$ rpki-client -vvf rpki.apnic.net/member_repository/A9113B62/26619D44C6E811EFBB520B0DC4F9AE02/Qv7zMXQaVNWgrnVTEI1NLTKwV7A.mft File: Qv7zMXQaVNWgrnVTEI1NLTKwV7A.mft (raw, json) Hash identifier: 6BT2fu2nuImS5/jb+n44z3d7aW1ox9AAnjST7EYIEj8= Subject key identifier: FA:13:80:4C:CA:F8:57:97:73:96:5B:C3:DC:F7:A4:E3:B2:E5:58:8D Authority key identifier: 42:FE:F3:31:74:1A:54:D5:A0:AE:75:53:10:8D:4D:2D:32:B0:57:B0 Certificate issuer: /CN=A9113B62/serialNumber=42FEF331741A54D5A0AE7553108D4D2D32B057B0 Certificate serial: 3F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qv7zMXQaVNWgrnVTEI1NLTKwV7A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9113B62/26619D44C6E811EFBB520B0DC4F9AE02/Qv7zMXQaVNWgrnVTEI1NLTKwV7A.mft Manifest number: 3E Signing time: Fri 25 Apr 2025 06:28:15 +0000 Manifest this update: Fri 25 Apr 2025 06:28:15 +0000 Manifest next update: Fri 02 May 2025 06:28:15 +0000 Files and hashes: 1: Qv7zMXQaVNWgrnVTEI1NLTKwV7A.crl (hash: c7RdZCQCH5mtx/h2jfqbIKN8EeRuqlcZQ+VbaXZjgzY=) 2: 01238706C86211EFBDCCC22AC4F9AE02.roa (hash: sqsd36HvdOtJGpobxnch2UziqlMaZAChQP7HevqvsWs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9113B62/26619D44C6E811EFBB520B0DC4F9AE02/Qv7zMXQaVNWgrnVTEI1NLTKwV7A.crl rsync://rpki.apnic.net/member_repository/A9113B62/26619D44C6E811EFBB520B0DC4F9AE02/Qv7zMXQaVNWgrnVTEI1NLTKwV7A.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qv7zMXQaVNWgrnVTEI1NLTKwV7A.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:28:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63 (0x3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9113B62, serialNumber=42FEF331741A54D5A0AE7553108D4D2D32B057B0 Validity Not Before: Apr 25 06:28:15 2025 GMT Not After : May 2 06:28:15 2025 GMT Subject: CN=680b2b7f-df87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:fc:f6:1c:bb:60:ef:89:a5:9f:21:cd:5f:21: 90:17:61:bb:ac:eb:2d:7b:2f:7c:60:86:05:75:6e: 1d:eb:c1:96:52:e7:e0:c6:09:bc:14:17:7b:ea:c6: 87:15:88:30:c8:f4:8b:b9:7e:6f:7d:71:f4:2e:cc: f9:53:fd:88:35:94:d6:f3:a7:e3:a8:b4:9f:0f:ff: 2e:51:34:c8:84:49:e3:ce:bd:8f:a5:1d:80:7c:94: ff:1a:ca:bb:cd:14:6a:e6:4e:57:7c:7b:77:4e:21: 4e:c4:0b:d0:fa:8b:93:89:e4:38:ed:24:ec:ed:cc: 08:c2:26:0a:b7:88:6d:b3:9b:d7:7c:b6:ff:7a:1d: de:8d:3b:88:17:cc:15:6c:5c:36:00:5e:bf:7b:24: 60:29:ac:52:8c:73:63:97:81:79:9b:c0:36:61:6b: 0e:93:98:e0:a0:8a:74:e9:0e:b4:f3:86:53:0a:8d: 6d:e9:3a:58:3b:b8:17:19:cb:a8:be:fd:de:c9:2a: f9:42:dd:3e:53:cc:3e:d0:13:6b:74:b2:ef:aa:7b: 32:3d:15:5f:ea:f0:61:a9:71:97:b0:dc:cd:95:3b: 06:21:44:a4:10:90:7f:88:87:47:ff:02:6f:a2:e3: ed:39:ef:58:26:29:e7:1f:ac:3f:20:25:a1:35:fd: e6:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:13:80:4C:CA:F8:57:97:73:96:5B:C3:DC:F7:A4:E3:B2:E5:58:8D X509v3 Authority Key Identifier: keyid:42:FE:F3:31:74:1A:54:D5:A0:AE:75:53:10:8D:4D:2D:32:B0:57:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9113B62/26619D44C6E811EFBB520B0DC4F9AE02/Qv7zMXQaVNWgrnVTEI1NLTKwV7A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qv7zMXQaVNWgrnVTEI1NLTKwV7A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113B62/26619D44C6E811EFBB520B0DC4F9AE02/Qv7zMXQaVNWgrnVTEI1NLTKwV7A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:65:ea:ce:c5:65:d0:a7:e7:ee:dd:c0:85:1c:6c:74:d5:70: b9:2e:94:73:72:f2:0d:f2:4e:77:58:e0:3b:cb:8e:3a:89:42: e9:a4:48:07:3e:5d:d1:7b:54:67:9c:1c:24:5a:75:9b:f6:24: 7c:55:82:6c:f6:11:8b:59:c8:2d:b9:c5:b8:7d:84:dc:38:ec: 6e:a0:8f:42:79:23:16:61:3b:e5:10:f9:f2:ed:f3:72:ab:3c: 7b:bc:60:cd:b6:98:4c:f0:05:fd:04:56:3b:d3:98:eb:77:47: 18:91:1b:d3:bb:f9:b0:1b:82:aa:fb:a8:fa:d4:8b:23:64:88: 6b:df:b4:f6:f1:c6:ce:8e:24:3f:8a:10:72:8e:bd:80:15:c5: 00:fe:46:d8:d0:6a:e4:c7:e0:e2:61:cd:aa:56:a7:ef:c7:bc: 26:e8:f8:72:e4:d5:20:84:5e:8a:2b:09:fc:1f:d1:10:7b:13: 11:d8:fa:72:f5:cb:85:7e:69:5d:32:54:5a:06:c9:83:bb:7a: 12:44:9f:39:80:a5:bb:72:66:c8:93:8a:60:aa:54:a0:1b:af: d4:ca:28:fd:78:30:13:b7:87:bc:61:0d:18:38:55:fe:22:97: d9:ff:ed:1a:f5:ad:10:13:e1:bb:ce:48:97:31:56:2a:af:d4: 1a:ba:14:e8 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx M0I2MjExMC8GA1UEBRMoNDJGRUYzMzE3NDFBNTRENUEwQUU3NTUzMTA4RDREMkQz MkIwNTdCMDAeFw0yNTA0MjUwNjI4MTVaFw0yNTA1MDIwNjI4MTVaMBgxFjAUBgNV BAMTDTY4MGIyYjdmLWRmODcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC//PYcu2DviaWfIc1fIZAXYbus6y17L3xghgV1bh3rwZZS5+DGCbwUF3vqxocV iDDI9Iu5fm99cfQuzPlT/Yg1lNbzp+OotJ8P/y5RNMiESePOvY+lHYB8lP8ayrvN FGrmTld8e3dOIU7EC9D6i5OJ5DjtJOztzAjCJgq3iG2zm9d8tv96Hd6NO4gXzBVs XDYAXr97JGAprFKMc2OXgXmbwDZhaw6TmOCginTpDrTzhlMKjW3pOlg7uBcZy6i+ /d7JKvlC3T5TzD7QE2t0su+qezI9FV/q8GGpcZew3M2VOwYhRKQQkH+Ih0f/Am+i 4+0571gmKecfrD8gJaE1/eY1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU+hOATMr4 V5dzllvD3Pek47LlWI0wHwYDVR0jBBgwFoAUQv7zMXQaVNWgrnVTEI1NLTKwV7Aw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEzQjYyLzI2NjE5RDQ0QzZF ODExRUZCQjUyMEIwREM0RjlBRTAyL1F2N3pNWFFhVk5XZ3JuVlRFSTFOTFRLd1Y3 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvUXY3ek1YUWFWTldncm5WVEVJMU5MVEt3VjdBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEz QjYyLzI2NjE5RDQ0QzZFODExRUZCQjUyMEIwREM0RjlBRTAyL1F2N3pNWFFhVk5X Z3JuVlRFSTFOTFRLd1Y3QS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFxl6s7FZdCn5+7dwIUcbHTVcLkulHNy8g3yTndY4DvLjjqJQumkSAc+ XdF7VGecHCRadZv2JHxVgmz2EYtZyC25xbh9hNw47G6gj0J5IxZhO+UQ+fLt83Kr PHu8YM22mEzwBf0EVjvTmOt3RxiRG9O7+bAbgqr7qPrUiyNkiGvftPbxxs6OJD+K EHKOvYAVxQD+RtjQauTH4OJhzapWp+/HvCbo+HLk1SCEXoorCfwf0RB7ExHY+nL1 y4V+aV0yVFoGyYO7ehJEnzmApbtyZsiTimCqVKAbr9TKKP14MBO3h7xhDRg4Vf4i l9n/7Rr1rRAT4bvOSJcxViqv1Bq6FOg= -----END CERTIFICATE-----Generated at Sat Apr 26 17:16:23 2025 by rpki-client