$ rpki-client -vvf rpki.apnic.net/member_repository/A914A2CF/D61FEA9EA76611E4B1103D30C4F9AE02/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.mft File: Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.mft (raw, json) Hash identifier: H6r2poYuxeZ1fvgMFkFXiq+vBVKevSDOzZLvAUEHE6g= Subject key identifier: 66:D4:6A:FD:0B:76:E2:F3:CC:F0:4B:92:CC:AC:88:2F:5B:A4:FC:5A Authority key identifier: 43:81:95:5E:26:5A:28:3F:85:DC:9A:44:E9:D5:13:73:12:7A:24:12 Certificate issuer: /CN=A914A2CF/serialNumber=4381955E265A283F85DC9A44E9D51373127A2412 Certificate serial: 27A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A2CF/D61FEA9EA76611E4B1103D30C4F9AE02/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.mft Manifest number: 2794 Signing time: Thu 24 Apr 2025 15:39:32 +0000 Manifest this update: Thu 24 Apr 2025 15:39:32 +0000 Manifest next update: Thu 01 May 2025 15:39:32 +0000 Files and hashes: 1: Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.crl (hash: 2gx9ngs6WkwRpBrbxFyHnwDfDlrbtqNZkMoJktmMZ0Y=) 2: 6DAE125C54F611E79DF7E643C4F9AE02.roa (hash: h5hXtP9IbSxqcG/aS1dzRp2AGDqGhZ3NxNAa9bJM38Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A2CF/D61FEA9EA76611E4B1103D30C4F9AE02/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.crl rsync://rpki.apnic.net/member_repository/A914A2CF/D61FEA9EA76611E4B1103D30C4F9AE02/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 15:39:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10148 (0x27a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A2CF, serialNumber=4381955E265A283F85DC9A44E9D51373127A2412 Validity Not Before: Apr 24 15:39:32 2025 GMT Not After : May 1 15:39:32 2025 GMT Subject: CN=680a5b34-21fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:8f:ec:6d:15:73:06:b2:8b:c9:d2:24:ac:44: d1:f6:b6:40:75:e3:ef:e5:a6:e1:7d:59:ce:8b:98: a7:a7:0b:bc:42:15:64:1b:86:00:a3:bf:03:a6:21: d7:27:ac:d1:d7:97:f7:1b:26:04:74:e2:74:29:7d: ef:7c:08:e1:34:74:f9:2e:a1:13:8f:14:db:37:03: aa:21:4a:c3:d5:c0:15:fd:d4:12:4b:d7:12:0b:59: 86:b3:a1:de:66:30:47:24:be:1e:46:3a:fa:e7:4f: 9c:c5:cf:ff:44:60:b8:67:00:0a:e2:ef:7f:e3:2f: 72:fa:9a:27:6e:19:dd:93:d0:63:74:fb:d7:b0:66: e4:be:c5:fa:f9:e7:2b:36:4d:85:d2:00:77:8b:3b: 98:3f:d5:3b:e7:52:5b:64:4f:bf:c2:2c:9c:13:97: b7:3c:b4:c7:62:af:d4:71:ed:a4:5c:5e:a8:78:f2: 37:f9:91:1a:57:ab:41:e3:e4:ab:a8:d1:f9:19:19: 90:7c:cb:4b:b7:dd:fb:93:21:a5:5a:ea:bc:34:85: 89:6f:2d:ad:24:44:43:15:81:35:65:bf:24:a1:8a: 31:c4:fe:8b:6f:f9:13:78:c3:a5:7d:f1:ff:21:f5: f4:75:da:23:6c:66:70:be:20:ba:49:4f:8a:72:91: 7d:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:D4:6A:FD:0B:76:E2:F3:CC:F0:4B:92:CC:AC:88:2F:5B:A4:FC:5A X509v3 Authority Key Identifier: keyid:43:81:95:5E:26:5A:28:3F:85:DC:9A:44:E9:D5:13:73:12:7A:24:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A2CF/D61FEA9EA76611E4B1103D30C4F9AE02/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A2CF/D61FEA9EA76611E4B1103D30C4F9AE02/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:7e:bb:45:55:3b:29:bb:86:86:34:42:e4:84:6b:99:d0:54: c2:73:28:ca:e7:5a:f0:97:c6:c8:75:f8:5d:a8:3b:69:8a:ed: 95:c0:8a:d0:2b:39:9c:1b:ae:6d:ef:6f:9b:1f:70:e2:a7:48: 95:f7:d4:65:e0:f4:95:27:42:a5:b2:6c:9b:61:6f:27:1d:4b: a3:74:fe:5f:a4:cc:72:e5:6c:62:a3:7a:0f:dc:ab:db:84:7b: bd:a5:ef:27:42:0f:1e:36:f4:df:ef:d0:4c:8e:60:bd:04:94: c1:86:14:37:d2:f5:02:a8:2a:57:bd:31:43:39:eb:0d:f2:93: 07:7a:75:fd:e6:e6:80:34:cc:13:05:12:f5:31:93:6d:0f:ca: bb:b0:47:f9:ee:73:3a:41:54:6a:af:ef:44:58:15:96:43:f5: d0:df:22:8d:ec:88:5d:59:ea:0e:52:b8:af:6e:74:24:eb:95: 2d:08:51:b4:96:16:6c:74:68:f4:8d:e1:c1:d1:5d:30:bb:ab: e2:36:1f:34:71:b6:f2:ee:91:14:fe:2f:12:ca:68:d5:fa:c2: d9:39:86:07:be:78:94:cc:e0:97:ed:3f:61:69:57:38:8f:14: 5c:f6:6a:90:8d:36:61:bc:00:91:4c:84:55:65:16:80:3c:43: 93:fd:97:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJ6QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEEyQ0YxMTAvBgNVBAUTKDQzODE5NTVFMjY1QTI4M0Y4NURDOUE0NEU5RDUxMzcz MTI3QTI0MTIwHhcNMjUwNDI0MTUzOTMyWhcNMjUwNTAxMTUzOTMyWjAYMRYwFAYD VQQDEw02ODBhNWIzNC0yMWZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvo/sbRVzBrKLydIkrETR9rZAdePv5abhfVnOi5inpwu8QhVkG4YAo78DpiHX J6zR15f3GyYEdOJ0KX3vfAjhNHT5LqETjxTbNwOqIUrD1cAV/dQSS9cSC1mGs6He ZjBHJL4eRjr650+cxc//RGC4ZwAK4u9/4y9y+ponbhndk9BjdPvXsGbkvsX6+ecr Nk2F0gB3izuYP9U751JbZE+/wiycE5e3PLTHYq/Uce2kXF6oePI3+ZEaV6tB4+Sr qNH5GRmQfMtLt937kyGlWuq8NIWJby2tJERDFYE1Zb8koYoxxP6Lb/kTeMOlffH/ IfX0ddojbGZwviC6SU+KcpF9uwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGbUav0L duLzzPBLksysiC9bpPxaMB8GA1UdIwQYMBaAFEOBlV4mWig/hdyaROnVE3MSeiQS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTJDRi9ENjFGRUE5RUE3 NjYxMUU0QjExMDNEMzBDNEY5QUUwMi9RNEdWWGlaYUtELUYzSnBFNmRVVGN4SjZK QkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1E0R1ZYaVphS0QtRjNKcEU2ZFVUY3hKNkpCSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QTJDRi9ENjFGRUE5RUE3NjYxMUU0QjExMDNEMzBDNEY5QUUwMi9RNEdWWGlaYUtE LUYzSnBFNmRVVGN4SjZKQkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHfrtFVTspu4aGNELkhGuZ0FTCcyjK51rwl8bIdfhdqDtpiu2VwIrQ KzmcG65t72+bH3Dip0iV99Rl4PSVJ0KlsmybYW8nHUujdP5fpMxy5Wxio3oP3Kvb hHu9pe8nQg8eNvTf79BMjmC9BJTBhhQ30vUCqCpXvTFDOesN8pMHenX95uaANMwT BRL1MZNtD8q7sEf57nM6QVRqr+9EWBWWQ/XQ3yKN7IhdWeoOUrivbnQk65UtCFG0 lhZsdGj0jeHB0V0wu6viNh80cbby7pEU/i8SymjV+sLZOYYHvniUzOCX7T9haVc4 jxRc9mqQjTZhvACRTIRVZRaAPEOT/Ze8 -----END CERTIFICATE-----Generated at Sat Apr 26 05:26:19 2025 by rpki-client