$ rpki-client -vvf rpki.apnic.net/member_repository/A915C325/8CE7DE76137411E9A1DC1053C4F9AE02/Q0pJF1lSFr8Igp3FLC7TqPKCBIs.mft File: Q0pJF1lSFr8Igp3FLC7TqPKCBIs.mft (raw, json) Hash identifier: qpa/79EMhKwAPHR/21nGHOPoonKyO3FvTDim5xCB2YI= Subject key identifier: BD:5E:A0:AA:86:AF:0C:4E:56:79:28:54:96:6E:0F:AC:8E:9C:CC:F3 Authority key identifier: 43:4A:49:17:59:52:16:BF:08:82:9D:C5:2C:2E:D3:A8:F2:82:04:8B Certificate issuer: /CN=A915C325/serialNumber=434A4917595216BF08829DC52C2ED3A8F282048B Certificate serial: 1109 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q0pJF1lSFr8Igp3FLC7TqPKCBIs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915C325/8CE7DE76137411E9A1DC1053C4F9AE02/Q0pJF1lSFr8Igp3FLC7TqPKCBIs.mft Manifest number: 1100 Signing time: Thu 24 Apr 2025 17:17:55 +0000 Manifest this update: Thu 24 Apr 2025 17:17:55 +0000 Manifest next update: Thu 01 May 2025 17:17:55 +0000 Files and hashes: 1: Q0pJF1lSFr8Igp3FLC7TqPKCBIs.crl (hash: 6lrsg7xjYVQdyivrvBURNS+79y98mvozCIjfUi9rUO8=) 2: 1ED040D0137511E98DD28353C4F9AE02.roa (hash: KtVDjjSzHPLYoect4ZHiTibts9NkJOtiflrVSKdNkLA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915C325/8CE7DE76137411E9A1DC1053C4F9AE02/Q0pJF1lSFr8Igp3FLC7TqPKCBIs.crl rsync://rpki.apnic.net/member_repository/A915C325/8CE7DE76137411E9A1DC1053C4F9AE02/Q0pJF1lSFr8Igp3FLC7TqPKCBIs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q0pJF1lSFr8Igp3FLC7TqPKCBIs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:17:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4361 (0x1109) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915C325, serialNumber=434A4917595216BF08829DC52C2ED3A8F282048B Validity Not Before: Apr 24 17:17:55 2025 GMT Not After : May 1 17:17:55 2025 GMT Subject: CN=680a7243-e09b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:c6:f1:88:4f:60:fd:52:57:3e:38:9a:28:8c: 5c:ff:8b:b7:18:35:29:8a:1e:29:3d:78:c7:76:ff: ef:0e:d2:6a:a1:d1:24:6d:28:04:71:7f:a4:4d:03: 72:db:14:44:8e:4b:9c:0b:7e:5f:79:f4:9d:00:3e: 52:27:15:e1:ff:2f:57:39:67:11:b4:b3:78:99:89: 76:fd:ad:15:55:d8:d0:5c:8a:17:d6:94:52:f5:29: ae:c0:af:43:0f:b6:ec:35:0c:b6:dc:9e:28:b2:0a: de:89:85:34:c4:7c:ff:39:2d:c8:2b:d4:03:c6:42: 92:7c:7a:33:77:05:ad:85:82:ac:28:61:07:c9:53: b7:e5:45:4e:f4:49:75:7e:65:20:f1:9e:e5:ff:48: cc:33:41:e0:82:72:23:7a:9e:a1:21:83:86:d0:75: 63:1e:a0:83:fe:e8:fb:5b:e7:cb:c3:bd:db:eb:06: a0:7c:88:b3:51:cc:d3:f6:d3:ec:7e:76:6f:38:25: 1b:5b:a6:d8:e0:d1:04:2c:b8:1a:c6:80:6c:ac:fa: be:5e:ca:06:45:d9:cd:29:7a:2c:e2:d6:40:56:a2: 70:a8:a6:a4:9e:19:41:8c:3d:ae:66:27:07:21:d4: 63:0b:92:fc:72:7b:2f:68:ea:ee:ce:74:95:93:ed: 70:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:5E:A0:AA:86:AF:0C:4E:56:79:28:54:96:6E:0F:AC:8E:9C:CC:F3 X509v3 Authority Key Identifier: keyid:43:4A:49:17:59:52:16:BF:08:82:9D:C5:2C:2E:D3:A8:F2:82:04:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915C325/8CE7DE76137411E9A1DC1053C4F9AE02/Q0pJF1lSFr8Igp3FLC7TqPKCBIs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q0pJF1lSFr8Igp3FLC7TqPKCBIs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C325/8CE7DE76137411E9A1DC1053C4F9AE02/Q0pJF1lSFr8Igp3FLC7TqPKCBIs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:c8:c3:14:66:77:97:24:82:59:4a:61:bb:76:ce:88:ae:f2: ca:b8:59:57:8c:c7:1b:82:6c:c5:2f:01:63:61:26:2d:5e:9d: 49:50:a6:0f:bd:4a:07:f3:9c:9e:bc:3d:3c:cb:d5:89:1b:c3: 63:7d:29:82:f8:76:62:43:8b:67:40:74:1d:f6:ef:90:03:63: 33:4b:8d:88:9e:1f:cf:36:0a:98:40:f5:17:71:b3:ff:28:7c: ee:13:8b:63:40:46:8a:af:12:57:9e:6f:8c:69:b0:f2:3e:f0: c2:47:7a:49:c3:ea:4f:fc:2e:69:7b:d6:68:8b:74:43:1a:5a: ec:af:ac:c3:36:86:ba:1a:fd:a6:95:9b:47:65:0a:d4:85:9e: 50:a0:f3:c8:cb:3f:96:e7:2c:99:15:ed:43:16:1a:d3:93:a4: 92:8b:df:e3:fe:f8:f3:ea:71:f0:b9:8e:c4:ae:b1:c6:6b:2a: 14:6f:00:e2:be:f3:00:31:03:49:78:34:84:d7:de:32:40:32: d8:eb:ef:13:9c:29:52:a1:0e:0b:a2:ef:39:07:e3:01:1b:3f: 66:fb:f1:b7:9c:b6:cb:2b:e3:60:50:88:03:a6:75:f9:cc:2a: 27:50:5f:42:ae:ca:b7:2e:12:23:16:9d:d6:c0:6e:14:3d:e1: c2:bc:08:fa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEQkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUMzMjUxMTAvBgNVBAUTKDQzNEE0OTE3NTk1MjE2QkYwODgyOURDNTJDMkVEM0E4 RjI4MjA0OEIwHhcNMjUwNDI0MTcxNzU1WhcNMjUwNTAxMTcxNzU1WjAYMRYwFAYD VQQDEw02ODBhNzI0My1lMDliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr8bxiE9g/VJXPjiaKIxc/4u3GDUpih4pPXjHdv/vDtJqodEkbSgEcX+kTQNy 2xREjkucC35fefSdAD5SJxXh/y9XOWcRtLN4mYl2/a0VVdjQXIoX1pRS9SmuwK9D D7bsNQy23J4osgreiYU0xHz/OS3IK9QDxkKSfHozdwWthYKsKGEHyVO35UVO9El1 fmUg8Z7l/0jMM0HggnIjep6hIYOG0HVjHqCD/uj7W+fLw73b6wagfIizUczT9tPs fnZvOCUbW6bY4NEELLgaxoBsrPq+XsoGRdnNKXos4tZAVqJwqKaknhlBjD2uZicH IdRjC5L8cnsvaOruznSVk+1wqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL1eoKqG rwxOVnkoVJZuD6yOnMzzMB8GA1UdIwQYMBaAFENKSRdZUha/CIKdxSwu06jyggSL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QzMyNS84Q0U3REU3NjEz NzQxMUU5QTFEQzEwNTNDNEY5QUUwMi9RMHBKRjFsU0ZyOElncDNGTEM3VHFQS0NC SXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1EwcEpGMWxTRnI4SWdwM0ZMQzdUcVBLQ0JJcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QzMyNS84Q0U3REU3NjEzNzQxMUU5QTFEQzEwNTNDNEY5QUUwMi9RMHBKRjFsU0Zy OElncDNGTEM3VHFQS0NCSXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC2yMMUZneXJIJZSmG7ds6IrvLKuFlXjMcbgmzFLwFjYSYtXp1JUKYP vUoH85yevD08y9WJG8NjfSmC+HZiQ4tnQHQd9u+QA2MzS42Inh/PNgqYQPUXcbP/ KHzuE4tjQEaKrxJXnm+MabDyPvDCR3pJw+pP/C5pe9Zoi3RDGlrsr6zDNoa6Gv2m lZtHZQrUhZ5QoPPIyz+W5yyZFe1DFhrTk6SSi9/j/vjz6nHwuY7ErrHGayoUbwDi vvMAMQNJeDSE194yQDLY6+8TnClSoQ4Lou85B+MBGz9m+/G3nLbLK+NgUIgDpnX5 zConUF9Crsq3LhIjFp3WwG4UPeHCvAj6 -----END CERTIFICATE-----Generated at Sat Apr 26 17:08:56 2025 by rpki-client