$ rpki-client -vvf rpki.apnic.net/member_repository/A9136CB3/A5FD84F2571B11EEB418AB3EC4F9AE02/q0Xb_DVXfyfJn89Ao5s4azI1Cto.mft File: q0Xb_DVXfyfJn89Ao5s4azI1Cto.mft (raw, json) Hash identifier: 5P6T6fOD/+hj3KIlWtCGrjk+oGkBZy8VWN15GGHIrlo= Subject key identifier: C1:A5:A3:95:D7:DF:B6:FF:4A:96:BE:F2:56:7F:E8:E4:8F:36:FC:A2 Authority key identifier: AB:45:DB:FC:35:57:7F:27:C9:9F:CF:40:A3:9B:38:6B:32:35:0A:DA Certificate issuer: /CN=A9136CB3/serialNumber=AB45DBFC35577F27C99FCF40A39B386B32350ADA Certificate serial: 013A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q0Xb_DVXfyfJn89Ao5s4azI1Cto.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136CB3/A5FD84F2571B11EEB418AB3EC4F9AE02/q0Xb_DVXfyfJn89Ao5s4azI1Cto.mft Manifest number: 0132 Signing time: Fri 25 Apr 2025 03:39:54 +0000 Manifest this update: Fri 25 Apr 2025 03:39:54 +0000 Manifest next update: Fri 02 May 2025 03:39:54 +0000 Files and hashes: 1: q0Xb_DVXfyfJn89Ao5s4azI1Cto.crl (hash: SwEH0hv2SfQvEl4xf42m3tGX9L9wnbcp2tCD0GDq104=) 2: B210BF28D1BF11EF95281B83C4F9AE02.roa (hash: ZnF+YTP2pRwfo0eUOGSGb1Y71fB7TRDK5QfyiO+cZbM=) 3: 20DA8B7E571D11EEAA430244C4F9AE02.roa (hash: dRKaSZEwPfTmZ9fnNDPlpvp0Ujh9QZMuM+RN8ZLvFSw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136CB3/A5FD84F2571B11EEB418AB3EC4F9AE02/q0Xb_DVXfyfJn89Ao5s4azI1Cto.crl rsync://rpki.apnic.net/member_repository/A9136CB3/A5FD84F2571B11EEB418AB3EC4F9AE02/q0Xb_DVXfyfJn89Ao5s4azI1Cto.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q0Xb_DVXfyfJn89Ao5s4azI1Cto.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:39:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 314 (0x13a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136CB3, serialNumber=AB45DBFC35577F27C99FCF40A39B386B32350ADA Validity Not Before: Apr 25 03:39:54 2025 GMT Not After : May 2 03:39:54 2025 GMT Subject: CN=680b040a-bc26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:46:cb:90:2f:3a:3b:73:a3:ad:1d:bb:18:3a: f7:32:be:5e:ac:fd:56:98:e0:84:97:58:3c:d4:a9: 81:1e:38:7e:67:72:95:e5:ab:05:6f:08:76:5d:be: 15:15:94:72:ec:4e:8b:e1:85:02:3e:5a:3d:fa:a4: 0b:d3:6f:4f:ce:90:1b:58:42:ef:8c:d3:fa:32:bf: d0:4e:0e:eb:34:6e:8c:8a:f4:53:62:1c:f4:dd:67: c7:b7:db:2c:a5:88:a5:58:03:f5:b1:8f:9a:eb:74: 28:46:c5:24:3f:4a:c0:25:23:2d:0d:31:06:7a:c2: 8d:55:96:81:40:9f:68:e0:04:6f:12:2a:49:bd:c0: 3c:4b:ba:5a:39:41:c8:c0:73:a5:4e:ef:67:49:56: 76:ec:4a:d1:7a:d6:b3:32:bc:89:46:ce:da:43:76: b2:13:c2:48:03:b8:d1:1e:b4:b7:ac:09:ee:0d:ed: 9f:66:ec:fd:8d:24:23:95:c2:22:1b:aa:b5:a3:73: b7:3f:ab:13:65:9b:2c:45:cb:62:e4:fd:2e:bf:4a: b6:a1:d9:00:92:de:09:27:4e:08:e7:ac:24:86:5b: 28:c3:f6:cd:6f:2b:27:fb:59:f9:ea:1a:9e:01:41: 49:02:a2:63:66:9d:ff:ab:00:52:d2:48:72:1d:37: 54:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:A5:A3:95:D7:DF:B6:FF:4A:96:BE:F2:56:7F:E8:E4:8F:36:FC:A2 X509v3 Authority Key Identifier: keyid:AB:45:DB:FC:35:57:7F:27:C9:9F:CF:40:A3:9B:38:6B:32:35:0A:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136CB3/A5FD84F2571B11EEB418AB3EC4F9AE02/q0Xb_DVXfyfJn89Ao5s4azI1Cto.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q0Xb_DVXfyfJn89Ao5s4azI1Cto.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136CB3/A5FD84F2571B11EEB418AB3EC4F9AE02/q0Xb_DVXfyfJn89Ao5s4azI1Cto.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:52:d4:dd:5a:d8:ee:84:e6:c9:66:87:62:57:14:8b:ae:d5: af:d8:96:95:a6:0c:83:fb:7a:cf:a6:ee:60:bd:7c:0d:ff:7d: ad:04:ba:c6:70:de:49:08:b3:40:9f:87:d5:7b:13:f6:ed:fa: a8:6d:fd:e7:91:0c:62:34:0f:9e:49:58:11:13:45:9d:b3:cb: 60:49:52:ee:91:bb:b1:14:6b:9b:e4:3f:1b:9b:b2:74:92:23: 0d:bd:63:a8:ae:51:51:33:56:1f:64:ef:be:02:0c:f5:4c:0d: 9c:91:bc:17:3c:6a:bf:31:f9:bc:d3:de:9c:26:d7:36:5b:2f: 9f:c1:5c:0e:42:b8:8a:98:ac:33:d7:e9:c7:e3:33:14:ab:59: 14:e1:80:1e:9a:03:94:7e:e7:46:f8:aa:10:da:0e:f2:ee:94: c8:e4:c3:10:31:33:1c:10:24:e3:7a:d7:f6:92:64:cc:3e:c6: 5b:95:e2:9e:32:8c:0c:d8:4f:71:bc:ec:6e:00:86:3f:15:d1: 7b:61:9e:15:21:cc:b6:64:81:32:e4:ac:8b:58:53:95:69:e8: 45:1d:22:88:2c:dd:72:04:64:de:7c:3e:2c:c3:92:11:9b:a4: f9:76:56:6f:d6:65:53:64:b2:0c:45:bf:c6:70:84:ea:2c:6f: c4:12:54:ff -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzZDQjMxMTAvBgNVBAUTKEFCNDVEQkZDMzU1NzdGMjdDOTlGQ0Y0MEEzOUIzODZC MzIzNTBBREEwHhcNMjUwNDI1MDMzOTU0WhcNMjUwNTAyMDMzOTU0WjAYMRYwFAYD VQQDEw02ODBiMDQwYS1iYzI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvEbLkC86O3OjrR27GDr3Mr5erP1WmOCEl1g81KmBHjh+Z3KV5asFbwh2Xb4V FZRy7E6L4YUCPlo9+qQL029PzpAbWELvjNP6Mr/QTg7rNG6MivRTYhz03WfHt9ss pYilWAP1sY+a63QoRsUkP0rAJSMtDTEGesKNVZaBQJ9o4ARvEipJvcA8S7paOUHI wHOlTu9nSVZ27ErRetazMryJRs7aQ3ayE8JIA7jRHrS3rAnuDe2fZuz9jSQjlcIi G6q1o3O3P6sTZZssRcti5P0uv0q2odkAkt4JJ04I56wkhlsow/bNbysn+1n56hqe AUFJAqJjZp3/qwBS0khyHTdU3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMGlo5XX 37b/Spa+8lZ/6OSPNvyiMB8GA1UdIwQYMBaAFKtF2/w1V38nyZ/PQKObOGsyNQra MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkNCMy9BNUZEODRGMjU3 MUIxMUVFQjQxOEFCM0VDNEY5QUUwMi9xMFhiX0RWWGZ5ZkpuODlBbzVzNGF6STFD dG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3EwWGJfRFZYZnlmSm44OUFvNXM0YXpJMUN0by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NkNCMy9BNUZEODRGMjU3MUIxMUVFQjQxOEFCM0VDNEY5QUUwMi9xMFhiX0RWWGZ5 ZkpuODlBbzVzNGF6STFDdG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfUtTdWtjuhObJZodiVxSLrtWv2JaVpgyD+3rPpu5gvXwN/32tBLrG cN5JCLNAn4fVexP27fqobf3nkQxiNA+eSVgRE0Wds8tgSVLukbuxFGub5D8bm7J0 kiMNvWOorlFRM1YfZO++Agz1TA2ckbwXPGq/Mfm8096cJtc2Wy+fwVwOQriKmKwz 1+nH4zMUq1kU4YAemgOUfudG+KoQ2g7y7pTI5MMQMTMcECTjetf2kmTMPsZbleKe MowM2E9xvOxuAIY/FdF7YZ4VIcy2ZIEy5KyLWFOVaehFHSKILN1yBGTefD4sw5IR m6T5dlZv1mVTZLIMRb/GcITqLG/EElT/ -----END CERTIFICATE-----Generated at Sat Apr 26 03:48:31 2025 by rpki-client