$ rpki-client -vvf rpki.apnic.net/member_repository/A9138BC1/152D5C861B6911F0BFFC3F2FC4F9AE02/Qnc6qEHXDnPE730nyY_LnUQgxGw.mft File: Qnc6qEHXDnPE730nyY_LnUQgxGw.mft (raw, json) Hash identifier: mpZLlvqM7e9JRSkQ0lG1dQMQNhEN/bCRRu+fx0wMCkE= Subject key identifier: B7:D2:BD:17:F6:4E:FC:B3:D0:31:99:3F:BE:1C:78:7C:6C:06:A2:40 Authority key identifier: 42:77:3A:A8:41:D7:0E:73:C4:EF:7D:27:C9:8F:CB:9D:44:20:C4:6C Certificate issuer: /CN=A9138BC1/serialNumber=42773AA841D70E73C4EF7D27C98FCB9D4420C46C Certificate serial: 07 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qnc6qEHXDnPE730nyY_LnUQgxGw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9138BC1/152D5C861B6911F0BFFC3F2FC4F9AE02/Qnc6qEHXDnPE730nyY_LnUQgxGw.mft Manifest number: 06 Signing time: Fri 25 Apr 2025 07:10:06 +0000 Manifest this update: Fri 25 Apr 2025 07:10:06 +0000 Manifest next update: Fri 02 May 2025 07:10:06 +0000 Files and hashes: 1: Qnc6qEHXDnPE730nyY_LnUQgxGw.crl (hash: bo33fsfku7TrzsKIW8yaGh5dcFOIkckSbQ3DXc6ZbWs=) 2: 6ADACB0A1B6911F09204CE2FC4F9AE02.roa (hash: gqxaCaR+XnfSGCVk4MotcSInE621jLFW8PAuLJkFUyI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9138BC1/152D5C861B6911F0BFFC3F2FC4F9AE02/Qnc6qEHXDnPE730nyY_LnUQgxGw.crl rsync://rpki.apnic.net/member_repository/A9138BC1/152D5C861B6911F0BFFC3F2FC4F9AE02/Qnc6qEHXDnPE730nyY_LnUQgxGw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qnc6qEHXDnPE730nyY_LnUQgxGw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 07:10:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7 (0x7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9138BC1, serialNumber=42773AA841D70E73C4EF7D27C98FCB9D4420C46C Validity Not Before: Apr 25 07:10:06 2025 GMT Not After : May 2 07:10:06 2025 GMT Subject: CN=680b354e-cf16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:32:d6:ea:f2:f2:6c:47:f5:ec:c4:c7:b8:f7: 8f:33:92:8c:d0:9f:91:e6:b8:20:07:9c:c5:0a:d9: eb:c7:e9:8c:a5:5a:d7:8d:f7:6d:16:b2:5a:60:3d: ab:50:59:27:55:51:a5:47:3b:4b:8a:9c:a4:76:53: 5f:38:a8:65:ef:31:00:4e:82:f6:a9:81:37:3b:d8: 04:0f:31:46:e3:23:44:e4:e9:97:96:e0:e8:cd:c4: 9f:c3:ca:e9:5c:c5:9f:0d:88:e8:99:f3:e2:ed:65: 8f:26:76:55:e6:50:b7:30:07:1c:3a:19:d0:83:49: ed:24:49:22:67:1b:f8:29:51:27:b4:6d:eb:be:68: 37:a5:d1:52:e6:74:06:76:49:9c:a4:df:91:e6:c8: 6d:40:34:17:7a:4d:5f:b7:56:0f:0d:7d:9c:5b:b3: 14:ce:17:d8:e9:d6:cb:1a:ad:a5:db:ad:c1:e7:cf: fd:61:d2:f7:ad:a8:97:78:83:53:ae:4e:a4:db:3f: 0d:09:62:64:eb:50:29:26:a4:b3:f7:8b:90:ce:31: 09:4d:26:e1:9e:07:28:fa:73:89:0c:11:95:cf:45: ff:3a:e5:ad:91:49:99:4b:ce:0a:48:d6:1f:4f:ee: d4:4d:8d:50:2b:71:c3:3e:41:60:81:ab:b3:a2:81: 95:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:D2:BD:17:F6:4E:FC:B3:D0:31:99:3F:BE:1C:78:7C:6C:06:A2:40 X509v3 Authority Key Identifier: keyid:42:77:3A:A8:41:D7:0E:73:C4:EF:7D:27:C9:8F:CB:9D:44:20:C4:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9138BC1/152D5C861B6911F0BFFC3F2FC4F9AE02/Qnc6qEHXDnPE730nyY_LnUQgxGw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qnc6qEHXDnPE730nyY_LnUQgxGw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138BC1/152D5C861B6911F0BFFC3F2FC4F9AE02/Qnc6qEHXDnPE730nyY_LnUQgxGw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:e4:0a:37:fe:12:bd:29:8b:3c:3d:d2:0b:80:b8:e4:da:47: df:7d:a7:a1:4c:c7:fa:5c:21:e1:21:3a:68:71:ef:94:3a:bd: dc:8c:aa:03:bd:27:b6:f0:d5:f0:47:d4:dc:96:c8:68:04:26: 11:b4:63:d1:b2:9d:42:62:6c:b9:81:c4:5a:58:d2:64:71:ab: 6c:99:6a:ec:38:a1:ff:a8:7c:f9:b7:d2:2b:a2:f9:d1:dc:cd: e4:9b:11:52:03:03:e9:b0:11:02:77:62:11:28:56:74:e9:f8: 3b:1c:4e:37:bb:fd:7b:3e:48:ab:f3:e1:c1:bc:94:38:62:c7: 13:54:2d:94:bd:8e:51:1e:f5:1c:0e:8b:91:d5:57:d5:9c:a2: b8:fb:91:3a:bb:e0:95:f0:54:20:67:8d:63:07:60:c3:58:31: a3:f7:6d:fe:6c:ba:1e:c9:7b:32:30:9a:98:d5:63:d6:43:4d: 62:dc:20:75:ae:ad:c4:67:f5:95:ba:be:d4:67:2a:0e:36:3b: 6a:57:86:f8:d4:cd:b6:31:90:e5:7e:68:f3:21:77:4e:ba:9e: e4:04:a0:41:5f:95:b8:c3:bb:8a:87:80:12:1b:76:e1:b8:0a: 6d:31:bc:62:f0:cd:d7:78:c6:c4:67:a6:17:1d:99:9a:3a:5e: a2:7e:8e:63 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz OEJDMTExMC8GA1UEBRMoNDI3NzNBQTg0MUQ3MEU3M0M0RUY3RDI3Qzk4RkNCOUQ0 NDIwQzQ2QzAeFw0yNTA0MjUwNzEwMDZaFw0yNTA1MDIwNzEwMDZaMBgxFjAUBgNV BAMTDTY4MGIzNTRlLWNmMTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7Mtbq8vJsR/XsxMe4948zkozQn5HmuCAHnMUK2evH6YylWteN920WslpgPatQ WSdVUaVHO0uKnKR2U184qGXvMQBOgvapgTc72AQPMUbjI0Tk6ZeW4OjNxJ/Dyulc xZ8NiOiZ8+LtZY8mdlXmULcwBxw6GdCDSe0kSSJnG/gpUSe0beu+aDel0VLmdAZ2 SZyk35HmyG1ANBd6TV+3Vg8NfZxbsxTOF9jp1ssaraXbrcHnz/1h0vetqJd4g1Ou TqTbPw0JYmTrUCkmpLP3i5DOMQlNJuGeByj6c4kMEZXPRf865a2RSZlLzgpI1h9P 7tRNjVArccM+QWCBq7OigZUZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUt9K9F/ZO /LPQMZk/vhx4fGwGokAwHwYDVR0jBBgwFoAUQnc6qEHXDnPE730nyY/LnUQgxGww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM4QkMxLzE1MkQ1Qzg2MUI2 OTExRjBCRkZDM0YyRkM0RjlBRTAyL1FuYzZxRUhYRG5QRTczMG55WV9MblVRZ3hH dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUW5jNnFFSFhEblBFNzMwbnlZX0xuVVFneEd3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM4 QkMxLzE1MkQ1Qzg2MUI2OTExRjBCRkZDM0YyRkM0RjlBRTAyL1FuYzZxRUhYRG5Q RTczMG55WV9MblVRZ3hHdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACjkCjf+Er0pizw90guAuOTaR999p6FMx/pcIeEhOmhx75Q6vdyMqgO9 J7bw1fBH1NyWyGgEJhG0Y9GynUJibLmBxFpY0mRxq2yZauw4of+ofPm30iui+dHc zeSbEVIDA+mwEQJ3YhEoVnTp+DscTje7/Xs+SKvz4cG8lDhixxNULZS9jlEe9RwO i5HVV9Wcorj7kTq74JXwVCBnjWMHYMNYMaP3bf5suh7JezIwmpjVY9ZDTWLcIHWu rcRn9ZW6vtRnKg42O2pXhvjUzbYxkOV+aPMhd066nuQEoEFflbjDu4qHgBIbduG4 Cm0xvGLwzdd4xsRnphcdmZo6XqJ+jmM= -----END CERTIFICATE-----Generated at Sat Apr 26 04:26:22 2025 by rpki-client