$ rpki-client -vvf rpki.apnic.net/member_repository/A917C1DC/B2D1DE20594F11EB88F7A73EC4F9AE02/qNV21K-7ZARbsClWQbmUJ9f4ePI.mft File: qNV21K-7ZARbsClWQbmUJ9f4ePI.mft (raw, json) Hash identifier: KMPOo4S2X0hL19zjUd0QvFumDQmbkDQ+PaY5HHwPBhw= Subject key identifier: C4:43:D1:81:FC:AD:F3:55:FB:3F:E1:C4:46:E9:F0:23:A1:C7:50:D7 Authority key identifier: A8:D5:76:D4:AF:BB:64:04:5B:B0:29:56:41:B9:94:27:D7:F8:78:F2 Certificate issuer: /CN=A917C1DC/serialNumber=A8D576D4AFBB64045BB0295641B99427D7F878F2 Certificate serial: 0730 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qNV21K-7ZARbsClWQbmUJ9f4ePI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C1DC/B2D1DE20594F11EB88F7A73EC4F9AE02/qNV21K-7ZARbsClWQbmUJ9f4ePI.mft Manifest number: 06EE Signing time: Thu 24 Apr 2025 21:55:37 +0000 Manifest this update: Thu 24 Apr 2025 21:55:36 +0000 Manifest next update: Thu 01 May 2025 21:55:36 +0000 Files and hashes: 1: qNV21K-7ZARbsClWQbmUJ9f4ePI.crl (hash: XR1VNb+C5rJ8r01ymwFkCYPNRP4QgvuN5bTqUc8EJQA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C1DC/B2D1DE20594F11EB88F7A73EC4F9AE02/qNV21K-7ZARbsClWQbmUJ9f4ePI.crl rsync://rpki.apnic.net/member_repository/A917C1DC/B2D1DE20594F11EB88F7A73EC4F9AE02/qNV21K-7ZARbsClWQbmUJ9f4ePI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qNV21K-7ZARbsClWQbmUJ9f4ePI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:55:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1840 (0x730) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C1DC, serialNumber=A8D576D4AFBB64045BB0295641B99427D7F878F2 Validity Not Before: Apr 24 21:55:36 2025 GMT Not After : May 1 21:55:36 2025 GMT Subject: CN=680ab359-3f40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:97:96:72:7a:9a:96:36:7a:44:75:25:c3:7e: 81:da:39:49:d0:a4:46:89:18:a3:75:f9:d9:3b:eb: ff:60:60:07:f4:c1:dc:6d:98:57:a4:ca:8b:78:64: 34:ff:83:d1:fe:6f:23:a4:23:2b:28:74:99:9d:f1: 43:ae:bd:07:c7:d1:d1:cd:9e:3d:89:3d:1f:03:66: 7f:70:b5:94:6d:ce:d4:b8:20:9e:3a:12:23:76:a4: c8:e9:d8:a2:67:f0:03:ec:0a:1d:f0:17:82:de:af: 90:2b:78:a3:54:f4:b3:e8:92:f6:22:f5:63:93:5b: 37:af:00:5e:ba:77:b5:0b:7b:41:ed:5f:bc:40:6f: 7c:30:3e:7f:9c:85:5d:68:aa:85:7d:fd:bd:2a:e6: 75:41:e8:21:b8:e7:43:46:15:64:54:c1:13:54:92: cd:01:8a:84:86:af:a0:26:3a:d0:e1:ad:3e:f0:3e: f3:a2:bc:d4:33:d5:f0:cd:16:3c:09:e5:c4:db:57: bd:c8:9f:7c:d2:85:0e:b3:c2:e7:7e:d7:44:28:c8: 63:87:e1:f0:29:40:e4:29:aa:86:32:70:e7:f6:3e: 9f:e9:e6:11:d8:fc:73:5b:dd:81:fd:9f:1d:08:31: 40:f6:33:1b:02:e5:bd:bd:71:99:a7:68:70:91:58: 36:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:43:D1:81:FC:AD:F3:55:FB:3F:E1:C4:46:E9:F0:23:A1:C7:50:D7 X509v3 Authority Key Identifier: keyid:A8:D5:76:D4:AF:BB:64:04:5B:B0:29:56:41:B9:94:27:D7:F8:78:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C1DC/B2D1DE20594F11EB88F7A73EC4F9AE02/qNV21K-7ZARbsClWQbmUJ9f4ePI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qNV21K-7ZARbsClWQbmUJ9f4ePI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C1DC/B2D1DE20594F11EB88F7A73EC4F9AE02/qNV21K-7ZARbsClWQbmUJ9f4ePI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:6c:ef:d9:1a:b9:83:4b:ed:7a:0f:55:6f:a7:99:39:87:c6: 4f:6f:3b:bc:25:2c:21:50:5c:d8:33:19:5e:e8:dc:fc:30:81: 2a:08:b5:49:09:a2:22:36:7f:95:f4:2b:97:78:9d:f7:f9:96: 19:fc:4f:bd:a7:59:ca:a4:94:6c:4e:c8:69:e0:ed:30:29:2b: 72:f8:d2:db:1e:3a:de:78:51:23:8b:59:96:ea:6d:0f:b7:83: d3:55:88:e6:42:e4:8e:bb:c3:1c:16:0b:38:94:7b:f1:1f:d3: 95:22:fe:72:9e:92:a9:3c:e6:ba:b3:7b:be:5d:56:de:78:dc: 83:b2:ea:64:97:f2:bb:06:82:db:8d:c3:4f:b1:ae:ad:e2:dc: 60:25:c0:26:0e:d5:4b:ca:65:e7:70:c1:f2:b2:9e:a0:17:05: 51:6c:9e:d9:9d:7e:22:58:c6:63:43:a6:ca:7c:26:03:cd:29: a0:19:fe:43:d1:c5:57:37:69:dd:41:ef:0a:27:81:f3:92:6b: 45:e7:3f:15:34:b9:6c:70:ac:1b:bd:15:c2:18:44:49:a7:59: f3:31:04:62:2b:1d:db:6c:cd:b2:7f:23:ce:b2:15:27:9f:37: 66:ee:c7:2e:95:ec:0a:af:58:5b:91:b4:99:1d:47:43:a2:ea: bb:70:e0:ec -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBzAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0MxREMxMTAvBgNVBAUTKEE4RDU3NkQ0QUZCQjY0MDQ1QkIwMjk1NjQxQjk5NDI3 RDdGODc4RjIwHhcNMjUwNDI0MjE1NTM2WhcNMjUwNTAxMjE1NTM2WjAYMRYwFAYD VQQDEw02ODBhYjM1OS0zZjQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuZeWcnqaljZ6RHUlw36B2jlJ0KRGiRijdfnZO+v/YGAH9MHcbZhXpMqLeGQ0 /4PR/m8jpCMrKHSZnfFDrr0Hx9HRzZ49iT0fA2Z/cLWUbc7UuCCeOhIjdqTI6dii Z/AD7Aod8BeC3q+QK3ijVPSz6JL2IvVjk1s3rwBeune1C3tB7V+8QG98MD5/nIVd aKqFff29KuZ1QeghuOdDRhVkVMETVJLNAYqEhq+gJjrQ4a0+8D7zorzUM9XwzRY8 CeXE21e9yJ980oUOs8LnftdEKMhjh+HwKUDkKaqGMnDn9j6f6eYR2PxzW92B/Z8d CDFA9jMbAuW9vXGZp2hwkVg2lQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMRD0YH8 rfNV+z/hxEbp8COhx1DXMB8GA1UdIwQYMBaAFKjVdtSvu2QEW7ApVkG5lCfX+Hjy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzFEQy9CMkQxREUyMDU5 NEYxMUVCODhGN0E3M0VDNEY5QUUwMi9xTlYyMUstN1pBUmJzQ2xXUWJtVUo5ZjRl UEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FOVjIxSy03WkFSYnNDbFdRYm1VSjlmNGVQSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzFEQy9CMkQxREUyMDU5NEYxMUVCODhGN0E3M0VDNEY5QUUwMi9xTlYyMUstN1pB UmJzQ2xXUWJtVUo5ZjRlUEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABbO/ZGrmDS+16D1Vvp5k5h8ZPbzu8JSwhUFzYMxle6Nz8MIEqCLVJ CaIiNn+V9CuXeJ33+ZYZ/E+9p1nKpJRsTshp4O0wKSty+NLbHjreeFEji1mW6m0P t4PTVYjmQuSOu8McFgs4lHvxH9OVIv5ynpKpPOa6s3u+XVbeeNyDsupkl/K7BoLb jcNPsa6t4txgJcAmDtVLymXncMHysp6gFwVRbJ7ZnX4iWMZjQ6bKfCYDzSmgGf5D 0cVXN2ndQe8KJ4HzkmtF5z8VNLlscKwbvRXCGERJp1nzMQRiKx3bbM2yfyPOshUn nzdm7sculewKr1hbkbSZHUdDouq7cODs -----END CERTIFICATE-----Generated at Sat Apr 26 12:21:54 2025 by rpki-client