$ rpki-client -vvf rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/0Q5D4Fk97x241_RMbxzRPnPC8jA.mft File: 0Q5D4Fk97x241_RMbxzRPnPC8jA.mft (raw, json) Hash identifier: oHyLtbOccrSfiXQJKkvEDYrqmftsc3IAI1GOTLGgDXE= Subject key identifier: 04:62:0D:3E:26:DD:3D:D3:71:07:8F:A9:56:1E:54:16:01:F6:5B:D0 Authority key identifier: D1:0E:43:E0:59:3D:EF:1D:B8:D7:F4:4C:6F:1C:D1:3E:73:C2:F2:30 Certificate issuer: /CN=A91325DC/serialNumber=D10E43E0593DEF1DB8D7F44C6F1CD13E73C2F230 Certificate serial: 0AFD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Q5D4Fk97x241_RMbxzRPnPC8jA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/0Q5D4Fk97x241_RMbxzRPnPC8jA.mft Manifest number: 0AF0 Signing time: Thu 24 Apr 2025 19:15:20 +0000 Manifest this update: Thu 24 Apr 2025 19:15:20 +0000 Manifest next update: Thu 01 May 2025 19:15:20 +0000 Files and hashes: 1: 0Q5D4Fk97x241_RMbxzRPnPC8jA.crl (hash: JPQ2lailtQYUEE4abXPM22IhA68uc9TS04bOVBLDKlE=) 2: A2DE5B44AE1C11EAA46DAF7FC4F9AE02.roa (hash: wBezilbHgFlLqA1qqUMQVDVzvkJDksyuC7XhtfdBEgk=) 3: 3FC1B85E431811EA84E68121C4F9AE02.roa (hash: kRXthgEAoGC/b23UrIEWTh9+gf3/yFfF1cVAtff2rTg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/0Q5D4Fk97x241_RMbxzRPnPC8jA.crl rsync://rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/0Q5D4Fk97x241_RMbxzRPnPC8jA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Q5D4Fk97x241_RMbxzRPnPC8jA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:15:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2813 (0xafd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91325DC, serialNumber=D10E43E0593DEF1DB8D7F44C6F1CD13E73C2F230 Validity Not Before: Apr 24 19:15:20 2025 GMT Not After : May 1 19:15:20 2025 GMT Subject: CN=680a8dc8-1cf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:13:cc:a0:a4:de:3c:e0:73:57:cb:30:e9:bd: 54:32:bb:47:4b:a8:38:4a:c3:14:55:4d:a2:73:56: fb:c7:7d:20:c4:3c:99:3c:64:8e:ba:61:8d:fe:8d: ad:7b:e6:7a:99:fd:1f:d4:bb:87:11:16:f7:18:f0: f8:04:2f:d7:8a:de:2f:94:df:e6:9b:5d:db:db:8c: 6e:5e:b8:85:61:79:f7:69:25:67:02:e1:47:66:d0: e5:1c:d9:9a:1a:b3:4f:0a:71:cf:3e:b7:65:0b:ad: 6d:2b:33:bc:7d:81:15:d3:1a:98:29:41:77:68:0a: 8d:43:f8:68:79:15:ce:ff:83:20:d8:a8:3d:63:4c: 46:9a:fe:1b:9a:07:a0:41:b4:cb:a5:47:80:2c:98: cb:bc:e8:1c:84:d2:7c:07:8a:71:d1:64:52:e8:c6: 08:c2:28:86:f6:7b:c0:23:38:bd:6b:fa:50:73:ef: 59:7d:f7:71:84:b3:f2:ff:97:e9:39:49:a1:46:43: ea:70:06:a7:fe:0a:03:55:00:3a:e6:fc:de:d1:06: d8:06:74:2a:4a:8d:02:3e:3e:90:e4:d2:a1:99:ee: a5:8f:1c:5d:11:e4:20:57:42:7c:54:23:13:5c:ac: 43:21:e8:24:8e:13:13:c9:5e:54:85:07:5e:62:a5: d6:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:62:0D:3E:26:DD:3D:D3:71:07:8F:A9:56:1E:54:16:01:F6:5B:D0 X509v3 Authority Key Identifier: keyid:D1:0E:43:E0:59:3D:EF:1D:B8:D7:F4:4C:6F:1C:D1:3E:73:C2:F2:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/0Q5D4Fk97x241_RMbxzRPnPC8jA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Q5D4Fk97x241_RMbxzRPnPC8jA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/0Q5D4Fk97x241_RMbxzRPnPC8jA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:54:c0:95:6f:41:13:f9:52:08:6c:0c:63:45:f7:88:99:65: ed:73:7e:95:39:f8:11:5b:a4:c7:e7:6c:7a:b8:b9:b9:6c:35: d0:65:92:5c:bb:f2:e5:69:7c:90:ce:6d:b4:2e:43:47:5c:55: 33:a9:81:3e:c0:2a:8f:02:44:a8:81:2a:40:7c:c9:65:49:69: cc:e8:30:7e:fa:d7:f4:62:5f:81:be:ac:b8:65:f1:a4:fc:da: 73:ca:70:c2:2b:ae:2b:e9:32:2f:39:96:86:9c:26:0b:8a:32: 2d:1f:07:cd:13:a6:0b:3d:aa:15:d8:04:63:a8:90:ee:dc:b4: f5:b8:be:06:6b:11:67:0a:4b:e7:26:f8:f0:45:02:48:f2:cd: 4d:67:61:77:a1:01:9f:89:d1:62:59:ee:0c:6b:e8:3a:37:b7: d3:0b:1c:ad:2d:09:ca:b0:3a:93:4a:23:28:f4:d3:87:ac:d8: 39:d8:a1:8b:c8:26:b5:f0:d1:a5:18:b4:b8:9b:56:ff:56:0b: 65:67:2f:1a:e1:58:7b:1c:56:89:b2:5e:a5:ee:a2:c5:5e:2e: 21:e5:e6:43:21:c3:c6:0a:a2:fd:0a:68:9d:f1:0b:2f:78:1b: 1a:90:1c:08:ab:81:e3:23:6c:64:fc:a3:5f:db:b1:63:95:38: 45:32:1f:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCv0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzI1REMxMTAvBgNVBAUTKEQxMEU0M0UwNTkzREVGMURCOEQ3RjQ0QzZGMUNEMTNF NzNDMkYyMzAwHhcNMjUwNDI0MTkxNTIwWhcNMjUwNTAxMTkxNTIwWjAYMRYwFAYD VQQDEw02ODBhOGRjOC0xY2YxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArhPMoKTePOBzV8sw6b1UMrtHS6g4SsMUVU2ic1b7x30gxDyZPGSOumGN/o2t e+Z6mf0f1LuHERb3GPD4BC/Xit4vlN/mm13b24xuXriFYXn3aSVnAuFHZtDlHNma GrNPCnHPPrdlC61tKzO8fYEV0xqYKUF3aAqNQ/hoeRXO/4Mg2Kg9Y0xGmv4bmgeg QbTLpUeALJjLvOgchNJ8B4px0WRS6MYIwiiG9nvAIzi9a/pQc+9ZffdxhLPy/5fp OUmhRkPqcAan/goDVQA65vze0QbYBnQqSo0CPj6Q5NKhme6ljxxdEeQgV0J8VCMT XKxDIegkjhMTyV5UhQdeYqXWOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFARiDT4m 3T3TcQePqVYeVBYB9lvQMB8GA1UdIwQYMBaAFNEOQ+BZPe8duNf0TG8c0T5zwvIw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMjVEQy80NjEyRDUxRTQz MTYxMUVBQjI2Mjc4MURDNEY5QUUwMi8wUTVENEZrOTd4MjQxX1JNYnh6UlBuUEM4 akEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBRNUQ0Rms5N3gyNDFfUk1ieHpSUG5QQzhqQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MjVEQy80NjEyRDUxRTQzMTYxMUVBQjI2Mjc4MURDNEY5QUUwMi8wUTVENEZrOTd4 MjQxX1JNYnh6UlBuUEM4akEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBVMCVb0ET+VIIbAxjRfeImWXtc36VOfgRW6TH52x6uLm5bDXQZZJc u/LlaXyQzm20LkNHXFUzqYE+wCqPAkSogSpAfMllSWnM6DB++tf0Yl+Bvqy4ZfGk /NpzynDCK64r6TIvOZaGnCYLijItHwfNE6YLPaoV2ARjqJDu3LT1uL4GaxFnCkvn JvjwRQJI8s1NZ2F3oQGfidFiWe4Ma+g6N7fTCxytLQnKsDqTSiMo9NOHrNg52KGL yCa18NGlGLS4m1b/VgtlZy8a4Vh7HFaJsl6l7qLFXi4h5eZDIcPGCqL9Cmid8Qsv eBsakBwIq4HjI2xk/KNf27FjlThFMh+b -----END CERTIFICATE-----Generated at Sat Apr 26 04:35:50 2025 by rpki-client