$ rpki-client -vvf rpki.apnic.net/member_repository/A912C3BD/1A8108F2D97F11EB9E13594FC4F9AE02/RqE3XwEj9TNI8MT5A02QQP7p08o.mft File: RqE3XwEj9TNI8MT5A02QQP7p08o.mft (raw, json) Hash identifier: XkuTiwgAlHU/dl4eUBdbbcyJ1dA5eakkkXS7IWACi2U= Subject key identifier: 76:27:83:BE:D9:E4:0D:A6:4A:43:BA:92:6A:50:D9:81:BB:84:FC:62 Authority key identifier: 46:A1:37:5F:01:23:F5:33:48:F0:C4:F9:03:4D:90:40:FE:E9:D3:CA Certificate issuer: /CN=A912C3BD/serialNumber=46A1375F0123F53348F0C4F9034D9040FEE9D3CA Certificate serial: 0584 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RqE3XwEj9TNI8MT5A02QQP7p08o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C3BD/1A8108F2D97F11EB9E13594FC4F9AE02/RqE3XwEj9TNI8MT5A02QQP7p08o.mft Manifest number: 057B Signing time: Thu 24 Apr 2025 23:06:02 +0000 Manifest this update: Thu 24 Apr 2025 23:06:01 +0000 Manifest next update: Thu 01 May 2025 23:06:01 +0000 Files and hashes: 1: RqE3XwEj9TNI8MT5A02QQP7p08o.crl (hash: v3a0V2S60wRljGCmwk1UBAUfFMy8qv7NnIXRSKMZQGc=) 2: 6079B40AD98211EBAA210852C4F9AE02.roa (hash: cPDgWfK2zOB3bgbWohc7RllaAj78iS9Dek771g2OWfM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C3BD/1A8108F2D97F11EB9E13594FC4F9AE02/RqE3XwEj9TNI8MT5A02QQP7p08o.crl rsync://rpki.apnic.net/member_repository/A912C3BD/1A8108F2D97F11EB9E13594FC4F9AE02/RqE3XwEj9TNI8MT5A02QQP7p08o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RqE3XwEj9TNI8MT5A02QQP7p08o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:06:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1412 (0x584) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C3BD, serialNumber=46A1375F0123F53348F0C4F9034D9040FEE9D3CA Validity Not Before: Apr 24 23:06:01 2025 GMT Not After : May 1 23:06:01 2025 GMT Subject: CN=680ac3d9-66fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:63:93:48:92:78:ce:ce:ed:3f:f9:67:05:25: b8:dd:f2:70:e2:a2:e3:78:aa:22:46:5a:9a:cd:58: 31:1c:e4:48:ef:cf:5f:52:97:8b:20:c2:91:5f:ed: 3c:71:85:ab:50:c0:82:a5:cc:b9:41:e5:b0:3a:48: 45:7a:d0:66:c2:6d:f6:ef:25:e7:d4:19:3f:da:d1: 14:67:61:07:1b:2e:e0:b7:4b:56:c5:d3:8a:f9:81: 60:05:21:d2:04:20:eb:37:61:5a:1e:ce:11:bf:98: 1d:03:fa:17:8c:c4:0a:92:5a:84:9e:44:e9:bd:bc: aa:88:1a:c5:b8:f5:e6:5a:c6:d6:2f:f8:d1:c2:c0: fd:c7:e5:56:83:07:d2:36:2f:4d:b7:f9:0d:c7:e5: d0:c4:e0:5c:40:bc:9f:63:97:39:6c:13:ef:cb:42: 43:24:d0:83:28:52:02:d3:db:76:9e:d0:fe:1a:89: e9:8c:e4:4a:8a:e9:2b:68:98:7a:72:4e:3a:dd:ea: e4:f3:a0:02:6d:0b:0c:b0:e8:14:fa:a2:46:5e:3d: 88:fd:d9:ec:15:71:68:6d:4d:0a:8e:68:b1:9c:88: 34:3b:56:08:a2:d7:0a:b5:9e:6f:ab:4a:dd:1a:af: 3e:02:49:90:c0:e3:13:b9:17:fa:48:50:33:0c:6c: e4:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:27:83:BE:D9:E4:0D:A6:4A:43:BA:92:6A:50:D9:81:BB:84:FC:62 X509v3 Authority Key Identifier: keyid:46:A1:37:5F:01:23:F5:33:48:F0:C4:F9:03:4D:90:40:FE:E9:D3:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C3BD/1A8108F2D97F11EB9E13594FC4F9AE02/RqE3XwEj9TNI8MT5A02QQP7p08o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RqE3XwEj9TNI8MT5A02QQP7p08o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C3BD/1A8108F2D97F11EB9E13594FC4F9AE02/RqE3XwEj9TNI8MT5A02QQP7p08o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:a0:51:5f:f6:87:04:ac:77:8d:25:fe:9d:ec:62:f6:bf:4f: 12:61:b4:ea:b3:38:dc:1e:b1:65:1b:8c:f4:05:3c:8a:ee:13: ea:1d:8a:3f:c8:68:e4:b7:ee:ae:69:df:68:87:0f:52:20:fa: fc:04:36:7a:bf:eb:6a:35:03:11:7d:e0:b2:b2:1c:0e:c8:7c: a4:a2:95:5d:04:79:91:2f:93:74:dd:8e:4b:c5:be:cd:33:30: 49:51:eb:58:98:92:72:c0:98:6b:74:f9:88:6f:2c:d6:ce:a7: 5d:c7:61:12:de:15:24:1b:df:18:d3:54:8c:2b:c2:9d:0a:38: 70:25:e5:12:22:35:c4:46:42:67:04:51:80:2d:4b:83:d1:d0: 22:ba:88:1f:38:d6:ba:11:f8:7e:1d:f9:f6:67:39:60:1a:08: 5e:7f:8b:eb:a2:0e:88:8d:12:fd:4d:8c:28:f2:a9:94:a1:4f: 86:ed:c2:79:76:c3:17:64:70:da:d6:fc:b3:b0:f6:42:5e:9a: 2d:b5:61:c2:bd:0b:e6:a0:4c:b3:4c:6f:de:c6:f4:4e:2a:5e: a8:7c:5c:d2:5c:24:ee:9e:5f:81:ff:85:e8:16:26:9f:77:d5: e6:50:2d:9d:1f:67:1f:18:cf:e9:ed:81:cf:02:5a:ca:aa:79: ff:46:37:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBYQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkMzQkQxMTAvBgNVBAUTKDQ2QTEzNzVGMDEyM0Y1MzM0OEYwQzRGOTAzNEQ5MDQw RkVFOUQzQ0EwHhcNMjUwNDI0MjMwNjAxWhcNMjUwNTAxMjMwNjAxWjAYMRYwFAYD VQQDEw02ODBhYzNkOS02NmZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA02OTSJJ4zs7tP/lnBSW43fJw4qLjeKoiRlqazVgxHORI789fUpeLIMKRX+08 cYWrUMCCpcy5QeWwOkhFetBmwm327yXn1Bk/2tEUZ2EHGy7gt0tWxdOK+YFgBSHS BCDrN2FaHs4Rv5gdA/oXjMQKklqEnkTpvbyqiBrFuPXmWsbWL/jRwsD9x+VWgwfS Ni9Nt/kNx+XQxOBcQLyfY5c5bBPvy0JDJNCDKFIC09t2ntD+GonpjORKiukraJh6 ck463erk86ACbQsMsOgU+qJGXj2I/dnsFXFobU0KjmixnIg0O1YIotcKtZ5vq0rd Gq8+AkmQwOMTuRf6SFAzDGzk8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHYng77Z 5A2mSkO6kmpQ2YG7hPxiMB8GA1UdIwQYMBaAFEahN18BI/UzSPDE+QNNkED+6dPK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzNCRC8xQTgxMDhGMkQ5 N0YxMUVCOUUxMzU5NEZDNEY5QUUwMi9ScUUzWHdFajlUTkk4TVQ1QTAyUVFQN3Aw OG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JxRTNYd0VqOVROSThNVDVBMDJRUVA3cDA4by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QzNCRC8xQTgxMDhGMkQ5N0YxMUVCOUUxMzU5NEZDNEY5QUUwMi9ScUUzWHdFajlU Tkk4TVQ1QTAyUVFQN3AwOG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSoFFf9ocErHeNJf6d7GL2v08SYbTqszjcHrFlG4z0BTyK7hPqHYo/ yGjkt+6uad9ohw9SIPr8BDZ6v+tqNQMRfeCyshwOyHykopVdBHmRL5N03Y5Lxb7N MzBJUetYmJJywJhrdPmIbyzWzqddx2ES3hUkG98Y01SMK8KdCjhwJeUSIjXERkJn BFGALUuD0dAiuogfONa6Efh+Hfn2ZzlgGghef4vrog6IjRL9TYwo8qmUoU+G7cJ5 dsMXZHDa1vyzsPZCXpottWHCvQvmoEyzTG/exvROKl6ofFzSXCTunl+B/4XoFiaf d9XmUC2dH2cfGM/p7YHPAlrKqnn/RjdL -----END CERTIFICATE-----Generated at Sat Apr 26 03:56:37 2025 by rpki-client