$ rpki-client -vvf rpki.apnic.net/member_repository/A9113B62/26619D44C6E811EFBB520B0DC4F9AE02/Qv7zMXQaVNWgrnVTEI1NLTKwV7A.mft File: Qv7zMXQaVNWgrnVTEI1NLTKwV7A.mft (raw, json) Hash identifier: 4O6DImPWM6/vM21JLtgPBENxkrYmkxRgHWDBcXWi3L4= Subject key identifier: FE:E0:E7:4F:2F:6F:73:A2:0B:A9:6D:59:E1:40:AC:17:B8:83:87:30 Authority key identifier: 42:FE:F3:31:74:1A:54:D5:A0:AE:75:53:10:8D:4D:2D:32:B0:57:B0 Certificate issuer: /CN=A9113B62/serialNumber=42FEF331741A54D5A0AE7553108D4D2D32B057B0 Certificate serial: 17 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qv7zMXQaVNWgrnVTEI1NLTKwV7A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9113B62/26619D44C6E811EFBB520B0DC4F9AE02/Qv7zMXQaVNWgrnVTEI1NLTKwV7A.mft Manifest number: 16 Signing time: Wed 05 Feb 2025 06:23:37 +0000 Manifest this update: Wed 05 Feb 2025 06:23:37 +0000 Manifest next update: Wed 12 Feb 2025 06:23:36 +0000 Files and hashes: 1: Qv7zMXQaVNWgrnVTEI1NLTKwV7A.crl (hash: 62QzzNjyQhMkSl38Kz23oyJ/tu50e5jH1G/gAXsM2ig=) 2: 01238706C86211EFBDCCC22AC4F9AE02.roa (hash: sqsd36HvdOtJGpobxnch2UziqlMaZAChQP7HevqvsWs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9113B62/26619D44C6E811EFBB520B0DC4F9AE02/Qv7zMXQaVNWgrnVTEI1NLTKwV7A.crl rsync://rpki.apnic.net/member_repository/A9113B62/26619D44C6E811EFBB520B0DC4F9AE02/Qv7zMXQaVNWgrnVTEI1NLTKwV7A.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qv7zMXQaVNWgrnVTEI1NLTKwV7A.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Feb 2025 06:23:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23 (0x17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9113B62 Validity Not Before: Feb 5 06:23:37 2025 GMT Not After : Feb 12 06:23:36 2025 GMT Subject: CN=67a303e9-7951 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:eb:7b:45:06:2a:63:1a:ed:c4:88:f6:5b:e4: a1:80:48:fb:7d:f6:f8:7a:1c:30:c4:3d:fd:2b:61: 51:51:cd:fc:ea:f4:2b:3d:f3:c2:63:90:e9:07:e6: f1:97:2a:5f:48:e6:0b:c2:8f:25:8d:c9:53:a9:93: 6f:65:d3:f0:38:89:3e:fe:7e:de:59:5f:c0:31:43: e3:1e:32:23:69:e2:52:33:63:a0:1d:62:01:75:af: bb:7d:a6:e8:59:eb:3e:26:7d:32:9d:bb:b1:5b:46: f8:85:66:6d:e1:76:ce:67:f1:86:19:91:8a:5f:16: d3:4d:96:f0:f1:b8:47:c2:98:89:6c:46:24:ea:c0: 86:fe:5f:1b:77:c1:00:b8:ef:ac:4a:8f:4e:d8:fb: 28:4a:36:16:63:36:13:5f:e2:24:28:05:e9:a9:0e: 2a:b3:f1:e7:a9:05:9a:f4:c7:7c:60:e8:3d:0f:4a: 95:95:83:db:80:cc:75:bf:48:ba:ac:ff:a6:8f:8b: 30:99:03:20:cc:d9:59:a6:a7:d3:56:85:6d:c5:3a: 3d:b5:8c:7a:11:16:ec:12:a4:6f:61:dd:41:16:bd: 87:ac:4e:b1:e4:b0:58:79:7f:ed:ba:ca:45:f4:ca: b2:a8:d8:ac:fc:e5:8f:1a:7f:f0:da:2b:c8:9b:ee: 4f:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:E0:E7:4F:2F:6F:73:A2:0B:A9:6D:59:E1:40:AC:17:B8:83:87:30 X509v3 Authority Key Identifier: keyid:42:FE:F3:31:74:1A:54:D5:A0:AE:75:53:10:8D:4D:2D:32:B0:57:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9113B62/26619D44C6E811EFBB520B0DC4F9AE02/Qv7zMXQaVNWgrnVTEI1NLTKwV7A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qv7zMXQaVNWgrnVTEI1NLTKwV7A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113B62/26619D44C6E811EFBB520B0DC4F9AE02/Qv7zMXQaVNWgrnVTEI1NLTKwV7A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:6d:0c:93:95:b4:3e:31:92:58:09:96:54:38:7c:b0:e5:b1: 08:b4:92:d4:6a:e6:5f:42:3c:b8:18:71:90:b7:53:61:a0:f7: 38:33:67:e7:44:c9:bc:8e:35:32:6b:d9:32:43:eb:87:45:e2: bd:03:36:67:28:3f:c3:38:7b:1e:12:33:06:b3:e6:25:f3:12: b3:a4:a4:5c:13:ce:10:ae:49:a2:fc:b5:5c:5e:20:1a:0b:1a: 99:bf:78:cd:12:b1:68:71:f0:aa:58:dc:fd:4d:41:c2:ff:0b: 1c:36:fe:93:2b:3f:0a:b8:2c:a2:89:67:c3:4e:85:0d:0d:75: 78:73:3f:2d:82:ef:06:31:ff:83:13:f5:e6:41:4e:5b:b5:f0: 33:6d:ad:f7:8e:a6:16:78:84:3f:8a:f7:95:a4:be:22:1f:4a: 41:d4:45:93:51:4b:b9:95:9d:50:ee:08:23:a4:c5:52:61:c6: 31:64:7d:c8:15:7f:89:32:98:1d:b3:2a:6e:1d:da:a7:2c:d0: f6:79:e9:66:23:9d:ee:39:50:fb:24:6b:3a:3a:1a:ba:de:6e: ca:44:19:07:cc:6e:3e:75:c2:c3:95:c0:91:85:4e:a3:b7:b1: 72:5c:0a:ab:ea:86:5f:e3:2d:90:ea:4f:cf:64:dd:23:4f:77: 67:46:f7:b9 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx M0I2MjExMC8GA1UEBRMoNDJGRUYzMzE3NDFBNTRENUEwQUU3NTUzMTA4RDREMkQz MkIwNTdCMDAeFw0yNTAyMDUwNjIzMzdaFw0yNTAyMTIwNjIzMzZaMBgxFjAUBgNV BAMTDTY3YTMwM2U5LTc5NTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDP63tFBipjGu3EiPZb5KGASPt99vh6HDDEPf0rYVFRzfzq9Cs988JjkOkH5vGX Kl9I5gvCjyWNyVOpk29l0/A4iT7+ft5ZX8AxQ+MeMiNp4lIzY6AdYgF1r7t9puhZ 6z4mfTKdu7FbRviFZm3hds5n8YYZkYpfFtNNlvDxuEfCmIlsRiTqwIb+Xxt3wQC4 76xKj07Y+yhKNhZjNhNf4iQoBempDiqz8eepBZr0x3xg6D0PSpWVg9uAzHW/SLqs /6aPizCZAyDM2Vmmp9NWhW3FOj21jHoRFuwSpG9h3UEWvYesTrHksFh5f+26ykX0 yrKo2Kz85Y8af/DaK8ib7k9zAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU/uDnTy9v c6ILqW1Z4UCsF7iDhzAwHwYDVR0jBBgwFoAUQv7zMXQaVNWgrnVTEI1NLTKwV7Aw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEzQjYyLzI2NjE5RDQ0QzZF ODExRUZCQjUyMEIwREM0RjlBRTAyL1F2N3pNWFFhVk5XZ3JuVlRFSTFOTFRLd1Y3 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvUXY3ek1YUWFWTldncm5WVEVJMU5MVEt3VjdBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEz QjYyLzI2NjE5RDQ0QzZFODExRUZCQjUyMEIwREM0RjlBRTAyL1F2N3pNWFFhVk5X Z3JuVlRFSTFOTFRLd1Y3QS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAD1tDJOVtD4xklgJllQ4fLDlsQi0ktRq5l9CPLgYcZC3U2Gg9zgzZ+dE ybyONTJr2TJD64dF4r0DNmcoP8M4ex4SMwaz5iXzErOkpFwTzhCuSaL8tVxeIBoL Gpm/eM0SsWhx8KpY3P1NQcL/Cxw2/pMrPwq4LKKJZ8NOhQ0NdXhzPy2C7wYx/4MT 9eZBTlu18DNtrfeOphZ4hD+K95WkviIfSkHURZNRS7mVnVDuCCOkxVJhxjFkfcgV f4kymB2zKm4d2qcs0PZ56WYjne45UPskazo6GrrebspEGQfMbj51wsOVwJGFTqO3 sXJcCqvqhl/jLZDqT89k3SNPd2dG97k= -----END CERTIFICATE-----Generated at Wed Feb 5 20:02:06 2025 by rpki-client