$ rpki-client -vvf rpki.apnic.net/member_repository/A9167F95/7D33FD3812E711F0BDB9454DC4F9AE02/qDvPbbKI6WRw000Yr7PkqBJ5GGc.mft File: qDvPbbKI6WRw000Yr7PkqBJ5GGc.mft (raw, json) Hash identifier: NEEIddYIKlFUYwKBnESScmOEeuVaimvz3ibyRL8K9Vs= Subject key identifier: 02:34:60:E3:0A:58:A1:34:31:44:E4:71:60:BC:DB:B0:ED:51:E0:99 Authority key identifier: A8:3B:CF:6D:B2:88:E9:64:70:D3:4D:18:AF:B3:E4:A8:12:79:18:67 Certificate issuer: /CN=A9167F95/serialNumber=A83BCF6DB288E96470D34D18AFB3E4A812791867 Certificate serial: 10 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qDvPbbKI6WRw000Yr7PkqBJ5GGc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167F95/7D33FD3812E711F0BDB9454DC4F9AE02/qDvPbbKI6WRw000Yr7PkqBJ5GGc.mft Manifest number: 0E Signing time: Fri 25 Apr 2025 07:06:17 +0000 Manifest this update: Fri 25 Apr 2025 07:06:16 +0000 Manifest next update: Fri 02 May 2025 07:06:16 +0000 Files and hashes: 1: qDvPbbKI6WRw000Yr7PkqBJ5GGc.crl (hash: AXuaUqz6BR3QDeN7HnjPzZSpJZA8P9JLcGZ+9jdPELE=) 2: CB67B90812E811F0B8DAD875C4F9AE02.roa (hash: ghA9EEgI0e+9HlkDLrK1eM2MR4ZuQ4ALmiWbqOT3M5E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167F95/7D33FD3812E711F0BDB9454DC4F9AE02/qDvPbbKI6WRw000Yr7PkqBJ5GGc.crl rsync://rpki.apnic.net/member_repository/A9167F95/7D33FD3812E711F0BDB9454DC4F9AE02/qDvPbbKI6WRw000Yr7PkqBJ5GGc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qDvPbbKI6WRw000Yr7PkqBJ5GGc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 07:06:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16 (0x10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167F95, serialNumber=A83BCF6DB288E96470D34D18AFB3E4A812791867 Validity Not Before: Apr 25 07:06:16 2025 GMT Not After : May 2 07:06:16 2025 GMT Subject: CN=680b3469-98b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:6d:2d:25:b5:8c:e1:33:a2:79:67:41:bd:a3: 5c:22:35:8c:c5:7d:14:76:7c:c6:a9:7f:55:be:61: 95:c2:bb:28:8b:a5:20:40:eb:70:de:a8:68:76:c7: 0b:69:8d:32:32:53:26:f0:dd:16:e6:09:93:d6:8e: 8a:a1:cc:36:cf:56:54:2a:43:6b:c6:97:0e:9d:0a: d0:bf:07:be:1b:28:4e:de:cd:b7:72:08:72:85:90: b3:66:49:97:58:d8:8e:bc:9c:b6:8d:2a:55:b0:36: 65:6d:61:17:57:b1:2c:5e:c3:a6:ba:e7:9f:79:8c: cd:ae:57:78:bc:cc:83:f6:9e:f0:7e:2e:2e:32:7f: c7:af:98:68:fb:79:ff:dc:52:3c:9a:31:8e:74:1a: a6:7c:f2:88:85:08:c7:31:64:bd:43:8b:28:44:4e: 17:45:74:15:92:ea:99:2c:2e:26:a5:f0:02:19:7a: 53:b4:53:97:87:b3:ed:06:b1:0c:e5:9c:21:d8:99: ef:7e:c9:fe:15:04:c3:ea:0b:40:b3:51:39:74:0d: 0c:80:0e:8e:a0:92:ee:31:ed:48:55:35:5d:9a:25: 45:10:78:22:8c:0f:c2:e5:d1:b9:96:e9:53:0b:69: 55:a3:03:a7:a5:19:6a:c7:25:de:8b:d1:63:a8:c9: eb:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:34:60:E3:0A:58:A1:34:31:44:E4:71:60:BC:DB:B0:ED:51:E0:99 X509v3 Authority Key Identifier: keyid:A8:3B:CF:6D:B2:88:E9:64:70:D3:4D:18:AF:B3:E4:A8:12:79:18:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167F95/7D33FD3812E711F0BDB9454DC4F9AE02/qDvPbbKI6WRw000Yr7PkqBJ5GGc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qDvPbbKI6WRw000Yr7PkqBJ5GGc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167F95/7D33FD3812E711F0BDB9454DC4F9AE02/qDvPbbKI6WRw000Yr7PkqBJ5GGc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c7:40:14:4c:e0:a8:14:1e:71:79:05:af:4d:f1:05:e6:9f:20: 09:ec:a2:0c:77:8d:2e:ac:f7:22:a6:48:18:f5:97:c2:4f:b3: 85:e1:1e:ab:05:25:9f:2d:2f:00:89:14:89:94:03:cf:4f:60: 18:51:a8:b3:56:e6:b3:6c:97:75:5a:ea:6c:a9:eb:e0:ad:1a: 0a:36:ef:66:92:50:0a:b5:2c:87:95:f3:de:fe:1b:86:66:97: a1:01:fe:b5:b9:a6:2d:10:e4:33:9c:9d:1d:79:a9:3d:13:43: a1:73:46:71:ba:94:ca:1c:d8:52:72:72:4c:ec:bc:9f:f8:df: f2:2b:dc:25:ff:a5:5f:4d:d1:9f:0c:0f:dc:08:96:64:8a:cd: 55:d9:fa:3b:0e:78:1a:fb:8f:0d:e2:ac:cd:03:6b:14:29:34: df:01:c4:4a:82:45:0d:a9:24:68:21:a3:2d:3e:ae:6e:6c:9a: d0:a4:3b:19:25:5f:c3:90:68:69:b9:61:be:e7:42:88:50:76: fe:36:38:96:d9:ce:10:f1:ba:04:40:cd:cc:04:4f:1a:01:2e: 13:29:8f:88:d7:95:eb:69:41:d4:62:c8:30:46:af:d2:6b:f8: af:34:8e:95:2f:02:70:23:9f:4e:17:58:fb:42:bf:5a:7c:d4: 5b:59:6d:99 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 N0Y5NTExMC8GA1UEBRMoQTgzQkNGNkRCMjg4RTk2NDcwRDM0RDE4QUZCM0U0QTgx Mjc5MTg2NzAeFw0yNTA0MjUwNzA2MTZaFw0yNTA1MDIwNzA2MTZaMBgxFjAUBgNV BAMTDTY4MGIzNDY5LTk4YjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDCbS0ltYzhM6J5Z0G9o1wiNYzFfRR2fMapf1W+YZXCuyiLpSBA63DeqGh2xwtp jTIyUybw3RbmCZPWjoqhzDbPVlQqQ2vGlw6dCtC/B74bKE7ezbdyCHKFkLNmSZdY 2I68nLaNKlWwNmVtYRdXsSxew6a65595jM2uV3i8zIP2nvB+Li4yf8evmGj7ef/c UjyaMY50GqZ88oiFCMcxZL1DiyhEThdFdBWS6pksLial8AIZelO0U5eHs+0GsQzl nCHYme9+yf4VBMPqC0CzUTl0DQyADo6gku4x7UhVNV2aJUUQeCKMD8Ll0bmW6VML aVWjA6elGWrHJd6L0WOoyevBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUAjRg4wpY oTQxRORxYLzbsO1R4JkwHwYDVR0jBBgwFoAUqDvPbbKI6WRw000Yr7PkqBJ5GGcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY3Rjk1LzdEMzNGRDM4MTJF NzExRjBCREI5NDU0REM0RjlBRTAyL3FEdlBiYktJNldSdzAwMFlyN1BrcUJKNUdH Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcUR2UGJiS0k2V1J3MDAwWXI3UGtxQko1R0djLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY3 Rjk1LzdEMzNGRDM4MTJFNzExRjBCREI5NDU0REM0RjlBRTAyL3FEdlBiYktJNldS dzAwMFlyN1BrcUJKNUdHYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMdAFEzgqBQecXkFr03xBeafIAnsogx3jS6s9yKmSBj1l8JPs4XhHqsF JZ8tLwCJFImUA89PYBhRqLNW5rNsl3Va6myp6+CtGgo272aSUAq1LIeV897+G4Zm l6EB/rW5pi0Q5DOcnR15qT0TQ6FzRnG6lMoc2FJyckzsvJ/43/Ir3CX/pV9N0Z8M D9wIlmSKzVXZ+jsOeBr7jw3irM0DaxQpNN8BxEqCRQ2pJGghoy0+rm5smtCkOxkl X8OQaGm5Yb7nQohQdv42OJbZzhDxugRAzcwETxoBLhMpj4jXletpQdRiyDBGr9Jr +K80jpUvAnAjn04XWPtCv1p81FtZbZk= -----END CERTIFICATE-----Generated at Sat Apr 26 05:06:14 2025 by rpki-client