$ rpki-client -vvf rpki.apnic.net/member_repository/A9168126/157F66EA800611ECB03A0E61C4F9AE02/1qn8yzagJxy8XxErtyBaV7n0hPc.mft File: 1qn8yzagJxy8XxErtyBaV7n0hPc.mft (raw, json) Hash identifier: XbRqCCrmrsNMuVfukje7YmXgd9Ps20k9XUtOUdP4s7k= Subject key identifier: B9:45:EE:5E:C3:01:65:A7:67:34:17:33:CD:B6:9E:B8:B2:D7:6A:4B Authority key identifier: D6:A9:FC:CB:36:A0:27:1C:BC:5F:11:2B:B7:20:5A:57:B9:F4:84:F7 Certificate issuer: /CN=A9168126/serialNumber=D6A9FCCB36A0271CBC5F112BB7205A57B9F484F7 Certificate serial: 03EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1qn8yzagJxy8XxErtyBaV7n0hPc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168126/157F66EA800611ECB03A0E61C4F9AE02/1qn8yzagJxy8XxErtyBaV7n0hPc.mft Manifest number: 03DE Signing time: Fri 25 Apr 2025 00:21:54 +0000 Manifest this update: Fri 25 Apr 2025 00:21:54 +0000 Manifest next update: Fri 02 May 2025 00:21:54 +0000 Files and hashes: 1: 1qn8yzagJxy8XxErtyBaV7n0hPc.crl (hash: hg+dqKC9KTpX5gLHg3rUK7CKozngyhtx8ebjTYoBOZk=) 2: A34E20703F3411EF9DF9274AC4F9AE02.roa (hash: mj7Quo5wKTbG3d5ij/IP0EyOkfhXPi1COcacV2q2awg=) 3: 819150603F3411EF85BAC749C4F9AE02.roa (hash: W4tDaOtoueXLJGV231Xq5px334ORbAFdGWpLgfvtl8E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168126/157F66EA800611ECB03A0E61C4F9AE02/1qn8yzagJxy8XxErtyBaV7n0hPc.crl rsync://rpki.apnic.net/member_repository/A9168126/157F66EA800611ECB03A0E61C4F9AE02/1qn8yzagJxy8XxErtyBaV7n0hPc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1qn8yzagJxy8XxErtyBaV7n0hPc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:21:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1006 (0x3ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168126, serialNumber=D6A9FCCB36A0271CBC5F112BB7205A57B9F484F7 Validity Not Before: Apr 25 00:21:54 2025 GMT Not After : May 2 00:21:54 2025 GMT Subject: CN=680ad5a2-857b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:0b:74:3c:ac:70:31:2c:b6:06:71:eb:e3:23: 46:a0:d7:1c:6c:03:e8:bf:fc:ba:3a:06:dc:49:d8: 4c:77:5a:c6:da:ba:5f:68:db:2e:42:61:ca:19:a7: 01:ce:55:18:e5:7f:ba:70:a1:0a:36:b7:b7:0f:8c: 5b:fd:c9:66:26:67:62:2b:74:7d:ea:ae:dd:69:b1: 73:6b:c8:99:88:17:b5:d0:76:3b:62:13:fd:55:3d: 1e:24:2d:63:89:cf:c7:94:e5:a1:52:2f:8a:8f:55: f5:32:cf:09:a3:4b:0a:f4:a3:7f:eb:1c:75:07:01: 04:af:5c:0a:84:2a:1a:4f:a7:1b:da:44:43:fe:82: 7b:dd:e3:cb:2b:55:65:8d:d6:00:f9:24:3e:68:a7: 41:db:9e:75:68:44:c6:c3:71:74:aa:d9:dc:22:92: 25:62:95:7c:e8:a1:25:24:08:f7:01:8a:e4:8d:42: 4d:a9:57:79:f6:b3:18:1e:9e:55:3f:91:7a:b4:99: 33:f2:7a:a6:21:cc:2b:98:a6:fc:4b:8e:ab:67:be: 37:e2:84:b6:47:ec:75:9c:37:9c:2d:e1:2f:a3:fc: 23:bf:b9:d1:2f:d6:cb:4a:75:f6:d9:e9:cd:14:0e: 7a:4a:ff:90:5e:1c:53:df:43:88:81:ef:96:cb:18: 02:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:45:EE:5E:C3:01:65:A7:67:34:17:33:CD:B6:9E:B8:B2:D7:6A:4B X509v3 Authority Key Identifier: keyid:D6:A9:FC:CB:36:A0:27:1C:BC:5F:11:2B:B7:20:5A:57:B9:F4:84:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168126/157F66EA800611ECB03A0E61C4F9AE02/1qn8yzagJxy8XxErtyBaV7n0hPc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1qn8yzagJxy8XxErtyBaV7n0hPc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168126/157F66EA800611ECB03A0E61C4F9AE02/1qn8yzagJxy8XxErtyBaV7n0hPc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:10:53:2b:19:fe:32:ff:df:9c:4d:62:f7:43:14:d8:9f:ba: c4:e3:c3:ca:0e:52:3e:ba:25:f0:e1:90:b9:d5:30:b8:07:d5: 0e:5f:8f:26:3b:7f:bc:d2:ff:ec:ea:29:b3:83:3a:9d:22:9a: da:a5:9b:e2:9b:26:1d:16:98:2f:26:20:58:a9:32:ff:1c:e8: 2e:47:90:cd:59:90:d5:1a:61:d3:97:5c:3f:f7:e1:9f:cf:2c: 45:01:f4:56:74:e5:0c:79:39:c6:58:a3:67:61:b4:c9:d1:8f: 4c:d8:7f:9c:a9:4b:d2:60:81:c6:94:fe:47:a4:63:c0:ff:46: 64:af:c6:ad:0d:a5:a4:7a:f3:e0:40:7d:94:09:91:5a:78:4e: 2f:c8:5f:9c:fe:29:2c:b3:f7:56:4b:48:c9:f6:00:3b:a1:7a: 93:ff:0c:45:f1:5f:57:ad:68:aa:b5:03:4a:21:0c:44:0b:69: ff:1e:11:42:47:bd:6a:9d:75:fa:be:0f:d1:f5:2c:7a:2f:5a: d4:fa:8d:0b:91:62:53:ef:cd:16:3b:03:78:db:f9:fe:f5:21: 1d:9b:a5:19:bb:43:5d:35:2f:25:a7:bd:18:05:83:c7:87:c6: 49:d7:99:f8:d8:5e:5d:62:f6:4c:f6:ee:1d:1a:b6:ce:6d:b4: 92:ec:63:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA+4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjgxMjYxMTAvBgNVBAUTKEQ2QTlGQ0NCMzZBMDI3MUNCQzVGMTEyQkI3MjA1QTU3 QjlGNDg0RjcwHhcNMjUwNDI1MDAyMTU0WhcNMjUwNTAyMDAyMTU0WjAYMRYwFAYD VQQDEw02ODBhZDVhMi04NTdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAowt0PKxwMSy2BnHr4yNGoNccbAPov/y6OgbcSdhMd1rG2rpfaNsuQmHKGacB zlUY5X+6cKEKNre3D4xb/clmJmdiK3R96q7dabFza8iZiBe10HY7YhP9VT0eJC1j ic/HlOWhUi+Kj1X1Ms8Jo0sK9KN/6xx1BwEEr1wKhCoaT6cb2kRD/oJ73ePLK1Vl jdYA+SQ+aKdB2551aETGw3F0qtncIpIlYpV86KElJAj3AYrkjUJNqVd59rMYHp5V P5F6tJkz8nqmIcwrmKb8S46rZ7434oS2R+x1nDecLeEvo/wjv7nRL9bLSnX22enN FA56Sv+QXhxT30OIge+WyxgC0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLlF7l7D AWWnZzQXM822nriy12pLMB8GA1UdIwQYMBaAFNap/Ms2oCccvF8RK7cgWle59IT3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODEyNi8xNTdGNjZFQTgw MDYxMUVDQjAzQTBFNjFDNEY5QUUwMi8xcW44eXphZ0p4eThYeEVydHlCYVY3bjBo UGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFxbjh5emFnSnh5OFh4RXJ0eUJhVjduMGhQYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODEyNi8xNTdGNjZFQTgwMDYxMUVDQjAzQTBFNjFDNEY5QUUwMi8xcW44eXphZ0p4 eThYeEVydHlCYVY3bjBoUGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSEFMrGf4y/9+cTWL3QxTYn7rE48PKDlI+uiXw4ZC51TC4B9UOX48m O3+80v/s6imzgzqdIprapZvimyYdFpgvJiBYqTL/HOguR5DNWZDVGmHTl1w/9+Gf zyxFAfRWdOUMeTnGWKNnYbTJ0Y9M2H+cqUvSYIHGlP5HpGPA/0Zkr8atDaWkevPg QH2UCZFaeE4vyF+c/ikss/dWS0jJ9gA7oXqT/wxF8V9XrWiqtQNKIQxEC2n/HhFC R71qnXX6vg/R9Sx6L1rU+o0LkWJT780WOwN42/n+9SEdm6UZu0NdNS8lp70YBYPH h8ZJ15n42F5dYvZM9u4dGrbObbSS7GMT -----END CERTIFICATE-----Generated at Sat Apr 26 17:16:12 2025 by rpki-client