$ rpki-client -vvf rpki.apnic.net/member_repository/A916A703/7C83BDEA490311EB8447B26BC4F9AE02/cqGfa6-m7u5m3DsabGeCLlMwz3g.mft File: cqGfa6-m7u5m3DsabGeCLlMwz3g.mft (raw, json) Hash identifier: fwGozZzV1aaQgY65ILrzuAU1dzEVq+mWGvWyxi35o6I= Subject key identifier: 76:6B:B0:F2:44:FB:49:86:73:CA:45:18:FB:F8:3A:B2:A7:7B:B1:D8 Authority key identifier: 72:A1:9F:6B:AF:A6:EE:EE:66:DC:3B:1A:6C:67:82:2E:53:30:CF:78 Certificate issuer: /CN=A916A703/serialNumber=72A19F6BAFA6EEEE66DC3B1A6C67822E5330CF78 Certificate serial: 06E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cqGfa6-m7u5m3DsabGeCLlMwz3g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A703/7C83BDEA490311EB8447B26BC4F9AE02/cqGfa6-m7u5m3DsabGeCLlMwz3g.mft Manifest number: 06E0 Signing time: Thu 24 Apr 2025 21:48:52 +0000 Manifest this update: Thu 24 Apr 2025 21:48:51 +0000 Manifest next update: Thu 01 May 2025 21:48:51 +0000 Files and hashes: 1: cqGfa6-m7u5m3DsabGeCLlMwz3g.crl (hash: 5A56e5u+vLzeMIYUkEhPMvw0ByQf04M93aNUuLZmscs=) 2: 2B06C42E490511EB9EF9E26EC4F9AE02.roa (hash: Jx1XT/NDlIfU9t6IWQuH2SzV/+QiuFttvW41+UxOlNc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A703/7C83BDEA490311EB8447B26BC4F9AE02/cqGfa6-m7u5m3DsabGeCLlMwz3g.crl rsync://rpki.apnic.net/member_repository/A916A703/7C83BDEA490311EB8447B26BC4F9AE02/cqGfa6-m7u5m3DsabGeCLlMwz3g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cqGfa6-m7u5m3DsabGeCLlMwz3g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:48:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1765 (0x6e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A703, serialNumber=72A19F6BAFA6EEEE66DC3B1A6C67822E5330CF78 Validity Not Before: Apr 24 21:48:51 2025 GMT Not After : May 1 21:48:51 2025 GMT Subject: CN=680ab1c3-fa3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:0d:fd:8e:07:73:26:cb:04:50:84:c7:6c:a0: 52:58:ea:ce:27:0e:32:d8:e9:f0:99:c7:0f:83:0c: 51:e1:8a:08:92:69:28:62:4c:b1:9f:e5:86:dd:f8: d1:e0:fa:6e:89:98:ab:a2:17:be:21:45:44:ba:4f: 08:fb:4f:02:4a:0b:ca:90:37:6d:ae:c6:f5:1d:50: d5:26:d6:d8:73:57:88:c9:27:9f:68:79:07:4b:1a: 7f:28:db:03:3a:c1:91:40:a7:4b:eb:b7:7f:5e:f1: c4:f3:f4:5b:91:d9:e1:e4:41:da:43:ed:a3:10:04: 2c:5a:a9:12:bd:3b:6a:5b:40:17:6e:b8:5e:7a:75: 83:b0:c9:4c:d8:ad:6c:35:f1:0b:75:5a:d8:82:85: b6:d2:f8:bc:b2:e7:54:8e:3e:17:7b:12:cc:7d:7e: b6:6c:d2:22:7a:d6:82:47:ae:1b:aa:dd:10:5c:3a: 4f:de:a8:f6:f2:08:6d:e0:dd:2d:af:07:2d:94:91: ae:a3:8b:ad:44:17:e0:1f:b2:13:15:19:1f:db:37: 18:b1:e9:b9:79:9f:9e:57:c4:d0:ae:0a:17:15:b4: 3c:53:42:77:35:40:15:7b:30:42:82:8b:5e:4d:e7: e0:8a:e2:eb:d8:a6:0f:32:b6:d4:57:2c:8b:08:03: 2c:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:6B:B0:F2:44:FB:49:86:73:CA:45:18:FB:F8:3A:B2:A7:7B:B1:D8 X509v3 Authority Key Identifier: keyid:72:A1:9F:6B:AF:A6:EE:EE:66:DC:3B:1A:6C:67:82:2E:53:30:CF:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A703/7C83BDEA490311EB8447B26BC4F9AE02/cqGfa6-m7u5m3DsabGeCLlMwz3g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cqGfa6-m7u5m3DsabGeCLlMwz3g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A703/7C83BDEA490311EB8447B26BC4F9AE02/cqGfa6-m7u5m3DsabGeCLlMwz3g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:50:63:99:b2:74:26:e3:4b:9f:c0:cb:d8:06:a4:88:9a:9d: d8:02:8e:e8:fd:4f:f8:18:ca:2b:e2:3c:7a:c8:31:cb:f8:5f: d0:55:23:17:d3:f5:4a:e4:cc:4f:77:67:4d:3a:b3:c3:d1:20: 51:ae:f0:7c:4c:6f:d7:f9:1e:37:96:d7:56:d9:64:f3:29:50: 52:02:50:aa:90:0b:26:98:fa:b6:ba:ce:14:75:c5:15:3a:e5: 77:c4:ff:d5:a8:b8:3c:e4:c2:1d:32:35:85:78:f7:76:a5:38: 20:7d:a1:ca:bd:96:4e:e6:8d:13:bc:31:9a:4e:ec:04:2a:3b: be:1b:da:44:98:5e:ba:d9:b9:13:fe:71:21:fb:38:3a:86:8b: b8:c0:9e:d1:c2:41:62:cb:29:c0:4e:3a:bd:2e:7e:b2:e3:00: 0a:2e:0a:6e:d6:4a:1a:40:1f:e3:40:6d:8f:66:bf:f5:2b:8d: 51:cb:be:42:d5:b0:64:47:9c:40:64:8a:c9:be:41:17:9c:6e: 1f:b1:76:e8:45:c5:f6:76:2d:b0:81:b8:da:0a:8d:b6:94:f0: e4:df:ef:b1:32:9f:9e:19:58:62:85:de:00:b8:6c:a9:86:59: 35:e6:6a:49:e0:c6:b9:a0:59:6e:4c:0e:7b:af:8c:d6:47:7d: 03:cb:f7:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBuUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkE3MDMxMTAvBgNVBAUTKDcyQTE5RjZCQUZBNkVFRUU2NkRDM0IxQTZDNjc4MjJF NTMzMENGNzgwHhcNMjUwNDI0MjE0ODUxWhcNMjUwNTAxMjE0ODUxWjAYMRYwFAYD VQQDEw02ODBhYjFjMy1mYTNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzQ39jgdzJssEUITHbKBSWOrOJw4y2OnwmccPgwxR4YoIkmkoYkyxn+WG3fjR 4PpuiZirohe+IUVEuk8I+08CSgvKkDdtrsb1HVDVJtbYc1eIySefaHkHSxp/KNsD OsGRQKdL67d/XvHE8/Rbkdnh5EHaQ+2jEAQsWqkSvTtqW0AXbrheenWDsMlM2K1s NfELdVrYgoW20vi8sudUjj4XexLMfX62bNIietaCR64bqt0QXDpP3qj28ght4N0t rwctlJGuo4utRBfgH7ITFRkf2zcYsem5eZ+eV8TQrgoXFbQ8U0J3NUAVezBCgote TefgiuLr2KYPMrbUVyyLCAMsNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHZrsPJE +0mGc8pFGPv4OrKne7HYMB8GA1UdIwQYMBaAFHKhn2uvpu7uZtw7Gmxngi5TMM94 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTcwMy83QzgzQkRFQTQ5 MDMxMUVCODQ0N0IyNkJDNEY5QUUwMi9jcUdmYTYtbTd1NW0zRHNhYkdlQ0xsTXd6 M2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NxR2ZhNi1tN3U1bTNEc2FiR2VDTGxNd3ozZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTcwMy83QzgzQkRFQTQ5MDMxMUVCODQ0N0IyNkJDNEY5QUUwMi9jcUdmYTYtbTd1 NW0zRHNhYkdlQ0xsTXd6M2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCeUGOZsnQm40ufwMvYBqSImp3YAo7o/U/4GMor4jx6yDHL+F/QVSMX 0/VK5MxPd2dNOrPD0SBRrvB8TG/X+R43ltdW2WTzKVBSAlCqkAsmmPq2us4UdcUV OuV3xP/VqLg85MIdMjWFePd2pTggfaHKvZZO5o0TvDGaTuwEKju+G9pEmF662bkT /nEh+zg6hou4wJ7RwkFiyynATjq9Ln6y4wAKLgpu1koaQB/jQG2PZr/1K41Ry75C 1bBkR5xAZIrJvkEXnG4fsXboRcX2di2wgbjaCo22lPDk3++xMp+eGVhihd4AuGyp hlk15mpJ4Ma5oFluTA57r4zWR30Dy/ej -----END CERTIFICATE-----Generated at Sat Apr 26 16:49:41 2025 by rpki-client