$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9197/4F3C798A069D11EEB8798D14C4F9AE02/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.mft File: t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.mft (raw, json) Hash identifier: fqs/7XH9jZuTx67hPmqeBYi2g9K/JhuY1S87Ep7AZ18= Subject key identifier: 70:A9:45:43:74:4F:E5:83:1C:3F:48:94:FA:42:D1:EB:AF:8A:94:AD Authority key identifier: B7:FE:6A:42:4D:B5:65:26:1B:47:3A:71:23:1D:59:E2:18:DC:45:04 Certificate issuer: /CN=A91A9197/serialNumber=B7FE6A424DB565261B473A71231D59E218DC4504 Certificate serial: 0164 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9197/4F3C798A069D11EEB8798D14C4F9AE02/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.mft Manifest number: 0161 Signing time: Sat 19 Apr 2025 03:15:08 +0000 Manifest this update: Sat 19 Apr 2025 03:15:08 +0000 Manifest next update: Sat 26 Apr 2025 03:15:08 +0000 Files and hashes: 1: t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.crl (hash: rVwQem/u1UMnxnB10ENxIiEyyKS6AH+ah1xvYAVELwk=) 2: F4260C1C68DC11EE842D825BC4F9AE02.roa (hash: ZHAMruYyeptNNpeohfIoYoif7sb87BSzSS5PG7gezGQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9197/4F3C798A069D11EEB8798D14C4F9AE02/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.crl rsync://rpki.apnic.net/member_repository/A91A9197/4F3C798A069D11EEB8798D14C4F9AE02/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 03:15:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 356 (0x164) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9197, serialNumber=B7FE6A424DB565261B473A71231D59E218DC4504 Validity Not Before: Apr 19 03:15:08 2025 GMT Not After : Apr 26 03:15:08 2025 GMT Subject: CN=6803153c-3264 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:74:3f:f1:40:44:32:09:63:e0:e8:5b:6c:0d: fb:85:b1:8c:f3:03:ba:b4:3f:a5:e6:e4:af:73:e5: 2f:12:d5:85:5d:fb:f9:34:97:f7:18:6f:90:60:f1: aa:07:47:15:d7:f1:e4:7b:44:99:8e:7b:9a:2f:54: 32:85:bf:4c:11:83:f3:2e:99:98:ad:f9:26:b3:21: 25:ce:0a:0d:7f:60:be:f1:38:01:13:81:52:a4:da: 08:e6:81:55:2a:18:b0:fb:e4:cf:37:04:8c:d9:13: 77:a0:98:1f:00:15:81:5d:a5:4d:ae:5a:d2:88:ef: d7:22:fd:59:aa:45:b4:9d:27:69:e6:d2:85:4b:7c: 54:a6:5a:49:c8:9b:9c:9f:64:c0:49:59:65:ad:40: 22:77:a5:23:10:eb:c3:09:47:58:89:60:de:08:f8: 77:70:7f:d4:e8:e4:28:8e:c8:66:0f:07:68:70:38: 2c:f1:21:e1:c6:85:57:7b:de:a5:7d:54:81:dd:6f: b5:b5:16:64:6c:1b:be:88:ac:d8:9c:06:b1:cb:94: f1:a1:4a:93:3d:4f:fd:91:69:0f:e2:b8:ec:0e:39: 89:44:04:73:2e:c0:4f:5a:44:77:c0:6e:19:e2:5e: e1:77:d0:66:b0:a0:da:0d:36:97:b3:c8:98:2c:0b: cc:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:A9:45:43:74:4F:E5:83:1C:3F:48:94:FA:42:D1:EB:AF:8A:94:AD X509v3 Authority Key Identifier: keyid:B7:FE:6A:42:4D:B5:65:26:1B:47:3A:71:23:1D:59:E2:18:DC:45:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9197/4F3C798A069D11EEB8798D14C4F9AE02/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9197/4F3C798A069D11EEB8798D14C4F9AE02/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:ec:8a:12:cf:2f:c8:80:3a:b4:31:6c:bf:5f:c2:35:0d:98: 31:77:7f:5c:f1:ab:32:77:6a:ff:84:54:3b:d6:db:bf:2e:e3: 79:1d:ba:72:a7:40:db:a1:e5:53:d6:e3:72:0d:80:b6:11:5e: 99:ac:b1:63:56:c0:94:af:a5:5c:99:0b:ec:d0:a6:86:a9:2f: b6:07:94:e8:62:f8:ae:cc:61:41:cb:9e:bc:57:14:ff:b7:9d: 7f:08:e5:74:49:70:4f:60:c7:ef:4d:be:f8:90:87:4c:ff:7d: b1:9c:ca:8d:98:9d:e3:c2:a9:3f:67:cc:77:a6:34:f4:f0:fc: b4:cb:4b:93:1a:6c:2b:0c:8f:75:a4:64:74:66:41:ad:59:01: dd:05:8d:02:92:00:26:24:76:63:93:65:a8:d6:b3:7b:67:21: 52:67:8d:3f:00:37:e9:20:83:c7:0f:f1:27:4e:91:16:d5:99: 71:6a:43:4f:df:c2:5f:ea:ff:4c:15:cb:47:13:32:a1:99:45: 2a:7c:d4:b2:c8:dc:eb:90:8e:de:53:29:8f:56:4b:a8:6e:93: 23:3e:d7:a9:5d:46:cf:cf:63:74:81:6d:6b:15:d9:8e:38:18: 64:61:5a:a1:68:b0:6d:0f:39:f3:46:3c:7c:f4:97:40:2f:ce: e4:50:e7:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTkxOTcxMTAvBgNVBAUTKEI3RkU2QTQyNERCNTY1MjYxQjQ3M0E3MTIzMUQ1OUUy MThEQzQ1MDQwHhcNMjUwNDE5MDMxNTA4WhcNMjUwNDI2MDMxNTA4WjAYMRYwFAYD VQQDEw02ODAzMTUzYy0zMjY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtHQ/8UBEMglj4OhbbA37hbGM8wO6tD+l5uSvc+UvEtWFXfv5NJf3GG+QYPGq B0cV1/Hke0SZjnuaL1Qyhb9MEYPzLpmYrfkmsyElzgoNf2C+8TgBE4FSpNoI5oFV Khiw++TPNwSM2RN3oJgfABWBXaVNrlrSiO/XIv1ZqkW0nSdp5tKFS3xUplpJyJuc n2TASVllrUAid6UjEOvDCUdYiWDeCPh3cH/U6OQojshmDwdocDgs8SHhxoVXe96l fVSB3W+1tRZkbBu+iKzYnAaxy5TxoUqTPU/9kWkP4rjsDjmJRARzLsBPWkR3wG4Z 4l7hd9BmsKDaDTaXs8iYLAvMcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHCpRUN0 T+WDHD9IlPpC0euvipStMB8GA1UdIwQYMBaAFLf+akJNtWUmG0c6cSMdWeIY3EUE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTE5Ny80RjNDNzk4QTA2 OUQxMUVFQjg3OThEMTRDNEY5QUUwMi90XzVxUWsyMVpTWWJSenB4SXgxWjRoamNS UVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RfNXFRazIxWlNZYlJ6cHhJeDFaNGhqY1JRUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OTE5Ny80RjNDNzk4QTA2OUQxMUVFQjg3OThEMTRDNEY5QUUwMi90XzVxUWsyMVpT WWJSenB4SXgxWjRoamNSUVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAS7IoSzy/IgDq0MWy/X8I1DZgxd39c8asyd2r/hFQ71tu/LuN5Hbpy p0DboeVT1uNyDYC2EV6ZrLFjVsCUr6VcmQvs0KaGqS+2B5ToYviuzGFBy568VxT/ t51/COV0SXBPYMfvTb74kIdM/32xnMqNmJ3jwqk/Z8x3pjT08Py0y0uTGmwrDI91 pGR0ZkGtWQHdBY0CkgAmJHZjk2Wo1rN7ZyFSZ40/ADfpIIPHD/EnTpEW1ZlxakNP 38Jf6v9MFctHEzKhmUUqfNSyyNzrkI7eUymPVkuobpMjPtepXUbPz2N0gW1rFdmO OBhkYVqhaLBtDznzRjx89JdAL87kUOeN -----END CERTIFICATE-----Generated at Sat Apr 19 10:55:24 2025 by rpki-client