$ rpki-client -vvf rpki.apnic.net/member_repository/A911FABC/D9420076C4D211EDBF0E1982C4F9AE02/qHJCtzYn1CkjSl9UxSO7Qeu-h6o.mft File: qHJCtzYn1CkjSl9UxSO7Qeu-h6o.mft (raw, json) Hash identifier: N5zf6vYHi+G20i0h2stT/g5rhaK0KeOBhRKXw10xm8g= Subject key identifier: A8:6F:D6:A6:DB:E0:9A:00:EF:DA:F1:EC:8E:7E:84:DD:53:6D:64:6D Authority key identifier: A8:72:42:B7:36:27:D4:29:23:4A:5F:54:C5:23:BB:41:EB:BE:87:AA Certificate issuer: /CN=A911FABC/serialNumber=A87242B73627D429234A5F54C523BB41EBBE87AA Certificate serial: 01A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qHJCtzYn1CkjSl9UxSO7Qeu-h6o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911FABC/D9420076C4D211EDBF0E1982C4F9AE02/qHJCtzYn1CkjSl9UxSO7Qeu-h6o.mft Manifest number: 019C Signing time: Thu 01 May 2025 02:32:43 +0000 Manifest this update: Thu 01 May 2025 02:32:42 +0000 Manifest next update: Thu 08 May 2025 02:32:42 +0000 Files and hashes: 1: qHJCtzYn1CkjSl9UxSO7Qeu-h6o.crl (hash: Nz4Pml4khmxsm5LP0XqIAO+l+CQXefMesrJVpR2y3y4=) 2: 9BF55430C4D611EDA65E8C87C4F9AE02.roa (hash: li4OxnhOQgQRujPF67sN5Xz793LOnzHpSZGFaFwRWYE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911FABC/D9420076C4D211EDBF0E1982C4F9AE02/qHJCtzYn1CkjSl9UxSO7Qeu-h6o.crl rsync://rpki.apnic.net/member_repository/A911FABC/D9420076C4D211EDBF0E1982C4F9AE02/qHJCtzYn1CkjSl9UxSO7Qeu-h6o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qHJCtzYn1CkjSl9UxSO7Qeu-h6o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 May 2025 02:32:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 417 (0x1a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911FABC, serialNumber=A87242B73627D429234A5F54C523BB41EBBE87AA Validity Not Before: May 1 02:32:42 2025 GMT Not After : May 8 02:32:42 2025 GMT Subject: CN=6812dd4b-3be7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:14:5d:ef:f1:6d:b5:5a:8c:b0:1f:f5:6b:b8: 5f:d5:2d:0f:7c:32:de:24:fc:f9:b7:50:6e:21:62: 2e:07:61:4d:fb:4c:eb:0e:81:81:19:c5:4d:3e:de: 03:32:a0:4f:e1:78:5b:14:e6:e5:ca:1b:4e:05:dd: 65:90:84:fa:79:1a:e8:9c:33:74:62:fc:3c:77:69: ac:09:99:d1:d2:ce:26:40:91:6d:aa:65:ef:07:1d: 08:3f:d8:d5:12:28:fe:05:96:e0:51:33:fb:56:3d: e2:a2:e8:21:08:b7:83:eb:8d:3c:71:9b:2f:26:96: 20:c9:1e:d1:b9:56:c5:13:b1:9e:0c:ba:02:e0:e1: b4:4e:d9:33:a5:2d:47:d4:b2:87:83:9f:00:0c:9e: 1b:a7:b5:9f:02:cc:d9:d9:05:84:1b:91:2c:bf:ad: a4:7a:47:cb:ce:83:13:d9:76:e8:8b:44:31:d9:ab: bb:6c:e5:dc:3b:73:69:fc:24:5c:89:2e:5a:1e:8d: 16:59:c1:9b:56:93:21:ad:61:ab:a6:6f:61:d8:e8: 16:cf:c7:35:0b:f7:20:48:cd:1c:04:cc:ba:23:3f: 58:7b:50:e2:65:7e:5f:66:b3:06:3b:21:0d:f1:83: 0e:81:d3:bb:e3:7a:32:86:d7:ea:2a:87:57:1f:a7: d7:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:6F:D6:A6:DB:E0:9A:00:EF:DA:F1:EC:8E:7E:84:DD:53:6D:64:6D X509v3 Authority Key Identifier: keyid:A8:72:42:B7:36:27:D4:29:23:4A:5F:54:C5:23:BB:41:EB:BE:87:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911FABC/D9420076C4D211EDBF0E1982C4F9AE02/qHJCtzYn1CkjSl9UxSO7Qeu-h6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qHJCtzYn1CkjSl9UxSO7Qeu-h6o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FABC/D9420076C4D211EDBF0E1982C4F9AE02/qHJCtzYn1CkjSl9UxSO7Qeu-h6o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:7c:de:e0:08:85:92:0f:70:59:29:16:cd:7f:29:18:96:e5: e7:9a:51:b7:b6:b8:7b:15:51:4e:0e:60:52:2b:a2:0a:7e:20: 7d:01:2c:29:b0:ec:48:a5:e9:28:a4:72:76:1d:37:e3:2f:cc: 97:bd:6d:7e:be:c8:3d:76:5f:73:22:a7:78:28:ec:3e:21:9c: 0b:6f:8a:b4:1f:81:9f:45:a4:b8:b0:12:e3:16:47:7d:82:7e: 10:a0:b4:ff:31:c4:5e:c4:6c:c7:1b:2a:cb:38:4e:8b:b1:0b: 8d:2e:44:19:09:9a:34:31:f0:54:fd:d4:41:9e:90:3c:61:90: 47:4b:9d:f7:4b:35:5f:ae:c5:66:a9:d4:ce:1e:26:c4:5f:81: d7:23:8c:a2:66:d4:c1:62:34:06:e2:93:cc:2c:67:fa:6b:c4: 4d:4d:e5:f1:bf:97:fb:7b:08:75:2c:84:7a:84:0a:f0:44:fc: a0:29:c9:aa:6b:74:b2:f3:da:5b:cc:46:1e:2c:98:0c:4a:52: 03:72:68:0a:ec:31:cb:7a:02:c9:64:31:69:ae:46:2b:04:bc: 56:d4:5b:c6:37:0b:cc:5a:85:9c:d6:b7:cf:ef:a3:b7:ed:75: 4b:d5:d8:b4:01:21:af:82:a5:c4:91:58:d1:30:ed:2f:dc:0d: 2e:08:30:9f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUZBQkMxMTAvBgNVBAUTKEE4NzI0MkI3MzYyN0Q0MjkyMzRBNUY1NEM1MjNCQjQx RUJCRTg3QUEwHhcNMjUwNTAxMDIzMjQyWhcNMjUwNTA4MDIzMjQyWjAYMRYwFAYD VQQDEw02ODEyZGQ0Yi0zYmU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7BRd7/FttVqMsB/1a7hf1S0PfDLeJPz5t1BuIWIuB2FN+0zrDoGBGcVNPt4D MqBP4XhbFOblyhtOBd1lkIT6eRronDN0Yvw8d2msCZnR0s4mQJFtqmXvBx0IP9jV Eij+BZbgUTP7Vj3ioughCLeD6408cZsvJpYgyR7RuVbFE7GeDLoC4OG0TtkzpS1H 1LKHg58ADJ4bp7WfAszZ2QWEG5Esv62kekfLzoMT2Xboi0Qx2au7bOXcO3Np/CRc iS5aHo0WWcGbVpMhrWGrpm9h2OgWz8c1C/cgSM0cBMy6Iz9Ye1DiZX5fZrMGOyEN 8YMOgdO743oyhtfqKodXH6fX2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKhv1qbb 4JoA79rx7I5+hN1TbWRtMB8GA1UdIwQYMBaAFKhyQrc2J9QpI0pfVMUju0Hrvoeq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRkFCQy9EOTQyMDA3NkM0 RDIxMUVEQkYwRTE5ODJDNEY5QUUwMi9xSEpDdHpZbjFDa2pTbDlVeFNPN1FldS1o Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FISkN0elluMUNralNsOVV4U083UWV1LWg2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RkFCQy9EOTQyMDA3NkM0RDIxMUVEQkYwRTE5ODJDNEY5QUUwMi9xSEpDdHpZbjFD a2pTbDlVeFNPN1FldS1oNm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/fN7gCIWSD3BZKRbNfykYluXnmlG3trh7FVFODmBSK6IKfiB9ASwp sOxIpekopHJ2HTfjL8yXvW1+vsg9dl9zIqd4KOw+IZwLb4q0H4GfRaS4sBLjFkd9 gn4QoLT/McRexGzHGyrLOE6LsQuNLkQZCZo0MfBU/dRBnpA8YZBHS533SzVfrsVm qdTOHibEX4HXI4yiZtTBYjQG4pPMLGf6a8RNTeXxv5f7ewh1LIR6hArwRPygKcmq a3Sy89pbzEYeLJgMSlIDcmgK7DHLegLJZDFprkYrBLxW1FvGNwvMWoWc1rfP76O3 7XVL1di0ASGvgqXEkVjRMO0v3A0uCDCf -----END CERTIFICATE-----Generated at Fri May 2 22:20:20 2025 by rpki-client