$ rpki-client -vvf rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/tqI-MrRTWVFhXOpKsbaBZQ1pTLc.mft File: tqI-MrRTWVFhXOpKsbaBZQ1pTLc.mft (raw, json) Hash identifier: tlvukewiASjkqy8HnzS1JEra7GsNR4YHykMwB/7NGrU= Subject key identifier: 2B:00:39:BA:E4:EB:B0:A1:DC:69:09:AD:74:7F:9F:3B:43:CA:06:03 Authority key identifier: B6:A2:3E:32:B4:53:59:51:61:5C:EA:4A:B1:B6:81:65:0D:69:4C:B7 Certificate issuer: /CN=A9185B41/serialNumber=B6A23E32B4535951615CEA4AB1B681650D694CB7 Certificate serial: 0A45 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tqI-MrRTWVFhXOpKsbaBZQ1pTLc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/tqI-MrRTWVFhXOpKsbaBZQ1pTLc.mft Manifest number: 1242 Signing time: Fri 30 May 2025 19:54:12 +0000 Manifest this update: Fri 30 May 2025 19:54:12 +0000 Manifest next update: Fri 06 Jun 2025 19:54:12 +0000 Files and hashes: 1: tqI-MrRTWVFhXOpKsbaBZQ1pTLc.crl (hash: 27mLCqMrouoA4vIlgMPR3itodl98eZzrGSiNkjSd4Es=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/tqI-MrRTWVFhXOpKsbaBZQ1pTLc.crl rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/tqI-MrRTWVFhXOpKsbaBZQ1pTLc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tqI-MrRTWVFhXOpKsbaBZQ1pTLc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 19:54:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2629 (0xa45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185B41, serialNumber=B6A23E32B4535951615CEA4AB1B681650D694CB7 Validity Not Before: May 30 19:54:12 2025 GMT Not After : Jun 6 19:54:12 2025 GMT Subject: CN=683a0ce4-b956 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:45:49:a7:15:03:62:92:97:b1:1e:fc:4f:ab: c7:1f:19:f8:67:a0:cd:9c:a6:7f:16:2a:fc:e4:c7: 91:89:6c:7f:ec:09:66:bf:89:28:8e:ae:b0:f4:45: 5b:93:9e:ad:33:c3:41:da:96:e6:88:0a:e6:a6:68: 58:74:c1:0d:ee:9c:dd:28:fb:6c:e4:e0:c2:2f:de: 60:79:5e:8a:2b:c4:9c:30:1d:13:be:9c:19:2c:e8: 7e:70:30:cc:fa:d1:73:b0:73:b7:a9:70:10:6f:ab: 80:60:70:dc:92:f8:b9:5d:c8:8b:c8:fd:8e:77:21: 73:11:b1:7a:ad:36:83:05:bc:61:0e:db:cf:a3:ae: c6:60:9c:44:ad:f8:17:05:b4:37:38:c9:95:af:62: ce:50:55:6b:88:b5:86:6c:51:21:96:c2:09:8a:ac: d1:23:dc:8a:9e:a0:6b:50:57:62:88:11:f9:ca:86: f4:07:75:93:d4:55:be:bb:a2:eb:37:8c:52:87:27: 8a:44:da:e6:84:e2:83:09:87:0b:70:f6:99:66:e0: 58:98:9d:85:69:7f:08:78:ea:e3:67:90:e1:17:ce: 89:a8:10:8b:40:cf:b2:2d:f8:b7:94:dd:ad:c6:6d: 42:b5:1d:51:4a:cc:22:64:11:6e:5c:19:fb:ba:72: 3e:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:00:39:BA:E4:EB:B0:A1:DC:69:09:AD:74:7F:9F:3B:43:CA:06:03 X509v3 Authority Key Identifier: keyid:B6:A2:3E:32:B4:53:59:51:61:5C:EA:4A:B1:B6:81:65:0D:69:4C:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/tqI-MrRTWVFhXOpKsbaBZQ1pTLc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tqI-MrRTWVFhXOpKsbaBZQ1pTLc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/tqI-MrRTWVFhXOpKsbaBZQ1pTLc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:f8:09:9d:8d:78:69:2c:e4:ca:89:0a:d5:93:36:bd:b1:93: bc:ab:9f:cd:73:71:85:6b:0c:27:96:d2:0e:84:57:40:bd:b6: a9:3b:d3:f6:d8:c2:70:45:7e:f3:63:ba:a9:a6:af:c7:09:a7: 7c:3a:cf:29:ce:78:5a:ef:ed:af:a8:25:44:12:89:f0:46:5b: 10:0c:e2:eb:d7:be:32:57:58:92:7a:66:de:61:d6:b5:b8:3d: 32:f5:0d:ee:55:74:8e:ac:d6:32:05:e1:f5:47:35:3f:cf:30: 3c:5a:dd:54:d4:90:61:27:24:c6:4c:2d:18:4b:90:ae:9f:de: 8e:97:6f:a6:89:7d:9f:d2:27:58:51:de:06:af:53:fd:4d:b1: ab:85:98:48:85:b8:f4:64:6a:5d:2f:46:cd:2b:a6:b2:14:ec: 2a:82:84:56:de:42:84:ab:15:56:03:bd:be:34:c1:4c:29:89: 23:13:f8:bf:4c:18:50:58:c4:4a:e4:4a:20:81:b9:00:ae:5a: 4a:45:ab:33:f7:a3:b8:f3:28:7a:ed:4a:89:42:03:e6:f9:36: 67:11:f4:0e:74:ad:85:93:4b:ef:b0:38:aa:52:4e:37:c6:8a: fc:18:7f:12:5a:d2:90:ea:6b:fc:a1:c2:1d:1c:ef:66:eb:7e: 43:93:39:2c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCkUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODVCNDExMTAvBgNVBAUTKEI2QTIzRTMyQjQ1MzU5NTE2MTVDRUE0QUIxQjY4MTY1 MEQ2OTRDQjcwHhcNMjUwNTMwMTk1NDEyWhcNMjUwNjA2MTk1NDEyWjAYMRYwFAYD VQQDEw02ODNhMGNlNC1iOTU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy0VJpxUDYpKXsR78T6vHHxn4Z6DNnKZ/Fir85MeRiWx/7Almv4kojq6w9EVb k56tM8NB2pbmiArmpmhYdMEN7pzdKPts5ODCL95geV6KK8ScMB0TvpwZLOh+cDDM +tFzsHO3qXAQb6uAYHDckvi5XciLyP2OdyFzEbF6rTaDBbxhDtvPo67GYJxErfgX BbQ3OMmVr2LOUFVriLWGbFEhlsIJiqzRI9yKnqBrUFdiiBH5yob0B3WT1FW+u6Lr N4xShyeKRNrmhOKDCYcLcPaZZuBYmJ2FaX8IeOrjZ5DhF86JqBCLQM+yLfi3lN2t xm1CtR1RSswiZBFuXBn7unI+TQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCsAObrk 67Ch3GkJrXR/nztDygYDMB8GA1UdIwQYMBaAFLaiPjK0U1lRYVzqSrG2gWUNaUy3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUI0MS9BMUVEQ0ZGRTY3 OTkxMUVBQjY3QjM0ODRDNEY5QUUwMi90cUktTXJSVFdWRmhYT3BLc2JhQlpRMXBU TGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RxSS1NclJUV1ZGaFhPcEtzYmFCWlExcFRMYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NUI0MS9BMUVEQ0ZGRTY3OTkxMUVBQjY3QjM0ODRDNEY5QUUwMi90cUktTXJSVFdW RmhYT3BLc2JhQlpRMXBUTGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAP+AmdjXhpLOTKiQrVkza9sZO8q5/Nc3GFawwnltIOhFdAvbapO9P2 2MJwRX7zY7qppq/HCad8Os8pznha7+2vqCVEEonwRlsQDOLr174yV1iSembeYda1 uD0y9Q3uVXSOrNYyBeH1RzU/zzA8Wt1U1JBhJyTGTC0YS5Cun96Ol2+miX2f0idY Ud4Gr1P9TbGrhZhIhbj0ZGpdL0bNK6ayFOwqgoRW3kKEqxVWA72+NMFMKYkjE/i/ TBhQWMRK5EoggbkArlpKRasz96O48yh67UqJQgPm+TZnEfQOdK2Fk0vvsDiqUk43 xor8GH8SWtKQ6mv8ocIdHO9m635Dkzks -----END CERTIFICATE-----Generated at Sat May 31 15:09:35 2025 by rpki-client