$ rpki-client -vvf rpki.apnic.net/member_repository/A9132C09/CD6D520256C511EEBED32E0BC4F9AE02/Q5KdkW3Jyc40Y_-RWMy-_p8YLDs.mft File: Q5KdkW3Jyc40Y_-RWMy-_p8YLDs.mft (raw, json) Hash identifier: KHqMhlMt0iVAvyPodzpNbsuremKOow/EG4KbEeVjgsg= Subject key identifier: F6:8A:EF:B9:83:41:20:0D:E0:30:3A:E3:86:78:69:CD:CA:A0:87:DD Authority key identifier: 43:92:9D:91:6D:C9:C9:CE:34:63:FF:91:58:CC:BE:FE:9F:18:2C:3B Certificate issuer: /CN=A9132C09/serialNumber=43929D916DC9C9CE3463FF9158CCBEFE9F182C3B Certificate serial: 012B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q5KdkW3Jyc40Y_-RWMy-_p8YLDs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9132C09/CD6D520256C511EEBED32E0BC4F9AE02/Q5KdkW3Jyc40Y_-RWMy-_p8YLDs.mft Manifest number: 012B Signing time: Fri 25 Apr 2025 03:39:41 +0000 Manifest this update: Fri 25 Apr 2025 03:39:40 +0000 Manifest next update: Fri 02 May 2025 03:39:40 +0000 Files and hashes: 1: Q5KdkW3Jyc40Y_-RWMy-_p8YLDs.crl (hash: kGuaAE7wfSKcGbEeD6/FCVbvmIv+muuQcOJj+TkXu5o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9132C09/CD6D520256C511EEBED32E0BC4F9AE02/Q5KdkW3Jyc40Y_-RWMy-_p8YLDs.crl rsync://rpki.apnic.net/member_repository/A9132C09/CD6D520256C511EEBED32E0BC4F9AE02/Q5KdkW3Jyc40Y_-RWMy-_p8YLDs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q5KdkW3Jyc40Y_-RWMy-_p8YLDs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:39:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 299 (0x12b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9132C09, serialNumber=43929D916DC9C9CE3463FF9158CCBEFE9F182C3B Validity Not Before: Apr 25 03:39:40 2025 GMT Not After : May 2 03:39:40 2025 GMT Subject: CN=680b03fc-a923 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:0b:07:4c:e5:bb:11:48:86:83:8b:5a:a4:42: 4f:2e:d0:15:73:16:b2:b6:d6:18:d2:6f:62:d9:aa: 11:e1:90:6f:d8:e8:38:b1:f0:57:63:70:15:eb:3b: e8:64:b2:ed:da:6a:fb:e4:c3:48:b2:34:43:aa:28: c2:c3:5b:a0:26:89:e4:18:94:2f:2a:83:6a:dd:84: b8:51:eb:58:35:18:5d:fc:3c:60:2e:dd:ae:06:66: 4a:33:e3:07:3e:41:9d:a8:9c:e5:06:bd:11:e9:7b: d6:d1:08:a1:c0:49:3c:ca:cf:30:fc:ac:19:ff:2b: 1b:a7:12:95:ed:cc:b0:b8:f7:bd:21:b4:59:72:0c: 5f:84:45:57:33:2b:47:b9:7a:34:c4:ea:93:56:43: 15:a3:0d:a0:7e:46:eb:a7:6e:18:ce:fa:36:f2:68: 8a:7a:3b:ee:91:3c:e3:eb:83:ab:b8:73:6c:a0:71: 0e:15:44:98:48:20:bf:13:ff:b0:41:36:d9:18:b9: db:1f:a6:ac:22:cb:e6:d5:8c:41:ed:43:11:e5:26: 69:6c:d4:c3:da:6e:80:67:18:2e:53:1b:04:18:f5: 2b:9b:15:a1:e3:32:86:34:c3:92:f8:ad:0c:db:65: 0d:47:e3:24:b4:fd:21:fd:ae:11:4b:10:98:1c:64: b7:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:8A:EF:B9:83:41:20:0D:E0:30:3A:E3:86:78:69:CD:CA:A0:87:DD X509v3 Authority Key Identifier: keyid:43:92:9D:91:6D:C9:C9:CE:34:63:FF:91:58:CC:BE:FE:9F:18:2C:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9132C09/CD6D520256C511EEBED32E0BC4F9AE02/Q5KdkW3Jyc40Y_-RWMy-_p8YLDs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q5KdkW3Jyc40Y_-RWMy-_p8YLDs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132C09/CD6D520256C511EEBED32E0BC4F9AE02/Q5KdkW3Jyc40Y_-RWMy-_p8YLDs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:55:04:c8:1d:5a:68:56:d5:2d:ff:e5:dc:b7:17:77:dc:9c: 12:cc:46:0a:3e:b6:53:81:87:1c:53:c3:19:50:ea:6b:b9:f4: ea:21:01:04:be:e7:13:a2:35:a5:d7:d8:b8:af:1b:31:0e:17: 2a:30:2e:af:81:1d:2e:6c:8c:36:b5:7e:c1:5b:12:d2:c1:0c: 66:04:66:71:4e:65:91:68:7c:64:25:46:68:ab:45:6e:69:3e: 7d:cb:a2:c5:bf:4b:1f:ad:54:ec:9c:da:30:2f:d8:dd:45:a7: 30:3f:ce:8c:6c:b5:85:ed:09:6b:05:14:62:f0:54:3d:7d:ab: 1a:a0:03:83:c9:f5:36:ba:01:d0:ef:81:48:83:bf:3f:35:2b: 42:88:27:e0:f2:95:c2:5b:51:a4:81:47:71:47:70:12:a1:21: 25:d5:50:48:e1:33:a9:2b:7f:7b:53:34:15:87:54:47:af:1b: 22:94:4f:1c:13:79:81:27:35:6a:14:95:50:dd:b0:75:8d:7b: 48:5c:d9:1b:1a:39:df:a7:99:5e:8e:14:c5:69:08:de:1a:18: 02:e5:51:7d:51:58:e4:27:2f:a3:6f:9c:99:1f:45:be:88:81: 85:16:a4:94:5f:12:27:26:75:cc:21:2d:55:7a:e8:18:3c:a9: 9d:fc:e1:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzJDMDkxMTAvBgNVBAUTKDQzOTI5RDkxNkRDOUM5Q0UzNDYzRkY5MTU4Q0NCRUZF OUYxODJDM0IwHhcNMjUwNDI1MDMzOTQwWhcNMjUwNTAyMDMzOTQwWjAYMRYwFAYD VQQDEw02ODBiMDNmYy1hOTIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9gsHTOW7EUiGg4tapEJPLtAVcxayttYY0m9i2aoR4ZBv2Og4sfBXY3AV6zvo ZLLt2mr75MNIsjRDqijCw1ugJonkGJQvKoNq3YS4UetYNRhd/DxgLt2uBmZKM+MH PkGdqJzlBr0R6XvW0QihwEk8ys8w/KwZ/ysbpxKV7cywuPe9IbRZcgxfhEVXMytH uXo0xOqTVkMVow2gfkbrp24Yzvo28miKejvukTzj64OruHNsoHEOFUSYSCC/E/+w QTbZGLnbH6asIsvm1YxB7UMR5SZpbNTD2m6AZxguUxsEGPUrmxWh4zKGNMOS+K0M 22UNR+MktP0h/a4RSxCYHGS3CQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPaK77mD QSAN4DA644Z4ac3KoIfdMB8GA1UdIwQYMBaAFEOSnZFtycnONGP/kVjMvv6fGCw7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMkMwOS9DRDZENTIwMjU2 QzUxMUVFQkVEMzJFMEJDNEY5QUUwMi9RNUtka1czSnljNDBZXy1SV015LV9wOFlM RHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1E1S2RrVzNKeWM0MFlfLVJXTXktX3A4WUxEcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MkMwOS9DRDZENTIwMjU2QzUxMUVFQkVEMzJFMEJDNEY5QUUwMi9RNUtka1czSnlj NDBZXy1SV015LV9wOFlMRHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmVQTIHVpoVtUt/+Xctxd33JwSzEYKPrZTgYccU8MZUOprufTqIQEE vucTojWl19i4rxsxDhcqMC6vgR0ubIw2tX7BWxLSwQxmBGZxTmWRaHxkJUZoq0Vu aT59y6LFv0sfrVTsnNowL9jdRacwP86MbLWF7QlrBRRi8FQ9fasaoAODyfU2ugHQ 74FIg78/NStCiCfg8pXCW1GkgUdxR3ASoSEl1VBI4TOpK397UzQVh1RHrxsilE8c E3mBJzVqFJVQ3bB1jXtIXNkbGjnfp5lejhTFaQjeGhgC5VF9UVjkJy+jb5yZH0W+ iIGFFqSUXxInJnXMIS1VeugYPKmd/OEU -----END CERTIFICATE-----Generated at Sat Apr 26 03:59:02 2025 by rpki-client