$ rpki-client -vvf rpki.apnic.net/member_repository/A9118D0F/7D2273B4A64611EAAF9E9162C4F9AE02/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.mft File: Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.mft (raw, json) Hash identifier: bYE3tfn0F1v2wiB/wlOdlWPhNvckaesrpTc1nv6r2jg= Subject key identifier: 91:71:71:EA:84:A2:66:9C:3A:26:40:3C:C1:1D:36:EF:EC:7F:F3:33 Authority key identifier: 43:E1:E8:C4:26:1C:E0:7D:4F:8E:4C:FB:7A:3F:83:3F:BB:46:B8:8C Certificate issuer: /CN=A9118D0F/serialNumber=43E1E8C4261CE07D4F8E4CFB7A3F833FBB46B88C Certificate serial: 092D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118D0F/7D2273B4A64611EAAF9E9162C4F9AE02/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.mft Manifest number: 090F Signing time: Thu 24 Apr 2025 20:14:21 +0000 Manifest this update: Thu 24 Apr 2025 20:14:21 +0000 Manifest next update: Thu 01 May 2025 20:14:21 +0000 Files and hashes: 1: Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.crl (hash: tRNTph+4oUlIOl84ucnAbqPKb708dWKt33zpO6G2d+0=) 2: 0D491000A64811EA939A7F67C4F9AE02.roa (hash: OA6Ay1bXyUAJq+KfCYl3CuSq1KvT2rPbVpCqhvkc99A=) 3: 75D91256B2F311EBB8A53526C4F9AE02.roa (hash: Cf3w2+/kQFFdBNp0nOAXgGT+JLVmdNCHNGijos8QA7A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118D0F/7D2273B4A64611EAAF9E9162C4F9AE02/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.crl rsync://rpki.apnic.net/member_repository/A9118D0F/7D2273B4A64611EAAF9E9162C4F9AE02/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:14:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2349 (0x92d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118D0F, serialNumber=43E1E8C4261CE07D4F8E4CFB7A3F833FBB46B88C Validity Not Before: Apr 24 20:14:21 2025 GMT Not After : May 1 20:14:21 2025 GMT Subject: CN=680a9b9d-9dd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:22:96:a6:9f:1a:9d:1e:de:76:de:bf:c1:77: b0:eb:6a:67:18:d9:24:fb:09:ca:a7:55:a9:8b:fe: 87:7d:2f:33:9b:ef:44:36:ca:0d:fa:bb:8f:94:25: 29:d5:e5:05:d7:c1:78:be:ba:48:50:9d:d4:60:8b: c5:55:a5:38:6f:23:32:71:42:d6:4b:4f:81:26:c6: bc:01:68:d4:90:08:08:1d:4d:9e:ea:65:fe:c1:47: 40:b7:00:af:49:d9:e0:ec:17:bf:50:71:bb:e2:f7: 7b:f7:30:c0:46:85:0f:4b:3c:4c:14:10:61:08:b8: e8:4c:a8:01:28:d4:84:00:cb:4c:b0:9d:67:30:54: 01:1e:66:81:9c:6d:a9:72:12:32:9e:2f:88:0f:2e: 3f:23:a5:a7:8b:6d:19:29:23:9e:89:aa:f9:32:ed: a4:43:73:1e:6b:4f:0d:0a:b2:6e:80:e8:bc:f7:1c: 57:25:fc:a3:f5:8f:e2:f4:bc:96:52:94:29:14:86: 8c:e2:99:25:3a:d5:4d:4e:57:dd:87:07:fc:86:38: 54:be:4a:2d:c3:dd:dc:62:00:62:5b:52:33:49:c7: 30:2d:bc:cd:dc:cc:03:a0:08:10:9b:b1:88:50:2c: 7c:d9:31:6a:79:58:fb:8e:63:e7:be:47:d1:a2:94: 59:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:71:71:EA:84:A2:66:9C:3A:26:40:3C:C1:1D:36:EF:EC:7F:F3:33 X509v3 Authority Key Identifier: keyid:43:E1:E8:C4:26:1C:E0:7D:4F:8E:4C:FB:7A:3F:83:3F:BB:46:B8:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118D0F/7D2273B4A64611EAAF9E9162C4F9AE02/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118D0F/7D2273B4A64611EAAF9E9162C4F9AE02/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:72:50:e1:d1:6b:2d:a1:07:d1:00:1d:3f:fd:cb:fb:70:aa: 97:32:44:03:6b:6e:8c:27:10:fc:de:12:5e:cb:ff:83:ed:98: 38:c9:a6:1c:df:3e:d3:32:b4:b0:ab:e7:a1:04:78:1b:ff:10: d2:74:be:af:ee:8a:6c:f1:39:c4:b2:34:08:b6:19:96:bd:9f: b7:fd:72:38:f0:c4:33:bb:58:3d:68:58:56:5c:7a:35:bb:09: ee:18:e5:64:b4:1a:c5:ea:5a:61:d6:ba:2a:c6:c5:f7:bd:bb: a8:66:ff:ad:88:72:33:e6:7f:20:e0:b2:dd:fb:a2:ae:4a:19: 1e:14:6b:98:97:29:fa:c6:4d:82:ea:51:69:3b:30:83:c9:46: 89:65:1b:83:20:54:24:ae:6f:1b:50:20:ef:67:92:6f:f3:5c: 17:d2:ca:7d:10:cd:16:46:9f:da:8e:84:de:dd:98:9c:0f:14: f2:96:7a:11:54:6a:4c:c8:ee:53:08:f2:37:7c:ad:43:72:0d: af:3c:0d:1d:21:29:e3:db:14:93:b7:f0:73:c1:83:1a:52:33: ef:32:5f:64:d7:6e:c7:87:82:d6:ef:53:46:1a:03:c3:fe:36: 08:db:8d:b6:f6:65:e4:8f:1b:d0:d9:91:7b:af:f9:c6:26:33: e3:ee:0e:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCS0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MThEMEYxMTAvBgNVBAUTKDQzRTFFOEM0MjYxQ0UwN0Q0RjhFNENGQjdBM0Y4MzNG QkI0NkI4OEMwHhcNMjUwNDI0MjAxNDIxWhcNMjUwNTAxMjAxNDIxWjAYMRYwFAYD VQQDEw02ODBhOWI5ZC05ZGQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2iKWpp8anR7edt6/wXew62pnGNkk+wnKp1Wpi/6HfS8zm+9ENsoN+ruPlCUp 1eUF18F4vrpIUJ3UYIvFVaU4byMycULWS0+BJsa8AWjUkAgIHU2e6mX+wUdAtwCv Sdng7Be/UHG74vd79zDARoUPSzxMFBBhCLjoTKgBKNSEAMtMsJ1nMFQBHmaBnG2p chIyni+IDy4/I6Wni20ZKSOeiar5Mu2kQ3Mea08NCrJugOi89xxXJfyj9Y/i9LyW UpQpFIaM4pklOtVNTlfdhwf8hjhUvkotw93cYgBiW1IzSccwLbzN3MwDoAgQm7GI UCx82TFqeVj7jmPnvkfRopRZ4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJFxceqE omacOiZAPMEdNu/sf/MzMB8GA1UdIwQYMBaAFEPh6MQmHOB9T45M+3o/gz+7RriM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOEQwRi83RDIyNzNCNEE2 NDYxMUVBQUY5RTkxNjJDNEY5QUUwMi9RLUhveENZYzRIMVBqa3o3ZWotRFA3dEd1 SXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1EtSG94Q1ljNEgxUGprejdlai1EUDd0R3VJdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OEQwRi83RDIyNzNCNEE2NDYxMUVBQUY5RTkxNjJDNEY5QUUwMi9RLUhveENZYzRI MVBqa3o3ZWotRFA3dEd1SXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBIclDh0WstoQfRAB0//cv7cKqXMkQDa26MJxD83hJey/+D7Zg4yaYc 3z7TMrSwq+ehBHgb/xDSdL6v7ops8TnEsjQIthmWvZ+3/XI48MQzu1g9aFhWXHo1 uwnuGOVktBrF6lph1roqxsX3vbuoZv+tiHIz5n8g4LLd+6KuShkeFGuYlyn6xk2C 6lFpOzCDyUaJZRuDIFQkrm8bUCDvZ5Jv81wX0sp9EM0WRp/ajoTe3ZicDxTylnoR VGpMyO5TCPI3fK1Dcg2vPA0dISnj2xSTt/BzwYMaUjPvMl9k127Hh4LW71NGGgPD /jYI24229mXkjxvQ2ZF7r/nGJjPj7g7V -----END CERTIFICATE-----Generated at Sat Apr 26 15:25:19 2025 by rpki-client