$ rpki-client -vvf rpki.apnic.net/member_repository/A913132A/B11648D81DA711E28B6E86A108B02CD2/cQnPztTUjL9WSOoHl6fHNH1o_xI.mft File: cQnPztTUjL9WSOoHl6fHNH1o_xI.mft (raw, json) Hash identifier: TB60P93zsWH/4PkHM49cnrZpV2RijoKfHoCBMt48XyM= Subject key identifier: 34:C7:9D:97:F7:50:64:70:00:C6:50:FD:1E:2D:7F:25:81:BB:EF:29 Authority key identifier: 71:09:CF:CE:D4:D4:8C:BF:56:48:EA:07:97:A7:C7:34:7D:68:FF:12 Certificate issuer: /CN=A913132A/serialNumber=7109CFCED4D48CBF5648EA0797A7C7347D68FF12 Certificate serial: 3470 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cQnPztTUjL9WSOoHl6fHNH1o_xI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913132A/B11648D81DA711E28B6E86A108B02CD2/cQnPztTUjL9WSOoHl6fHNH1o_xI.mft Manifest number: 3470 Signing time: Thu 24 Apr 2025 15:14:05 +0000 Manifest this update: Thu 24 Apr 2025 15:14:04 +0000 Manifest next update: Thu 01 May 2025 15:14:04 +0000 Files and hashes: 1: cQnPztTUjL9WSOoHl6fHNH1o_xI.crl (hash: qtLMqaXq2fKLYYgE2wNmg3CJ/WEpqDi2oSwE2HFQp18=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913132A/B11648D81DA711E28B6E86A108B02CD2/cQnPztTUjL9WSOoHl6fHNH1o_xI.crl rsync://rpki.apnic.net/member_repository/A913132A/B11648D81DA711E28B6E86A108B02CD2/cQnPztTUjL9WSOoHl6fHNH1o_xI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cQnPztTUjL9WSOoHl6fHNH1o_xI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 15:14:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13424 (0x3470) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913132A, serialNumber=7109CFCED4D48CBF5648EA0797A7C7347D68FF12 Validity Not Before: Apr 24 15:14:04 2025 GMT Not After : May 1 15:14:04 2025 GMT Subject: CN=680a553c-1ef3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:b6:ff:15:7c:b5:fb:c0:14:4f:ad:4b:e3:de: 3e:99:3d:9f:62:40:5f:bc:ba:07:18:bd:1c:fc:3f: 0a:55:35:fe:31:0c:4b:ff:9c:b4:7d:4c:de:d7:1a: fc:0c:a2:89:a9:25:64:1d:8e:31:0f:ef:e5:43:c1: ee:7b:3f:4d:81:d4:53:8f:cf:b0:da:1d:95:b1:cd: 33:4d:fc:8a:fe:f5:40:cf:b5:82:5e:92:1d:46:99: 75:27:f6:49:df:3b:0a:d0:2a:d4:be:46:8b:73:87: f8:3a:e9:10:7d:55:5d:46:9c:f9:a5:2b:be:1a:2e: e7:ba:e5:d1:d2:8b:8c:f3:58:3f:21:fd:d2:57:7a: 3e:75:1b:33:f7:17:2b:81:81:43:5c:0a:2f:e0:c2: bb:d9:ed:4d:5a:bb:d1:e2:f5:66:bd:98:dc:ee:10: 13:bf:3c:c9:0b:0a:8a:53:20:d8:a0:73:0e:9e:0a: 66:5b:75:9d:09:51:44:9a:37:35:8f:4c:55:13:c6: 8c:8f:05:0c:ce:dd:a2:c8:c8:a3:b6:f9:65:36:a6: 6a:8e:45:25:dd:a3:8c:d5:5e:3d:19:72:36:b8:01: 32:e5:f5:a9:46:27:89:51:7f:24:bf:e2:21:32:42: 4a:79:7d:61:e2:a5:fd:20:84:c4:27:ff:2a:4f:de: 71:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:C7:9D:97:F7:50:64:70:00:C6:50:FD:1E:2D:7F:25:81:BB:EF:29 X509v3 Authority Key Identifier: keyid:71:09:CF:CE:D4:D4:8C:BF:56:48:EA:07:97:A7:C7:34:7D:68:FF:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913132A/B11648D81DA711E28B6E86A108B02CD2/cQnPztTUjL9WSOoHl6fHNH1o_xI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cQnPztTUjL9WSOoHl6fHNH1o_xI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913132A/B11648D81DA711E28B6E86A108B02CD2/cQnPztTUjL9WSOoHl6fHNH1o_xI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:1d:54:b5:b7:a3:f4:22:8c:15:d1:64:ee:cb:79:ed:c4:76: f0:1e:68:30:28:f0:04:09:84:6c:97:0f:49:93:05:0a:d9:25: 24:b8:df:f7:b8:4e:8e:f0:aa:0b:34:54:f7:71:80:30:0d:55: e3:02:1e:a1:df:7e:c3:91:e4:3e:5c:20:89:89:3d:1d:11:67: eb:b8:8c:de:81:40:24:b4:91:1c:ae:6f:fe:07:eb:58:da:34: bd:ef:cf:ba:fe:c2:82:8b:62:8b:32:b2:58:03:b2:7d:43:37: d8:0a:b0:7d:80:56:1a:c8:ca:5f:31:f0:0d:43:cb:44:46:6e: fb:54:9d:3b:d1:5c:57:9b:df:69:ce:ad:d0:78:ab:6b:d0:bc: a6:e1:21:ed:f9:92:c6:55:5a:89:1c:d3:91:af:5d:71:a3:7c: 54:f1:0d:0c:34:cc:d5:1f:95:ce:b5:5f:7c:93:43:69:60:ea: 7f:ce:ec:85:c5:29:d6:fa:89:1a:f9:29:ec:26:d2:6c:7c:65: 85:3a:5e:9e:41:ed:5e:24:4b:50:e8:14:23:3c:cf:37:a3:f9: b3:ee:b0:68:da:bb:62:d0:bb:27:74:e4:2e:48:6f:22:72:e1: bb:f6:81:09:df:a2:9e:37:2e:06:3d:0b:d9:a9:57:32:54:9a: c4:c5:01:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNHAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzEzMkExMTAvBgNVBAUTKDcxMDlDRkNFRDRENDhDQkY1NjQ4RUEwNzk3QTdDNzM0 N0Q2OEZGMTIwHhcNMjUwNDI0MTUxNDA0WhcNMjUwNTAxMTUxNDA0WjAYMRYwFAYD VQQDEw02ODBhNTUzYy0xZWYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAprb/FXy1+8AUT61L494+mT2fYkBfvLoHGL0c/D8KVTX+MQxL/5y0fUze1xr8 DKKJqSVkHY4xD+/lQ8Huez9NgdRTj8+w2h2Vsc0zTfyK/vVAz7WCXpIdRpl1J/ZJ 3zsK0CrUvkaLc4f4OukQfVVdRpz5pSu+Gi7nuuXR0ouM81g/If3SV3o+dRsz9xcr gYFDXAov4MK72e1NWrvR4vVmvZjc7hATvzzJCwqKUyDYoHMOngpmW3WdCVFEmjc1 j0xVE8aMjwUMzt2iyMijtvllNqZqjkUl3aOM1V49GXI2uAEy5fWpRieJUX8kv+Ih MkJKeX1h4qX9IITEJ/8qT95xAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDTHnZf3 UGRwAMZQ/R4tfyWBu+8pMB8GA1UdIwQYMBaAFHEJz87U1Iy/VkjqB5enxzR9aP8S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTMyQS9CMTE2NDhEODFE QTcxMUUyOEI2RTg2QTEwOEIwMkNEMi9jUW5QenRUVWpMOVdTT29IbDZmSE5IMW9f eEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NRblB6dFRVakw5V1NPb0hsNmZITkgxb194SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTMyQS9CMTE2NDhEODFEQTcxMUUyOEI2RTg2QTEwOEIwMkNEMi9jUW5QenRUVWpM OVdTT29IbDZmSE5IMW9feEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7HVS1t6P0IowV0WTuy3ntxHbwHmgwKPAECYRslw9JkwUK2SUkuN/3 uE6O8KoLNFT3cYAwDVXjAh6h337DkeQ+XCCJiT0dEWfruIzegUAktJEcrm/+B+tY 2jS978+6/sKCi2KLMrJYA7J9QzfYCrB9gFYayMpfMfANQ8tERm77VJ070VxXm99p zq3QeKtr0Lym4SHt+ZLGVVqJHNORr11xo3xU8Q0MNMzVH5XOtV98k0NpYOp/zuyF xSnW+oka+SnsJtJsfGWFOl6eQe1eJEtQ6BQjPM83o/mz7rBo2rti0LsndOQuSG8i cuG79oEJ36KeNy4GPQvZqVcyVJrExQFZ -----END CERTIFICATE-----Generated at Sat Apr 26 12:31:16 2025 by rpki-client