$ rpki-client -vvf rpki.apnic.net/member_repository/A9142489/3A3F28369BFA11EFBEB9846EC4F9AE02/quV1mn6YqnRYWY3jwZqheX8A9fU.mft File: quV1mn6YqnRYWY3jwZqheX8A9fU.mft (raw, json) Hash identifier: LkIG1fqgoDXEGXoabo4Ph/CTgKnDpfFIYSTxWkB9phI= Subject key identifier: 82:B1:EA:FF:09:3E:1C:0E:17:4C:CE:64:6E:00:0C:DD:81:D5:97:DD Authority key identifier: AA:E5:75:9A:7E:98:AA:74:58:59:8D:E3:C1:9A:A1:79:7F:00:F5:F5 Certificate issuer: /CN=A9142489/serialNumber=AAE5759A7E98AA7458598DE3C19AA1797F00F5F5 Certificate serial: 5D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/quV1mn6YqnRYWY3jwZqheX8A9fU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142489/3A3F28369BFA11EFBEB9846EC4F9AE02/quV1mn6YqnRYWY3jwZqheX8A9fU.mft Manifest number: 5B Signing time: Fri 25 Apr 2025 06:07:53 +0000 Manifest this update: Fri 25 Apr 2025 06:07:52 +0000 Manifest next update: Fri 02 May 2025 06:07:52 +0000 Files and hashes: 1: quV1mn6YqnRYWY3jwZqheX8A9fU.crl (hash: s7N0RwhYL3AZ86awF9F2UY9w3yze59gpcsL3ZHUKSsQ=) 2: 4D7DE09E9BFB11EF8E975D70C4F9AE02.roa (hash: XzXF/8xfpuOMbcKhBzvfBK+CZWCno4sqp+r1zL1L1bM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142489/3A3F28369BFA11EFBEB9846EC4F9AE02/quV1mn6YqnRYWY3jwZqheX8A9fU.crl rsync://rpki.apnic.net/member_repository/A9142489/3A3F28369BFA11EFBEB9846EC4F9AE02/quV1mn6YqnRYWY3jwZqheX8A9fU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/quV1mn6YqnRYWY3jwZqheX8A9fU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:07:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 93 (0x5d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142489, serialNumber=AAE5759A7E98AA7458598DE3C19AA1797F00F5F5 Validity Not Before: Apr 25 06:07:52 2025 GMT Not After : May 2 06:07:52 2025 GMT Subject: CN=680b26b9-769d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:29:5a:2a:35:b8:d4:b2:64:d4:82:89:83:81: 3e:24:61:51:0b:4e:90:f3:0d:d5:df:af:46:ad:d3: d9:47:4b:10:01:cb:1e:45:9d:a0:a5:88:8f:51:b1: cb:04:29:c2:1f:7b:9e:a2:91:60:bd:60:9c:45:c9: 9e:94:cc:d5:dd:b0:16:af:a8:dc:a0:98:11:43:a8: 5e:50:b1:1d:22:bc:ce:95:08:76:e4:01:ba:7e:5c: 12:b2:5a:6b:4b:71:91:5e:38:98:ba:04:b2:15:30: 36:47:b9:a0:79:80:2c:1a:86:86:34:3b:01:cf:5b: f6:2f:13:24:21:6a:6d:b6:a4:45:22:1a:85:85:96: 6a:f8:9e:fe:34:18:c9:28:66:b9:4a:2d:0a:1d:90: b3:59:f9:68:63:71:1a:5b:61:e7:67:e2:e6:11:cb: b2:63:13:a1:2c:ed:3d:20:db:4a:53:4b:15:76:4a: 0c:a0:22:2f:bf:1a:4d:12:06:8f:5b:2f:71:b0:93: 0a:82:1a:88:b8:6d:5e:72:ea:20:84:cb:1d:41:48: 01:05:6c:3b:8c:18:8f:04:19:67:5e:4b:09:24:f8: 30:34:27:5b:f3:d1:f6:53:73:c5:8e:f7:6a:c6:63: ba:83:b6:e3:68:2a:96:e5:eb:e6:ae:ce:25:06:09: ad:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:B1:EA:FF:09:3E:1C:0E:17:4C:CE:64:6E:00:0C:DD:81:D5:97:DD X509v3 Authority Key Identifier: keyid:AA:E5:75:9A:7E:98:AA:74:58:59:8D:E3:C1:9A:A1:79:7F:00:F5:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142489/3A3F28369BFA11EFBEB9846EC4F9AE02/quV1mn6YqnRYWY3jwZqheX8A9fU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/quV1mn6YqnRYWY3jwZqheX8A9fU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142489/3A3F28369BFA11EFBEB9846EC4F9AE02/quV1mn6YqnRYWY3jwZqheX8A9fU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:c0:11:10:c4:c9:bf:4c:67:42:ee:5d:6e:8e:52:94:33:46: ae:56:95:dd:d9:23:ad:78:00:f2:05:68:41:df:22:f7:12:ab: b5:76:8e:39:0e:61:4b:27:0b:c9:2b:89:b1:ab:bb:fa:da:27: a7:f6:8a:df:cf:db:01:7f:d2:63:9a:53:8e:26:1a:02:e5:97: d2:99:56:89:7f:5c:7b:a8:9f:9f:39:fd:fd:0a:7e:5c:c6:19: 76:e3:4d:50:a3:f2:99:13:b8:37:42:8a:80:d7:08:0e:bb:cb: 80:61:ce:48:bb:5b:ed:f2:88:6e:df:0e:90:9f:2a:09:72:22: 7e:34:2e:4a:95:d8:62:db:56:87:cb:31:97:32:26:0e:ce:4c: 34:9c:b7:f0:aa:e9:36:a9:d4:cd:43:1e:89:6d:73:67:d8:73: 37:c6:b6:91:fe:41:63:44:c8:54:77:16:86:b2:34:ec:54:49: 73:e2:4c:bb:72:a6:75:7c:c4:9c:53:42:a3:33:91:38:c2:0d: ad:69:00:30:5e:41:e4:d8:04:cd:91:aa:a1:1b:20:f7:d8:85: 40:49:73:ae:e7:a8:0d:96:67:58:c7:6f:dc:d7:53:45:01:6d: f8:88:cb:70:1b:6c:40:e1:19:f1:92:0e:37:8b:4b:20:df:3d: b7:0a:7b:ab -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MjQ4OTExMC8GA1UEBRMoQUFFNTc1OUE3RTk4QUE3NDU4NTk4REUzQzE5QUExNzk3 RjAwRjVGNTAeFw0yNTA0MjUwNjA3NTJaFw0yNTA1MDIwNjA3NTJaMBgxFjAUBgNV BAMTDTY4MGIyNmI5LTc2OWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDDKVoqNbjUsmTUgomDgT4kYVELTpDzDdXfr0at09lHSxAByx5FnaCliI9RscsE KcIfe56ikWC9YJxFyZ6UzNXdsBavqNygmBFDqF5QsR0ivM6VCHbkAbp+XBKyWmtL cZFeOJi6BLIVMDZHuaB5gCwahoY0OwHPW/YvEyQham22pEUiGoWFlmr4nv40GMko ZrlKLQodkLNZ+WhjcRpbYedn4uYRy7JjE6Es7T0g20pTSxV2SgygIi+/Gk0SBo9b L3GwkwqCGoi4bV5y6iCEyx1BSAEFbDuMGI8EGWdeSwkk+DA0J1vz0fZTc8WO92rG Y7qDtuNoKpbl6+auziUGCa2pAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUgrHq/wk+ HA4XTM5kbgAM3YHVl90wHwYDVR0jBBgwFoAUquV1mn6YqnRYWY3jwZqheX8A9fUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQyNDg5LzNBM0YyODM2OUJG QTExRUZCRUI5ODQ2RUM0RjlBRTAyL3F1VjFtbjZZcW5SWVdZM2p3WnFoZVg4QTlm VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcXVWMW1uNllxblJZV1kzandacWhlWDhBOWZVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQy NDg5LzNBM0YyODM2OUJGQTExRUZCRUI5ODQ2RUM0RjlBRTAyL3F1VjFtbjZZcW5S WVdZM2p3WnFoZVg4QTlmVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADzAERDEyb9MZ0LuXW6OUpQzRq5Wld3ZI614APIFaEHfIvcSq7V2jjkO YUsnC8kribGru/raJ6f2it/P2wF/0mOaU44mGgLll9KZVol/XHuon585/f0KflzG GXbjTVCj8pkTuDdCioDXCA67y4Bhzki7W+3yiG7fDpCfKglyIn40LkqV2GLbVofL MZcyJg7OTDSct/Cq6Tap1M1DHoltc2fYczfGtpH+QWNEyFR3FoayNOxUSXPiTLty pnV8xJxTQqMzkTjCDa1pADBeQeTYBM2RqqEbIPfYhUBJc67nqA2WZ1jHb9zXU0UB bfiIy3AbbEDhGfGSDjeLSyDfPbcKe6s= -----END CERTIFICATE-----Generated at Sat Apr 26 05:28:34 2025 by rpki-client