$ rpki-client -vvf rpki.apnic.net/member_repository/A912B6D9/7743D51E1E5F11F0BA389A4EC4F9AE02/q2LZY5CMwOOoAZmkPTEqNKBIgfA.mft File: q2LZY5CMwOOoAZmkPTEqNKBIgfA.mft (raw, json) Hash identifier: 7pUtf+jwz8H7fTy1ordT7Z2WFxMDU9dRm02DAOA4KSY= Subject key identifier: DA:01:82:E1:9A:0E:97:2E:3B:BE:1C:18:30:BA:C3:C5:9C:B8:05:64 Authority key identifier: AB:62:D9:63:90:8C:C0:E3:A8:01:99:A4:3D:31:2A:34:A0:48:81:F0 Certificate issuer: /CN=A912B6D9/serialNumber=AB62D963908CC0E3A80199A43D312A34A04881F0 Certificate serial: 04 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2LZY5CMwOOoAZmkPTEqNKBIgfA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B6D9/7743D51E1E5F11F0BA389A4EC4F9AE02/q2LZY5CMwOOoAZmkPTEqNKBIgfA.mft Manifest number: 04 Signing time: Fri 25 Apr 2025 07:11:05 +0000 Manifest this update: Fri 25 Apr 2025 07:11:05 +0000 Manifest next update: Fri 02 May 2025 07:11:05 +0000 Files and hashes: 1: q2LZY5CMwOOoAZmkPTEqNKBIgfA.crl (hash: fl/jGll33jgmw2bZH0vOLrOUjifuGMV1JR2rqI8v9yE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B6D9/7743D51E1E5F11F0BA389A4EC4F9AE02/q2LZY5CMwOOoAZmkPTEqNKBIgfA.crl rsync://rpki.apnic.net/member_repository/A912B6D9/7743D51E1E5F11F0BA389A4EC4F9AE02/q2LZY5CMwOOoAZmkPTEqNKBIgfA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2LZY5CMwOOoAZmkPTEqNKBIgfA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 07:11:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4 (0x4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B6D9, serialNumber=AB62D963908CC0E3A80199A43D312A34A04881F0 Validity Not Before: Apr 25 07:11:05 2025 GMT Not After : May 2 07:11:05 2025 GMT Subject: CN=680b3589-dafc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:55:d0:78:18:62:79:69:bc:c1:8a:e6:ab:f2: c9:36:37:7c:6c:75:1f:f4:e6:04:5b:38:53:ec:68: 92:a8:78:48:f0:34:15:de:6d:90:05:ea:ea:3e:62: 53:72:15:5d:fe:f9:7c:bf:f8:9e:53:2a:4e:c4:bb: b5:7a:76:b0:c5:34:6a:3e:a1:f3:fe:c5:f9:89:75: 7f:3d:dd:58:f8:7c:a8:17:c9:f1:98:41:76:f4:de: 70:24:70:80:6c:a8:7c:53:ee:7e:7d:2e:57:ea:bf: 24:bd:7e:56:b6:c8:0e:20:b1:97:3d:35:db:b3:1d: 97:c7:2f:f7:ac:25:4e:5b:68:56:39:04:5c:6d:f6: af:a5:13:25:14:94:48:cf:97:e7:63:dc:30:15:8b: eb:68:cd:a1:28:fe:ea:3e:a5:66:13:23:08:84:e5: 04:72:5e:bd:25:b6:2e:cc:19:ff:f7:25:12:74:7d: b9:99:ba:c8:2d:7d:b1:a8:b0:4c:d9:e0:88:5b:c8: 1b:2e:39:46:40:a0:92:da:d3:3e:92:10:99:ea:0f: f6:01:90:51:df:1c:2b:07:c2:82:3d:07:4a:d5:6c: 89:05:9a:fa:43:e7:64:10:9d:bf:94:ad:61:cd:dc: 16:53:fa:dc:ab:e1:c1:d3:7f:4c:a4:e0:61:d9:ea: e6:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:01:82:E1:9A:0E:97:2E:3B:BE:1C:18:30:BA:C3:C5:9C:B8:05:64 X509v3 Authority Key Identifier: keyid:AB:62:D9:63:90:8C:C0:E3:A8:01:99:A4:3D:31:2A:34:A0:48:81:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B6D9/7743D51E1E5F11F0BA389A4EC4F9AE02/q2LZY5CMwOOoAZmkPTEqNKBIgfA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2LZY5CMwOOoAZmkPTEqNKBIgfA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B6D9/7743D51E1E5F11F0BA389A4EC4F9AE02/q2LZY5CMwOOoAZmkPTEqNKBIgfA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:8c:ec:43:00:8c:23:c6:0b:97:3e:bd:38:12:6a:7a:b4:51: 43:2b:ff:59:09:ce:d3:48:9f:a5:0a:d6:f2:10:4d:34:09:d2: ed:c3:c6:0f:d8:70:34:60:10:26:6c:4e:84:49:65:0e:93:0d: 82:fe:6d:89:d4:77:67:bc:76:ee:8c:29:bf:e9:4a:f9:9d:69: 99:c5:84:9c:c6:f3:b1:9c:e8:5f:29:a7:1b:6b:37:21:65:ce: 47:c3:30:b7:b2:07:2a:5e:b4:7f:2c:f8:64:c5:3d:a5:cb:13: c8:27:d9:f1:01:17:be:e0:b8:df:fb:85:9e:51:46:86:e0:45: d8:4f:b3:5a:ae:f9:9b:1d:4d:dc:93:ca:cb:1c:89:a9:21:36: 09:5f:09:b9:a4:26:4d:88:5b:72:f5:69:79:7a:47:62:72:3e: 08:55:22:92:84:91:0d:6a:8c:44:92:8f:79:7e:11:34:c4:f7: bf:5e:17:cd:9f:01:be:26:6b:08:b5:8a:7f:a1:08:77:4b:89: 03:a6:91:02:58:89:b9:bb:e6:d8:91:0c:b5:ba:b6:12:f5:60: 67:ec:7a:8d:a0:8e:7d:55:4a:d0:ef:7b:6f:57:86:10:72:cb: 0f:76:19:27:1f:95:7a:45:5a:90:ff:f6:25:17:1a:a8:4c:ba: c1:f6:2e:c5 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy QjZEOTExMC8GA1UEBRMoQUI2MkQ5NjM5MDhDQzBFM0E4MDE5OUE0M0QzMTJBMzRB MDQ4ODFGMDAeFw0yNTA0MjUwNzExMDVaFw0yNTA1MDIwNzExMDVaMBgxFjAUBgNV BAMTDTY4MGIzNTg5LWRhZmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCyVdB4GGJ5abzBiuar8sk2N3xsdR/05gRbOFPsaJKoeEjwNBXebZAF6uo+YlNy FV3++Xy/+J5TKk7Eu7V6drDFNGo+ofP+xfmJdX893Vj4fKgXyfGYQXb03nAkcIBs qHxT7n59LlfqvyS9fla2yA4gsZc9NduzHZfHL/esJU5baFY5BFxt9q+lEyUUlEjP l+dj3DAVi+tozaEo/uo+pWYTIwiE5QRyXr0lti7MGf/3JRJ0fbmZusgtfbGosEzZ 4IhbyBsuOUZAoJLa0z6SEJnqD/YBkFHfHCsHwoI9B0rVbIkFmvpD52QQnb+UrWHN 3BZT+tyr4cHTf0yk4GHZ6uZTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU2gGC4ZoO ly47vhwYMLrDxZy4BWQwHwYDVR0jBBgwFoAUq2LZY5CMwOOoAZmkPTEqNKBIgfAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJCNkQ5Lzc3NDNENTFFMUU1 RjExRjBCQTM4OUE0RUM0RjlBRTAyL3EyTFpZNUNNd09Pb0FabWtQVEVxTktCSWdm QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcTJMWlk1Q013T09vQVpta1BURXFOS0JJZ2ZBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJC NkQ5Lzc3NDNENTFFMUU1RjExRjBCQTM4OUE0RUM0RjlBRTAyL3EyTFpZNUNNd09P b0FabWtQVEVxTktCSWdmQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADOM7EMAjCPGC5c+vTgSanq0UUMr/1kJztNIn6UK1vIQTTQJ0u3Dxg/Y cDRgECZsToRJZQ6TDYL+bYnUd2e8du6MKb/pSvmdaZnFhJzG87Gc6F8ppxtrNyFl zkfDMLeyBypetH8s+GTFPaXLE8gn2fEBF77guN/7hZ5RRobgRdhPs1qu+ZsdTdyT yssciakhNglfCbmkJk2IW3L1aXl6R2JyPghVIpKEkQ1qjESSj3l+ETTE979eF82f Ab4mawi1in+hCHdLiQOmkQJYibm75tiRDLW6thL1YGfseo2gjn1VStDve29XhhBy yw92GScflXpFWpD/9iUXGqhMusH2LsU= -----END CERTIFICATE-----Generated at Sat Apr 26 12:39:53 2025 by rpki-client