$ rpki-client -vvf rpki.apnic.net/member_repository/A911E509/79EA591EA7BD11EAAAA62948C4F9AE02/qo4b42JCQNwzAgR_tBp9TkeAjvg.mft File: qo4b42JCQNwzAgR_tBp9TkeAjvg.mft (raw, json) Hash identifier: iVUS0i6MGSkOqXKShBajxcBTh0Gx8HWhgAqUmyddrTk= Subject key identifier: 97:8C:68:02:E2:D4:CC:7A:EC:B6:4B:C5:BE:83:8E:08:A3:FE:BA:6F Authority key identifier: AA:8E:1B:E3:62:42:40:DC:33:02:04:7F:B4:1A:7D:4E:47:80:8E:F8 Certificate issuer: /CN=A911E509/serialNumber=AA8E1BE3624240DC3302047FB41A7D4E47808EF8 Certificate serial: 0933 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qo4b42JCQNwzAgR_tBp9TkeAjvg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E509/79EA591EA7BD11EAAAA62948C4F9AE02/qo4b42JCQNwzAgR_tBp9TkeAjvg.mft Manifest number: 0916 Signing time: Thu 24 Apr 2025 20:14:56 +0000 Manifest this update: Thu 24 Apr 2025 20:14:56 +0000 Manifest next update: Thu 01 May 2025 20:14:56 +0000 Files and hashes: 1: qo4b42JCQNwzAgR_tBp9TkeAjvg.crl (hash: F8TDEBPor2j5hP0aaRsqfLVzjHLlsnXxv36EWfX6yEY=) 2: A670A5280E1B11F0ACE35C1EC4F9AE02.roa (hash: ZhJ+bXVaor7/tIqf32e0N1k+mjIJIO6xBDZ+aHdSac4=) 3: 2E18EB105D0C11EE873B1C2AC4F9AE02.roa (hash: 32vqSpioV/ocfZ8lNVlLrP1HBCXvPW2r4a1wVHXWwtw=) 4: A3205A2C087A11F0B3E16071C4F9AE02.roa (hash: BEIVPWqxpMMSqh3PVFhct25NDkvQJDR6AlvWx/meI0s=) 5: 12E98624087811F0BCB34A4AC4F9AE02.roa (hash: iH8YMRAJUm283xvA/+AQkWhtL1+Lbn7estZkwtyfyJs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E509/79EA591EA7BD11EAAAA62948C4F9AE02/qo4b42JCQNwzAgR_tBp9TkeAjvg.crl rsync://rpki.apnic.net/member_repository/A911E509/79EA591EA7BD11EAAAA62948C4F9AE02/qo4b42JCQNwzAgR_tBp9TkeAjvg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qo4b42JCQNwzAgR_tBp9TkeAjvg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:14:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2355 (0x933) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E509, serialNumber=AA8E1BE3624240DC3302047FB41A7D4E47808EF8 Validity Not Before: Apr 24 20:14:56 2025 GMT Not After : May 1 20:14:56 2025 GMT Subject: CN=680a9bc0-6ef2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:d4:28:fe:d9:12:93:70:b0:f2:5a:31:03:6c: 53:c5:89:a5:83:f0:fd:9e:15:44:2f:d8:44:e5:2f: bd:ba:e2:46:61:41:4b:cb:28:2d:7f:f5:76:42:31: 12:ba:a5:ea:92:fa:66:2b:da:4b:c3:29:74:16:da: 73:f4:5e:11:64:b3:60:59:3e:5a:1a:15:4f:78:5e: 33:7d:f8:30:b6:f7:48:09:5c:93:03:e1:96:19:a1: 23:96:d7:65:67:c0:0f:de:54:0a:99:ae:c9:b8:ce: cc:6a:51:2b:2a:47:20:b3:45:b2:42:e0:0e:2b:79: 7d:ff:be:5d:72:33:e9:1f:83:31:30:2b:18:3e:7c: d8:09:03:b7:bb:11:ae:ef:b8:03:96:7e:82:46:91: 72:5d:47:9e:13:65:63:b8:98:3d:b0:1e:75:83:7b: d3:81:7e:3f:1e:bd:27:13:c5:97:1f:a8:93:cf:80: 97:3c:71:25:ff:07:b3:53:e9:5b:0a:f5:79:f3:a6: f7:ed:af:8e:5d:32:44:9c:9d:18:80:2c:4e:3b:87: 0e:20:c9:ad:de:73:04:03:b5:ae:45:a5:01:dd:70: 77:b2:13:c0:9c:2f:00:b2:41:9e:1b:de:b6:92:50: df:ef:00:bb:40:87:bb:dd:20:ad:04:d5:f2:b8:05: c2:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:8C:68:02:E2:D4:CC:7A:EC:B6:4B:C5:BE:83:8E:08:A3:FE:BA:6F X509v3 Authority Key Identifier: keyid:AA:8E:1B:E3:62:42:40:DC:33:02:04:7F:B4:1A:7D:4E:47:80:8E:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E509/79EA591EA7BD11EAAAA62948C4F9AE02/qo4b42JCQNwzAgR_tBp9TkeAjvg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qo4b42JCQNwzAgR_tBp9TkeAjvg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E509/79EA591EA7BD11EAAAA62948C4F9AE02/qo4b42JCQNwzAgR_tBp9TkeAjvg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:a2:67:41:7c:58:55:fb:e1:b4:75:ee:b7:98:19:a7:50:8e: 5a:25:4b:86:c7:1d:0a:6f:1d:59:8b:50:94:e2:09:db:75:39: 26:9a:50:ca:83:57:bc:06:2b:4a:4e:ad:fa:2d:38:56:2c:39: 5b:07:32:5a:71:d7:81:ec:a7:1b:61:e0:0b:98:d4:64:66:ab: 17:43:14:d6:22:1e:a5:e4:a7:9f:cc:b0:41:f3:fd:d1:ff:e7: 6a:61:b9:56:25:df:d5:43:68:dd:17:fc:46:a3:1f:15:a3:c8: ea:52:cf:ab:90:92:34:ba:49:13:3c:15:be:c2:bb:d6:ee:eb: 34:36:b7:1a:b5:bb:a9:5e:bb:f7:31:04:55:5d:58:d8:24:dd: 29:f2:89:37:13:95:f6:e5:df:a4:2f:e3:ec:1a:48:f2:5c:65: 1a:98:f5:0a:50:c1:5a:d7:f3:0d:9f:dc:68:3d:e5:e0:34:6f: 89:ee:5d:65:0f:d8:7b:d2:d1:ce:ba:9d:2c:4e:eb:45:40:ec: a2:69:1f:16:9e:81:a0:6f:a3:50:09:52:f3:ce:f4:e2:98:2d: ca:84:7f:7b:c9:7c:78:1a:c4:f7:7c:99:54:e1:14:86:48:b7: 6d:50:6d:c2:8f:09:3f:c4:66:4b:e9:93:83:df:ae:c5:91:af: a1:28:90:3e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCTMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUU1MDkxMTAvBgNVBAUTKEFBOEUxQkUzNjI0MjQwREMzMzAyMDQ3RkI0MUE3RDRF NDc4MDhFRjgwHhcNMjUwNDI0MjAxNDU2WhcNMjUwNTAxMjAxNDU2WjAYMRYwFAYD VQQDEw02ODBhOWJjMC02ZWYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqNQo/tkSk3Cw8loxA2xTxYmlg/D9nhVEL9hE5S+9uuJGYUFLyygtf/V2QjES uqXqkvpmK9pLwyl0Ftpz9F4RZLNgWT5aGhVPeF4zffgwtvdICVyTA+GWGaEjltdl Z8AP3lQKma7JuM7MalErKkcgs0WyQuAOK3l9/75dcjPpH4MxMCsYPnzYCQO3uxGu 77gDln6CRpFyXUeeE2VjuJg9sB51g3vTgX4/Hr0nE8WXH6iTz4CXPHEl/wezU+lb CvV586b37a+OXTJEnJ0YgCxOO4cOIMmt3nMEA7WuRaUB3XB3shPAnC8AskGeG962 klDf7wC7QIe73SCtBNXyuAXCsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJeMaALi 1Mx67LZLxb6Djgij/rpvMB8GA1UdIwQYMBaAFKqOG+NiQkDcMwIEf7QafU5HgI74 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTUwOS83OUVBNTkxRUE3 QkQxMUVBQUFBNjI5NDhDNEY5QUUwMi9xbzRiNDJKQ1FOd3pBZ1JfdEJwOVRrZUFq dmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FvNGI0MkpDUU53ekFnUl90QnA5VGtlQWp2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RTUwOS83OUVBNTkxRUE3QkQxMUVBQUFBNjI5NDhDNEY5QUUwMi9xbzRiNDJKQ1FO d3pBZ1JfdEJwOVRrZUFqdmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBeomdBfFhV++G0de63mBmnUI5aJUuGxx0Kbx1Zi1CU4gnbdTkmmlDK g1e8BitKTq36LThWLDlbBzJacdeB7KcbYeALmNRkZqsXQxTWIh6l5KefzLBB8/3R /+dqYblWJd/VQ2jdF/xGox8Vo8jqUs+rkJI0ukkTPBW+wrvW7us0NrcatbupXrv3 MQRVXVjYJN0p8ok3E5X25d+kL+PsGkjyXGUamPUKUMFa1/MNn9xoPeXgNG+J7l1l D9h70tHOup0sTutFQOyiaR8WnoGgb6NQCVLzzvTimC3KhH97yXx4GsT3fJlU4RSG SLdtUG3Cjwk/xGZL6ZOD367Fka+hKJA+ -----END CERTIFICATE-----Generated at Sat Apr 26 04:29:58 2025 by rpki-client