjkwgu4GOGz/kYUB1W 2kdJSm29DxL57lzlZeouCIXVRsNm1Lzh+jF6UYTcKlwpDfoXbvEO7N3QvCzTplTz u7zk2luDkt4VzHCkSd2vbvh8T166gHsHAEqiHQIMoOHtRWkJ2owm1gWZvwCHIdFU Q1VP9CAVycx4GsuziPzLeVufxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKyELfDw zK30X+5dPUxdr96+HmEVMB8GA1UdIwQYMBaAFK0G28xTNMbXUTcvsXlU9Kqt3Jw/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjU1Qy85RjE5Rjk2RTM3 MEYxMUVDQkVCNzJBNDJDNEY5QUUwMi9yUWJiekZNMHh0ZFJOeS14ZVZUMHFxM2Nu RDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JRYmJ6Rk0weHRkUk55LXhlVlQwcXEzY25EOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RjU1Qy85RjE5Rjk2RTM3MEYxMUVDQkVCNzJBNDJDNEY5QUUwMi9yUWJiekZNMHh0 ZFJOeS14ZVZUMHFxM2NuRDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWACVYMFefUF1yZDpGNRlmbwWBjiwuPs89+cAdBbytQbPgqopJfPNn wrcAlOSIMcQ3F/70wkKLt7eVsHH7/dzWeSTv2khRNqat1iTFbfaQApd7FfOfyZFj kNHjHU0plS+zz1zG2UvferlCDn/0hBBNtsd45B2Ov2fXmPq+UqknaOS26XFqhOul mXm70y46f7nILdqZyM4ophY4SJCEUda4c2htH/iECBKfZH2PhovDxp6SvCN0PpXu Op5oN4vOYk6GrcMLNJ2OEMq3gmWlIdpXRXprxdkTn8gF1+rSMfOHaSDFct2RPmIv 7tebftrzWRI7E9tty/IMaQl218WS8OC6 -----END CERTIFICATE-----Generated at Sat Apr 19 00:46:53 2025 by rpki-client