$ rpki-client -vvf rpki.apnic.net/member_repository/A9126C60/BF6323E6894B11E387C49E675911EA32/Q59amkDhmWeae8Cb4gf9H2CgSFc.mft File: Q59amkDhmWeae8Cb4gf9H2CgSFc.mft (raw, json) Hash identifier: C+jSnURi7s5+eukUziH3c4wa1JMkUavkqBIj3KmjYE0= Subject key identifier: 99:1A:D0:5C:83:01:1A:FF:51:5E:51:3C:B4:27:5F:BA:36:26:79:D9 Authority key identifier: 43:9F:5A:9A:40:E1:99:67:9A:7B:C0:9B:E2:07:FD:1F:60:A0:48:57 Certificate issuer: /CN=A9126C60/serialNumber=439F5A9A40E199679A7BC09BE207FD1F60A04857 Certificate serial: 2D6F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q59amkDhmWeae8Cb4gf9H2CgSFc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9126C60/BF6323E6894B11E387C49E675911EA32/Q59amkDhmWeae8Cb4gf9H2CgSFc.mft Manifest number: 2D53 Signing time: Thu 24 Apr 2025 15:30:54 +0000 Manifest this update: Thu 24 Apr 2025 15:30:54 +0000 Manifest next update: Thu 01 May 2025 15:30:54 +0000 Files and hashes: 1: Q59amkDhmWeae8Cb4gf9H2CgSFc.crl (hash: nWDUAEirSLYDX4p1A8U/ZZ4RerysNgakoCLpPWmBB/c=) 2: 7726182828DD11ED8EA0FC4FC4F9AE02.roa (hash: B6weuy2U7VjqemndD9JlkjRjdvpM++iJ2EL75fmO3yk=) 3: 4A66F4B0C52F11E59EE2C868C4F9AE02.roa (hash: H0Aul5FoePWmdJ4ws06EeBfgwjOLxYt9oVPG8uQPMlc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9126C60/BF6323E6894B11E387C49E675911EA32/Q59amkDhmWeae8Cb4gf9H2CgSFc.crl rsync://rpki.apnic.net/member_repository/A9126C60/BF6323E6894B11E387C49E675911EA32/Q59amkDhmWeae8Cb4gf9H2CgSFc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q59amkDhmWeae8Cb4gf9H2CgSFc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 15:30:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11631 (0x2d6f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9126C60, serialNumber=439F5A9A40E199679A7BC09BE207FD1F60A04857 Validity Not Before: Apr 24 15:30:54 2025 GMT Not After : May 1 15:30:54 2025 GMT Subject: CN=680a592e-0b2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ff:08:5b:46:5a:dd:f5:d9:56:82:99:65:24: fa:73:1a:ae:8b:7a:f0:14:f2:cc:7b:68:9c:82:94: 16:12:5e:5f:d9:f3:16:b6:dd:71:08:69:86:36:63: 82:ef:42:2b:14:f7:59:93:d7:72:32:25:fb:cb:f5: c7:32:01:8a:42:5e:e5:0b:ba:c9:1c:bb:83:6b:90: d2:70:dd:66:e0:93:47:94:77:46:8e:38:b1:c0:87: c2:c8:77:b2:15:2b:c5:8b:3c:4e:05:22:b1:61:46: 75:70:c6:61:26:59:b4:50:e4:3b:37:0a:53:57:32: 39:b7:ee:ca:6d:44:67:b6:ee:bc:e3:bc:13:42:6a: d4:bf:b7:8f:fc:82:8b:7a:ab:26:e0:0c:05:44:80: 2c:7e:bc:52:95:f6:a1:af:4d:35:18:2a:ce:85:e5: 50:a9:1d:0a:8e:62:62:f2:9f:47:f0:c1:6a:0d:3e: 1e:d8:6e:e4:82:ad:c8:08:4b:d5:1d:a2:65:0b:c4: 35:24:8f:c9:a6:44:50:e9:06:3f:58:c9:66:f8:96: be:fa:83:f6:a6:2a:4a:e6:0b:c3:64:c0:7d:01:f1: ec:bc:a8:4e:c6:c5:0e:78:90:44:55:e8:ed:d2:d7: f7:2e:11:41:ee:1c:89:3e:b3:58:b5:b4:51:34:0e: cb:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:1A:D0:5C:83:01:1A:FF:51:5E:51:3C:B4:27:5F:BA:36:26:79:D9 X509v3 Authority Key Identifier: keyid:43:9F:5A:9A:40:E1:99:67:9A:7B:C0:9B:E2:07:FD:1F:60:A0:48:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9126C60/BF6323E6894B11E387C49E675911EA32/Q59amkDhmWeae8Cb4gf9H2CgSFc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q59amkDhmWeae8Cb4gf9H2CgSFc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126C60/BF6323E6894B11E387C49E675911EA32/Q59amkDhmWeae8Cb4gf9H2CgSFc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:07:74:6b:0f:75:0c:3f:a3:eb:b1:63:ba:86:36:e8:f8:c3: f4:6e:fc:06:2b:61:b2:69:f1:7c:f9:79:63:b2:bd:b9:a5:44: 43:50:ed:33:47:70:c7:7f:fe:b8:31:a5:c1:36:2b:8a:c7:66: ea:b4:29:31:7e:a3:28:a7:9b:e1:d2:ef:ff:5c:28:72:37:13: 9c:a3:f9:1b:30:f7:a9:14:a1:b7:71:b6:13:7e:32:16:d6:17: 3d:96:f6:a5:60:59:90:cf:30:58:46:12:f6:f7:14:dd:b3:10: c0:3b:8a:1a:0c:66:8b:73:b7:5f:83:28:b8:83:85:3b:fb:b7: 23:60:7d:10:19:f2:04:5c:7c:0b:d3:4b:91:fb:d3:11:a8:71: e3:e9:4b:0f:64:9c:3e:2f:8a:d5:f8:54:46:2b:28:b3:ba:d5: 23:3a:2f:6a:4f:bf:2e:75:9a:fa:92:c4:ca:39:56:40:75:1a: 36:d7:a1:32:96:9a:ca:51:45:d0:56:1e:e3:8e:31:d2:55:ea: 8a:79:d8:f5:50:4b:73:c7:1a:f8:4f:d6:10:36:f9:d7:61:36: 7a:61:d1:ca:e6:ae:d4:27:67:c2:ba:80:49:3d:9e:9f:c7:2a: 7c:5e:f0:70:81:04:99:05:98:7f:20:d6:10:2a:33:3b:6b:01: 8b:5d:39:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICLW8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjZDNjAxMTAvBgNVBAUTKDQzOUY1QTlBNDBFMTk5Njc5QTdCQzA5QkUyMDdGRDFG NjBBMDQ4NTcwHhcNMjUwNDI0MTUzMDU0WhcNMjUwNTAxMTUzMDU0WjAYMRYwFAYD VQQDEw02ODBhNTkyZS0wYjJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAov8IW0Za3fXZVoKZZST6cxqui3rwFPLMe2icgpQWEl5f2fMWtt1xCGmGNmOC 70IrFPdZk9dyMiX7y/XHMgGKQl7lC7rJHLuDa5DScN1m4JNHlHdGjjixwIfCyHey FSvFizxOBSKxYUZ1cMZhJlm0UOQ7NwpTVzI5t+7KbURntu6847wTQmrUv7eP/IKL eqsm4AwFRIAsfrxSlfahr001GCrOheVQqR0KjmJi8p9H8MFqDT4e2G7kgq3ICEvV HaJlC8Q1JI/JpkRQ6QY/WMlm+Ja++oP2pipK5gvDZMB9AfHsvKhOxsUOeJBEVejt 0tf3LhFB7hyJPrNYtbRRNA7LoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJka0FyD ARr/UV5RPLQnX7o2JnnZMB8GA1UdIwQYMBaAFEOfWppA4ZlnmnvAm+IH/R9goEhX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNkM2MC9CRjYzMjNFNjg5 NEIxMUUzODdDNDlFNjc1OTExRUEzMi9RNTlhbWtEaG1XZWFlOENiNGdmOUgyQ2dT RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1E1OWFta0RobVdlYWU4Q2I0Z2Y5SDJDZ1NGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NkM2MC9CRjYzMjNFNjg5NEIxMUUzODdDNDlFNjc1OTExRUEzMi9RNTlhbWtEaG1X ZWFlOENiNGdmOUgyQ2dTRmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDB3RrD3UMP6PrsWO6hjbo+MP0bvwGK2GyafF8+Xljsr25pURDUO0z R3DHf/64MaXBNiuKx2bqtCkxfqMop5vh0u//XChyNxOco/kbMPepFKG3cbYTfjIW 1hc9lvalYFmQzzBYRhL29xTdsxDAO4oaDGaLc7dfgyi4g4U7+7cjYH0QGfIEXHwL 00uR+9MRqHHj6UsPZJw+L4rV+FRGKyizutUjOi9qT78udZr6ksTKOVZAdRo216Ey lprKUUXQVh7jjjHSVeqKedj1UEtzxxr4T9YQNvnXYTZ6YdHK5q7UJ2fCuoBJPZ6f xyp8XvBwgQSZBZh/INYQKjM7awGLXTlF -----END CERTIFICATE-----Generated at Sat Apr 26 04:04:51 2025 by rpki-client