$ rpki-client -vvf rpki.apnic.net/member_repository/A9130416/CA6D58B4B67411EDBEB60F39C4F9AE02/mQaocNrdFPbUuobyzCweXkcN6LI.mft File: mQaocNrdFPbUuobyzCweXkcN6LI.mft (raw, json) Hash identifier: 5qwg9nQkyRo4yLb4qrmcNoCveXYYJmraWi0Y70m9TQw= Subject key identifier: 33:33:7F:83:49:83:81:1F:E6:2F:25:59:33:CC:E0:7F:06:BB:94:09 Authority key identifier: 99:06:A8:70:DA:DD:14:F6:D4:BA:86:F2:CC:2C:1E:5E:47:0D:E8:B2 Certificate issuer: /CN=A9130416/serialNumber=9906A870DADD14F6D4BA86F2CC2C1E5E470DE8B2 Certificate serial: 01B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mQaocNrdFPbUuobyzCweXkcN6LI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130416/CA6D58B4B67411EDBEB60F39C4F9AE02/mQaocNrdFPbUuobyzCweXkcN6LI.mft Manifest number: 01A5 Signing time: Fri 25 Apr 2025 02:35:02 +0000 Manifest this update: Fri 25 Apr 2025 02:35:01 +0000 Manifest next update: Fri 02 May 2025 02:35:01 +0000 Files and hashes: 1: mQaocNrdFPbUuobyzCweXkcN6LI.crl (hash: HeI1/0qQBStEVUtGn9HGsapSuk+OhIB+n+yEqr45mok=) 2: B24758AE772311EFA5510A63C4F9AE02.roa (hash: 7G0BMVUvyd16Cn1kPop9OQuW3GDQmIvZTooAvUo69iU=) 3: 62F0214E4E4F11EEB53AAA72C4F9AE02.roa (hash: nyG124tiVkImPGU3rqTUWRaCP3DJ/CIWqzndBgQMaZU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130416/CA6D58B4B67411EDBEB60F39C4F9AE02/mQaocNrdFPbUuobyzCweXkcN6LI.crl rsync://rpki.apnic.net/member_repository/A9130416/CA6D58B4B67411EDBEB60F39C4F9AE02/mQaocNrdFPbUuobyzCweXkcN6LI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mQaocNrdFPbUuobyzCweXkcN6LI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:35:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 436 (0x1b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130416, serialNumber=9906A870DADD14F6D4BA86F2CC2C1E5E470DE8B2 Validity Not Before: Apr 25 02:35:01 2025 GMT Not After : May 2 02:35:01 2025 GMT Subject: CN=680af4d5-d043 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:24:89:9f:94:3d:0d:c7:fa:79:c7:fb:0b:4e: 40:9c:47:51:fc:b2:d2:10:9f:35:6f:a9:23:cc:4f: 4e:32:26:32:d4:08:29:76:e6:9c:c1:4c:32:d0:22: f1:53:4c:bc:fe:79:9a:1d:84:d2:8f:af:b8:19:34: cb:47:cf:2e:e3:e6:68:4c:dc:b7:c2:b0:c2:27:8d: 29:09:44:44:4f:7f:d2:8e:96:d7:6c:10:0a:a5:b4: aa:01:dc:79:9b:de:66:b7:60:9a:d1:28:f5:3a:7a: 1b:bf:00:47:42:9d:f2:c1:95:7a:a1:33:12:39:08: 7e:07:58:0d:ff:43:8a:84:15:de:68:e5:04:56:ab: 34:c3:90:23:7d:29:57:4f:c1:2c:b7:55:34:5a:11: e9:0e:d9:5a:21:d4:74:c2:19:c7:96:14:17:31:d6: 32:f0:69:0a:f8:6c:8f:1c:3e:a4:d3:45:0a:d8:68: 4c:9e:bc:01:68:a7:ad:c3:83:01:61:ed:8b:e3:8f: 75:76:14:0d:56:cc:08:a0:9e:49:57:62:29:a9:ab: aa:0b:8a:e1:a7:0b:16:62:47:09:40:32:cd:b1:5b: 12:0f:0f:36:4d:bc:d7:97:04:2c:4d:19:e0:88:aa: e6:36:b9:fb:ca:4c:40:18:a0:f4:06:27:2a:63:34: ba:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:33:7F:83:49:83:81:1F:E6:2F:25:59:33:CC:E0:7F:06:BB:94:09 X509v3 Authority Key Identifier: keyid:99:06:A8:70:DA:DD:14:F6:D4:BA:86:F2:CC:2C:1E:5E:47:0D:E8:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130416/CA6D58B4B67411EDBEB60F39C4F9AE02/mQaocNrdFPbUuobyzCweXkcN6LI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mQaocNrdFPbUuobyzCweXkcN6LI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130416/CA6D58B4B67411EDBEB60F39C4F9AE02/mQaocNrdFPbUuobyzCweXkcN6LI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:9f:33:90:c0:3c:bc:9f:62:1e:84:5f:08:41:eb:7a:a5:89: 5b:62:90:26:a2:d2:b0:ee:3e:98:52:f2:35:ce:13:28:5b:be: fc:bc:8d:f9:0b:88:07:54:5c:42:07:7d:4a:11:19:92:91:45: 38:1e:53:4c:ba:22:df:82:60:3a:f2:fb:77:f3:69:2b:76:4a: c4:e6:01:10:79:3d:f0:be:2e:11:66:48:28:4a:75:97:04:17: d1:8a:21:50:ef:d7:db:60:bd:78:41:d8:9d:48:08:da:72:5c: f3:2b:28:05:a3:66:ef:db:9a:3e:51:d8:62:d3:97:d6:47:85: 7f:95:ba:59:d9:4d:1a:a3:8c:33:f4:ef:0a:38:67:39:99:12: 0c:5f:ed:c2:2a:05:2a:32:0b:71:ea:a3:3a:de:d8:4f:3e:06: 11:82:2c:2a:bc:36:34:4c:3a:36:70:0d:00:75:27:68:d3:b0: 6e:4c:6b:3a:b9:60:03:d9:89:60:e8:31:ab:94:48:75:06:80: 7a:44:85:c1:06:b2:dc:25:02:df:63:27:05:c2:1e:bd:25:6b: 64:25:eb:cb:5b:32:75:c3:2a:f9:22:b1:79:a0:07:c3:37:c0: 93:fd:35:3d:15:0b:12:fe:ed:f5:f8:20:a0:31:90:91:98:2a: ae:81:bb:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzA0MTYxMTAvBgNVBAUTKDk5MDZBODcwREFERDE0RjZENEJBODZGMkNDMkMxRTVF NDcwREU4QjIwHhcNMjUwNDI1MDIzNTAxWhcNMjUwNTAyMDIzNTAxWjAYMRYwFAYD VQQDEw02ODBhZjRkNS1kMDQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4ySJn5Q9Dcf6ecf7C05AnEdR/LLSEJ81b6kjzE9OMiYy1AgpduacwUwy0CLx U0y8/nmaHYTSj6+4GTTLR88u4+ZoTNy3wrDCJ40pCURET3/SjpbXbBAKpbSqAdx5 m95mt2Ca0Sj1OnobvwBHQp3ywZV6oTMSOQh+B1gN/0OKhBXeaOUEVqs0w5AjfSlX T8Est1U0WhHpDtlaIdR0whnHlhQXMdYy8GkK+GyPHD6k00UK2GhMnrwBaKetw4MB Ye2L4491dhQNVswIoJ5JV2IpqauqC4rhpwsWYkcJQDLNsVsSDw82TbzXlwQsTRng iKrmNrn7ykxAGKD0BicqYzS6UwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDMzf4NJ g4Ef5i8lWTPM4H8Gu5QJMB8GA1UdIwQYMBaAFJkGqHDa3RT21LqG8swsHl5HDeiy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDQxNi9DQTZENThCNEI2 NzQxMUVEQkVCNjBGMzlDNEY5QUUwMi9tUWFvY05yZEZQYlV1b2J5ekN3ZVhrY042 TEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21RYW9jTnJkRlBiVXVvYnl6Q3dlWGtjTjZMSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDQxNi9DQTZENThCNEI2NzQxMUVEQkVCNjBGMzlDNEY5QUUwMi9tUWFvY05yZEZQ YlV1b2J5ekN3ZVhrY042TEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwnzOQwDy8n2IehF8IQet6pYlbYpAmotKw7j6YUvI1zhMoW778vI35 C4gHVFxCB31KERmSkUU4HlNMuiLfgmA68vt382krdkrE5gEQeT3wvi4RZkgoSnWX BBfRiiFQ79fbYL14QdidSAjaclzzKygFo2bv25o+Udhi05fWR4V/lbpZ2U0ao4wz 9O8KOGc5mRIMX+3CKgUqMgtx6qM63thPPgYRgiwqvDY0TDo2cA0AdSdo07BuTGs6 uWAD2Ylg6DGrlEh1BoB6RIXBBrLcJQLfYycFwh69JWtkJevLWzJ1wyr5IrF5oAfD N8CT/TU9FQsS/u31+CCgMZCRmCqugbu2 -----END CERTIFICATE-----Generated at Sat Apr 26 12:55:50 2025 by rpki-client