$ rpki-client -vvf rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/Qg2MLsPSR5xUI6v_dHgriopLfeo.mft File: Qg2MLsPSR5xUI6v_dHgriopLfeo.mft (raw, json) Hash identifier: z5RKJzQgCOS7LLSr0DZqkZD1keRTg4HfUPbRSWikUL0= Subject key identifier: 76:51:75:04:DA:0A:DD:7A:90:03:C8:07:06:B3:CF:93:FE:12:16:45 Authority key identifier: 42:0D:8C:2E:C3:D2:47:9C:54:23:AB:FF:74:78:2B:8A:8A:4B:7D:EA Certificate issuer: /CN=A9182F75/serialNumber=420D8C2EC3D2479C5423ABFF74782B8A8A4B7DEA Certificate serial: 1BE1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qg2MLsPSR5xUI6v_dHgriopLfeo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/Qg2MLsPSR5xUI6v_dHgriopLfeo.mft Manifest number: 1BC3 Signing time: Thu 24 Apr 2025 16:15:55 +0000 Manifest this update: Thu 24 Apr 2025 16:15:55 +0000 Manifest next update: Thu 01 May 2025 16:15:55 +0000 Files and hashes: 1: Qg2MLsPSR5xUI6v_dHgriopLfeo.crl (hash: Rv28uNnGaCPnJC12HXOcQHhTA2NrDa6gJbpxKaHAbE0=) 2: A770EFB01E5611EFAF3FCB38C4F9AE02.roa (hash: jYWA9vZBVLNTWKsb/4RkVGFc8be6iId97wIVAZN/PKs=) 3: A3B7573EF01A11EE935E4329C4F9AE02.roa (hash: WA5ikv41pY4Bzl1xNf46w/nTz1YDB+6f/VZ1EYjQOB8=) 4: DD55266E1E5611EFAFFD4839C4F9AE02.roa (hash: S8vJZLV3hFYN28UQC6htxXLXCqBEue/8E9M498OKSjo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/Qg2MLsPSR5xUI6v_dHgriopLfeo.crl rsync://rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/Qg2MLsPSR5xUI6v_dHgriopLfeo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qg2MLsPSR5xUI6v_dHgriopLfeo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:15:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7137 (0x1be1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9182F75, serialNumber=420D8C2EC3D2479C5423ABFF74782B8A8A4B7DEA Validity Not Before: Apr 24 16:15:55 2025 GMT Not After : May 1 16:15:55 2025 GMT Subject: CN=680a63bb-c399 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:57:59:8a:71:7c:b8:19:90:36:77:49:65:89: e1:e7:18:88:67:38:bf:f8:d7:1d:74:eb:89:49:95: 32:94:d0:94:51:c1:82:d3:3a:19:85:48:e4:97:2d: 96:19:28:7c:73:cc:09:f1:a5:64:33:c5:48:66:0e: 0b:d1:5f:2f:ec:08:22:07:e3:3a:d4:e1:1b:a8:10: 24:b2:c0:10:9e:66:7f:70:6e:47:df:28:19:83:12: db:86:dd:e6:df:10:5a:8b:97:9e:20:5c:58:1f:3b: d0:63:86:ae:80:f7:2f:49:30:a4:29:9b:ba:b3:40: 62:85:32:96:97:79:cf:c9:5b:64:eb:3d:cb:43:86: 4f:85:dc:07:d4:c7:ca:81:3e:4a:0e:6c:27:6f:10: 68:68:1f:87:dc:04:d3:84:30:ea:e2:7f:1a:0e:e1: 10:19:5e:2a:30:e0:49:19:e6:50:a7:62:8a:ea:14: 63:1e:59:32:73:1d:f5:d5:ec:eb:a0:ea:71:03:a2: a3:e6:d9:f8:51:e6:c6:7c:c7:ed:08:44:ee:ac:60: 28:ec:71:4d:5f:6e:5d:b7:13:89:d8:39:80:8e:33: 2c:15:ce:d8:eb:1a:9a:6c:07:77:61:4c:bb:91:8a: 1c:2f:fe:18:8b:92:db:ec:9b:0d:33:2e:a7:19:d8: 2b:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:51:75:04:DA:0A:DD:7A:90:03:C8:07:06:B3:CF:93:FE:12:16:45 X509v3 Authority Key Identifier: keyid:42:0D:8C:2E:C3:D2:47:9C:54:23:AB:FF:74:78:2B:8A:8A:4B:7D:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/Qg2MLsPSR5xUI6v_dHgriopLfeo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qg2MLsPSR5xUI6v_dHgriopLfeo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/Qg2MLsPSR5xUI6v_dHgriopLfeo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:8d:7b:e1:4a:1c:cf:4c:2f:3f:a2:4b:fb:b3:ec:ba:7a:52: cb:2c:fb:a9:a0:13:ee:9d:f0:3f:f2:af:81:c5:95:17:72:c3: 67:26:41:83:34:95:b4:c7:68:bb:59:76:47:32:df:3d:1d:3d: 5d:43:87:f3:b7:b7:a3:20:9a:54:d0:dd:61:5b:b8:96:f9:d4: 37:d0:7f:8e:a5:81:09:7d:d6:8f:be:ed:22:c3:85:ef:ca:f3: 6d:13:cd:97:92:a4:76:17:e2:a1:92:12:aa:a8:7f:7b:91:b6: e1:d9:86:98:01:6a:3c:14:ed:50:a5:41:fb:95:63:95:da:fe: 81:8e:b0:2c:15:2a:cd:03:3a:45:18:7d:12:b0:ce:85:34:67: 76:e0:23:65:2d:be:2a:9d:b4:bb:4e:df:cc:b1:fc:6a:8a:5a: c0:f7:17:f4:03:de:fd:fa:95:12:2d:23:2b:98:a6:ce:99:ec: b2:08:6d:e6:85:bd:2e:54:70:df:15:4c:aa:97:f1:a3:d1:d3: a6:94:70:09:e3:61:54:9a:b6:df:5a:cc:dc:62:9b:f6:05:75: 76:3b:2c:dd:a8:6c:77:6f:0a:9e:a4:f9:a5:c7:d5:b7:7f:2f: 5c:ff:ab:28:24:e5:a9:0a:03:37:92:2a:c7:0b:3a:c5:ea:45: cb:dc:b8:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICG+EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODJGNzUxMTAvBgNVBAUTKDQyMEQ4QzJFQzNEMjQ3OUM1NDIzQUJGRjc0NzgyQjhB OEE0QjdERUEwHhcNMjUwNDI0MTYxNTU1WhcNMjUwNTAxMTYxNTU1WjAYMRYwFAYD VQQDEw02ODBhNjNiYi1jMzk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApldZinF8uBmQNndJZYnh5xiIZzi/+NcddOuJSZUylNCUUcGC0zoZhUjkly2W GSh8c8wJ8aVkM8VIZg4L0V8v7AgiB+M61OEbqBAkssAQnmZ/cG5H3ygZgxLbht3m 3xBai5eeIFxYHzvQY4augPcvSTCkKZu6s0BihTKWl3nPyVtk6z3LQ4ZPhdwH1MfK gT5KDmwnbxBoaB+H3ATThDDq4n8aDuEQGV4qMOBJGeZQp2KK6hRjHlkycx311ezr oOpxA6Kj5tn4UebGfMftCETurGAo7HFNX25dtxOJ2DmAjjMsFc7Y6xqabAd3YUy7 kYocL/4Yi5Lb7JsNMy6nGdgr0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHZRdQTa Ct16kAPIBwazz5P+EhZFMB8GA1UdIwQYMBaAFEINjC7D0kecVCOr/3R4K4qKS33q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MkY3NS8zQzhDRjYzRUZD QkQxMUU2ODhEMzEyNUVDNEY5QUUwMi9RZzJNTHNQU1I1eFVJNnZfZEhncmlvcExm ZW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FnMk1Mc1BTUjV4VUk2dl9kSGdyaW9wTGZlby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MkY3NS8zQzhDRjYzRUZDQkQxMUU2ODhEMzEyNUVDNEY5QUUwMi9RZzJNTHNQU1I1 eFVJNnZfZEhncmlvcExmZW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjjXvhShzPTC8/okv7s+y6elLLLPupoBPunfA/8q+BxZUXcsNnJkGD NJW0x2i7WXZHMt89HT1dQ4fzt7ejIJpU0N1hW7iW+dQ30H+OpYEJfdaPvu0iw4Xv yvNtE82XkqR2F+KhkhKqqH97kbbh2YaYAWo8FO1QpUH7lWOV2v6BjrAsFSrNAzpF GH0SsM6FNGd24CNlLb4qnbS7Tt/MsfxqilrA9xf0A979+pUSLSMrmKbOmeyyCG3m hb0uVHDfFUyql/Gj0dOmlHAJ42FUmrbfWszcYpv2BXV2OyzdqGx3bwqepPmlx9W3 fy9c/6soJOWpCgM3kirHCzrF6kXL3Lh+ -----END CERTIFICATE-----Generated at Sat Apr 26 05:05:14 2025 by rpki-client