$ rpki-client -vvf rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/_qS5bzmD92nHM5dFbBK5D2QkbHw.mft File: _qS5bzmD92nHM5dFbBK5D2QkbHw.mft (raw, json) Hash identifier: 8yZiFI0z9Zmhbo5S3inCqYtWxYtFrtozNtbDXe/TefM= Subject key identifier: 36:B2:BC:A7:F7:DB:9A:AB:8E:1B:88:D7:F7:1B:3D:79:D8:71:DD:1C Authority key identifier: FE:A4:B9:6F:39:83:F7:69:C7:33:97:45:6C:12:B9:0F:64:24:6C:7C Certificate issuer: /CN=A916D36A/serialNumber=FEA4B96F3983F769C73397456C12B90F64246C7C Certificate serial: 184C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_qS5bzmD92nHM5dFbBK5D2QkbHw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/_qS5bzmD92nHM5dFbBK5D2QkbHw.mft Manifest number: 1835 Signing time: Thu 24 Apr 2025 16:32:38 +0000 Manifest this update: Thu 24 Apr 2025 16:32:38 +0000 Manifest next update: Thu 01 May 2025 16:32:38 +0000 Files and hashes: 1: _qS5bzmD92nHM5dFbBK5D2QkbHw.crl (hash: nfjn2/lI/KuvJpuH5qIIITnO+0Dg+pmoSM1N4tjV/uU=) 2: 8C3BBD78F0D611EDAF996E15C4F9AE02.roa (hash: N7dx64GJQaTD+hfotgNWy8WEHDuKcv63Y/iKVEUUUcc=) 3: C6454260AA9A11E7B4776E52C4F9AE02.roa (hash: 0pdtzVqkZfrRuKXWFlClUIrZtwjYq09u9Tu2fAJzA2k=) 4: 7F77220A143811EE97A64D19C4F9AE02.roa (hash: ifAfuqdkBihiiYwd3cqT6s5KTTI/lvGZWL7UrWL4Qzs=) 5: 5A8744D8143411EEAB1A5D73C4F9AE02.roa (hash: x8Y3lIEpnx3SAsHPEwwS/VLgFTVHt3ABZ23zAnhnfc0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/_qS5bzmD92nHM5dFbBK5D2QkbHw.crl rsync://rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/_qS5bzmD92nHM5dFbBK5D2QkbHw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_qS5bzmD92nHM5dFbBK5D2QkbHw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:32:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6220 (0x184c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916D36A, serialNumber=FEA4B96F3983F769C73397456C12B90F64246C7C Validity Not Before: Apr 24 16:32:38 2025 GMT Not After : May 1 16:32:38 2025 GMT Subject: CN=680a67a6-395f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:4b:1d:7a:4c:65:44:e0:cc:aa:3d:b5:6d:b0: da:97:12:c4:7e:f2:ab:69:17:88:59:e1:91:c9:5b: 57:e2:51:a0:d5:9c:0e:9c:a9:8d:30:9b:1b:3f:95: 8f:ac:7f:c6:09:3a:d0:87:a8:e9:f3:28:16:b0:fc: 1b:b5:4b:3a:cb:33:16:14:0d:e2:da:29:e5:97:ce: c0:e6:38:b2:00:09:83:46:5b:db:b6:4a:e1:88:6d: 40:41:de:74:13:a3:2d:94:68:fb:a6:f4:42:cf:08: 3e:9b:e3:30:fe:55:65:3d:85:c0:ab:70:3a:57:65: fa:49:f6:64:41:36:38:54:e5:d3:ff:7b:a7:ef:71: 9c:1b:98:7d:b4:f2:4d:88:c9:74:f6:fe:ac:42:a9: 4c:12:ff:af:1d:73:49:d1:e5:db:99:3a:11:f6:24: fc:74:d7:37:99:cd:87:ba:3e:7a:38:90:0e:3a:4b: 8f:71:15:81:4b:a5:15:64:33:e3:6e:45:0b:b1:e3: 43:45:bd:5e:7c:d2:59:93:b8:99:00:24:3e:e5:6c: 62:81:4a:f2:22:d7:07:9c:ef:2e:d5:c8:c2:cc:f6: cf:d2:82:d2:ce:75:43:c9:5f:12:ca:eb:34:ed:6a: 52:70:96:72:df:b0:d1:38:9e:a1:2f:b9:3c:ae:57: b8:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:B2:BC:A7:F7:DB:9A:AB:8E:1B:88:D7:F7:1B:3D:79:D8:71:DD:1C X509v3 Authority Key Identifier: keyid:FE:A4:B9:6F:39:83:F7:69:C7:33:97:45:6C:12:B9:0F:64:24:6C:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/_qS5bzmD92nHM5dFbBK5D2QkbHw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_qS5bzmD92nHM5dFbBK5D2QkbHw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/_qS5bzmD92nHM5dFbBK5D2QkbHw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:dc:82:10:b7:a4:4d:9f:07:66:8e:d6:36:ad:93:90:f1:6a: a7:c2:a1:93:b8:20:a7:1d:f1:0a:27:dd:32:0d:a2:49:03:94: 70:fd:e4:9e:f1:3d:8c:29:27:f7:87:37:70:31:4a:81:c9:04: 51:93:c0:94:63:7d:e7:21:ff:3e:36:db:da:ce:a1:4b:c0:bf: a0:c9:95:18:b6:12:53:ec:ba:1b:50:f2:fc:73:6b:37:1e:19: f6:8a:07:ae:ec:27:c8:bb:a6:0b:2d:71:19:a1:be:26:cf:63: b7:02:a2:05:a9:94:7a:9e:43:d0:df:36:d1:33:3e:80:22:88: b0:96:3e:31:4e:12:b1:15:8a:16:15:08:e8:07:9d:c4:a6:8d: 7c:e9:5f:76:2e:0f:99:af:dc:17:cd:a1:29:2e:a0:82:4b:2b: 91:b8:63:e5:0e:da:cf:12:c0:c0:16:dd:ae:11:00:ee:18:ec: c0:04:71:9b:fd:b6:76:5b:8b:fd:de:79:c8:0a:02:65:8c:34: d1:ec:02:4e:b8:9d:28:5c:af:90:4e:5f:cb:9a:9a:85:10:9b: 57:6b:1b:6f:20:c5:c5:a1:c7:dc:e8:49:28:d3:53:8f:0b:40: 19:27:5c:2a:f7:b2:40:bc:d4:1f:b6:d5:9f:cd:bc:f4:2a:38: 3c:28:e3:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGEwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkQzNkExMTAvBgNVBAUTKEZFQTRCOTZGMzk4M0Y3NjlDNzMzOTc0NTZDMTJCOTBG NjQyNDZDN0MwHhcNMjUwNDI0MTYzMjM4WhcNMjUwNTAxMTYzMjM4WjAYMRYwFAYD VQQDEw02ODBhNjdhNi0zOTVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwEsdekxlRODMqj21bbDalxLEfvKraReIWeGRyVtX4lGg1ZwOnKmNMJsbP5WP rH/GCTrQh6jp8ygWsPwbtUs6yzMWFA3i2inll87A5jiyAAmDRlvbtkrhiG1AQd50 E6MtlGj7pvRCzwg+m+Mw/lVlPYXAq3A6V2X6SfZkQTY4VOXT/3un73GcG5h9tPJN iMl09v6sQqlMEv+vHXNJ0eXbmToR9iT8dNc3mc2Huj56OJAOOkuPcRWBS6UVZDPj bkULseNDRb1efNJZk7iZACQ+5WxigUryItcHnO8u1cjCzPbP0oLSznVDyV8Syus0 7WpScJZy37DROJ6hL7k8rle4jQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDayvKf3 25qrjhuI1/cbPXnYcd0cMB8GA1UdIwQYMBaAFP6kuW85g/dpxzOXRWwSuQ9kJGx8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDM2QS8zN0FCRDcwOEFB OUExMUU3QkFDNDEyNTJDNEY5QUUwMi9fcVM1YnptRDkybkhNNWRGYkJLNUQyUWti SHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19xUzViem1EOTJuSE01ZEZiQks1RDJRa2JIdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RDM2QS8zN0FCRDcwOEFBOUExMUU3QkFDNDEyNTJDNEY5QUUwMi9fcVM1YnptRDky bkhNNWRGYkJLNUQyUWtiSHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAN3IIQt6RNnwdmjtY2rZOQ8WqnwqGTuCCnHfEKJ90yDaJJA5Rw/eSe 8T2MKSf3hzdwMUqByQRRk8CUY33nIf8+NtvazqFLwL+gyZUYthJT7LobUPL8c2s3 Hhn2igeu7CfIu6YLLXEZob4mz2O3AqIFqZR6nkPQ3zbRMz6AIoiwlj4xThKxFYoW FQjoB53Epo186V92Lg+Zr9wXzaEpLqCCSyuRuGPlDtrPEsDAFt2uEQDuGOzABHGb /bZ2W4v93nnICgJljDTR7AJOuJ0oXK+QTl/LmpqFEJtXaxtvIMXFocfc6Eko01OP C0AZJ1wq97JAvNQfttWfzbz0Kjg8KOMU -----END CERTIFICATE-----Generated at Sat Apr 26 13:01:25 2025 by rpki-client