$ rpki-client -vvf rpki.apnic.net/member_repository/A913D6C9/73FBD332481D11ECB6FEDF77C4F9AE02/Qfi2tHutsA9vj-jn4BP_VaGOdCg.mft File: Qfi2tHutsA9vj-jn4BP_VaGOdCg.mft (raw, json) Hash identifier: 497i2R0jwLcUUyfJwbGP0UumLCUrlOBiyBgnuKXnmiY= Subject key identifier: 84:25:9C:2D:7A:3A:A8:9E:AD:0E:74:D5:FE:3F:28:AB:ED:CD:53:A5 Authority key identifier: 41:F8:B6:B4:7B:AD:B0:0F:6F:8F:E8:E7:E0:13:FF:55:A1:8E:74:28 Certificate issuer: /CN=A913D6C9/serialNumber=41F8B6B47BADB00F6F8FE8E7E013FF55A18E7428 Certificate serial: 0475 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qfi2tHutsA9vj-jn4BP_VaGOdCg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913D6C9/73FBD332481D11ECB6FEDF77C4F9AE02/Qfi2tHutsA9vj-jn4BP_VaGOdCg.mft Manifest number: 046B Signing time: Thu 24 Apr 2025 23:56:16 +0000 Manifest this update: Thu 24 Apr 2025 23:56:15 +0000 Manifest next update: Thu 01 May 2025 23:56:15 +0000 Files and hashes: 1: Qfi2tHutsA9vj-jn4BP_VaGOdCg.crl (hash: ZSx5d2WLBaIHdmILltmoP+yqow298f7zxoXBAI84d3Y=) 2: 54AC9B64C3B411EEBF90C180C4F9AE02.roa (hash: BPstFCUC7r4sqZcas3tBZS1NiGfkeUG5bomyvOkC2W0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913D6C9/73FBD332481D11ECB6FEDF77C4F9AE02/Qfi2tHutsA9vj-jn4BP_VaGOdCg.crl rsync://rpki.apnic.net/member_repository/A913D6C9/73FBD332481D11ECB6FEDF77C4F9AE02/Qfi2tHutsA9vj-jn4BP_VaGOdCg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qfi2tHutsA9vj-jn4BP_VaGOdCg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:56:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1141 (0x475) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913D6C9, serialNumber=41F8B6B47BADB00F6F8FE8E7E013FF55A18E7428 Validity Not Before: Apr 24 23:56:15 2025 GMT Not After : May 1 23:56:15 2025 GMT Subject: CN=680acf9f-aa03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:65:27:a2:35:3e:93:e9:68:61:31:d1:ab:24: e5:3b:d3:96:89:61:7f:36:29:56:bc:fb:ee:e6:c0: 15:26:3b:fc:01:2c:6d:a0:7e:b0:e6:15:67:87:8f: 9f:8b:54:9a:f4:ef:30:b1:24:9f:42:c1:3e:4b:86: a9:c5:c3:a5:56:87:b0:5a:50:a1:01:60:84:19:de: b5:cf:5b:b9:91:c3:2b:bb:9b:6d:bf:d0:6c:26:c5: 2a:ec:b4:9a:30:ba:c1:be:eb:55:39:7c:5a:3a:10: 01:b6:79:53:b6:5c:57:27:0e:11:8d:e7:ab:1d:d9: b4:3f:20:98:36:37:41:b8:dd:a1:85:11:b9:ff:10: 2e:3f:b9:0f:9a:22:13:59:60:4d:93:9f:b3:02:cc: 7e:87:8b:2e:bc:73:ae:84:ce:ca:c3:c1:8e:20:f1: 64:bd:7e:5d:4a:10:31:98:ae:50:a2:76:86:c9:09: 71:cb:27:d3:58:71:bf:d2:77:9b:14:64:5f:ae:f9: dd:4e:c8:0b:64:1f:d9:13:b0:2f:84:97:3b:57:84: b7:ce:db:22:fe:9b:94:a7:7b:e0:e9:99:f7:b6:03: b0:52:bf:59:e1:7f:64:8a:c1:73:9f:a4:26:35:de: d6:52:b7:34:dc:3e:90:6b:2a:bb:7f:e8:7b:78:ec: 6a:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:25:9C:2D:7A:3A:A8:9E:AD:0E:74:D5:FE:3F:28:AB:ED:CD:53:A5 X509v3 Authority Key Identifier: keyid:41:F8:B6:B4:7B:AD:B0:0F:6F:8F:E8:E7:E0:13:FF:55:A1:8E:74:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913D6C9/73FBD332481D11ECB6FEDF77C4F9AE02/Qfi2tHutsA9vj-jn4BP_VaGOdCg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qfi2tHutsA9vj-jn4BP_VaGOdCg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D6C9/73FBD332481D11ECB6FEDF77C4F9AE02/Qfi2tHutsA9vj-jn4BP_VaGOdCg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:ea:71:cd:38:42:80:58:5c:fe:39:c8:28:bf:16:a2:87:d3: 6a:b4:2f:fe:72:7a:81:b1:4a:22:d1:1e:f1:ca:9d:b7:ac:54: d9:5d:68:c8:79:09:a9:01:98:a0:9b:13:ba:80:23:f0:94:6d: 49:4a:b5:a7:56:ed:5c:d4:99:ea:19:1e:56:a7:a8:98:61:72: d2:a9:f0:72:4b:5a:d9:a8:95:dc:64:da:d2:47:5e:f0:4d:6e: b7:94:e6:e0:55:e7:91:f5:37:ea:6b:7f:17:d9:03:8d:71:56: 31:94:b7:5c:67:c3:34:e3:09:46:ea:75:b1:9a:c6:0d:9d:bd: c3:4e:e8:b3:b8:4b:80:20:8c:c0:48:33:bb:6d:ff:81:51:e0: 44:85:63:99:43:ed:2f:a2:64:85:49:50:c0:77:4a:50:97:f6: 0f:1a:2d:83:d7:8a:68:0c:97:24:5b:f4:02:e6:3a:68:0c:e5: 90:f2:d8:9e:93:a5:ac:7b:92:b9:ea:33:70:e6:4a:b2:e6:6d: 26:38:b1:b3:21:7b:7a:2a:5c:29:35:55:cd:01:2f:88:6b:a3: d5:49:97:92:f3:49:6d:cb:fc:26:ab:52:6c:88:97:88:23:c6: 62:97:11:bd:aa:84:95:5e:d1:9a:5c:d5:17:53:68:1d:f8:36: 58:26:d4:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBHUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0Q2QzkxMTAvBgNVBAUTKDQxRjhCNkI0N0JBREIwMEY2RjhGRThFN0UwMTNGRjU1 QTE4RTc0MjgwHhcNMjUwNDI0MjM1NjE1WhcNMjUwNTAxMjM1NjE1WjAYMRYwFAYD VQQDEw02ODBhY2Y5Zi1hYTAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAymUnojU+k+loYTHRqyTlO9OWiWF/NilWvPvu5sAVJjv8ASxtoH6w5hVnh4+f i1Sa9O8wsSSfQsE+S4apxcOlVoewWlChAWCEGd61z1u5kcMru5ttv9BsJsUq7LSa MLrBvutVOXxaOhABtnlTtlxXJw4RjeerHdm0PyCYNjdBuN2hhRG5/xAuP7kPmiIT WWBNk5+zAsx+h4suvHOuhM7Kw8GOIPFkvX5dShAxmK5QonaGyQlxyyfTWHG/0neb FGRfrvndTsgLZB/ZE7AvhJc7V4S3ztsi/puUp3vg6Zn3tgOwUr9Z4X9kisFzn6Qm Nd7WUrc03D6Qayq7f+h7eOxqrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIQlnC16 OqierQ501f4/KKvtzVOlMB8GA1UdIwQYMBaAFEH4trR7rbAPb4/o5+AT/1WhjnQo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRDZDOS83M0ZCRDMzMjQ4 MUQxMUVDQjZGRURGNzdDNEY5QUUwMi9RZmkydEh1dHNBOXZqLWpuNEJQX1ZhR09k Q2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FmaTJ0SHV0c0E5dmotam40QlBfVmFHT2RDZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RDZDOS83M0ZCRDMzMjQ4MUQxMUVDQjZGRURGNzdDNEY5QUUwMi9RZmkydEh1dHNB OXZqLWpuNEJQX1ZhR09kQ2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAn6nHNOEKAWFz+Ocgovxaih9NqtC/+cnqBsUoi0R7xyp23rFTZXWjI eQmpAZigmxO6gCPwlG1JSrWnVu1c1JnqGR5Wp6iYYXLSqfByS1rZqJXcZNrSR17w TW63lObgVeeR9Tfqa38X2QONcVYxlLdcZ8M04wlG6nWxmsYNnb3DTuizuEuAIIzA SDO7bf+BUeBEhWOZQ+0vomSFSVDAd0pQl/YPGi2D14poDJckW/QC5jpoDOWQ8tie k6Wse5K56jNw5kqy5m0mOLGzIXt6KlwpNVXNAS+Ia6PVSZeS80lty/wmq1JsiJeI I8ZilxG9qoSVXtGaXNUXU2gd+DZYJtSV -----END CERTIFICATE-----Generated at Sat Apr 26 04:26:25 2025 by rpki-client