$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0EE/435C3EE009C011EEBE12583AC4F9AE02/qju6qgnV04M0CJnW1TqW1UBTnAE.mft File: qju6qgnV04M0CJnW1TqW1UBTnAE.mft (raw, json) Hash identifier: OmWTPUr4W4bteTI3QyRr/k0GpzbYyBFPszEgoQmpEFU= Subject key identifier: 52:9F:87:3D:68:60:74:AD:5B:DD:3D:2A:0D:73:8A:16:21:CE:67:BF Authority key identifier: AA:3B:BA:AA:09:D5:D3:83:34:08:99:D6:D5:3A:96:D5:40:53:9C:01 Certificate issuer: /CN=A915A0EE/serialNumber=AA3BBAAA09D5D383340899D6D53A96D540539C01 Certificate serial: 015E Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/qju6qgnV04M0CJnW1TqW1UBTnAE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A0EE/435C3EE009C011EEBE12583AC4F9AE02/qju6qgnV04M0CJnW1TqW1UBTnAE.mft Manifest number: 015E Signing time: Fri 25 Apr 2025 03:08:01 +0000 Manifest this update: Fri 25 Apr 2025 03:08:00 +0000 Manifest next update: Fri 02 May 2025 03:08:00 +0000 Files and hashes: 1: qju6qgnV04M0CJnW1TqW1UBTnAE.crl (hash: 5VhW4pt68ZJ4Obgm1zIbuS3zHxLbgUXLXYrJ1Slj6Ug=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A0EE/435C3EE009C011EEBE12583AC4F9AE02/qju6qgnV04M0CJnW1TqW1UBTnAE.crl rsync://rpki.apnic.net/member_repository/A915A0EE/435C3EE009C011EEBE12583AC4F9AE02/qju6qgnV04M0CJnW1TqW1UBTnAE.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/qju6qgnV04M0CJnW1TqW1UBTnAE.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:08:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 350 (0x15e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A0EE, serialNumber=AA3BBAAA09D5D383340899D6D53A96D540539C01 Validity Not Before: Apr 25 03:08:00 2025 GMT Not After : May 2 03:08:00 2025 GMT Subject: CN=680afc90-b650 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:ba:9c:53:5f:3d:8e:6b:6f:27:e7:25:bd:bf: 67:40:97:eb:b4:c8:02:10:78:f2:07:d5:5c:ed:8c: 79:80:74:f4:88:13:16:39:66:82:10:b6:c3:b6:67: 35:02:d3:26:c8:b5:46:c1:3a:3f:c5:21:a1:5d:9f: 1c:af:7a:87:da:8d:d7:4b:61:d6:0a:9e:8f:14:22: bf:e5:c3:24:18:98:31:16:d0:01:eb:f4:0e:1e:14: ec:68:ad:72:f3:0e:ed:48:35:1b:cd:18:20:ce:5e: 39:5f:90:8c:3d:ed:aa:0a:f2:11:e3:56:d8:54:54: f6:06:87:e8:32:75:42:2a:d0:73:f1:1e:c9:38:19: 23:c4:7e:77:db:58:9d:40:5c:6b:6d:f8:27:88:78: 5b:ff:5e:bc:4b:e3:88:3b:c0:0c:0e:95:6f:90:98: 5e:45:56:6b:fc:ed:f5:5c:fc:83:b1:4c:81:a4:f3: c9:77:33:a3:d7:0a:ff:2b:08:52:93:28:e7:d3:4c: 5f:ad:c8:08:dc:f4:5b:9b:3e:b0:aa:fb:f1:be:9e: c1:01:1d:26:70:9e:cc:3c:e0:79:59:e8:7b:8c:0f: ff:81:2b:ff:1d:d4:78:0e:30:22:7f:58:6e:a5:d3: 85:3b:e1:18:b4:96:cc:80:64:a8:66:81:27:45:2c: de:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:9F:87:3D:68:60:74:AD:5B:DD:3D:2A:0D:73:8A:16:21:CE:67:BF X509v3 Authority Key Identifier: keyid:AA:3B:BA:AA:09:D5:D3:83:34:08:99:D6:D5:3A:96:D5:40:53:9C:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A0EE/435C3EE009C011EEBE12583AC4F9AE02/qju6qgnV04M0CJnW1TqW1UBTnAE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/qju6qgnV04M0CJnW1TqW1UBTnAE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0EE/435C3EE009C011EEBE12583AC4F9AE02/qju6qgnV04M0CJnW1TqW1UBTnAE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:8c:65:af:85:89:de:15:94:61:6c:09:fd:df:c1:31:47:20: 41:1b:8d:7e:83:38:24:ca:44:72:a5:fa:d2:2c:ab:44:bd:ff: e5:de:43:04:b4:a2:ef:8e:27:a0:db:1c:21:10:c9:2a:07:56: 3c:56:a7:44:d3:fa:d7:16:62:ad:02:65:2a:bc:79:b1:92:fb: 4b:b3:5f:6b:03:e4:0b:19:2c:19:2b:2f:5d:b8:b8:5f:65:1c: a9:e0:7b:dd:09:de:af:f7:94:2e:57:60:56:37:98:56:d1:17: fc:82:df:84:33:cf:ba:63:85:e0:95:a0:de:95:2b:ae:f3:20: 86:99:99:24:81:4b:83:d9:2a:ae:67:52:16:66:ea:7c:b5:1a: 64:4f:73:08:89:cf:e2:f8:0d:a4:db:42:2d:b7:7c:8b:fa:fb: e3:da:5a:78:fe:7a:02:49:02:10:b3:aa:59:7d:0e:d4:60:ba: 9b:37:47:8b:19:02:75:ab:23:7b:64:fd:de:23:5b:10:db:4d: 24:02:6c:58:66:41:f9:78:f4:7e:66:61:fc:07:f2:03:f1:18: 7d:dd:c8:15:4e:40:b8:36:ae:92:7b:e8:54:7f:ba:e2:03:7d: ab:bf:84:ab:07:94:db:f0:fc:47:ea:6d:69:41:0c:44:b7:21: e4:a9:bf:30 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAV4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUEwRUUxMTAvBgNVBAUTKEFBM0JCQUFBMDlENUQzODMzNDA4OTlENkQ1M0E5NkQ1 NDA1MzlDMDEwHhcNMjUwNDI1MDMwODAwWhcNMjUwNTAyMDMwODAwWjAYMRYwFAYD VQQDEw02ODBhZmM5MC1iNjUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2bqcU189jmtvJ+clvb9nQJfrtMgCEHjyB9Vc7Yx5gHT0iBMWOWaCELbDtmc1 AtMmyLVGwTo/xSGhXZ8cr3qH2o3XS2HWCp6PFCK/5cMkGJgxFtAB6/QOHhTsaK1y 8w7tSDUbzRggzl45X5CMPe2qCvIR41bYVFT2BofoMnVCKtBz8R7JOBkjxH5321id QFxrbfgniHhb/168S+OIO8AMDpVvkJheRVZr/O31XPyDsUyBpPPJdzOj1wr/KwhS kyjn00xfrcgI3PRbmz6wqvvxvp7BAR0mcJ7MPOB5Weh7jA//gSv/HdR4DjAif1hu pdOFO+EYtJbMgGSoZoEnRSzeGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFKfhz1o YHStW909Kg1zihYhzme/MB8GA1UdIwQYMBaAFKo7uqoJ1dODNAiZ1tU6ltVAU5wB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTBFRS80MzVDM0VFMDA5 QzAxMUVFQkUxMjU4M0FDNEY5QUUwMi9xanU2cWduVjA0TTBDSm5XMVRxVzFVQlRu QUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL3FqdTZxZ25WMDRNMENKblcxVHFXMVVCVG5BRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QTBFRS80MzVDM0VFMDA5QzAxMUVFQkUxMjU4M0FDNEY5QUUwMi9xanU2cWduVjA0 TTBDSm5XMVRxVzFVQlRuQUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQjGWvhYneFZRhbAn938ExRyBBG41+gzgkykRypfrSLKtEvf/l3kME tKLvjieg2xwhEMkqB1Y8VqdE0/rXFmKtAmUqvHmxkvtLs19rA+QLGSwZKy9duLhf ZRyp4HvdCd6v95QuV2BWN5hW0Rf8gt+EM8+6Y4XglaDelSuu8yCGmZkkgUuD2Squ Z1IWZup8tRpkT3MIic/i+A2k20Itt3yL+vvj2lp4/noCSQIQs6pZfQ7UYLqbN0eL GQJ1qyN7ZP3eI1sQ200kAmxYZkH5ePR+ZmH8B/ID8Rh93cgVTkC4Nq6Se+hUf7ri A32rv4SrB5Tb8PxH6m1pQQxEtyHkqb8w -----END CERTIFICATE-----Generated at Sat Apr 26 12:40:54 2025 by rpki-client