$ rpki-client -vvf rpki.apnic.net/member_repository/A9192A47/E5BFEA46B82011EFAAE6F567C4F9AE02/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.mft File: Q7Ii_jvkka1wWL7TgEIUQl1pQbc.mft (raw, json) Hash identifier: EZfJH5NCqR9h9lEhDJWsLworEkBO1Ml2iL5qya7YK0A= Subject key identifier: C2:94:C5:8E:DA:4C:F6:0C:60:13:2F:ED:58:A8:40:AA:63:1F:AF:EE Authority key identifier: 43:B2:22:FE:3B:E4:91:AD:70:58:BE:D3:80:42:14:42:5D:69:41:B7 Certificate issuer: /CN=A9192A47/serialNumber=43B222FE3BE491AD7058BED3804214425D6941B7 Certificate serial: 59 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192A47/E5BFEA46B82011EFAAE6F567C4F9AE02/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.mft Manifest number: 59 Signing time: Sun 01 Jun 2025 06:55:16 +0000 Manifest this update: Sun 01 Jun 2025 06:55:15 +0000 Manifest next update: Sun 08 Jun 2025 06:55:15 +0000 Files and hashes: 1: Q7Ii_jvkka1wWL7TgEIUQl1pQbc.crl (hash: SI/TEAOotXrPLmN0H07u7454vNG7G5/LFrMRHUA24jo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192A47/E5BFEA46B82011EFAAE6F567C4F9AE02/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.crl rsync://rpki.apnic.net/member_repository/A9192A47/E5BFEA46B82011EFAAE6F567C4F9AE02/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 06:55:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 89 (0x59) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192A47, serialNumber=43B222FE3BE491AD7058BED3804214425D6941B7 Validity Not Before: Jun 1 06:55:15 2025 GMT Not After : Jun 8 06:55:15 2025 GMT Subject: CN=683bf954-d013 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:20:57:6f:69:98:cc:ac:d5:28:3c:ed:06:ee: fc:22:38:d0:bf:0e:24:08:b8:20:cb:47:1d:30:a4: b9:48:3b:c1:7d:a1:24:5b:e9:89:62:9b:b4:67:c0: c2:d8:7c:2f:b3:ec:66:45:45:7b:5b:0a:2b:4a:50: 0e:45:66:ef:b9:ef:5a:d9:ec:d5:66:14:ab:0f:41: 66:81:38:1b:80:76:35:47:18:d6:5c:92:ba:02:f0: 90:12:63:a9:b7:49:b9:7c:91:5f:5b:b2:25:5f:dc: 8c:c9:cd:8c:58:b6:36:a0:8e:20:09:e6:47:0a:b8: 95:3b:ad:e9:ba:44:e4:6d:25:5c:f1:1b:d2:38:01: 5d:58:21:6a:45:b7:ee:61:39:eb:45:ab:3c:c5:4d: e1:05:7e:92:d6:37:85:54:6b:f2:c8:0c:c0:7e:c8: a9:72:fd:06:65:4e:d9:79:3f:3f:aa:ed:df:5f:75: 41:cc:af:50:34:81:08:61:3e:34:b1:63:70:23:b5: 7d:d2:6f:5d:4d:50:11:c3:c3:38:86:32:f6:72:57: 80:b5:d6:83:07:a6:60:56:1c:20:c1:30:89:f1:d9: 66:d4:33:f9:85:82:a4:8a:01:89:41:ea:f6:12:22: f3:77:f2:66:e8:ab:0c:27:a0:20:6c:37:ca:21:eb: fe:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:94:C5:8E:DA:4C:F6:0C:60:13:2F:ED:58:A8:40:AA:63:1F:AF:EE X509v3 Authority Key Identifier: keyid:43:B2:22:FE:3B:E4:91:AD:70:58:BE:D3:80:42:14:42:5D:69:41:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192A47/E5BFEA46B82011EFAAE6F567C4F9AE02/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192A47/E5BFEA46B82011EFAAE6F567C4F9AE02/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:94:a6:ce:af:e4:a6:b6:5f:3e:d9:fd:a1:ca:6b:93:33:18: a6:8a:ac:15:06:c2:8e:8e:4c:7e:93:d5:8c:f0:b5:a0:51:39: 27:7e:ab:c1:5c:bf:46:58:01:81:82:73:87:51:50:dc:fd:66: 6d:84:52:3b:da:82:63:be:6a:14:0b:3d:27:04:3b:40:02:6c: f7:3c:62:e5:16:fe:7d:8f:de:d9:f0:2f:72:df:3a:05:06:c3: 30:b6:42:1c:ac:f0:4c:17:9e:4f:a1:38:99:ed:4b:f0:26:bc: 31:15:3c:8f:d3:d4:09:4d:d3:79:81:50:ad:b1:3a:fd:f0:69: cf:b7:a7:4e:1a:44:1b:69:1a:b3:2a:a2:0d:9b:52:96:37:52: f8:75:c6:5c:6e:12:5e:f9:d5:07:94:6d:c3:85:81:75:1f:e1: 7d:4f:62:c4:00:2d:07:0e:9d:64:ef:d0:02:ea:c2:90:0d:6c: 48:8d:59:21:dd:74:a9:5d:20:fb:c2:71:d2:4d:39:08:17:cf: d7:87:18:71:08:fd:f0:71:1e:cf:dd:22:6c:fa:aa:9e:fe:a0: f4:4d:62:8e:d9:18:25:28:84:72:4b:6a:1e:32:4a:1b:d7:ef: a6:1e:11:a6:cc:a6:d3:75:b9:cf:c1:71:36:63:82:35:3d:f8: 1a:a3:37:84 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 MkE0NzExMC8GA1UEBRMoNDNCMjIyRkUzQkU0OTFBRDcwNThCRUQzODA0MjE0NDI1 RDY5NDFCNzAeFw0yNTA2MDEwNjU1MTVaFw0yNTA2MDgwNjU1MTVaMBgxFjAUBgNV BAMTDTY4M2JmOTU0LWQwMTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+IFdvaZjMrNUoPO0G7vwiONC/DiQIuCDLRx0wpLlIO8F9oSRb6Ylim7RnwMLY fC+z7GZFRXtbCitKUA5FZu+571rZ7NVmFKsPQWaBOBuAdjVHGNZckroC8JASY6m3 Sbl8kV9bsiVf3IzJzYxYtjagjiAJ5kcKuJU7rem6RORtJVzxG9I4AV1YIWpFt+5h OetFqzzFTeEFfpLWN4VUa/LIDMB+yKly/QZlTtl5Pz+q7d9fdUHMr1A0gQhhPjSx Y3AjtX3Sb11NUBHDwziGMvZyV4C11oMHpmBWHCDBMInx2WbUM/mFgqSKAYlB6vYS IvN38mboqwwnoCBsN8oh6/7JAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUwpTFjtpM 9gxgEy/tWKhAqmMfr+4wHwYDVR0jBBgwFoAUQ7Ii/jvkka1wWL7TgEIUQl1pQbcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkyQTQ3L0U1QkZFQTQ2Qjgy MDExRUZBQUU2RjU2N0M0RjlBRTAyL1E3SWlfanZra2Exd1dMN1RnRUlVUWwxcFFi Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvUTdJaV9qdmtrYTF3V0w3VGdFSVVRbDFwUWJjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTky QTQ3L0U1QkZFQTQ2QjgyMDExRUZBQUU2RjU2N0M0RjlBRTAyL1E3SWlfanZra2Ex d1dMN1RnRUlVUWwxcFFiYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAD+Ups6v5Ka2Xz7Z/aHKa5MzGKaKrBUGwo6OTH6T1YzwtaBROSd+q8Fc v0ZYAYGCc4dRUNz9Zm2EUjvagmO+ahQLPScEO0ACbPc8YuUW/n2P3tnwL3LfOgUG wzC2Qhys8EwXnk+hOJntS/AmvDEVPI/T1AlN03mBUK2xOv3wac+3p04aRBtpGrMq og2bUpY3Uvh1xlxuEl751QeUbcOFgXUf4X1PYsQALQcOnWTv0ALqwpANbEiNWSHd dKldIPvCcdJNOQgXz9eHGHEI/fBxHs/dImz6qp7+oPRNYo7ZGCUohHJLah4yShvX 76YeEabMptN1uc/BcTZjgjU9+BqjN4Q= -----END CERTIFICATE-----Generated at Mon Jun 2 20:59:53 2025 by rpki-client