$ rpki-client -vvf rpki.apnic.net/member_repository/A9125C31/38BF409A159011EA9C413652C4F9AE02/cQU3JEaiBkVG2WKfQhw3b9zvIdY.mft File: cQU3JEaiBkVG2WKfQhw3b9zvIdY.mft (raw, json) Hash identifier: TYRjNn7P6A3mdQAyOmJ0CCZ+i1XqTljLeEgXVO7aRLo= Subject key identifier: 0C:75:C6:C4:BD:1E:7F:10:F8:C8:C7:6E:08:E6:FE:FF:EE:60:EB:3F Authority key identifier: 71:05:37:24:46:A2:06:45:46:D9:62:9F:42:1C:37:6F:DC:EF:21:D6 Certificate issuer: /CN=A9125C31/serialNumber=7105372446A2064546D9629F421C376FDCEF21D6 Certificate serial: 0BE3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cQU3JEaiBkVG2WKfQhw3b9zvIdY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125C31/38BF409A159011EA9C413652C4F9AE02/cQU3JEaiBkVG2WKfQhw3b9zvIdY.mft Manifest number: 0BDC Signing time: Thu 24 Apr 2025 18:43:37 +0000 Manifest this update: Thu 24 Apr 2025 18:43:37 +0000 Manifest next update: Thu 01 May 2025 18:43:37 +0000 Files and hashes: 1: cQU3JEaiBkVG2WKfQhw3b9zvIdY.crl (hash: BPVx7lohKTUddiHm1v5K8OOeydOfziQp5IyjW9/w8xc=) 2: 4697751815B111EA8277BA34C4F9AE02.roa (hash: dxDp9E0tHPQ++XAIde+nxMm3Ga/WWcWY96m0Hl+beDw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125C31/38BF409A159011EA9C413652C4F9AE02/cQU3JEaiBkVG2WKfQhw3b9zvIdY.crl rsync://rpki.apnic.net/member_repository/A9125C31/38BF409A159011EA9C413652C4F9AE02/cQU3JEaiBkVG2WKfQhw3b9zvIdY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cQU3JEaiBkVG2WKfQhw3b9zvIdY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:43:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3043 (0xbe3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125C31, serialNumber=7105372446A2064546D9629F421C376FDCEF21D6 Validity Not Before: Apr 24 18:43:37 2025 GMT Not After : May 1 18:43:37 2025 GMT Subject: CN=680a8659-6015 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:f2:d2:b5:06:44:c8:6c:93:59:d5:85:6b:87: cc:ba:6b:6e:3d:e2:d3:7a:88:12:e1:82:3a:6d:36: aa:5d:47:ce:ec:5b:70:1f:2f:ff:a0:12:79:da:52: 54:14:9b:69:1c:65:c6:53:a8:fa:b4:9d:e1:c1:06: 62:9c:95:97:2a:8a:78:d7:18:a4:ba:36:85:ab:3b: 48:70:b7:cb:65:bf:2a:98:6f:00:fe:3f:59:76:fb: b8:05:a7:81:8c:68:54:c3:66:1a:05:6b:0b:c3:bb: 4c:2a:10:c6:90:d5:cf:7e:3d:2f:4f:05:a4:39:b9: 9a:f8:c1:16:f8:a4:b4:62:68:f7:5a:0c:4d:7a:bf: 3e:a9:29:d8:b0:03:c8:c9:06:30:10:69:e2:c3:52: 5d:12:81:21:23:a5:b5:b5:cc:82:59:83:fb:0a:8b: 24:1f:ac:12:fa:d4:21:ee:0b:f9:a7:7f:36:fe:36: 60:ad:c9:f5:db:b1:97:35:55:1f:8d:a4:e5:fb:7b: ce:9b:76:b9:90:29:e8:5d:d0:8a:d7:bb:f6:f0:db: 8a:ad:a6:ec:02:eb:3a:c8:08:a7:17:db:94:a4:52: af:b0:2e:69:a5:83:d0:79:39:68:30:89:98:18:76: ab:a6:e3:e8:32:bc:56:ba:65:b6:cd:3c:00:a1:2b: 80:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:75:C6:C4:BD:1E:7F:10:F8:C8:C7:6E:08:E6:FE:FF:EE:60:EB:3F X509v3 Authority Key Identifier: keyid:71:05:37:24:46:A2:06:45:46:D9:62:9F:42:1C:37:6F:DC:EF:21:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125C31/38BF409A159011EA9C413652C4F9AE02/cQU3JEaiBkVG2WKfQhw3b9zvIdY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cQU3JEaiBkVG2WKfQhw3b9zvIdY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125C31/38BF409A159011EA9C413652C4F9AE02/cQU3JEaiBkVG2WKfQhw3b9zvIdY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:f3:43:b6:7e:bb:4a:99:db:fa:b5:81:83:c7:f4:2c:df:5e: d6:b3:66:9c:2a:b8:d7:ba:cb:6b:58:b8:02:11:7c:2c:c6:2f: 05:08:f5:b1:75:08:bd:e6:cd:3e:5e:94:28:16:cd:c0:e9:37: 74:91:97:52:80:b8:c5:05:af:38:af:b7:30:ca:8f:ca:5e:e8: e7:30:59:93:2f:19:9c:37:ce:a4:cf:11:cf:06:5f:72:7e:31: 0c:51:0e:95:86:b7:b7:59:3a:3a:e1:a3:cc:3d:f4:6f:5e:c0: 6b:24:8b:c5:11:a2:57:e7:4d:e2:c1:b3:96:09:11:fb:35:09: 04:df:17:fd:55:11:f0:02:a1:5a:61:77:80:e5:5f:c7:48:c5: 1c:2f:6e:6e:63:30:ba:64:1c:6d:10:69:1f:81:a7:c9:0d:ef: e8:92:60:61:c2:61:f4:5f:41:f4:57:56:1a:a6:a4:49:b6:c2: 79:09:d8:b3:83:55:0b:e0:3e:05:92:ed:51:31:ce:d0:5f:58: 07:29:71:11:b1:d7:9a:98:30:68:6b:f1:c7:c2:85:bd:d6:80: 4e:06:3b:83:6d:9d:cd:0f:79:06:9e:22:0b:23:d5:f4:ac:37: 93:ef:6a:c7:a2:53:b6:63:eb:06:48:ee:32:ce:75:ae:e7:75: 1c:2c:75:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC+MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjVDMzExMTAvBgNVBAUTKDcxMDUzNzI0NDZBMjA2NDU0NkQ5NjI5RjQyMUMzNzZG RENFRjIxRDYwHhcNMjUwNDI0MTg0MzM3WhcNMjUwNTAxMTg0MzM3WjAYMRYwFAYD VQQDEw02ODBhODY1OS02MDE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAofLStQZEyGyTWdWFa4fMumtuPeLTeogS4YI6bTaqXUfO7FtwHy//oBJ52lJU FJtpHGXGU6j6tJ3hwQZinJWXKop41xikujaFqztIcLfLZb8qmG8A/j9Zdvu4BaeB jGhUw2YaBWsLw7tMKhDGkNXPfj0vTwWkObma+MEW+KS0Ymj3WgxNer8+qSnYsAPI yQYwEGniw1JdEoEhI6W1tcyCWYP7CoskH6wS+tQh7gv5p382/jZgrcn127GXNVUf jaTl+3vOm3a5kCnoXdCK17v28NuKrabsAus6yAinF9uUpFKvsC5ppYPQeTloMImY GHarpuPoMrxWumW2zTwAoSuAoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAx1xsS9 Hn8Q+MjHbgjm/v/uYOs/MB8GA1UdIwQYMBaAFHEFNyRGogZFRtlin0IcN2/c7yHW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNUMzMS8zOEJGNDA5QTE1 OTAxMUVBOUM0MTM2NTJDNEY5QUUwMi9jUVUzSkVhaUJrVkcyV0tmUWh3M2I5enZJ ZFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NRVTNKRWFpQmtWRzJXS2ZRaHczYjl6dklkWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NUMzMS8zOEJGNDA5QTE1OTAxMUVBOUM0MTM2NTJDNEY5QUUwMi9jUVUzSkVhaUJr VkcyV0tmUWh3M2I5enZJZFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC380O2frtKmdv6tYGDx/Qs317Ws2acKrjXustrWLgCEXwsxi8FCPWx dQi95s0+XpQoFs3A6Td0kZdSgLjFBa84r7cwyo/KXujnMFmTLxmcN86kzxHPBl9y fjEMUQ6Vhre3WTo64aPMPfRvXsBrJIvFEaJX503iwbOWCRH7NQkE3xf9VRHwAqFa YXeA5V/HSMUcL25uYzC6ZBxtEGkfgafJDe/okmBhwmH0X0H0V1YapqRJtsJ5Cdiz g1UL4D4Fku1RMc7QX1gHKXERsdeamDBoa/HHwoW91oBOBjuDbZ3ND3kGniILI9X0 rDeT72rHolO2Y+sGSO4yznWu53UcLHWs -----END CERTIFICATE-----Generated at Sat Apr 26 17:10:43 2025 by rpki-client