$ rpki-client -vvf rpki.apnic.net/member_repository/A9167003/26A6B05832BB11EFA83D612FC4F9AE02/qPwGNuaBhkdVSHlN36RpC__UzLY.mft File: qPwGNuaBhkdVSHlN36RpC__UzLY.mft (raw, json) Hash identifier: re5mAKCn0nIYY+ZfrsPDP1iCVqptzXecWp1RvXx2b58= Subject key identifier: 81:FF:26:D9:F7:5C:C6:CC:87:8F:2B:09:85:28:28:C1:83:07:C5:D0 Authority key identifier: A8:FC:06:36:E6:81:86:47:55:48:79:4D:DF:A4:69:0B:FF:D4:CC:B6 Certificate issuer: /CN=A9167003/serialNumber=A8FC0636E68186475548794DDFA4690BFFD4CCB6 Certificate serial: A1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qPwGNuaBhkdVSHlN36RpC__UzLY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167003/26A6B05832BB11EFA83D612FC4F9AE02/qPwGNuaBhkdVSHlN36RpC__UzLY.mft Manifest number: 9F Signing time: Fri 25 Apr 2025 05:15:33 +0000 Manifest this update: Fri 25 Apr 2025 05:15:33 +0000 Manifest next update: Fri 02 May 2025 05:15:33 +0000 Files and hashes: 1: qPwGNuaBhkdVSHlN36RpC__UzLY.crl (hash: 1gDfsOkhlFxOWq4Yca+pGv/ac/7ToJPpX+BBY9eBh6U=) 2: 85C3AC9A39E511EF99FD7A11C4F9AE02.roa (hash: B8Xb2sYgtypSv3e1Q/ixe1JBQsd2MMr7LDz0OuJS7tw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167003/26A6B05832BB11EFA83D612FC4F9AE02/qPwGNuaBhkdVSHlN36RpC__UzLY.crl rsync://rpki.apnic.net/member_repository/A9167003/26A6B05832BB11EFA83D612FC4F9AE02/qPwGNuaBhkdVSHlN36RpC__UzLY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qPwGNuaBhkdVSHlN36RpC__UzLY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:15:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161 (0xa1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167003, serialNumber=A8FC0636E68186475548794DDFA4690BFFD4CCB6 Validity Not Before: Apr 25 05:15:33 2025 GMT Not After : May 2 05:15:33 2025 GMT Subject: CN=680b1a75-dcc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:b9:aa:6c:d3:69:aa:79:0a:d1:79:46:5e:32: 9b:f8:58:40:65:16:ca:cc:a9:62:41:ed:48:96:12: 42:6f:a4:62:12:41:12:08:3c:ca:51:46:30:70:10: ef:14:5a:d1:fb:94:d9:b9:ac:ec:34:7c:36:1b:83: 39:63:0c:c7:84:4f:01:68:ff:c1:21:fc:17:52:d9: 04:fa:23:cc:8a:5f:f3:26:f3:ce:2c:7f:08:48:55: e4:10:69:e0:d6:fd:2c:67:d2:11:f6:87:9f:e0:2f: 78:dc:8b:1d:3c:0a:7a:18:aa:7c:ad:ab:4a:3c:c9: ed:74:c2:8e:09:62:7e:02:8d:b6:a4:74:8a:99:30: 58:75:d4:43:f9:1e:bd:fc:e5:82:0b:43:e9:1a:98: ae:80:f5:ce:6d:c9:96:ea:c3:99:84:fd:27:1e:7e: a1:8e:c2:8b:9d:f6:4b:60:32:8f:3a:84:09:fe:13: 01:c7:1c:d5:3f:44:54:c8:26:e8:a6:73:0a:52:72: e8:5c:7b:a4:10:cc:db:37:ed:54:c9:bc:d5:0d:6b: 65:ea:db:85:28:a5:34:cd:7b:59:09:67:da:7d:19: d8:9f:73:ab:6e:be:5b:8a:a0:94:66:09:51:08:0d: c1:31:12:f9:61:c2:26:60:22:c4:5b:b7:7b:39:1a: 06:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:FF:26:D9:F7:5C:C6:CC:87:8F:2B:09:85:28:28:C1:83:07:C5:D0 X509v3 Authority Key Identifier: keyid:A8:FC:06:36:E6:81:86:47:55:48:79:4D:DF:A4:69:0B:FF:D4:CC:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167003/26A6B05832BB11EFA83D612FC4F9AE02/qPwGNuaBhkdVSHlN36RpC__UzLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qPwGNuaBhkdVSHlN36RpC__UzLY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167003/26A6B05832BB11EFA83D612FC4F9AE02/qPwGNuaBhkdVSHlN36RpC__UzLY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:63:ab:70:80:9f:cc:c0:ce:68:04:57:15:ea:3e:92:81:6c: cc:7c:60:65:97:b8:2f:1b:b4:d3:f9:ef:1d:f9:64:08:c2:6e: 63:e3:e9:a6:c5:93:d1:a0:16:37:53:43:86:61:97:09:38:88: d1:6a:30:3f:b5:a5:73:a9:98:14:68:8c:cc:db:c5:2c:af:d0: 13:f1:47:6d:80:80:42:80:98:56:79:4c:9b:e1:14:cd:69:ec: 9e:4b:66:4f:b0:f6:87:59:19:e8:00:76:e1:e8:04:10:65:42: 5a:1f:64:dd:22:4f:e6:87:12:32:4a:51:c0:a7:76:db:53:86: df:21:35:1d:ff:36:5f:98:b3:c3:c6:3b:b6:e5:17:9e:69:0a: 56:20:ba:d7:9f:d3:0b:20:93:a9:44:38:d7:82:ad:c4:b2:a9: ed:da:75:22:b1:0c:46:b8:80:8e:42:4c:78:6e:3d:0c:cd:58: dd:c6:ee:6e:78:00:a6:da:9d:aa:05:2a:2c:b6:8d:ff:bb:2b: 65:a6:3c:44:62:36:7d:69:ff:e7:34:44:9d:29:58:d8:c5:d8: 44:ac:fb:98:21:f7:da:eb:32:5c:e2:28:9e:28:5f:97:24:de: fd:a6:18:2a:eb:60:44:bf:97:7c:d0:89:2f:9b:1e:3e:be:11: 79:3f:58:74 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjcwMDMxMTAvBgNVBAUTKEE4RkMwNjM2RTY4MTg2NDc1NTQ4Nzk0RERGQTQ2OTBC RkZENENDQjYwHhcNMjUwNDI1MDUxNTMzWhcNMjUwNTAyMDUxNTMzWjAYMRYwFAYD VQQDEw02ODBiMWE3NS1kY2MyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmrmqbNNpqnkK0XlGXjKb+FhAZRbKzKliQe1IlhJCb6RiEkESCDzKUUYwcBDv FFrR+5TZuazsNHw2G4M5YwzHhE8BaP/BIfwXUtkE+iPMil/zJvPOLH8ISFXkEGng 1v0sZ9IR9oef4C943IsdPAp6GKp8ratKPMntdMKOCWJ+Ao22pHSKmTBYddRD+R69 /OWCC0PpGpiugPXObcmW6sOZhP0nHn6hjsKLnfZLYDKPOoQJ/hMBxxzVP0RUyCbo pnMKUnLoXHukEMzbN+1UybzVDWtl6tuFKKU0zXtZCWfafRnYn3Orbr5biqCUZglR CA3BMRL5YcImYCLEW7d7ORoGSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIH/Jtn3 XMbMh48rCYUoKMGDB8XQMB8GA1UdIwQYMBaAFKj8BjbmgYZHVUh5Td+kaQv/1My2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NzAwMy8yNkE2QjA1ODMy QkIxMUVGQTgzRDYxMkZDNEY5QUUwMi9xUHdHTnVhQmhrZFZTSGxOMzZScENfX1V6 TFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3FQd0dOdWFCaGtkVlNIbE4zNlJwQ19fVXpMWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NzAwMy8yNkE2QjA1ODMyQkIxMUVGQTgzRDYxMkZDNEY5QUUwMi9xUHdHTnVhQmhr ZFZTSGxOMzZScENfX1V6TFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCgY6twgJ/MwM5oBFcV6j6SgWzMfGBll7gvG7TT+e8d+WQIwm5j4+mm xZPRoBY3U0OGYZcJOIjRajA/taVzqZgUaIzM28Usr9AT8UdtgIBCgJhWeUyb4RTN aeyeS2ZPsPaHWRnoAHbh6AQQZUJaH2TdIk/mhxIySlHAp3bbU4bfITUd/zZfmLPD xju25ReeaQpWILrXn9MLIJOpRDjXgq3Esqnt2nUisQxGuICOQkx4bj0MzVjdxu5u eACm2p2qBSosto3/uytlpjxEYjZ9af/nNESdKVjYxdhErPuYIffa6zJc4iieKF+X JN79phgq62BEv5d80Ikvmx4+vhF5P1h0 -----END CERTIFICATE-----Generated at Sat Apr 26 20:24:18 2025 by rpki-client