$ rpki-client -vvf rpki.apnic.net/member_repository/A914E026/D6B26304F56A11E9BF2AE684C4F9AE02/qw2Hl8WKg6W0nAd6Mu9nMock5BI.mft File: qw2Hl8WKg6W0nAd6Mu9nMock5BI.mft (raw, json) Hash identifier: dCEL19a2bPF3HVDKYezzfiHg6f1/QGHAU7H47xXBkYo= Subject key identifier: B6:D0:D9:F4:98:90:11:A5:64:41:4B:2D:5C:5C:A2:D5:D4:FF:F3:FF Authority key identifier: AB:0D:87:97:C5:8A:83:A5:B4:9C:07:7A:32:EF:67:32:87:24:E4:12 Certificate issuer: /CN=A914E026/serialNumber=AB0D8797C58A83A5B49C077A32EF67328724E412 Certificate serial: 0C7C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qw2Hl8WKg6W0nAd6Mu9nMock5BI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E026/D6B26304F56A11E9BF2AE684C4F9AE02/qw2Hl8WKg6W0nAd6Mu9nMock5BI.mft Manifest number: 0C7C Signing time: Thu 24 Apr 2025 18:11:34 +0000 Manifest this update: Thu 24 Apr 2025 18:11:34 +0000 Manifest next update: Thu 01 May 2025 18:11:34 +0000 Files and hashes: 1: qw2Hl8WKg6W0nAd6Mu9nMock5BI.crl (hash: zGdr7FHWGHgZ1QfFzuFE0b7u2D2JhlRoAUgSax+/Gcw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E026/D6B26304F56A11E9BF2AE684C4F9AE02/qw2Hl8WKg6W0nAd6Mu9nMock5BI.crl rsync://rpki.apnic.net/member_repository/A914E026/D6B26304F56A11E9BF2AE684C4F9AE02/qw2Hl8WKg6W0nAd6Mu9nMock5BI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qw2Hl8WKg6W0nAd6Mu9nMock5BI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:11:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3196 (0xc7c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E026, serialNumber=AB0D8797C58A83A5B49C077A32EF67328724E412 Validity Not Before: Apr 24 18:11:34 2025 GMT Not After : May 1 18:11:34 2025 GMT Subject: CN=680a7ed6-050d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:db:20:ec:40:e8:8d:05:be:25:d6:5d:2f:8c: 01:e9:c0:28:5a:43:48:01:7a:60:62:c9:d0:0f:dd: 20:cf:49:61:da:f9:9e:ba:ab:ec:e2:e3:9e:12:e5: 74:11:b6:e7:66:6d:96:22:51:37:54:99:2e:e0:ee: 65:21:fb:5b:af:75:67:75:fc:f5:ed:37:99:af:62: 69:63:a6:9e:a5:23:7e:93:3a:7e:ef:3b:0e:57:30: d9:0a:52:66:4b:8c:34:3b:2e:cc:04:b2:47:af:f8: 33:76:4e:0e:5d:1f:6d:31:81:90:f8:e1:49:7e:f0: f7:af:26:c5:64:2c:ea:85:d1:8e:04:ee:dc:aa:85: e4:59:58:f9:4f:99:77:c8:eb:7b:83:4b:bd:53:ac: 2b:ec:f1:c9:65:86:47:cb:4b:7d:00:47:fe:7a:b0: 3a:3f:4e:45:70:bf:3d:84:b8:eb:e6:ab:db:80:f3: 4f:b7:91:5c:d8:ac:2b:f4:b9:45:6b:08:17:11:0f: a7:6f:2e:36:a6:a7:2b:77:2b:e6:9e:09:b8:50:50: 20:bf:1b:74:09:f4:8a:bf:73:dc:15:54:ab:c1:23: ba:10:e2:af:3a:5c:f6:03:7b:b5:d1:e4:1a:4b:f5: 82:a4:3d:2e:b8:39:a6:d2:4b:44:c7:5e:1e:31:00: 79:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:D0:D9:F4:98:90:11:A5:64:41:4B:2D:5C:5C:A2:D5:D4:FF:F3:FF X509v3 Authority Key Identifier: keyid:AB:0D:87:97:C5:8A:83:A5:B4:9C:07:7A:32:EF:67:32:87:24:E4:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E026/D6B26304F56A11E9BF2AE684C4F9AE02/qw2Hl8WKg6W0nAd6Mu9nMock5BI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qw2Hl8WKg6W0nAd6Mu9nMock5BI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E026/D6B26304F56A11E9BF2AE684C4F9AE02/qw2Hl8WKg6W0nAd6Mu9nMock5BI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:2d:22:0b:90:76:8d:31:3e:37:16:57:18:b2:81:e0:91:4b: 61:ad:eb:74:63:76:c9:f2:66:0f:a8:6b:0e:a1:2c:9d:d4:76: d0:82:98:b4:28:3b:8f:44:5a:53:61:81:29:0d:92:87:46:b9: 00:2b:ce:dc:d4:b6:74:39:41:6a:2f:64:0c:bd:e7:07:2e:b6: 24:28:1e:61:94:59:d1:31:9b:5f:b3:1f:6a:07:89:0e:9b:34: a6:55:dc:d7:28:e1:42:78:ee:08:30:1a:5c:bc:8d:69:31:70: 3e:48:16:0a:31:9a:5f:5d:f4:02:7c:16:0b:f0:47:d0:1b:04: e5:3b:32:74:17:66:81:37:e7:e9:bb:b4:a3:b9:36:00:f4:12: c3:82:33:62:9f:3f:79:60:e5:26:a8:cd:08:ca:84:b4:83:9f: cf:c5:7a:61:57:e3:ef:b0:13:c2:65:f7:7c:da:71:2f:61:8c: 6f:9a:2a:00:55:60:64:0b:fb:24:2d:f4:02:9c:4d:4a:b5:54: 40:88:84:38:de:fa:df:66:35:cf:d7:9d:e3:d1:77:9a:4b:71: 17:ae:88:ed:b6:57:77:e6:22:19:e3:26:4d:25:5c:ec:6b:58: e7:14:ef:3d:72:9e:8c:f5:be:77:a4:65:c2:c6:57:61:47:bf: 16:9e:fc:ab -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDHwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEUwMjYxMTAvBgNVBAUTKEFCMEQ4Nzk3QzU4QTgzQTVCNDlDMDc3QTMyRUY2NzMy ODcyNEU0MTIwHhcNMjUwNDI0MTgxMTM0WhcNMjUwNTAxMTgxMTM0WjAYMRYwFAYD VQQDEw02ODBhN2VkNi0wNTBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1Nsg7EDojQW+JdZdL4wB6cAoWkNIAXpgYsnQD90gz0lh2vmeuqvs4uOeEuV0 EbbnZm2WIlE3VJku4O5lIftbr3Vndfz17TeZr2JpY6aepSN+kzp+7zsOVzDZClJm S4w0Oy7MBLJHr/gzdk4OXR9tMYGQ+OFJfvD3rybFZCzqhdGOBO7cqoXkWVj5T5l3 yOt7g0u9U6wr7PHJZYZHy0t9AEf+erA6P05FcL89hLjr5qvbgPNPt5Fc2Kwr9LlF awgXEQ+nby42pqcrdyvmngm4UFAgvxt0CfSKv3PcFVSrwSO6EOKvOlz2A3u10eQa S/WCpD0uuDmm0ktEx14eMQB5BQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLbQ2fSY kBGlZEFLLVxcotXU//P/MB8GA1UdIwQYMBaAFKsNh5fFioOltJwHejLvZzKHJOQS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTAyNi9ENkIyNjMwNEY1 NkExMUU5QkYyQUU2ODRDNEY5QUUwMi9xdzJIbDhXS2c2VzBuQWQ2TXU5bk1vY2s1 QkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3F3MkhsOFdLZzZXMG5BZDZNdTluTW9jazVCSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTAyNi9ENkIyNjMwNEY1NkExMUU5QkYyQUU2ODRDNEY5QUUwMi9xdzJIbDhXS2c2 VzBuQWQ2TXU5bk1vY2s1QkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBrLSILkHaNMT43FlcYsoHgkUthret0Y3bJ8mYPqGsOoSyd1HbQgpi0 KDuPRFpTYYEpDZKHRrkAK87c1LZ0OUFqL2QMvecHLrYkKB5hlFnRMZtfsx9qB4kO mzSmVdzXKOFCeO4IMBpcvI1pMXA+SBYKMZpfXfQCfBYL8EfQGwTlOzJ0F2aBN+fp u7SjuTYA9BLDgjNinz95YOUmqM0IyoS0g5/PxXphV+PvsBPCZfd82nEvYYxvmioA VWBkC/skLfQCnE1KtVRAiIQ43vrfZjXP153j0XeaS3EXrojttld35iIZ4yZNJVzs a1jnFO89cp6M9b53pGXCxldhR78Wnvyr -----END CERTIFICATE-----Generated at Sat Apr 26 12:56:28 2025 by rpki-client