$ rpki-client -vvf rpki.apnic.net/member_repository/A914A49B/B94F6936015111EF9857C01EC4F9AE02/1QN6-WnIrOoBtXD8ZK3UgorAZBQ.mft File: 1QN6-WnIrOoBtXD8ZK3UgorAZBQ.mft (raw, json) Hash identifier: juzonz6qxAA6AXXI3dBxxAdBN1wS7d0tUxlnxKBvi24= Subject key identifier: 36:C6:CA:17:45:FC:F9:26:04:9C:82:5A:21:32:45:01:37:A9:50:4F Authority key identifier: D5:03:7A:F9:69:C8:AC:EA:01:B5:70:FC:64:AD:D4:82:8A:C0:64:14 Certificate issuer: /CN=A914A49B/serialNumber=D5037AF969C8ACEA01B570FC64ADD4828AC06414 Certificate serial: C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1QN6-WnIrOoBtXD8ZK3UgorAZBQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A49B/B94F6936015111EF9857C01EC4F9AE02/1QN6-WnIrOoBtXD8ZK3UgorAZBQ.mft Manifest number: BF Signing time: Fri 25 Apr 2025 04:55:16 +0000 Manifest this update: Fri 25 Apr 2025 04:55:15 +0000 Manifest next update: Fri 02 May 2025 04:55:15 +0000 Files and hashes: 1: 1QN6-WnIrOoBtXD8ZK3UgorAZBQ.crl (hash: vvNbMLyFjPQe14I/tOjzeGMHv55creHAoJbNxbKwsfs=) 2: 2907520205DA11EF974A6A0BC4F9AE02.roa (hash: OrAHJTjZ/RqHAwIjIMccBjE+JqFUpBNrVGrdl3fQy10=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A49B/B94F6936015111EF9857C01EC4F9AE02/1QN6-WnIrOoBtXD8ZK3UgorAZBQ.crl rsync://rpki.apnic.net/member_repository/A914A49B/B94F6936015111EF9857C01EC4F9AE02/1QN6-WnIrOoBtXD8ZK3UgorAZBQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1QN6-WnIrOoBtXD8ZK3UgorAZBQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:55:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 195 (0xc3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A49B, serialNumber=D5037AF969C8ACEA01B570FC64ADD4828AC06414 Validity Not Before: Apr 25 04:55:15 2025 GMT Not After : May 2 04:55:15 2025 GMT Subject: CN=680b15b4-4621 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:00:b4:5e:4d:93:f4:c3:66:a0:36:ff:5a:2c: 67:51:1a:0e:d4:c3:d7:f3:99:3b:c9:03:1e:e0:ed: 49:8c:a2:6f:19:7a:7a:fd:66:09:21:a0:3f:0a:44: c2:77:54:06:44:33:b5:30:31:b0:25:64:64:c3:a7: fc:ed:18:0f:16:8c:7e:a7:6f:18:47:72:55:5c:ca: 2f:20:de:e1:eb:cc:86:98:d4:3d:4b:4d:08:cb:a8: 4c:01:29:2f:ed:20:6d:39:5f:4d:de:37:c2:3c:0d: 85:0f:f2:9c:02:cc:49:03:75:dd:48:9c:26:71:d9: c3:b1:f0:cd:78:39:37:d3:2e:4d:37:04:6e:b0:b5: f8:83:b5:86:dd:77:59:dd:41:cf:26:0d:7f:3a:51: c8:14:29:f1:61:d5:6f:2d:38:c6:29:a6:cc:4c:f9: f4:69:dd:8e:4a:d4:23:6b:76:60:b7:bf:3a:21:54: 53:28:82:7b:3f:0d:4b:cc:9c:54:52:db:de:ac:67: 49:1f:cd:25:cc:0d:ff:81:4e:ad:9d:b6:9c:30:52: 67:2a:bf:02:b1:74:bd:b9:cd:7f:19:ea:12:db:26: 08:d6:fb:b0:0c:7e:ab:01:0b:b2:57:c8:87:71:bc: 69:e9:df:13:a7:bd:15:b1:84:2b:0d:fb:1a:e0:57: 58:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:C6:CA:17:45:FC:F9:26:04:9C:82:5A:21:32:45:01:37:A9:50:4F X509v3 Authority Key Identifier: keyid:D5:03:7A:F9:69:C8:AC:EA:01:B5:70:FC:64:AD:D4:82:8A:C0:64:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A49B/B94F6936015111EF9857C01EC4F9AE02/1QN6-WnIrOoBtXD8ZK3UgorAZBQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1QN6-WnIrOoBtXD8ZK3UgorAZBQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A49B/B94F6936015111EF9857C01EC4F9AE02/1QN6-WnIrOoBtXD8ZK3UgorAZBQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:63:5f:93:af:03:18:94:7b:48:fa:1b:b4:d7:05:58:96:56: 95:65:8e:a9:e7:0c:ad:1d:17:01:ef:90:22:3e:e2:4e:19:61: 2c:74:24:69:89:73:a0:ad:5f:4a:d6:f9:55:96:62:d4:9d:c8: db:a2:58:3a:1b:d2:e5:72:8d:d7:65:a5:5e:32:0b:60:79:ed: 4a:e6:7f:2e:f3:bd:26:c8:71:3c:e7:73:7e:ad:18:0b:ad:c2: 1e:9d:5f:5d:7d:7e:77:50:26:71:41:da:37:96:27:fa:44:4b: dd:ed:59:f0:a4:a8:ca:7e:98:4e:81:f7:79:42:67:b9:05:8d: bc:9d:6f:8d:f3:cf:90:bf:03:b4:9a:5a:b8:49:87:61:5d:bd: d5:a0:42:4e:25:5c:a3:27:91:ac:d1:9d:b8:33:c1:4f:2e:f6: 6b:df:93:78:a3:29:42:da:10:a9:4c:d8:1b:26:3b:17:ba:27: dc:84:33:c3:80:e1:43:3a:d2:0f:d3:87:5b:52:79:07:ac:24: 92:78:5e:74:01:32:13:2a:d2:39:83:4a:e5:90:f0:71:c8:a0: 8a:38:4f:80:71:85:18:02:e5:57:d6:d0:cc:ba:d1:5c:a3:a4: bd:54:be:d3:14:87:a3:7b:f0:7b:ac:be:3c:50:73:94:84:06: 70:2d:32:3d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEE0OUIxMTAvBgNVBAUTKEQ1MDM3QUY5NjlDOEFDRUEwMUI1NzBGQzY0QURENDgy OEFDMDY0MTQwHhcNMjUwNDI1MDQ1NTE1WhcNMjUwNTAyMDQ1NTE1WjAYMRYwFAYD VQQDEw02ODBiMTViNC00NjIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwwC0Xk2T9MNmoDb/WixnURoO1MPX85k7yQMe4O1JjKJvGXp6/WYJIaA/CkTC d1QGRDO1MDGwJWRkw6f87RgPFox+p28YR3JVXMovIN7h68yGmNQ9S00Iy6hMASkv 7SBtOV9N3jfCPA2FD/KcAsxJA3XdSJwmcdnDsfDNeDk30y5NNwRusLX4g7WG3XdZ 3UHPJg1/OlHIFCnxYdVvLTjGKabMTPn0ad2OStQja3Zgt786IVRTKIJ7Pw1LzJxU UtverGdJH80lzA3/gU6tnbacMFJnKr8CsXS9uc1/GeoS2yYI1vuwDH6rAQuyV8iH cbxp6d8Tp70VsYQrDfsa4FdYQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDbGyhdF /PkmBJyCWiEyRQE3qVBPMB8GA1UdIwQYMBaAFNUDevlpyKzqAbVw/GSt1IKKwGQU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTQ5Qi9COTRGNjkzNjAx NTExMUVGOTg1N0MwMUVDNEY5QUUwMi8xUU42LVduSXJPb0J0WEQ4WkszVWdvckFa QlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFRTjYtV25Jck9vQnRYRDhaSzNVZ29yQVpCUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QTQ5Qi9COTRGNjkzNjAxNTExMUVGOTg1N0MwMUVDNEY5QUUwMi8xUU42LVduSXJP b0J0WEQ4WkszVWdvckFaQlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC3Y1+TrwMYlHtI+hu01wVYllaVZY6p5wytHRcB75AiPuJOGWEsdCRp iXOgrV9K1vlVlmLUncjbolg6G9Llco3XZaVeMgtgee1K5n8u870myHE853N+rRgL rcIenV9dfX53UCZxQdo3lif6REvd7VnwpKjKfphOgfd5Qme5BY28nW+N88+QvwO0 mlq4SYdhXb3VoEJOJVyjJ5Gs0Z24M8FPLvZr35N4oylC2hCpTNgbJjsXuifchDPD gOFDOtIP04dbUnkHrCSSeF50ATITKtI5g0rlkPBxyKCKOE+AcYUYAuVX1tDMutFc o6S9VL7TFIeje/B7rL48UHOUhAZwLTI9 -----END CERTIFICATE-----Generated at Sat Apr 26 16:34:45 2025 by rpki-client