$ rpki-client -vvf rpki.apnic.net/member_repository/A916DA3F/04FF89D8B6CD11EB8E108026C4F9AE02/f_PqmsCDJR9dMLAdBWvLzeGn7i0.mft File: f_PqmsCDJR9dMLAdBWvLzeGn7i0.mft (raw, json) Hash identifier: f83jAFG5xiGmCkHeDJ5GEJCt0aSgcSXXAeUhBykqXBc= Subject key identifier: 30:C3:38:0E:BC:1B:69:69:FA:CB:8C:10:4F:88:D2:06:B2:30:91:4A Authority key identifier: 7F:F3:EA:9A:C0:83:25:1F:5D:30:B0:1D:05:6B:CB:CD:E1:A7:EE:2D Certificate issuer: /CN=A916DA3F/serialNumber=7FF3EA9AC083251F5D30B01D056BCBCDE1A7EE2D Certificate serial: 05E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_PqmsCDJR9dMLAdBWvLzeGn7i0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916DA3F/04FF89D8B6CD11EB8E108026C4F9AE02/f_PqmsCDJR9dMLAdBWvLzeGn7i0.mft Manifest number: 05D8 Signing time: Thu 24 Apr 2025 22:48:43 +0000 Manifest this update: Thu 24 Apr 2025 22:48:42 +0000 Manifest next update: Thu 01 May 2025 22:48:42 +0000 Files and hashes: 1: f_PqmsCDJR9dMLAdBWvLzeGn7i0.crl (hash: GMp8F8A6ibK/V1BHL2/D3CsCyGu940QyCbfiq3Wf6a0=) 2: 95B7B784C1E611EF91316938C4F9AE02.roa (hash: cm0YB5uH01fcy9KoTmPs0S4MdfKYnPhYE5csvx6cWLM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916DA3F/04FF89D8B6CD11EB8E108026C4F9AE02/f_PqmsCDJR9dMLAdBWvLzeGn7i0.crl rsync://rpki.apnic.net/member_repository/A916DA3F/04FF89D8B6CD11EB8E108026C4F9AE02/f_PqmsCDJR9dMLAdBWvLzeGn7i0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_PqmsCDJR9dMLAdBWvLzeGn7i0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:48:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1507 (0x5e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916DA3F, serialNumber=7FF3EA9AC083251F5D30B01D056BCBCDE1A7EE2D Validity Not Before: Apr 24 22:48:42 2025 GMT Not After : May 1 22:48:42 2025 GMT Subject: CN=680abfca-957e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:5a:be:4d:55:8e:ea:2a:29:3c:5b:36:dd:9c: 53:e1:ec:38:f0:a4:c5:ea:69:4f:51:22:68:75:d6: 85:f7:e0:41:34:cb:ce:47:55:a3:7d:82:2f:ff:90: 7d:bc:1e:08:30:f6:b3:e5:6d:82:79:fd:7b:d4:ec: b2:11:be:5a:7d:6c:0c:fc:91:97:88:b4:2f:ee:e2: fb:18:c9:df:8d:82:8b:71:7a:e9:a9:fa:43:b7:47: ed:da:42:1b:b3:3c:a3:ec:05:4b:ff:bc:d0:6c:76: dd:90:24:a5:f3:45:12:58:a0:1a:9b:2f:f4:57:3b: 51:aa:d9:cc:0a:b5:2e:f2:11:44:3d:0d:ef:22:e7: e9:d4:83:31:25:8b:7b:f1:c8:e2:f8:f6:97:5c:ef: 65:96:58:2e:33:34:23:db:1c:ef:1e:9b:ff:5f:7e: c2:12:f7:11:c1:e3:96:77:c2:7f:df:95:89:76:53: 1d:23:9e:33:36:21:34:d2:99:c4:71:e4:a3:28:9c: 80:b6:22:d5:57:3d:8e:12:a0:c8:9b:0b:7e:e4:23: c3:34:b9:ce:3a:12:e0:1e:24:aa:aa:92:1b:02:74: 42:65:6f:59:be:b8:9f:a9:48:6e:c1:34:16:df:fe: e8:2c:af:72:2b:16:e1:d6:e5:05:c2:57:7c:cb:56: 70:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:C3:38:0E:BC:1B:69:69:FA:CB:8C:10:4F:88:D2:06:B2:30:91:4A X509v3 Authority Key Identifier: keyid:7F:F3:EA:9A:C0:83:25:1F:5D:30:B0:1D:05:6B:CB:CD:E1:A7:EE:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916DA3F/04FF89D8B6CD11EB8E108026C4F9AE02/f_PqmsCDJR9dMLAdBWvLzeGn7i0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_PqmsCDJR9dMLAdBWvLzeGn7i0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DA3F/04FF89D8B6CD11EB8E108026C4F9AE02/f_PqmsCDJR9dMLAdBWvLzeGn7i0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:6a:4e:26:7b:74:9b:fa:0a:91:b2:d6:fa:a6:a2:22:41:d5: 93:bb:87:4e:66:41:50:38:17:ec:34:7a:a5:7f:28:55:42:0f: 15:11:b8:be:7b:61:d0:6e:b7:aa:fe:e7:9f:83:99:8f:8a:7c: b2:d3:6c:dc:a0:9a:67:85:70:b6:ba:d8:1a:5b:a5:26:71:69: 85:28:49:28:fb:c7:9c:5b:74:f7:d3:1a:50:6c:56:e1:85:7a: cc:c4:78:48:22:f5:03:de:aa:ca:47:d3:cd:a5:14:c5:76:8e: 03:ab:b8:9d:0e:81:32:75:90:f7:e8:90:c8:5a:44:23:eb:50: 62:5f:88:bd:a7:c8:d5:24:05:a4:8b:39:44:3f:86:1a:a4:e0: cc:23:e0:55:fd:7a:46:23:64:c0:5b:2a:7f:d2:ab:ff:20:aa: ab:b6:4a:99:9e:20:25:48:e0:c3:72:1b:0e:50:04:77:e4:da: e7:bc:a5:1e:b2:a2:8e:b5:ac:df:27:4e:d6:13:75:ba:32:fb: e7:d3:97:37:21:09:66:65:f2:db:d7:c8:36:3e:e3:5c:b1:89: e2:4f:f2:89:ec:06:42:dd:59:ca:55:6e:62:4d:45:02:35:17: 38:d7:43:61:0e:59:b9:15:b5:a5:27:04:33:44:05:9e:59:c4: ba:46:67:6c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBeMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkRBM0YxMTAvBgNVBAUTKDdGRjNFQTlBQzA4MzI1MUY1RDMwQjAxRDA1NkJDQkNE RTFBN0VFMkQwHhcNMjUwNDI0MjI0ODQyWhcNMjUwNTAxMjI0ODQyWjAYMRYwFAYD VQQDEw02ODBhYmZjYS05NTdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuFq+TVWO6iopPFs23ZxT4ew48KTF6mlPUSJoddaF9+BBNMvOR1WjfYIv/5B9 vB4IMPaz5W2Cef171OyyEb5afWwM/JGXiLQv7uL7GMnfjYKLcXrpqfpDt0ft2kIb szyj7AVL/7zQbHbdkCSl80USWKAamy/0VztRqtnMCrUu8hFEPQ3vIufp1IMxJYt7 8cji+PaXXO9lllguMzQj2xzvHpv/X37CEvcRweOWd8J/35WJdlMdI54zNiE00pnE ceSjKJyAtiLVVz2OEqDImwt+5CPDNLnOOhLgHiSqqpIbAnRCZW9ZvrifqUhuwTQW 3/7oLK9yKxbh1uUFwld8y1ZwlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDDDOA68 G2lp+suMEE+I0gayMJFKMB8GA1UdIwQYMBaAFH/z6prAgyUfXTCwHQVry83hp+4t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2REEzRi8wNEZGODlEOEI2 Q0QxMUVCOEUxMDgwMjZDNEY5QUUwMi9mX1BxbXNDREpSOWRNTEFkQld2THplR243 aTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZfUHFtc0NESlI5ZE1MQWRCV3ZMemVHbjdpMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 REEzRi8wNEZGODlEOEI2Q0QxMUVCOEUxMDgwMjZDNEY5QUUwMi9mX1BxbXNDREpS OWRNTEFkQld2THplR243aTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5ak4me3Sb+gqRstb6pqIiQdWTu4dOZkFQOBfsNHqlfyhVQg8VEbi+ e2HQbreq/uefg5mPinyy02zcoJpnhXC2utgaW6UmcWmFKEko+8ecW3T30xpQbFbh hXrMxHhIIvUD3qrKR9PNpRTFdo4Dq7idDoEydZD36JDIWkQj61BiX4i9p8jVJAWk izlEP4YapODMI+BV/XpGI2TAWyp/0qv/IKqrtkqZniAlSODDchsOUAR35NrnvKUe sqKOtazfJ07WE3W6Mvvn05c3IQlmZfLb18g2PuNcsYniT/KJ7AZC3VnKVW5iTUUC NRc410NhDlm5FbWlJwQzRAWeWcS6Rmds -----END CERTIFICATE-----Generated at Sat Apr 26 14:05:48 2025 by rpki-client