$ rpki-client -vvf rpki.apnic.net/member_repository/A9132C09/CD6D520256C511EEBED32E0BC4F9AE02/Q5KdkW3Jyc40Y_-RWMy-_p8YLDs.mft File: Q5KdkW3Jyc40Y_-RWMy-_p8YLDs.mft (raw, json) Hash identifier: NjBIAMLZ5L54L48K2i37+uS0c6HXaFPMFTPa03mduWA= Subject key identifier: 5B:80:15:85:25:6C:DE:30:A2:E0:7A:C7:7E:B7:74:0F:D9:E1:07:AC Authority key identifier: 43:92:9D:91:6D:C9:C9:CE:34:63:FF:91:58:CC:BE:FE:9F:18:2C:3B Certificate issuer: /CN=A9132C09/serialNumber=43929D916DC9C9CE3463FF9158CCBEFE9F182C3B Certificate serial: 013C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q5KdkW3Jyc40Y_-RWMy-_p8YLDs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9132C09/CD6D520256C511EEBED32E0BC4F9AE02/Q5KdkW3Jyc40Y_-RWMy-_p8YLDs.mft Manifest number: 013C Signing time: Sat 31 May 2025 04:01:08 +0000 Manifest this update: Sat 31 May 2025 04:01:07 +0000 Manifest next update: Sat 07 Jun 2025 04:01:07 +0000 Files and hashes: 1: Q5KdkW3Jyc40Y_-RWMy-_p8YLDs.crl (hash: 4ft9doWaNdePvC8EyFAgYcJYMcD+GLeToUpaNyCLtTY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9132C09/CD6D520256C511EEBED32E0BC4F9AE02/Q5KdkW3Jyc40Y_-RWMy-_p8YLDs.crl rsync://rpki.apnic.net/member_repository/A9132C09/CD6D520256C511EEBED32E0BC4F9AE02/Q5KdkW3Jyc40Y_-RWMy-_p8YLDs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q5KdkW3Jyc40Y_-RWMy-_p8YLDs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 316 (0x13c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9132C09, serialNumber=43929D916DC9C9CE3463FF9158CCBEFE9F182C3B Validity Not Before: May 31 04:01:07 2025 GMT Not After : Jun 7 04:01:07 2025 GMT Subject: CN=683a7f04-e315 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:e4:41:8d:91:e6:e1:83:65:fa:82:5f:ff:ab: b2:d5:a7:22:99:ad:0d:1d:ff:c1:df:e4:b1:9f:81: e4:dd:0d:de:29:5d:19:f0:76:60:7b:8b:3f:05:4c: 84:28:0c:5d:54:90:f0:64:66:1b:9f:3f:06:a5:37: 6b:d2:f6:23:88:87:e8:a9:20:0e:a9:16:7b:eb:90: 12:83:97:08:40:07:9c:25:c2:fb:c1:07:cb:d6:e0: 7f:09:d8:7f:a6:bd:23:12:21:bd:53:d9:7e:db:8e: d6:ac:97:1f:b8:4e:13:20:60:1e:dc:a0:cc:01:9f: 30:51:23:67:68:fc:76:49:25:c0:ab:cf:d2:da:d8: 0a:c2:3f:8f:3d:a3:25:b2:aa:5b:1e:92:6a:d4:f8: 09:7b:5c:5d:a6:26:eb:4b:dd:d5:a7:c2:ae:48:a6: f1:8f:73:a7:97:40:02:a4:3c:b7:49:aa:9e:aa:ea: cc:e2:56:90:98:22:7e:81:bd:37:9c:05:5e:83:9f: b1:2f:7e:c5:d9:51:b0:7e:3b:d6:8b:7c:4b:b6:a3: 61:54:0a:fa:ac:35:6b:5c:d1:b5:01:6c:b0:0c:6e: 42:a1:9e:e2:49:f7:c1:29:c9:26:65:87:7d:c2:af: a4:a8:c1:6d:49:a1:6f:97:29:a6:44:d1:24:22:9c: d7:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:80:15:85:25:6C:DE:30:A2:E0:7A:C7:7E:B7:74:0F:D9:E1:07:AC X509v3 Authority Key Identifier: keyid:43:92:9D:91:6D:C9:C9:CE:34:63:FF:91:58:CC:BE:FE:9F:18:2C:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9132C09/CD6D520256C511EEBED32E0BC4F9AE02/Q5KdkW3Jyc40Y_-RWMy-_p8YLDs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q5KdkW3Jyc40Y_-RWMy-_p8YLDs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132C09/CD6D520256C511EEBED32E0BC4F9AE02/Q5KdkW3Jyc40Y_-RWMy-_p8YLDs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:7a:6f:b0:87:c3:2a:9a:31:83:7e:bc:d1:3a:79:f4:22:32: e6:cc:5f:9e:02:bb:b7:5e:c1:87:67:84:05:bc:dc:ec:ac:ad: a4:b9:f0:1a:7b:1c:b1:99:5e:b9:af:35:a3:fb:c8:25:fe:dd: 16:ce:3e:04:12:ea:ad:2e:05:92:da:0d:f6:49:2a:15:36:01: 4e:f8:1c:1f:02:c2:c0:0a:64:c3:4e:28:11:45:61:68:70:99: c4:29:3c:6d:42:63:bc:af:11:b3:dc:bb:18:94:9d:4e:08:0d: 4e:6e:17:64:7e:32:91:9d:50:b8:18:88:e6:ae:ef:9a:cf:f7: f1:be:07:ff:99:de:d8:0e:d1:84:12:c2:e1:67:13:91:b5:3f: 96:ca:85:c8:7f:f8:0f:89:2c:b3:4a:02:89:44:e9:ea:fa:7c: ec:83:38:50:e4:8c:bd:cc:ac:0e:0c:fc:57:8a:c8:31:d2:d7: 3c:63:a3:44:69:6d:33:41:b7:ed:1c:f9:7f:5b:40:04:0f:ab: da:05:91:e1:dc:5e:1a:18:97:e1:fe:d0:96:22:98:0f:37:06: 45:d2:a6:3b:57:e8:23:6d:5c:b8:42:cd:78:d1:cc:7b:73:2d: 8c:e5:97:62:f0:91:59:ef:16:fb:e9:70:30:ea:2c:f4:f3:3d: b1:cc:a1:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzJDMDkxMTAvBgNVBAUTKDQzOTI5RDkxNkRDOUM5Q0UzNDYzRkY5MTU4Q0NCRUZF OUYxODJDM0IwHhcNMjUwNTMxMDQwMTA3WhcNMjUwNjA3MDQwMTA3WjAYMRYwFAYD VQQDEw02ODNhN2YwNC1lMzE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0ORBjZHm4YNl+oJf/6uy1acima0NHf/B3+Sxn4Hk3Q3eKV0Z8HZge4s/BUyE KAxdVJDwZGYbnz8GpTdr0vYjiIfoqSAOqRZ765ASg5cIQAecJcL7wQfL1uB/Cdh/ pr0jEiG9U9l+247WrJcfuE4TIGAe3KDMAZ8wUSNnaPx2SSXAq8/S2tgKwj+PPaMl sqpbHpJq1PgJe1xdpibrS93Vp8KuSKbxj3Onl0ACpDy3SaqequrM4laQmCJ+gb03 nAVeg5+xL37F2VGwfjvWi3xLtqNhVAr6rDVrXNG1AWywDG5CoZ7iSffBKckmZYd9 wq+kqMFtSaFvlymmRNEkIpzX5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFuAFYUl bN4wouB6x363dA/Z4QesMB8GA1UdIwQYMBaAFEOSnZFtycnONGP/kVjMvv6fGCw7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMkMwOS9DRDZENTIwMjU2 QzUxMUVFQkVEMzJFMEJDNEY5QUUwMi9RNUtka1czSnljNDBZXy1SV015LV9wOFlM RHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1E1S2RrVzNKeWM0MFlfLVJXTXktX3A4WUxEcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MkMwOS9DRDZENTIwMjU2QzUxMUVFQkVEMzJFMEJDNEY5QUUwMi9RNUtka1czSnlj NDBZXy1SV015LV9wOFlMRHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCnem+wh8MqmjGDfrzROnn0IjLmzF+eAru3XsGHZ4QFvNzsrK2kufAa exyxmV65rzWj+8gl/t0Wzj4EEuqtLgWS2g32SSoVNgFO+BwfAsLACmTDTigRRWFo cJnEKTxtQmO8rxGz3LsYlJ1OCA1ObhdkfjKRnVC4GIjmru+az/fxvgf/md7YDtGE EsLhZxORtT+WyoXIf/gPiSyzSgKJROnq+nzsgzhQ5Iy9zKwODPxXisgx0tc8Y6NE aW0zQbftHPl/W0AED6vaBZHh3F4aGJfh/tCWIpgPNwZF0qY7V+gjbVy4Qs140cx7 cy2M5Zdi8JFZ7xb76XAw6iz08z2xzKFc -----END CERTIFICATE-----Generated at Sat May 31 17:26:21 2025 by rpki-client