$ rpki-client -vvf rpki.apnic.net/member_repository/A914D6FC/88759182432F11EDBBD98F5CC4F9AE02/qL9U9ggZZyIZNcsXzBPr-4QaYMI.mft File: qL9U9ggZZyIZNcsXzBPr-4QaYMI.mft (raw, json) Hash identifier: D7K92GL494lxdWSE4khTEJMAOcAWP8YUEkhvnT35RQI= Subject key identifier: F7:85:8E:3E:04:E2:D4:64:4B:29:B5:8A:C5:14:7A:03:E1:15:E1:44 Authority key identifier: A8:BF:54:F6:08:19:67:22:19:35:CB:17:CC:13:EB:FB:84:1A:60:C2 Certificate issuer: /CN=A914D6FC/serialNumber=A8BF54F6081967221935CB17CC13EBFB841A60C2 Certificate serial: 01F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qL9U9ggZZyIZNcsXzBPr-4QaYMI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914D6FC/88759182432F11EDBBD98F5CC4F9AE02/qL9U9ggZZyIZNcsXzBPr-4QaYMI.mft Manifest number: 01E8 Signing time: Fri 25 Apr 2025 01:52:54 +0000 Manifest this update: Fri 25 Apr 2025 01:52:54 +0000 Manifest next update: Fri 02 May 2025 01:52:54 +0000 Files and hashes: 1: qL9U9ggZZyIZNcsXzBPr-4QaYMI.crl (hash: xSoxiADkmxylxlqZCv+DQ9An+L1ssYP6Vs6KdzLMJ7E=) 2: 11EC50B48B8F11EF8DE96E60C4F9AE02.roa (hash: dBzmelJqZJRJwarLr24Qo4vmuBT6QmKRJnEzxT0UO6A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914D6FC/88759182432F11EDBBD98F5CC4F9AE02/qL9U9ggZZyIZNcsXzBPr-4QaYMI.crl rsync://rpki.apnic.net/member_repository/A914D6FC/88759182432F11EDBBD98F5CC4F9AE02/qL9U9ggZZyIZNcsXzBPr-4QaYMI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qL9U9ggZZyIZNcsXzBPr-4QaYMI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:52:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 497 (0x1f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914D6FC, serialNumber=A8BF54F6081967221935CB17CC13EBFB841A60C2 Validity Not Before: Apr 25 01:52:54 2025 GMT Not After : May 2 01:52:54 2025 GMT Subject: CN=680aeaf6-6239 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:59:d7:fd:e9:b8:7a:30:fa:e9:56:a9:fd:59: 75:ef:18:25:5f:1d:73:5e:c3:94:50:26:ed:9e:d6: e4:c0:12:0f:5c:6b:b8:87:2b:01:a2:b5:68:5e:40: ea:2f:ee:ea:50:ad:77:c5:f1:d3:0d:9d:86:ee:f2: 5a:bb:32:7b:41:5b:d7:bc:10:c3:fa:1f:5c:c3:b6: fb:07:cc:af:57:b8:f7:e6:98:eb:bc:1f:90:e7:d9: 5c:24:9b:1a:07:40:e3:d6:4b:00:dd:9d:b6:94:92: 06:ec:52:e1:bf:be:3b:89:5c:07:a3:7c:b3:b1:b7: db:c8:fb:1c:b9:1c:d7:bb:76:3c:5e:5a:70:aa:92: 0e:d2:fd:96:c7:38:3d:b4:0e:f9:46:ad:83:62:0e: 2d:5a:98:49:e2:9c:26:6f:59:e2:62:c8:66:b0:5e: 09:9e:a0:e1:46:49:c5:7a:4c:f2:a1:89:15:78:82: 7c:e3:1a:1a:02:8e:18:f5:09:31:74:a8:eb:09:f8: d0:66:a0:c3:c0:6f:2d:13:c3:9d:75:11:11:22:13: 00:2a:62:05:46:0e:5a:aa:53:7c:51:6c:e2:b0:8c: 39:2a:68:85:bc:0c:44:bd:98:88:1d:a0:d2:ad:10: 0a:cb:dc:96:0a:dc:53:41:33:fe:d6:96:a2:7e:4e: 12:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:85:8E:3E:04:E2:D4:64:4B:29:B5:8A:C5:14:7A:03:E1:15:E1:44 X509v3 Authority Key Identifier: keyid:A8:BF:54:F6:08:19:67:22:19:35:CB:17:CC:13:EB:FB:84:1A:60:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914D6FC/88759182432F11EDBBD98F5CC4F9AE02/qL9U9ggZZyIZNcsXzBPr-4QaYMI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qL9U9ggZZyIZNcsXzBPr-4QaYMI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D6FC/88759182432F11EDBBD98F5CC4F9AE02/qL9U9ggZZyIZNcsXzBPr-4QaYMI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:2f:4d:5a:02:c1:8a:6e:10:02:8d:4c:61:2b:44:5d:aa:a1: db:e1:6a:7a:7d:44:18:10:df:8d:41:4d:22:90:40:a9:80:94: 80:90:bd:8f:47:5e:88:48:e2:83:2b:ce:1e:5d:51:25:30:29: 50:35:58:67:e7:ee:a3:f5:5d:45:07:b9:64:92:06:e5:32:57: 66:ba:fc:66:b2:0c:82:78:a2:f5:0e:d9:00:2e:5b:2c:46:74: 2b:69:f1:f8:d9:b0:0f:2c:17:41:9d:85:0e:d8:c8:e0:49:2a: e2:51:dd:13:5b:bf:60:81:67:56:0b:f8:8f:a0:fa:9b:52:96: a5:a6:46:fc:cf:ab:16:03:35:2b:f5:58:f5:11:a5:4c:43:70: 1f:ac:3e:da:ea:4c:6f:4c:77:36:76:8a:d6:32:64:af:a8:37: 50:d7:29:a8:f8:0c:34:5c:e7:f6:7e:bf:5c:c9:9a:e1:7c:06: 4e:90:ad:d2:5e:ca:51:01:ab:cf:65:c8:5a:ce:ba:81:40:93: b8:0b:2f:57:3a:57:d0:5b:89:b1:25:65:0c:c2:c8:b1:35:a5: 61:48:35:d8:73:36:03:80:df:1e:93:90:49:4a:59:bf:22:db: d3:35:ea:99:71:87:53:a0:1e:37:9b:14:01:8b:4c:d9:32:f6: 2e:ea:08:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEQ2RkMxMTAvBgNVBAUTKEE4QkY1NEY2MDgxOTY3MjIxOTM1Q0IxN0NDMTNFQkZC ODQxQTYwQzIwHhcNMjUwNDI1MDE1MjU0WhcNMjUwNTAyMDE1MjU0WjAYMRYwFAYD VQQDEw02ODBhZWFmNi02MjM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnlnX/em4ejD66Vap/Vl17xglXx1zXsOUUCbtntbkwBIPXGu4hysBorVoXkDq L+7qUK13xfHTDZ2G7vJauzJ7QVvXvBDD+h9cw7b7B8yvV7j35pjrvB+Q59lcJJsa B0Dj1ksA3Z22lJIG7FLhv747iVwHo3yzsbfbyPscuRzXu3Y8XlpwqpIO0v2Wxzg9 tA75Rq2DYg4tWphJ4pwmb1niYshmsF4JnqDhRknFekzyoYkVeIJ84xoaAo4Y9Qkx dKjrCfjQZqDDwG8tE8OddRERIhMAKmIFRg5aqlN8UWzisIw5KmiFvAxEvZiIHaDS rRAKy9yWCtxTQTP+1paifk4SNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPeFjj4E 4tRkSym1isUUegPhFeFEMB8GA1UdIwQYMBaAFKi/VPYIGWciGTXLF8wT6/uEGmDC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RDZGQy84ODc1OTE4MjQz MkYxMUVEQkJEOThGNUNDNEY5QUUwMi9xTDlVOWdnWlp5SVpOY3NYekJQci00UWFZ TUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FMOVU5Z2daWnlJWk5jc1h6QlByLTRRYVlNSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RDZGQy84ODc1OTE4MjQzMkYxMUVEQkJEOThGNUNDNEY5QUUwMi9xTDlVOWdnWlp5 SVpOY3NYekJQci00UWFZTUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLL01aAsGKbhACjUxhK0RdqqHb4Wp6fUQYEN+NQU0ikECpgJSAkL2P R16ISOKDK84eXVElMClQNVhn5+6j9V1FB7lkkgblMldmuvxmsgyCeKL1DtkALlss RnQrafH42bAPLBdBnYUO2MjgSSriUd0TW79ggWdWC/iPoPqbUpalpkb8z6sWAzUr 9Vj1EaVMQ3AfrD7a6kxvTHc2dorWMmSvqDdQ1ymo+Aw0XOf2fr9cyZrhfAZOkK3S XspRAavPZchazrqBQJO4Cy9XOlfQW4mxJWUMwsixNaVhSDXYczYDgN8ek5BJSlm/ ItvTNeqZcYdToB43mxQBi0zZMvYu6ghb -----END CERTIFICATE-----Generated at Sat Apr 26 04:31:32 2025 by rpki-client