$ rpki-client -vvf rpki.apnic.net/member_repository/A912C8AF/EE0AEECA3E8111EB9ABD920FC4F9AE02/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.mft File: Qk4KOEPz-h9Etq8u8-4RgVxLUgk.mft (raw, json) Hash identifier: 5aYjM9NWvD2F9y+X9j7eaVSng3JaX1r1u9flPl1JGAc= Subject key identifier: 17:13:74:12:B6:F4:6F:3B:4F:05:4C:52:06:D4:78:F7:5C:0B:8A:34 Authority key identifier: 42:4E:0A:38:43:F3:FA:1F:44:B6:AF:2E:F3:EE:11:81:5C:4B:52:09 Certificate issuer: /CN=A912C8AF/serialNumber=424E0A3843F3FA1F44B6AF2EF3EE11815C4B5209 Certificate serial: 0710 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C8AF/EE0AEECA3E8111EB9ABD920FC4F9AE02/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.mft Manifest number: 0706 Signing time: Thu 10 Apr 2025 19:37:08 +0000 Manifest this update: Thu 10 Apr 2025 19:37:07 +0000 Manifest next update: Thu 17 Apr 2025 19:37:07 +0000 Files and hashes: 1: Qk4KOEPz-h9Etq8u8-4RgVxLUgk.crl (hash: pfERQucEvAQZf4BRc60ZsueZiP+4M16je1I6Xqj4eGk=) 2: 510308503E8211EBA910FF57C4F9AE02.roa (hash: PjHH406K/ka7XNZ7a0h9GqbdKh0e4+H0cJO6YTJYTgA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C8AF/EE0AEECA3E8111EB9ABD920FC4F9AE02/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.crl rsync://rpki.apnic.net/member_repository/A912C8AF/EE0AEECA3E8111EB9ABD920FC4F9AE02/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Apr 2025 19:37:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1808 (0x710) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C8AF Validity Not Before: Apr 10 19:37:07 2025 GMT Not After : Apr 17 19:37:07 2025 GMT Subject: CN=67f81de4-c907 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:3b:2c:81:60:03:fd:15:39:ad:d2:7a:4b:65: e8:95:5f:ef:15:77:81:32:3b:6e:1a:94:30:7a:2b: 51:ae:37:41:8d:85:07:5a:b4:69:35:ea:f7:2a:2d: a7:9d:59:9d:f0:de:18:fb:19:0c:5b:df:f7:0d:b5: b9:2f:a7:c7:de:b7:28:fe:8d:09:27:e7:55:65:71: b9:44:8e:6e:1a:80:ab:e6:21:ed:08:08:82:0c:2c: f4:a4:a3:45:d2:c1:2d:aa:27:11:75:bd:14:04:37: c8:f1:e7:52:d8:09:f3:63:83:ba:7c:66:ae:1b:e9: 7d:1a:9e:4c:4b:dd:7c:9c:61:06:15:42:bd:fb:c6: 83:5b:07:6f:75:a5:fa:cc:7f:3d:1c:e3:b7:13:69: b9:7c:d0:1a:e9:3c:7a:5d:f5:a7:8d:e6:50:3e:be: 5a:f6:e9:45:65:49:15:19:1b:25:7b:f2:76:c5:2a: 0e:00:73:64:66:83:52:6c:3f:ec:c1:3c:4d:f6:d3: c5:90:b2:93:b1:d0:25:b5:01:ba:5a:58:52:38:80: b4:be:9e:43:95:f8:33:59:5d:09:f8:a7:d9:3d:b5: dd:3f:7b:8f:34:04:dc:90:c0:ac:fe:5c:cc:0a:76: d5:68:d0:61:ec:20:52:8c:39:a8:b8:33:4c:30:cf: 99:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:13:74:12:B6:F4:6F:3B:4F:05:4C:52:06:D4:78:F7:5C:0B:8A:34 X509v3 Authority Key Identifier: keyid:42:4E:0A:38:43:F3:FA:1F:44:B6:AF:2E:F3:EE:11:81:5C:4B:52:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C8AF/EE0AEECA3E8111EB9ABD920FC4F9AE02/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C8AF/EE0AEECA3E8111EB9ABD920FC4F9AE02/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:3b:f8:49:d3:4c:36:32:fb:22:a3:af:4f:69:51:35:d4:cc: 9a:1e:13:32:e3:cf:26:dd:2e:17:c7:f3:33:bb:c9:53:56:69: 40:bf:5f:18:32:dd:ce:c1:85:5d:43:6a:78:53:48:85:e7:29: 33:0a:95:65:98:48:1e:95:c5:c1:4d:c4:06:80:81:21:bd:1b: ee:a0:cc:fc:0a:f8:36:ae:6a:8e:82:8b:32:a4:3f:dd:f8:b0: 77:a9:14:d2:21:76:19:13:d7:3d:c3:45:cd:c1:39:06:03:55: f9:bb:0d:92:20:f5:af:37:d1:78:b6:c9:5c:00:3f:7d:01:97: 4c:57:7d:f3:75:37:6c:26:69:7e:ce:ad:98:2d:b7:91:8f:67: 5e:cf:6a:cc:b9:e8:82:18:60:48:7a:4c:d8:02:8c:90:ac:59: 12:7b:d6:da:78:ea:3b:10:b6:6f:6d:05:d0:34:b8:27:f4:67: 13:79:56:d6:0c:c6:12:26:5c:c8:9f:d1:95:03:c8:82:51:98: 7f:f8:40:1f:cd:b9:c7:2b:d4:4e:e5:d8:16:bb:51:78:8a:7c: bc:6a:8b:14:ac:15:36:d6:4f:a3:37:57:1c:a9:79:6e:fa:81: d2:51:ea:1b:1b:25:d8:e7:f8:59:3a:4c:ae:21:3b:e3:44:40: f7:9b:20:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBxAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkM4QUYxMTAvBgNVBAUTKDQyNEUwQTM4NDNGM0ZBMUY0NEI2QUYyRUYzRUUxMTgx NUM0QjUyMDkwHhcNMjUwNDEwMTkzNzA3WhcNMjUwNDE3MTkzNzA3WjAYMRYwFAYD VQQDEw02N2Y4MWRlNC1jOTA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzTssgWAD/RU5rdJ6S2XolV/vFXeBMjtuGpQweitRrjdBjYUHWrRpNer3Ki2n nVmd8N4Y+xkMW9/3DbW5L6fH3rco/o0JJ+dVZXG5RI5uGoCr5iHtCAiCDCz0pKNF 0sEtqicRdb0UBDfI8edS2AnzY4O6fGauG+l9Gp5MS918nGEGFUK9+8aDWwdvdaX6 zH89HOO3E2m5fNAa6Tx6XfWnjeZQPr5a9ulFZUkVGRsle/J2xSoOAHNkZoNSbD/s wTxN9tPFkLKTsdAltQG6WlhSOIC0vp5DlfgzWV0J+KfZPbXdP3uPNATckMCs/lzM CnbVaNBh7CBSjDmouDNMMM+ZOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBcTdBK2 9G87TwVMUgbUePdcC4o0MB8GA1UdIwQYMBaAFEJOCjhD8/ofRLavLvPuEYFcS1IJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzhBRi9FRTBBRUVDQTNF ODExMUVCOUFCRDkyMEZDNEY5QUUwMi9RazRLT0VQei1oOUV0cTh1OC00UmdWeExV Z2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL1FrNEtPRVB6LWg5RXRxOHU4LTRSZ1Z4TFVnay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QzhBRi9FRTBBRUVDQTNFODExMUVCOUFCRDkyMEZDNEY5QUUwMi9RazRLT0VQei1o OUV0cTh1OC00UmdWeExVZ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApO/hJ00w2Mvsio69PaVE11MyaHhMy488m3S4Xx/Mzu8lTVmlAv18Y Mt3OwYVdQ2p4U0iF5ykzCpVlmEgelcXBTcQGgIEhvRvuoMz8Cvg2rmqOgosypD/d +LB3qRTSIXYZE9c9w0XNwTkGA1X5uw2SIPWvN9F4tslcAD99AZdMV33zdTdsJml+ zq2YLbeRj2dez2rMueiCGGBIekzYAoyQrFkSe9baeOo7ELZvbQXQNLgn9GcTeVbW DMYSJlzIn9GVA8iCUZh/+EAfzbnHK9RO5dgWu1F4iny8aosUrBU21k+jN1ccqXlu +oHSUeobGyXY5/hZOkyuITvjRED3myDy -----END CERTIFICATE-----Generated at Sat Apr 12 03:22:50 2025 by rpki-client