$ rpki-client -vvf rpki.apnic.net/member_repository/A9186D9F/A936E4402E0411EF86F29D79C4F9AE02/Q_dCP5PWuglpQFn7I974Uo0mSZ0.mft File: Q_dCP5PWuglpQFn7I974Uo0mSZ0.mft (raw, json) Hash identifier: 0vKxpTWAkQcmIunci37wjrcfBJqsvgfatn4DxPg7kko= Subject key identifier: 36:97:F1:8E:A6:C4:F5:9F:1D:77:DA:D6:B6:5B:29:C2:FF:0B:53:60 Authority key identifier: 43:F7:42:3F:93:D6:BA:09:69:40:59:FB:23:DE:F8:52:8D:26:49:9D Certificate issuer: /CN=A9186D9F/serialNumber=43F7423F93D6BA09694059FB23DEF8528D26499D Certificate serial: 8D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q_dCP5PWuglpQFn7I974Uo0mSZ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186D9F/A936E4402E0411EF86F29D79C4F9AE02/Q_dCP5PWuglpQFn7I974Uo0mSZ0.mft Manifest number: 8B Signing time: Thu 13 Mar 2025 04:33:32 +0000 Manifest this update: Thu 13 Mar 2025 04:33:31 +0000 Manifest next update: Thu 20 Mar 2025 04:33:31 +0000 Files and hashes: 1: Q_dCP5PWuglpQFn7I974Uo0mSZ0.crl (hash: 5oW4RpCDwwGfnzpHFu5FN/Qw2MUzbZucDTBePt7k7DM=) 2: 17EA0C7A38DF11EF8EEDB25EC4F9AE02.roa (hash: sflqoJJiQSUE3/D/FoYHXfA8MjGPanF4iuCvuWOV/9c=) 3: A63A2DFA2F5411EF9A12027FC4F9AE02.roa (hash: 3L8GR/TKBQutwByYr9Yt28Y5Yf6Lgn2PEAhMb4FmV9A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186D9F/A936E4402E0411EF86F29D79C4F9AE02/Q_dCP5PWuglpQFn7I974Uo0mSZ0.crl rsync://rpki.apnic.net/member_repository/A9186D9F/A936E4402E0411EF86F29D79C4F9AE02/Q_dCP5PWuglpQFn7I974Uo0mSZ0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q_dCP5PWuglpQFn7I974Uo0mSZ0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 20 Mar 2025 04:33:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 141 (0x8d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186D9F Validity Not Before: Mar 13 04:33:31 2025 GMT Not After : Mar 20 04:33:31 2025 GMT Subject: CN=67d2601b-e129 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f2:fc:f3:2d:2e:e5:11:8b:6c:5e:32:b3:3a: dc:4f:1e:1d:7d:a2:a9:0e:27:21:4a:b1:3d:3e:17: 34:4e:f2:96:29:aa:72:1c:5e:1f:ef:78:5b:da:42: 63:d8:cd:f1:48:5a:0b:45:ba:4f:b8:96:db:56:30: 45:9d:46:08:13:22:2c:b5:8d:42:49:bd:17:73:02: f6:64:25:cd:4d:20:9d:75:10:85:f5:58:dc:ac:21: cb:19:c0:f6:b6:07:2a:7c:ae:69:33:ef:3e:15:c9: ed:fe:91:29:a7:fe:5c:3e:97:e4:d2:44:aa:93:fc: d7:51:a9:a0:cc:65:65:3b:91:7a:79:be:cd:9b:7d: b6:a3:fd:85:9b:62:d9:54:6b:6e:58:7c:f1:f1:bb: 03:02:dc:54:f0:9e:24:f9:a5:26:15:68:d3:5a:56: ff:ba:27:8a:51:fc:c7:01:5f:43:38:2b:85:b3:91: 7b:45:1e:7d:f7:1e:9e:21:1b:94:8e:f7:b8:1f:41: 37:be:9d:2d:13:5d:dd:c2:fa:8e:ad:5d:da:26:9e: 57:02:bc:cc:83:79:27:81:86:3e:24:e9:03:37:dc: e5:27:cc:1f:54:67:47:ad:72:c9:7d:6a:c0:47:e4: 41:1a:c5:68:19:1a:e8:84:70:cf:59:75:3a:a8:77: 05:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:97:F1:8E:A6:C4:F5:9F:1D:77:DA:D6:B6:5B:29:C2:FF:0B:53:60 X509v3 Authority Key Identifier: keyid:43:F7:42:3F:93:D6:BA:09:69:40:59:FB:23:DE:F8:52:8D:26:49:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186D9F/A936E4402E0411EF86F29D79C4F9AE02/Q_dCP5PWuglpQFn7I974Uo0mSZ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q_dCP5PWuglpQFn7I974Uo0mSZ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186D9F/A936E4402E0411EF86F29D79C4F9AE02/Q_dCP5PWuglpQFn7I974Uo0mSZ0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:5d:de:a0:46:f1:f3:8d:ed:62:74:47:3e:e6:cf:de:2d:3a: 0e:09:b7:60:b9:38:51:5f:19:b8:b4:9e:a1:74:ef:f3:c7:78: b4:8e:36:ca:80:f4:4a:52:40:3b:31:e0:a0:c0:82:40:25:5d: e9:8f:3b:9e:8e:38:56:e6:5b:f0:c1:b0:85:28:d6:fb:15:2b: 96:bc:e6:37:4a:e4:92:2e:b2:44:fb:36:eb:88:ee:d9:eb:3f: 00:2d:04:1d:22:b7:a1:f2:24:38:d1:18:98:eb:22:2b:6a:62: 92:16:5f:cc:7a:75:94:0b:f4:4b:a7:13:85:a9:b6:49:5a:16: f3:95:24:81:15:59:6b:cc:dc:5a:89:fd:f6:bf:93:36:82:bf: e6:31:15:ae:a1:4b:ec:28:87:05:c6:17:53:0a:fd:65:23:03: 6b:c5:95:cd:63:6b:5c:da:93:f4:e1:e1:d4:bc:03:8d:8a:54: 61:41:c9:50:7c:4a:bd:d7:d8:bf:4a:2f:30:93:61:be:77:da: 99:ba:49:4a:3a:a1:f0:b8:90:a4:5c:a6:0f:48:1c:7f:09:38: 4b:42:c7:7d:b9:85:ef:34:a6:4c:25:b5:2a:71:11:6c:8a:f2: a6:34:e2:6d:78:e8:31:d8:ae:94:36:f1:9d:b0:b8:20:c6:77: 8a:4d:2a:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAI0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODZEOUYxMTAvBgNVBAUTKDQzRjc0MjNGOTNENkJBMDk2OTQwNTlGQjIzREVGODUy OEQyNjQ5OUQwHhcNMjUwMzEzMDQzMzMxWhcNMjUwMzIwMDQzMzMxWjAYMRYwFAYD VQQDEw02N2QyNjAxYi1lMTI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuPL88y0u5RGLbF4yszrcTx4dfaKpDichSrE9Phc0TvKWKapyHF4f73hb2kJj 2M3xSFoLRbpPuJbbVjBFnUYIEyIstY1CSb0XcwL2ZCXNTSCddRCF9VjcrCHLGcD2 tgcqfK5pM+8+Fcnt/pEpp/5cPpfk0kSqk/zXUamgzGVlO5F6eb7Nm322o/2Fm2LZ VGtuWHzx8bsDAtxU8J4k+aUmFWjTWlb/uieKUfzHAV9DOCuFs5F7RR599x6eIRuU jve4H0E3vp0tE13dwvqOrV3aJp5XArzMg3kngYY+JOkDN9zlJ8wfVGdHrXLJfWrA R+RBGsVoGRrohHDPWXU6qHcFqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDaX8Y6m xPWfHXfa1rZbKcL/C1NgMB8GA1UdIwQYMBaAFEP3Qj+T1roJaUBZ+yPe+FKNJkmd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkQ5Ri9BOTM2RTQ0MDJF MDQxMUVGODZGMjlENzlDNEY5QUUwMi9RX2RDUDVQV3VnbHBRRm43STk3NFVvMG1T WjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1FfZENQNVBXdWdscFFGbjdJOTc0VW8wbVNaMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NkQ5Ri9BOTM2RTQ0MDJFMDQxMUVGODZGMjlENzlDNEY5QUUwMi9RX2RDUDVQV3Vn bHBRRm43STk3NFVvMG1TWjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBcXd6gRvHzje1idEc+5s/eLToOCbdguThRXxm4tJ6hdO/zx3i0jjbK gPRKUkA7MeCgwIJAJV3pjzuejjhW5lvwwbCFKNb7FSuWvOY3SuSSLrJE+zbriO7Z 6z8ALQQdIreh8iQ40RiY6yIramKSFl/MenWUC/RLpxOFqbZJWhbzlSSBFVlrzNxa if32v5M2gr/mMRWuoUvsKIcFxhdTCv1lIwNrxZXNY2tc2pP04eHUvAONilRhQclQ fEq919i/Si8wk2G+d9qZuklKOqHwuJCkXKYPSBx/CThLQsd9uYXvNKZMJbUqcRFs ivKmNOJteOgx2K6UNvGdsLggxneKTSpg -----END CERTIFICATE-----Generated at Thu Mar 13 21:31:49 2025 by rpki-client