$ rpki-client -vvf rpki.apnic.net/member_repository/A911B5D7/25872BBE03B411E7B811AA14C4F9AE02/Qf4dQTWrLWdiPnYIM5hGitT6odw.mft File: Qf4dQTWrLWdiPnYIM5hGitT6odw.mft (raw, json) Hash identifier: z+OfC0qiO2Kb5eTYJnPdvb21MHKst2+AIHWV0P/NiDw= Subject key identifier: 09:09:89:AB:FE:C4:67:CE:95:00:1A:FB:EC:80:FE:3D:86:61:73:58 Authority key identifier: 41:FE:1D:41:35:AB:2D:67:62:3E:76:08:33:98:46:8A:D4:FA:A1:DC Certificate issuer: /CN=A911B5D7/serialNumber=41FE1D4135AB2D67623E76083398468AD4FAA1DC Certificate serial: 1BE4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qf4dQTWrLWdiPnYIM5hGitT6odw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B5D7/25872BBE03B411E7B811AA14C4F9AE02/Qf4dQTWrLWdiPnYIM5hGitT6odw.mft Manifest number: 1BB3 Signing time: Mon 28 Apr 2025 16:22:01 +0000 Manifest this update: Mon 28 Apr 2025 16:22:00 +0000 Manifest next update: Mon 05 May 2025 16:22:00 +0000 Files and hashes: 1: Qf4dQTWrLWdiPnYIM5hGitT6odw.crl (hash: fpd/FUOgzvXjzi31K09WCFAkFArq7vfmJTMRqj7xTMI=) 2: C177A6728D2011EF97C11D3CC4F9AE02.roa (hash: qqv99MidNMOt4MehbGZ8pvkQ6h/BMUNOb2r+cG35R9s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B5D7/25872BBE03B411E7B811AA14C4F9AE02/Qf4dQTWrLWdiPnYIM5hGitT6odw.crl rsync://rpki.apnic.net/member_repository/A911B5D7/25872BBE03B411E7B811AA14C4F9AE02/Qf4dQTWrLWdiPnYIM5hGitT6odw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qf4dQTWrLWdiPnYIM5hGitT6odw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 16:22:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7140 (0x1be4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B5D7, serialNumber=41FE1D4135AB2D67623E76083398468AD4FAA1DC Validity Not Before: Apr 28 16:22:00 2025 GMT Not After : May 5 16:22:00 2025 GMT Subject: CN=680fab29-c30a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:56:44:bb:be:b8:5e:0f:f0:b8:b6:bf:a9:f4: 76:ec:83:9a:cb:01:b8:c7:21:b9:c5:63:c7:2d:29: bc:9c:41:7a:68:bc:d1:ca:e5:b7:40:17:db:3c:1a: 25:3d:ad:9e:bf:1d:04:e0:74:30:75:f4:bc:79:73: 3d:31:71:c8:ec:de:f9:d5:83:f7:a5:ba:50:76:bc: 34:a4:fa:c8:39:7a:fe:7a:a1:a2:80:ce:35:c8:5d: 7e:3c:c8:62:fb:0e:c0:eb:3c:d6:6c:27:2d:1b:3d: 74:92:b0:a0:09:80:67:17:03:79:c8:53:04:2b:b4: f6:01:3c:eb:3d:c7:c8:89:db:1c:95:51:fd:0a:a8: 45:a3:29:b5:e7:b2:8e:9d:20:1b:90:f6:79:41:c7: 69:a7:3a:f3:8f:51:b5:48:c5:15:c2:54:64:8f:e2: 05:15:da:95:14:4e:1b:4a:ca:97:40:48:fa:51:b1: 0c:73:af:12:7d:ef:ca:d4:05:dc:a0:f7:6c:3a:a2: c1:c1:53:ba:90:34:9b:72:8b:b3:13:d1:9f:57:7c: 68:03:cb:34:1a:75:6c:06:eb:c9:e8:d8:14:c0:50: ef:08:ae:fc:82:18:9a:21:25:1f:37:8c:94:6b:89: b2:a5:bf:b2:86:1c:fe:81:c1:51:bf:c4:21:82:3c: b1:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:09:89:AB:FE:C4:67:CE:95:00:1A:FB:EC:80:FE:3D:86:61:73:58 X509v3 Authority Key Identifier: keyid:41:FE:1D:41:35:AB:2D:67:62:3E:76:08:33:98:46:8A:D4:FA:A1:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B5D7/25872BBE03B411E7B811AA14C4F9AE02/Qf4dQTWrLWdiPnYIM5hGitT6odw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qf4dQTWrLWdiPnYIM5hGitT6odw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B5D7/25872BBE03B411E7B811AA14C4F9AE02/Qf4dQTWrLWdiPnYIM5hGitT6odw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:96:7d:ab:cf:26:67:dc:89:4b:3d:9b:71:ff:1e:0b:b1:d7: 7e:37:ad:f5:7d:fd:fa:77:8e:76:60:5f:86:6b:94:61:15:2a: 69:a0:3d:22:d3:27:c0:b2:2f:bc:fb:76:06:30:3a:64:99:40: 39:b5:1a:da:ea:9c:8d:90:b3:7c:f9:0d:42:4a:41:35:1e:9b: e5:fb:3f:a7:f2:ba:76:1a:44:60:cc:9a:12:d9:8a:57:34:09: 33:11:79:ef:35:21:f3:39:80:92:f9:60:6c:f7:e9:49:5b:0f: 5c:22:ee:a0:a8:c8:7b:55:0a:29:70:95:c3:e8:57:30:cd:21: 0a:dc:bb:a2:87:7e:d9:56:73:ac:c2:59:f3:d5:de:58:ba:76: fa:2d:90:ad:b8:28:59:5a:ee:e9:30:44:2d:77:e7:04:10:32: 40:bf:ec:45:e0:70:69:6e:90:32:d6:cf:e9:19:2c:b7:90:41: 36:1b:e5:cc:7e:f9:85:b9:5a:20:72:e3:cd:6f:a0:e7:07:84: 38:05:1f:fd:39:0a:0d:21:d6:e3:09:1a:f3:fd:3d:86:7b:3a: 0f:f8:2e:62:bb:d6:44:0d:46:a4:eb:64:86:46:59:9d:9c:7b: cb:2a:81:dc:89:6b:d6:3f:ed:32:93:fb:7b:e1:a7:62:f0:fa: 54:82:a9:0d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICG+QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUI1RDcxMTAvBgNVBAUTKDQxRkUxRDQxMzVBQjJENjc2MjNFNzYwODMzOTg0NjhB RDRGQUExREMwHhcNMjUwNDI4MTYyMjAwWhcNMjUwNTA1MTYyMjAwWjAYMRYwFAYD VQQDEw02ODBmYWIyOS1jMzBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAslZEu764Xg/wuLa/qfR27IOaywG4xyG5xWPHLSm8nEF6aLzRyuW3QBfbPBol Pa2evx0E4HQwdfS8eXM9MXHI7N751YP3pbpQdrw0pPrIOXr+eqGigM41yF1+PMhi +w7A6zzWbCctGz10krCgCYBnFwN5yFMEK7T2ATzrPcfIidsclVH9CqhFoym157KO nSAbkPZ5Qcdppzrzj1G1SMUVwlRkj+IFFdqVFE4bSsqXQEj6UbEMc68Sfe/K1AXc oPdsOqLBwVO6kDSbcouzE9GfV3xoA8s0GnVsBuvJ6NgUwFDvCK78ghiaISUfN4yU a4mypb+yhhz+gcFRv8QhgjyxzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAkJiav+ xGfOlQAa++yA/j2GYXNYMB8GA1UdIwQYMBaAFEH+HUE1qy1nYj52CDOYRorU+qHc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjVENy8yNTg3MkJCRTAz QjQxMUU3QjgxMUFBMTRDNEY5QUUwMi9RZjRkUVRXckxXZGlQbllJTTVoR2l0VDZv ZHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FmNGRRVFdyTFdkaVBuWUlNNWhHaXRUNm9kdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QjVENy8yNTg3MkJCRTAzQjQxMUU3QjgxMUFBMTRDNEY5QUUwMi9RZjRkUVRXckxX ZGlQbllJTTVoR2l0VDZvZHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQln2rzyZn3IlLPZtx/x4Lsdd+N631ff36d452YF+Ga5RhFSppoD0i 0yfAsi+8+3YGMDpkmUA5tRra6pyNkLN8+Q1CSkE1Hpvl+z+n8rp2GkRgzJoS2YpX NAkzEXnvNSHzOYCS+WBs9+lJWw9cIu6gqMh7VQopcJXD6FcwzSEK3Luih37ZVnOs wlnz1d5Yunb6LZCtuChZWu7pMEQtd+cEEDJAv+xF4HBpbpAy1s/pGSy3kEE2G+XM fvmFuVogcuPNb6DnB4Q4BR/9OQoNIdbjCRrz/T2GezoP+C5iu9ZEDUak62SGRlmd nHvLKoHciWvWP+0yk/t74adi8PpUgqkN -----END CERTIFICATE-----Generated at Wed Apr 30 13:01:15 2025 by rpki-client