$ rpki-client -vvf rpki.apnic.net/member_repository/A9184324/EAA9CCD47B1C11EFAC109416C4F9AE02/qFaPUnk8w0hXhQxPLtOK4LGJcPg.mft File: qFaPUnk8w0hXhQxPLtOK4LGJcPg.mft (raw, json) Hash identifier: 6FCVX7yLWxFglPnUU1KXzSqbaqcAS5mhI1MfALyoCoc= Subject key identifier: D4:DC:43:F1:F3:49:FE:65:63:91:D1:8E:75:0E:FE:78:42:E1:36:68 Authority key identifier: A8:56:8F:52:79:3C:C3:48:57:85:0C:4F:2E:D3:8A:E0:B1:89:70:F8 Certificate issuer: /CN=A9184324/serialNumber=A8568F52793CC34857850C4F2ED38AE0B18970F8 Certificate serial: 78 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qFaPUnk8w0hXhQxPLtOK4LGJcPg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9184324/EAA9CCD47B1C11EFAC109416C4F9AE02/qFaPUnk8w0hXhQxPLtOK4LGJcPg.mft Manifest number: 73 Signing time: Fri 25 Apr 2025 05:50:50 +0000 Manifest this update: Fri 25 Apr 2025 05:50:49 +0000 Manifest next update: Fri 02 May 2025 05:50:49 +0000 Files and hashes: 1: qFaPUnk8w0hXhQxPLtOK4LGJcPg.crl (hash: pV9Qhzq1qMKA3Mt9QIowC4ZvyeZyavvVyE9P68YpBFg=) 2: 4C575EBA7C4911EF8E4FFA2CC4F9AE02.roa (hash: 98w4yl1iX/DBuRnZm4wgf0B6PYVS6iqXA6ulWZHNh70=) 3: 5C8F63FE7C4911EF81434A2DC4F9AE02.roa (hash: xISmEUj+M4vxMbA55xtFZk8Qasu4uZXOcEk4pXZEXDI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9184324/EAA9CCD47B1C11EFAC109416C4F9AE02/qFaPUnk8w0hXhQxPLtOK4LGJcPg.crl rsync://rpki.apnic.net/member_repository/A9184324/EAA9CCD47B1C11EFAC109416C4F9AE02/qFaPUnk8w0hXhQxPLtOK4LGJcPg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qFaPUnk8w0hXhQxPLtOK4LGJcPg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:50:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 120 (0x78) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9184324, serialNumber=A8568F52793CC34857850C4F2ED38AE0B18970F8 Validity Not Before: Apr 25 05:50:49 2025 GMT Not After : May 2 05:50:49 2025 GMT Subject: CN=680b22ba-c414 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:97:79:95:eb:41:2c:51:f2:29:9b:1d:35:fe: db:74:0a:90:3c:2e:d2:b5:ed:f5:f9:bf:d0:8e:d1: e9:52:a0:07:22:f8:03:b6:4c:b1:2b:0c:e2:01:f2: c5:96:ef:7c:df:ef:b7:e9:35:e9:54:27:65:b8:4f: d2:a7:fe:23:26:d8:58:b2:48:6b:05:63:05:e9:0b: e7:92:ea:56:a0:04:81:88:ae:eb:40:62:08:26:74: 72:10:be:0b:26:03:07:7f:83:86:07:cb:b3:b3:5d: 20:32:be:cf:f6:32:5a:31:1a:ce:24:c4:95:f2:30: 2c:06:08:c8:19:a4:27:89:ee:87:34:44:81:6d:fc: ca:0a:e3:ba:f5:ca:e8:17:2f:28:50:d6:c7:64:17: 5f:2a:67:50:0b:b5:37:be:e6:2e:89:7a:b8:99:e6: d2:cd:ab:d4:e4:28:98:c9:bb:b1:f3:c8:b9:85:d0: d2:e1:cb:0f:c9:7e:74:75:4c:64:61:10:2e:24:b6: ed:61:3f:70:ae:8b:a6:d0:3a:5c:53:fc:ec:2c:3b: fe:02:a7:50:30:0b:1a:03:a1:bd:48:ad:74:d8:58: 63:da:de:dc:25:40:59:62:94:8f:f4:27:40:e9:5b: 1d:5f:ae:dc:da:52:66:54:aa:99:b9:6d:86:4e:03: 13:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:DC:43:F1:F3:49:FE:65:63:91:D1:8E:75:0E:FE:78:42:E1:36:68 X509v3 Authority Key Identifier: keyid:A8:56:8F:52:79:3C:C3:48:57:85:0C:4F:2E:D3:8A:E0:B1:89:70:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9184324/EAA9CCD47B1C11EFAC109416C4F9AE02/qFaPUnk8w0hXhQxPLtOK4LGJcPg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qFaPUnk8w0hXhQxPLtOK4LGJcPg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184324/EAA9CCD47B1C11EFAC109416C4F9AE02/qFaPUnk8w0hXhQxPLtOK4LGJcPg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:f6:a4:fa:22:ec:8d:a2:5c:66:c7:17:8c:31:56:a6:a6:b1: 25:4e:9d:47:5a:de:b1:b6:f9:b2:e2:1f:1a:81:13:a8:d4:82: a6:87:41:fe:99:48:46:6f:ab:78:1c:72:00:62:50:48:68:9b: af:93:e4:64:4b:d0:c9:c2:1a:46:29:9c:b0:a2:cd:fb:c7:84: 10:aa:cc:51:d8:cc:23:aa:b9:33:c5:52:ed:c2:80:25:53:42: a8:88:02:ab:22:67:30:ee:ec:66:78:00:81:5f:70:ac:39:8d: 7c:9c:14:da:f3:67:b6:2e:52:52:69:84:36:a0:dc:a2:c7:96: dc:c8:23:31:02:59:49:d8:6c:56:ca:c4:0c:c8:b7:9b:4e:31: 0e:bc:aa:dc:bc:1a:dd:49:42:6a:78:da:fa:14:21:61:d4:1d: e0:dc:87:c6:73:ca:82:d5:b0:ee:42:06:a3:33:93:ec:6f:55: 1c:b3:15:95:4a:42:b6:2b:5c:11:69:40:8c:bd:92:ce:0f:5e: 19:74:a5:09:df:36:95:f6:94:62:b7:f8:35:3a:62:1f:1d:6b: 29:d4:e9:8d:64:9b:ef:06:e0:b9:a6:dd:fe:3e:f2:ab:3d:46: cc:e7:49:fe:10:7f:75:7c:23:4b:a5:bb:d1:9f:46:1d:4f:82: 8d:26:05:c0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBeDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 NDMyNDExMC8GA1UEBRMoQTg1NjhGNTI3OTNDQzM0ODU3ODUwQzRGMkVEMzhBRTBC MTg5NzBGODAeFw0yNTA0MjUwNTUwNDlaFw0yNTA1MDIwNTUwNDlaMBgxFjAUBgNV BAMTDTY4MGIyMmJhLWM0MTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC5l3mV60EsUfIpmx01/tt0CpA8LtK17fX5v9CO0elSoAci+AO2TLErDOIB8sWW 73zf77fpNelUJ2W4T9Kn/iMm2FiySGsFYwXpC+eS6lagBIGIrutAYggmdHIQvgsm Awd/g4YHy7OzXSAyvs/2MloxGs4kxJXyMCwGCMgZpCeJ7oc0RIFt/MoK47r1yugX LyhQ1sdkF18qZ1ALtTe+5i6JeriZ5tLNq9TkKJjJu7HzyLmF0NLhyw/JfnR1TGRh EC4ktu1hP3Cui6bQOlxT/OwsO/4Cp1AwCxoDob1IrXTYWGPa3twlQFlilI/0J0Dp Wx1frtzaUmZUqpm5bYZOAxOFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU1NxD8fNJ /mVjkdGOdQ7+eELhNmgwHwYDVR0jBBgwFoAUqFaPUnk8w0hXhQxPLtOK4LGJcPgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg0MzI0L0VBQTlDQ0Q0N0Ix QzExRUZBQzEwOTQxNkM0RjlBRTAyL3FGYVBVbms4dzBoWGhReFBMdE9LNExHSmNQ Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvcUZhUFVuazh3MGhYaFF4UEx0T0s0TEdKY1BnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg0 MzI0L0VBQTlDQ0Q0N0IxQzExRUZBQzEwOTQxNkM0RjlBRTAyL3FGYVBVbms4dzBo WGhReFBMdE9LNExHSmNQZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJT2pPoi7I2iXGbHF4wxVqamsSVOnUda3rG2+bLiHxqBE6jUgqaHQf6Z SEZvq3gccgBiUEhom6+T5GRL0MnCGkYpnLCizfvHhBCqzFHYzCOquTPFUu3CgCVT QqiIAqsiZzDu7GZ4AIFfcKw5jXycFNrzZ7YuUlJphDag3KLHltzIIzECWUnYbFbK xAzIt5tOMQ68qty8Gt1JQmp42voUIWHUHeDch8ZzyoLVsO5CBqMzk+xvVRyzFZVK QrYrXBFpQIy9ks4PXhl0pQnfNpX2lGK3+DU6Yh8daynU6Y1km+8G4Lmm3f4+8qs9 RsznSf4Qf3V8I0ulu9GfRh1Pgo0mBcA= -----END CERTIFICATE-----Generated at Sat Apr 26 17:00:04 2025 by rpki-client