$ rpki-client -vvf rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/8QiS-FRovwBO719OH6WRfwYyoEk.mft File: 8QiS-FRovwBO719OH6WRfwYyoEk.mft (raw, json) Hash identifier: ZDR+oAEwc/NDs7AAKkxHbiSb9mktCsLQ16TKrab/PI0= Subject key identifier: D6:94:2C:D2:DD:84:64:84:46:AC:A2:C5:84:26:7A:E3:A4:8E:9A:57 Authority key identifier: F1:08:92:F8:54:68:BF:00:4E:EF:5F:4E:1F:A5:91:7F:06:32:A0:49 Certificate issuer: /CN=A915AF7A/serialNumber=F10892F85468BF004EEF5F4E1FA5917F0632A049 Certificate serial: 0137 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8QiS-FRovwBO719OH6WRfwYyoEk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/8QiS-FRovwBO719OH6WRfwYyoEk.mft Manifest number: 0710 Signing time: Thu 24 Apr 2025 22:52:12 +0000 Manifest this update: Thu 24 Apr 2025 22:52:11 +0000 Manifest next update: Thu 01 May 2025 22:52:11 +0000 Files and hashes: 1: 8QiS-FRovwBO719OH6WRfwYyoEk.crl (hash: 7criJli//7Q0cURCJg5VnObXSbQzday2Au0boe+As7U=) 2: 8280FB76969E11EF90AEE785C4F9AE02.roa (hash: KrHRF1GAdSejuwJPh8FeCiH4WaaXz6aXNUfwd0PIsqQ=) 3: 5B49C0145D3E11EE93D0E174C4F9AE02.roa (hash: aHhZ09FyTGWuPL21l6sEGdPpH/ZI8e7Ar6oNdRPw5Co=) 4: C73A1C1CEEC211EFBB3A3D30C4F9AE02.roa (hash: 2+pMen1/mVG17axHfaJf6K4zr5VFlLkq/JD7aEzO63s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/8QiS-FRovwBO719OH6WRfwYyoEk.crl rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/8QiS-FRovwBO719OH6WRfwYyoEk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8QiS-FRovwBO719OH6WRfwYyoEk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:52:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 311 (0x137) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915AF7A, serialNumber=F10892F85468BF004EEF5F4E1FA5917F0632A049 Validity Not Before: Apr 24 22:52:11 2025 GMT Not After : May 1 22:52:11 2025 GMT Subject: CN=680ac09b-bb5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:f3:11:a2:ab:ef:f4:0e:7d:66:f1:fe:0f:de: fc:cb:e8:ec:52:b7:26:37:ad:40:79:9f:5b:d5:fc: 76:63:fd:70:12:9c:ad:d0:66:bc:ee:56:13:93:84: a4:3f:94:34:77:f3:58:01:5a:9d:62:47:48:b6:9f: e4:1a:ad:1b:c3:74:99:4d:18:74:91:2f:45:0c:19: de:62:92:ce:d5:95:3f:63:24:24:14:ef:a1:ed:05: 9a:97:b5:45:14:76:3c:2c:b1:86:3e:ff:c6:75:1b: b2:ad:8b:71:83:3d:b9:3e:20:9a:1c:73:ed:ca:94: e6:21:d9:2f:4a:b2:47:f7:d5:35:fc:e3:2b:c7:fe: 6a:ca:d4:24:65:14:ef:3d:f6:08:b8:36:f2:45:81: 4d:c2:dc:29:b9:62:e0:62:02:94:32:36:0a:2c:63: e9:3f:95:31:85:5d:8c:06:a4:bc:b8:77:8b:f9:a4: 60:5f:5d:1c:8a:e9:4b:b1:51:38:01:36:5a:8f:90: ff:fe:8b:a9:5a:f4:c7:8c:7a:8d:fd:63:9b:1e:dd: bf:05:cd:f0:47:3a:8e:3e:28:b6:1e:81:70:09:fe: 34:ac:6d:d6:60:5a:70:24:58:00:dd:a0:a7:ab:ca: df:43:2a:49:d1:ab:1c:d8:98:3e:85:53:2b:e3:5a: f9:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:94:2C:D2:DD:84:64:84:46:AC:A2:C5:84:26:7A:E3:A4:8E:9A:57 X509v3 Authority Key Identifier: keyid:F1:08:92:F8:54:68:BF:00:4E:EF:5F:4E:1F:A5:91:7F:06:32:A0:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/8QiS-FRovwBO719OH6WRfwYyoEk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8QiS-FRovwBO719OH6WRfwYyoEk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/8QiS-FRovwBO719OH6WRfwYyoEk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:7b:2f:38:ef:15:9b:23:df:92:30:b2:08:96:75:f3:bd:32: d5:eb:00:13:a7:e9:43:78:f7:77:64:eb:63:12:78:fd:da:bc: 8d:c4:be:c0:b1:36:81:ad:67:60:56:eb:45:2c:29:4b:4a:4c: 8f:16:ea:ab:77:f3:23:db:b5:ba:aa:cd:a3:3c:ff:04:39:99: d5:27:82:3a:e0:0b:95:ec:a0:74:30:df:8a:b9:da:75:29:9f: 49:35:a7:6b:0d:c7:34:e4:41:92:38:05:ae:85:b1:bc:e4:67: c8:94:88:94:e8:42:00:04:8d:91:e2:b3:e7:41:12:af:12:51: 85:0d:cf:a3:19:33:14:73:82:69:4e:2a:0c:3b:29:ee:99:66: a3:c7:69:fc:26:cb:33:af:c7:1d:ef:6b:43:0f:ac:f1:d1:55: 5e:29:a4:0a:b1:8b:0f:93:2f:46:75:4d:e1:42:78:20:ae:e1: 6b:c9:a7:6d:fa:a3:6d:77:7d:bc:8d:bf:5c:c8:88:bc:e1:e5: f0:73:28:af:52:5d:b4:6d:f9:59:c1:4c:68:d5:42:29:79:75: 73:65:20:1d:f1:a1:ca:ff:ac:1a:4e:11:f2:0b:58:78:f3:90: 5f:da:e2:ad:4b:10:36:e2:3f:07:ae:fa:16:82:53:26:05:6a: 6e:29:ed:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUFGN0ExMTAvBgNVBAUTKEYxMDg5MkY4NTQ2OEJGMDA0RUVGNUY0RTFGQTU5MTdG MDYzMkEwNDkwHhcNMjUwNDI0MjI1MjExWhcNMjUwNTAxMjI1MjExWjAYMRYwFAYD VQQDEw02ODBhYzA5Yi1iYjVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxPMRoqvv9A59ZvH+D978y+jsUrcmN61AeZ9b1fx2Y/1wEpyt0Ga87lYTk4Sk P5Q0d/NYAVqdYkdItp/kGq0bw3SZTRh0kS9FDBneYpLO1ZU/YyQkFO+h7QWal7VF FHY8LLGGPv/GdRuyrYtxgz25PiCaHHPtypTmIdkvSrJH99U1/OMrx/5qytQkZRTv PfYIuDbyRYFNwtwpuWLgYgKUMjYKLGPpP5UxhV2MBqS8uHeL+aRgX10ciulLsVE4 ATZaj5D//oupWvTHjHqN/WObHt2/Bc3wRzqOPii2HoFwCf40rG3WYFpwJFgA3aCn q8rfQypJ0asc2Jg+hVMr41r5JwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNaULNLd hGSERqyixYQmeuOkjppXMB8GA1UdIwQYMBaAFPEIkvhUaL8ATu9fTh+lkX8GMqBJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QUY3QS9FMDUzMzMzNkJB QzkxMUVCQjgwN0Q1MUNDNEY5QUUwMi84UWlTLUZSb3Z3Qk83MTlPSDZXUmZ3WXlv RWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhRaVMtRlJvdndCTzcxOU9INldSZndZeW9Fay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QUY3QS9FMDUzMzMzNkJBQzkxMUVCQjgwN0Q1MUNDNEY5QUUwMi84UWlTLUZSb3Z3 Qk83MTlPSDZXUmZ3WXlvRWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/ey847xWbI9+SMLIIlnXzvTLV6wATp+lDePd3ZOtjEnj92ryNxL7A sTaBrWdgVutFLClLSkyPFuqrd/Mj27W6qs2jPP8EOZnVJ4I64AuV7KB0MN+Kudp1 KZ9JNadrDcc05EGSOAWuhbG85GfIlIiU6EIABI2R4rPnQRKvElGFDc+jGTMUc4Jp TioMOynumWajx2n8Jsszr8cd72tDD6zx0VVeKaQKsYsPky9GdU3hQnggruFryadt +qNtd328jb9cyIi84eXwcyivUl20bflZwUxo1UIpeXVzZSAd8aHK/6waThHyC1h4 85Bf2uKtSxA24j8HrvoWglMmBWpuKe1E -----END CERTIFICATE-----Generated at Sat Apr 26 14:01:59 2025 by rpki-client