$ rpki-client -vvf rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/sQG1q1GcKuZKv61qVvhD3AmQqFM.mft File: sQG1q1GcKuZKv61qVvhD3AmQqFM.mft (raw, json) Hash identifier: 4xNV6I5mMkrcWh3I9qNxnXD3rFjqwGpIVI39hnnkjQA= Subject key identifier: 73:01:66:F1:E1:DD:22:B8:96:BE:1A:FF:64:81:3F:FF:40:EE:AD:1C Authority key identifier: B1:01:B5:AB:51:9C:2A:E6:4A:BF:AD:6A:56:F8:43:DC:09:90:A8:53 Certificate issuer: /CN=A919B06C/serialNumber=B101B5AB519C2AE64ABFAD6A56F843DC0990A853 Certificate serial: 117A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sQG1q1GcKuZKv61qVvhD3AmQqFM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/sQG1q1GcKuZKv61qVvhD3AmQqFM.mft Manifest number: 1F7D Signing time: Fri 30 May 2025 17:24:52 +0000 Manifest this update: Fri 30 May 2025 17:24:52 +0000 Manifest next update: Fri 06 Jun 2025 17:24:52 +0000 Files and hashes: 1: sQG1q1GcKuZKv61qVvhD3AmQqFM.crl (hash: 8lFzb4vZVm6G5NkRIqqZQx6oSEvjkB8tU6CWFc0P4Zw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/sQG1q1GcKuZKv61qVvhD3AmQqFM.crl rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/sQG1q1GcKuZKv61qVvhD3AmQqFM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sQG1q1GcKuZKv61qVvhD3AmQqFM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 17:24:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4474 (0x117a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919B06C, serialNumber=B101B5AB519C2AE64ABFAD6A56F843DC0990A853 Validity Not Before: May 30 17:24:52 2025 GMT Not After : Jun 6 17:24:52 2025 GMT Subject: CN=6839e9e4-49d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:f2:81:86:52:fc:11:99:73:5b:33:3d:f4:1b: 22:3d:fd:a0:80:b7:15:14:b5:29:49:a7:57:fe:e0: a3:87:4a:34:b7:a4:0b:e8:02:5b:4b:79:92:49:46: 13:6f:6a:5b:44:55:be:03:66:b3:93:02:d8:2e:e8: 87:1e:79:a4:c7:4e:8d:3c:19:3f:1c:56:ea:e8:e5: b5:38:fd:a6:80:70:9a:4b:9c:16:0b:a5:39:b6:bd: f5:6b:f9:26:4b:53:7b:18:e1:ed:3a:81:28:34:5f: 72:cf:c3:3a:c4:f1:8c:51:f4:af:c9:68:5b:4a:17: 50:f4:83:b0:6f:47:d3:07:95:d8:af:1b:6e:47:77: aa:bc:e5:08:fe:5f:a3:ee:90:fd:82:14:12:c5:eb: e2:5d:f1:8a:a9:c1:e6:4d:97:56:1d:ad:a1:44:49: de:0c:be:b6:4e:d8:41:6d:7d:b8:47:2e:29:b9:9b: d1:1a:39:8b:98:00:e3:14:ed:4d:33:b1:5f:36:f3: 3e:c8:2b:f7:cb:f3:c0:9c:fe:71:b6:a7:1f:54:d6: 43:41:94:0a:38:9d:5e:ea:b0:6d:cb:8d:32:4a:f3: 73:7f:2d:10:4c:3d:f2:4c:2c:5a:35:47:8c:e1:e1: 91:c3:1d:2e:e2:77:23:bc:ed:25:56:44:d0:de:12: 8d:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:01:66:F1:E1:DD:22:B8:96:BE:1A:FF:64:81:3F:FF:40:EE:AD:1C X509v3 Authority Key Identifier: keyid:B1:01:B5:AB:51:9C:2A:E6:4A:BF:AD:6A:56:F8:43:DC:09:90:A8:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/sQG1q1GcKuZKv61qVvhD3AmQqFM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sQG1q1GcKuZKv61qVvhD3AmQqFM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/sQG1q1GcKuZKv61qVvhD3AmQqFM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:37:c8:f1:ce:bf:ba:22:a8:4f:ed:db:79:19:9a:7b:6b:d9: fa:37:8a:d0:f1:ab:71:58:bc:58:53:e4:ea:16:44:59:a1:f3: 8b:b5:46:85:fe:f8:4a:8c:a5:10:15:66:84:89:65:f3:28:8f: d2:e5:31:50:06:7f:c4:21:7c:20:72:a9:79:0d:91:27:26:8f: 00:72:1e:e7:44:1e:d8:66:55:e1:e9:5a:d6:98:cd:1b:c5:66: 76:f0:ef:71:16:fc:7c:97:e5:91:39:1c:03:2b:a6:0c:f5:d9: 40:b4:c5:78:f4:5c:49:70:18:57:bd:36:29:37:e9:9a:a3:ad: ac:e7:f4:e8:b1:27:c7:49:45:2a:6d:29:76:c0:f4:aa:62:8f: 1b:be:4f:5d:ea:25:02:4c:0c:1d:96:a4:81:b8:10:11:2d:90: 8c:73:1f:5f:1d:aa:9a:b4:75:9f:5b:c7:78:66:3d:0a:f2:a5: 3b:df:fc:d1:96:d1:47:4c:a7:52:04:89:f8:d3:17:45:2e:aa: c2:11:62:50:53:db:7b:df:b6:32:50:92:05:83:b1:32:9e:09: 5e:a5:38:46:cd:ec:0b:f7:30:12:ac:ed:4a:0b:8c:f0:87:1f: 2b:b0:29:7e:4b:9a:a2:33:19:f3:58:94:44:da:64:92:bf:3f: ef:b4:ed:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEXowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUIwNkMxMTAvBgNVBAUTKEIxMDFCNUFCNTE5QzJBRTY0QUJGQUQ2QTU2Rjg0M0RD MDk5MEE4NTMwHhcNMjUwNTMwMTcyNDUyWhcNMjUwNjA2MTcyNDUyWjAYMRYwFAYD VQQDEw02ODM5ZTllNC00OWQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4/KBhlL8EZlzWzM99BsiPf2ggLcVFLUpSadX/uCjh0o0t6QL6AJbS3mSSUYT b2pbRFW+A2azkwLYLuiHHnmkx06NPBk/HFbq6OW1OP2mgHCaS5wWC6U5tr31a/km S1N7GOHtOoEoNF9yz8M6xPGMUfSvyWhbShdQ9IOwb0fTB5XYrxtuR3eqvOUI/l+j 7pD9ghQSxeviXfGKqcHmTZdWHa2hREneDL62TthBbX24Ry4puZvRGjmLmADjFO1N M7FfNvM+yCv3y/PAnP5xtqcfVNZDQZQKOJ1e6rBty40ySvNzfy0QTD3yTCxaNUeM 4eGRwx0u4ncjvO0lVkTQ3hKNCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHMBZvHh 3SK4lr4a/2SBP/9A7q0cMB8GA1UdIwQYMBaAFLEBtatRnCrmSr+talb4Q9wJkKhT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QjA2Qy9FOUQ2MkU3NEZF QUUxMUU4OTEwRDRENjZDNEY5QUUwMi9zUUcxcTFHY0t1Wkt2NjFxVnZoRDNBbVFx Rk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NRRzFxMUdjS3VaS3Y2MXFWdmhEM0FtUXFGTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QjA2Qy9FOUQ2MkU3NEZFQUUxMUU4OTEwRDRENjZDNEY5QUUwMi9zUUcxcTFHY0t1 Wkt2NjFxVnZoRDNBbVFxRk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMN8jxzr+6IqhP7dt5GZp7a9n6N4rQ8atxWLxYU+TqFkRZofOLtUaF /vhKjKUQFWaEiWXzKI/S5TFQBn/EIXwgcql5DZEnJo8Ach7nRB7YZlXh6VrWmM0b xWZ28O9xFvx8l+WRORwDK6YM9dlAtMV49FxJcBhXvTYpN+mao62s5/TosSfHSUUq bSl2wPSqYo8bvk9d6iUCTAwdlqSBuBARLZCMcx9fHaqatHWfW8d4Zj0K8qU73/zR ltFHTKdSBIn40xdFLqrCEWJQU9t737YyUJIFg7EynglepThGzewL9zASrO1KC4zw hx8rsCl+S5qiMxnzWJRE2mSSvz/vtO37 -----END CERTIFICATE-----Generated at Sat May 31 17:10:17 2025 by rpki-client