$ rpki-client -vvf rpki.apnic.net/member_repository/A914C002/C8FE0808A92511EEAC4BDB57C4F9AE02/qUOt-S08RCBEEEWA1VuTUv3h1ok.mft File: qUOt-S08RCBEEEWA1VuTUv3h1ok.mft (raw, json) Hash identifier: qq0dzJysGOMuCJBylqOqphkRIyUssg4YE14Xjwr4gFs= Subject key identifier: 95:E2:6F:82:E3:BF:BB:E9:95:A0:22:61:92:C4:A0:E8:0A:8F:F3:E7 Authority key identifier: A9:43:AD:F9:2D:3C:44:20:44:10:45:80:D5:5B:93:52:FD:E1:D6:89 Certificate issuer: /CN=A914C002/serialNumber=A943ADF92D3C442044104580D55B9352FDE1D689 Certificate serial: F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qUOt-S08RCBEEEWA1VuTUv3h1ok.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C002/C8FE0808A92511EEAC4BDB57C4F9AE02/qUOt-S08RCBEEEWA1VuTUv3h1ok.mft Manifest number: F8 Signing time: Fri 25 Apr 2025 04:15:23 +0000 Manifest this update: Fri 25 Apr 2025 04:15:23 +0000 Manifest next update: Fri 02 May 2025 04:15:22 +0000 Files and hashes: 1: qUOt-S08RCBEEEWA1VuTUv3h1ok.crl (hash: 1G7PUymVWaXSpjwT2eE92f6eCRdnXf7H4awdSLTGUPk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C002/C8FE0808A92511EEAC4BDB57C4F9AE02/qUOt-S08RCBEEEWA1VuTUv3h1ok.crl rsync://rpki.apnic.net/member_repository/A914C002/C8FE0808A92511EEAC4BDB57C4F9AE02/qUOt-S08RCBEEEWA1VuTUv3h1ok.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qUOt-S08RCBEEEWA1VuTUv3h1ok.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:15:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 248 (0xf8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C002, serialNumber=A943ADF92D3C442044104580D55B9352FDE1D689 Validity Not Before: Apr 25 04:15:23 2025 GMT Not After : May 2 04:15:22 2025 GMT Subject: CN=680b0c5b-b42a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:98:91:0f:c6:a9:6b:f1:fe:c9:f7:bd:f6:1c: f0:c2:8e:f5:f4:2f:f6:1f:b3:b2:ba:d8:08:9c:ba: ef:f6:ca:68:ff:4c:9a:e5:05:dd:db:98:ff:d1:36: 61:6e:04:55:ce:8c:d8:27:2b:b6:20:04:42:aa:7e: 2e:25:3a:0d:78:54:e2:0f:cb:ee:f9:08:d9:d9:5d: c7:3e:38:b5:4c:c0:85:00:d7:ea:2e:f8:44:50:e2: 31:42:b3:0e:ab:22:44:ad:9a:41:71:aa:0b:19:5f: 48:dd:c3:14:63:5d:ae:75:3c:aa:87:67:92:53:32: f2:77:48:f2:f6:d0:43:e7:e8:e0:70:2e:06:e4:ec: 40:cf:d9:a1:fe:17:30:2a:d9:f1:76:59:39:a9:9e: ee:8e:96:03:f6:7b:23:aa:60:ca:49:40:2b:4b:2f: aa:d2:f5:20:6a:0a:94:d9:7c:97:ba:da:a6:29:fe: 87:1c:d0:07:f1:fe:20:9f:40:c2:40:4b:cd:7f:c6: 62:58:68:54:8c:1d:54:5a:d3:99:bc:b4:cb:76:cb: f3:68:fc:5b:35:4e:be:51:95:43:00:b8:aa:5c:e2: c8:b1:38:9d:1f:45:3b:fd:49:d7:be:23:05:aa:6a: 80:60:46:6f:d6:21:14:11:e1:07:f2:e2:62:28:34: 80:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:E2:6F:82:E3:BF:BB:E9:95:A0:22:61:92:C4:A0:E8:0A:8F:F3:E7 X509v3 Authority Key Identifier: keyid:A9:43:AD:F9:2D:3C:44:20:44:10:45:80:D5:5B:93:52:FD:E1:D6:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C002/C8FE0808A92511EEAC4BDB57C4F9AE02/qUOt-S08RCBEEEWA1VuTUv3h1ok.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qUOt-S08RCBEEEWA1VuTUv3h1ok.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C002/C8FE0808A92511EEAC4BDB57C4F9AE02/qUOt-S08RCBEEEWA1VuTUv3h1ok.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:33:c6:e4:99:5b:3f:c3:66:7c:94:9a:16:9c:58:24:61:c0: 22:f7:40:1c:d3:63:6f:94:91:bb:44:de:b7:db:8e:e6:c1:0c: 86:7d:ce:21:26:7c:2c:55:25:96:97:21:91:83:05:47:d5:93: 12:1d:db:2e:a2:87:63:84:b6:8e:94:03:f6:cd:0f:2f:f8:0c: 30:2c:c4:32:c2:6c:29:ae:70:02:ac:c1:23:a1:28:f0:5d:70: c7:1b:b7:10:94:28:b0:aa:af:93:99:a7:6d:c9:bc:f9:05:e1: c6:bd:a9:78:67:f7:53:05:68:1a:05:8f:57:3c:c7:1a:86:09: ed:33:13:f3:7b:72:0d:a9:53:57:00:1a:0e:75:6a:ba:db:2d: 17:1a:4c:e5:cb:51:bb:5b:17:94:0f:6d:9b:23:9c:2b:a2:57: 51:83:d6:57:2d:0c:5f:63:d6:c9:af:29:b3:f5:3e:b7:f0:da: 0a:b7:17:1a:c5:48:92:1e:30:51:ef:f5:3f:c7:d8:de:d8:2f: 21:dd:8b:70:05:fa:7e:b6:6c:a3:a9:4e:95:40:86:bf:bf:d3: 02:78:95:30:b8:b4:5d:01:b8:f1:c5:0e:a4:0d:6f:7f:9d:5c: 01:e6:90:f9:69:d9:d3:5e:d5:7c:c0:18:10:96:1a:46:e0:9a: 15:ce:9f:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEMwMDIxMTAvBgNVBAUTKEE5NDNBREY5MkQzQzQ0MjA0NDEwNDU4MEQ1NUI5MzUy RkRFMUQ2ODkwHhcNMjUwNDI1MDQxNTIzWhcNMjUwNTAyMDQxNTIyWjAYMRYwFAYD VQQDEw02ODBiMGM1Yi1iNDJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr5iRD8apa/H+yfe99hzwwo719C/2H7OyutgInLrv9spo/0ya5QXd25j/0TZh bgRVzozYJyu2IARCqn4uJToNeFTiD8vu+QjZ2V3HPji1TMCFANfqLvhEUOIxQrMO qyJErZpBcaoLGV9I3cMUY12udTyqh2eSUzLyd0jy9tBD5+jgcC4G5OxAz9mh/hcw Ktnxdlk5qZ7ujpYD9nsjqmDKSUArSy+q0vUgagqU2XyXutqmKf6HHNAH8f4gn0DC QEvNf8ZiWGhUjB1UWtOZvLTLdsvzaPxbNU6+UZVDALiqXOLIsTidH0U7/UnXviMF qmqAYEZv1iEUEeEH8uJiKDSAWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJXib4Lj v7vplaAiYZLEoOgKj/PnMB8GA1UdIwQYMBaAFKlDrfktPEQgRBBFgNVbk1L94daJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzAwMi9DOEZFMDgwOEE5 MjUxMUVFQUM0QkRCNTdDNEY5QUUwMi9xVU90LVMwOFJDQkVFRVdBMVZ1VFV2M2gx b2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FVT3QtUzA4UkNCRUVFV0ExVnVUVXYzaDFvay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzAwMi9DOEZFMDgwOEE5MjUxMUVFQUM0QkRCNTdDNEY5QUUwMi9xVU90LVMwOFJD QkVFRVdBMVZ1VFV2M2gxb2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2M8bkmVs/w2Z8lJoWnFgkYcAi90Ac02NvlJG7RN63247mwQyGfc4h JnwsVSWWlyGRgwVH1ZMSHdsuoodjhLaOlAP2zQ8v+AwwLMQywmwprnACrMEjoSjw XXDHG7cQlCiwqq+Tmadtybz5BeHGval4Z/dTBWgaBY9XPMcahgntMxPze3INqVNX ABoOdWq62y0XGkzly1G7WxeUD22bI5wroldRg9ZXLQxfY9bJrymz9T638NoKtxca xUiSHjBR7/U/x9je2C8h3YtwBfp+tmyjqU6VQIa/v9MCeJUwuLRdAbjxxQ6kDW9/ nVwB5pD5adnTXtV8wBgQlhpG4JoVzp+z -----END CERTIFICATE-----Generated at Sat Apr 26 04:22:07 2025 by rpki-client