$ rpki-client -vvf rpki.apnic.net/member_repository/A911C676/CD38AB16DDD911E8AF451F0AC4F9AE02/qelaQWvM7v2G6i-gGcJeTXa46dk.mft File: qelaQWvM7v2G6i-gGcJeTXa46dk.mft (raw, json) Hash identifier: 9ZnAiBVOVErfOsLW10GDk6p6JqLNAixm3Ibwof3gsRQ= Subject key identifier: 7A:62:CF:C3:A8:5F:83:38:D8:FD:9F:30:AE:14:41:26:23:C8:99:A2 Authority key identifier: A9:E9:5A:41:6B:CC:EE:FD:86:EA:2F:A0:19:C2:5E:4D:76:B8:E9:D9 Certificate issuer: /CN=A911C676/serialNumber=A9E95A416BCCEEFD86EA2FA019C25E4D76B8E9D9 Certificate serial: 1247 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qelaQWvM7v2G6i-gGcJeTXa46dk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C676/CD38AB16DDD911E8AF451F0AC4F9AE02/qelaQWvM7v2G6i-gGcJeTXa46dk.mft Manifest number: 122E Signing time: Thu 24 Apr 2025 17:09:45 +0000 Manifest this update: Thu 24 Apr 2025 17:09:44 +0000 Manifest next update: Thu 01 May 2025 17:09:44 +0000 Files and hashes: 1: qelaQWvM7v2G6i-gGcJeTXa46dk.crl (hash: uA9n6H1FgSxfe4r3dWAC32qRlb7FSOuYQbPvs0dgnPs=) 2: EFA0015E593911EFA8EAD43CC4F9AE02.roa (hash: U6ij5hk5FRfd6jZqWoSf+8Wvzol5Qvpq3+ctiHWpCug=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C676/CD38AB16DDD911E8AF451F0AC4F9AE02/qelaQWvM7v2G6i-gGcJeTXa46dk.crl rsync://rpki.apnic.net/member_repository/A911C676/CD38AB16DDD911E8AF451F0AC4F9AE02/qelaQWvM7v2G6i-gGcJeTXa46dk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qelaQWvM7v2G6i-gGcJeTXa46dk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:09:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4679 (0x1247) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C676, serialNumber=A9E95A416BCCEEFD86EA2FA019C25E4D76B8E9D9 Validity Not Before: Apr 24 17:09:44 2025 GMT Not After : May 1 17:09:44 2025 GMT Subject: CN=680a7058-2e3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f2:fd:0f:92:2c:92:f4:21:d8:b5:a5:8d:4b: b2:21:a8:bd:f0:c5:7a:9c:95:a9:37:6a:ee:17:47: 24:48:90:3c:28:ff:55:ce:e1:6f:63:44:45:84:b3: df:a5:a8:58:0f:ba:03:54:36:b4:d6:09:8b:65:5b: ac:ab:a2:a6:e1:58:f4:56:d7:ca:5f:9b:db:11:18: ef:29:60:da:b4:8b:df:13:20:e2:70:50:f7:6d:2a: 7f:85:d2:b9:59:28:72:54:66:6f:e2:a3:54:db:ea: e0:cf:62:84:da:7e:55:1d:cd:46:fb:2c:8b:46:19: e0:3f:03:5d:c1:c1:7d:b8:a6:6b:87:64:6c:07:a5: 26:54:d4:90:fe:00:56:4e:7c:78:23:ac:12:61:2c: 1d:e6:65:00:c5:7c:f3:f3:0d:b0:fc:08:23:d9:ad: 46:4d:4e:68:27:14:a1:d1:0e:26:50:0c:34:01:2c: 38:72:97:bd:e0:a8:36:ec:46:74:0b:b3:44:cd:39: d4:46:cd:82:4e:20:5c:1e:ce:40:76:ad:f6:5e:03: b0:da:f2:e1:5b:41:5f:6f:09:f1:19:74:0f:7e:67: 3a:ad:ce:f1:15:58:57:ee:65:70:6b:60:2a:0a:a4: 49:fd:b0:82:04:0b:22:c9:64:c4:ac:b2:84:2b:45: fd:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:62:CF:C3:A8:5F:83:38:D8:FD:9F:30:AE:14:41:26:23:C8:99:A2 X509v3 Authority Key Identifier: keyid:A9:E9:5A:41:6B:CC:EE:FD:86:EA:2F:A0:19:C2:5E:4D:76:B8:E9:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C676/CD38AB16DDD911E8AF451F0AC4F9AE02/qelaQWvM7v2G6i-gGcJeTXa46dk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qelaQWvM7v2G6i-gGcJeTXa46dk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C676/CD38AB16DDD911E8AF451F0AC4F9AE02/qelaQWvM7v2G6i-gGcJeTXa46dk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:c7:31:9d:b2:45:0e:db:1e:5a:3b:80:eb:54:8e:da:75:d2: 5f:2f:25:7d:fb:9b:ca:8f:b8:72:18:8f:30:18:21:2f:61:9a: 21:0e:12:13:32:56:08:32:49:7e:79:1b:b4:83:85:ab:c0:ec: fa:0c:1f:35:fb:a0:08:d1:bf:db:1c:49:f8:75:e0:56:3f:0c: 40:0b:93:a1:92:85:7c:ac:20:52:21:35:ae:04:7a:0e:f9:d6: 4f:49:06:fd:6f:2e:51:a1:f6:05:82:9b:07:cb:3a:4e:1f:b3: 6c:bf:1b:cf:4f:55:f3:33:a0:3b:f1:10:1e:2d:09:ed:63:f2: e1:9d:1f:b6:31:68:54:2c:36:90:26:0d:6e:bd:e9:eb:2f:ef: 4a:d7:2f:d1:d7:bd:97:6a:5e:56:cc:78:43:55:57:3f:ad:81: 98:d2:2c:52:f1:f0:6a:73:1a:27:e5:e1:4f:b1:67:9a:2d:a5: 6c:df:59:3b:a7:64:8e:b1:6f:5b:cc:dd:67:8c:49:12:da:45: a2:09:e8:ac:19:44:18:43:59:8b:28:67:7c:d2:42:b2:30:49: 20:ef:e7:54:3d:41:b3:87:a5:79:7c:03:86:3f:d4:28:1e:76: ae:26:b0:1b:e4:35:39:93:f4:d2:3a:bc:9b:a1:ee:fd:3e:45: de:29:c2:5f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEkcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUM2NzYxMTAvBgNVBAUTKEE5RTk1QTQxNkJDQ0VFRkQ4NkVBMkZBMDE5QzI1RTRE NzZCOEU5RDkwHhcNMjUwNDI0MTcwOTQ0WhcNMjUwNTAxMTcwOTQ0WjAYMRYwFAYD VQQDEw02ODBhNzA1OC0yZTNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvvL9D5IskvQh2LWljUuyIai98MV6nJWpN2ruF0ckSJA8KP9VzuFvY0RFhLPf pahYD7oDVDa01gmLZVusq6Km4Vj0VtfKX5vbERjvKWDatIvfEyDicFD3bSp/hdK5 WShyVGZv4qNU2+rgz2KE2n5VHc1G+yyLRhngPwNdwcF9uKZrh2RsB6UmVNSQ/gBW Tnx4I6wSYSwd5mUAxXzz8w2w/Agj2a1GTU5oJxSh0Q4mUAw0ASw4cpe94Kg27EZ0 C7NEzTnURs2CTiBcHs5Adq32XgOw2vLhW0FfbwnxGXQPfmc6rc7xFVhX7mVwa2Aq CqRJ/bCCBAsiyWTErLKEK0X94wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHpiz8Oo X4M42P2fMK4UQSYjyJmiMB8GA1UdIwQYMBaAFKnpWkFrzO79huovoBnCXk12uOnZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzY3Ni9DRDM4QUIxNkRE RDkxMUU4QUY0NTFGMEFDNEY5QUUwMi9xZWxhUVd2TTd2Mkc2aS1nR2NKZVRYYTQ2 ZGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FlbGFRV3ZNN3YyRzZpLWdHY0plVFhhNDZkay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzY3Ni9DRDM4QUIxNkRERDkxMUU4QUY0NTFGMEFDNEY5QUUwMi9xZWxhUVd2TTd2 Mkc2aS1nR2NKZVRYYTQ2ZGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAoxzGdskUO2x5aO4DrVI7addJfLyV9+5vKj7hyGI8wGCEvYZohDhIT MlYIMkl+eRu0g4WrwOz6DB81+6AI0b/bHEn4deBWPwxAC5OhkoV8rCBSITWuBHoO +dZPSQb9by5RofYFgpsHyzpOH7NsvxvPT1XzM6A78RAeLQntY/LhnR+2MWhULDaQ Jg1uvenrL+9K1y/R172Xal5WzHhDVVc/rYGY0ixS8fBqcxon5eFPsWeaLaVs31k7 p2SOsW9bzN1njEkS2kWiCeisGUQYQ1mLKGd80kKyMEkg7+dUPUGzh6V5fAOGP9Qo HnauJrAb5DU5k/TSOryboe79PkXeKcJf -----END CERTIFICATE-----Generated at Sat Apr 26 04:20:44 2025 by rpki-client