$ rpki-client -vvf rpki.apnic.net/member_repository/A9184324/EAA9CCD47B1C11EFAC109416C4F9AE02/qFaPUnk8w0hXhQxPLtOK4LGJcPg.mft File: qFaPUnk8w0hXhQxPLtOK4LGJcPg.mft (raw, json) Hash identifier: LSMjJqdxvhoKhPAXbfeq5XBxwLmiD9cNhNNuCFOsZsc= Subject key identifier: 80:A1:1C:25:23:B4:8E:85:0A:E3:6D:31:82:F9:F1:B4:68:91:AA:8D Authority key identifier: A8:56:8F:52:79:3C:C3:48:57:85:0C:4F:2E:D3:8A:E0:B1:89:70:F8 Certificate issuer: /CN=A9184324/serialNumber=A8568F52793CC34857850C4F2ED38AE0B18970F8 Certificate serial: 62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qFaPUnk8w0hXhQxPLtOK4LGJcPg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9184324/EAA9CCD47B1C11EFAC109416C4F9AE02/qFaPUnk8w0hXhQxPLtOK4LGJcPg.mft Manifest number: 5D Signing time: Thu 13 Mar 2025 05:12:12 +0000 Manifest this update: Thu 13 Mar 2025 05:12:11 +0000 Manifest next update: Thu 20 Mar 2025 05:12:11 +0000 Files and hashes: 1: qFaPUnk8w0hXhQxPLtOK4LGJcPg.crl (hash: DmJaXNiXenboT3mMeFYcjKcQK88k/tAngFdE2i6Fx/0=) 2: 4C575EBA7C4911EF8E4FFA2CC4F9AE02.roa (hash: 98w4yl1iX/DBuRnZm4wgf0B6PYVS6iqXA6ulWZHNh70=) 3: 5C8F63FE7C4911EF81434A2DC4F9AE02.roa (hash: xISmEUj+M4vxMbA55xtFZk8Qasu4uZXOcEk4pXZEXDI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9184324/EAA9CCD47B1C11EFAC109416C4F9AE02/qFaPUnk8w0hXhQxPLtOK4LGJcPg.crl rsync://rpki.apnic.net/member_repository/A9184324/EAA9CCD47B1C11EFAC109416C4F9AE02/qFaPUnk8w0hXhQxPLtOK4LGJcPg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qFaPUnk8w0hXhQxPLtOK4LGJcPg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 20 Mar 2025 05:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 98 (0x62) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9184324 Validity Not Before: Mar 13 05:12:11 2025 GMT Not After : Mar 20 05:12:11 2025 GMT Subject: CN=67d2692b-d151 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:dc:2f:0f:9b:a3:3c:51:6e:1f:24:09:a1:8e: 7d:a9:f8:de:15:ce:6e:b5:fe:a1:26:55:b3:e4:57: 6d:e2:61:21:0e:96:4d:a7:c1:6b:a1:f5:cc:4c:90: f4:36:91:b6:55:4e:de:17:ca:3a:e1:9e:9d:43:25: 09:ef:df:9c:cd:18:e6:58:58:d1:01:83:13:59:29: b9:b5:b1:ac:72:41:51:2f:5e:ec:d7:93:a9:0c:5c: 7d:5f:1a:ae:a4:cb:a3:95:23:cf:cd:00:39:7b:80: e2:7e:36:75:90:80:f1:4a:c2:c4:e1:d2:d1:78:b0: 84:ff:10:a6:a0:54:d0:89:d5:df:ab:7c:3d:2b:23: 84:77:da:e1:5b:99:ea:47:a1:23:67:bb:bc:0d:04: 60:91:58:a0:9c:20:a7:12:73:e3:20:47:d1:cd:b7: 26:5e:66:3d:fe:43:d3:ad:4a:5d:63:7a:9d:dc:81: a9:57:d1:f5:d3:cd:f6:c9:9f:ab:f6:fc:7a:9b:5f: 8f:fe:25:19:7c:04:58:05:7d:75:22:f6:f4:9e:f6: be:cb:4f:65:ac:54:29:05:2c:de:74:31:6c:2a:20: 3c:47:a1:ff:f7:1e:c1:b2:e6:84:a9:41:ab:28:55: 41:b7:1f:37:90:96:19:df:b4:f6:24:05:af:d8:4e: f8:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:A1:1C:25:23:B4:8E:85:0A:E3:6D:31:82:F9:F1:B4:68:91:AA:8D X509v3 Authority Key Identifier: keyid:A8:56:8F:52:79:3C:C3:48:57:85:0C:4F:2E:D3:8A:E0:B1:89:70:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9184324/EAA9CCD47B1C11EFAC109416C4F9AE02/qFaPUnk8w0hXhQxPLtOK4LGJcPg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qFaPUnk8w0hXhQxPLtOK4LGJcPg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184324/EAA9CCD47B1C11EFAC109416C4F9AE02/qFaPUnk8w0hXhQxPLtOK4LGJcPg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:b2:3e:97:04:85:e1:ee:6b:43:79:01:81:e4:14:79:4c:c1: 79:28:ff:3a:22:14:67:2b:e5:b1:3b:27:5d:2f:aa:27:dc:c4: b9:b6:10:1f:6d:69:39:96:5c:06:a6:02:05:25:50:2c:a9:53: ae:ad:56:74:c1:bf:6a:86:e0:41:fa:0c:78:f7:84:8b:25:bb: 30:85:57:f7:22:31:c5:19:c4:ae:1a:1f:69:55:37:5b:c8:6d: d1:26:e6:4c:83:fe:06:65:e8:85:40:63:fa:ab:30:2b:d6:74: 7d:df:6c:5f:76:5f:d3:c7:07:9d:0f:33:ac:98:d6:fd:ad:bc: b7:73:60:1e:ab:5a:f3:83:a9:68:2a:53:01:b7:7a:99:9f:2a: e5:b0:2f:be:de:eb:55:9f:6b:0d:e0:86:84:d0:11:8e:9e:9a: 2b:12:eb:72:35:c9:c4:ae:6d:8c:43:6d:f4:a2:8e:d0:9d:ab: d6:fc:cd:f5:19:38:34:3f:86:dd:30:be:3a:7c:0b:37:bc:17: c2:32:92:0e:45:53:33:c9:43:91:91:51:c2:1d:f1:c8:2a:b9: 1d:fb:28:47:cd:18:bf:d0:1f:42:a1:cc:68:50:46:20:0a:7e: c4:57:ff:cc:08:da:14:8f:45:47:51:87:ac:ca:ef:72:f8:58: 61:de:64:eb -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 NDMyNDExMC8GA1UEBRMoQTg1NjhGNTI3OTNDQzM0ODU3ODUwQzRGMkVEMzhBRTBC MTg5NzBGODAeFw0yNTAzMTMwNTEyMTFaFw0yNTAzMjAwNTEyMTFaMBgxFjAUBgNV BAMTDTY3ZDI2OTJiLWQxNTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDM3C8Pm6M8UW4fJAmhjn2p+N4Vzm61/qEmVbPkV23iYSEOlk2nwWuh9cxMkPQ2 kbZVTt4Xyjrhnp1DJQnv35zNGOZYWNEBgxNZKbm1saxyQVEvXuzXk6kMXH1fGq6k y6OVI8/NADl7gOJ+NnWQgPFKwsTh0tF4sIT/EKagVNCJ1d+rfD0rI4R32uFbmepH oSNnu7wNBGCRWKCcIKcSc+MgR9HNtyZeZj3+Q9OtSl1jep3cgalX0fXTzfbJn6v2 /HqbX4/+JRl8BFgFfXUi9vSe9r7LT2WsVCkFLN50MWwqIDxHof/3HsGy5oSpQaso VUG3HzeQlhnftPYkBa/YTvgtAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUgKEcJSO0 joUK420xgvnxtGiRqo0wHwYDVR0jBBgwFoAUqFaPUnk8w0hXhQxPLtOK4LGJcPgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg0MzI0L0VBQTlDQ0Q0N0Ix QzExRUZBQzEwOTQxNkM0RjlBRTAyL3FGYVBVbms4dzBoWGhReFBMdE9LNExHSmNQ Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvcUZhUFVuazh3MGhYaFF4UEx0T0s0TEdKY1BnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg0 MzI0L0VBQTlDQ0Q0N0IxQzExRUZBQzEwOTQxNkM0RjlBRTAyL3FGYVBVbms4dzBo WGhReFBMdE9LNExHSmNQZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALGyPpcEheHua0N5AYHkFHlMwXko/zoiFGcr5bE7J10vqifcxLm2EB9t aTmWXAamAgUlUCypU66tVnTBv2qG4EH6DHj3hIsluzCFV/ciMcUZxK4aH2lVN1vI bdEm5kyD/gZl6IVAY/qrMCvWdH3fbF92X9PHB50PM6yY1v2tvLdzYB6rWvODqWgq UwG3epmfKuWwL77e61Wfaw3ghoTQEY6emisS63I1ycSubYxDbfSijtCdq9b8zfUZ ODQ/ht0wvjp8Cze8F8Iykg5FUzPJQ5GRUcId8cgquR37KEfNGL/QH0KhzGhQRiAK fsRX/8wI2hSPRUdRh6zK73L4WGHeZOs= -----END CERTIFICATE-----Generated at Thu Mar 13 21:30:54 2025 by rpki-client