$ rpki-client -vvf rpki.apnic.net/member_repository/A9186B80/B869805E123B11EC8A135F42C4F9AE02/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.mft File: qPwlmhAeq4Ju6MvqKgvaXN7P2vI.mft (raw, json) Hash identifier: FncbHc+rweHct206eSsOp3AV5X05ShYa+5CMHxSvLZg= Subject key identifier: 11:4B:E0:C8:A1:6D:27:E7:CB:43:62:74:12:5B:92:62:6E:F1:3F:C1 Authority key identifier: A8:FC:25:9A:10:1E:AB:82:6E:E8:CB:EA:2A:0B:DA:5C:DE:CF:DA:F2 Certificate issuer: /CN=A9186B80/serialNumber=A8FC259A101EAB826EE8CBEA2A0BDA5CDECFDAF2 Certificate serial: 04F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186B80/B869805E123B11EC8A135F42C4F9AE02/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.mft Manifest number: 04E9 Signing time: Thu 24 Apr 2025 23:31:57 +0000 Manifest this update: Thu 24 Apr 2025 23:31:56 +0000 Manifest next update: Thu 01 May 2025 23:31:56 +0000 Files and hashes: 1: qPwlmhAeq4Ju6MvqKgvaXN7P2vI.crl (hash: q//5npY7hTaE9S5SSuYkp+vSdTsLONJqzrHh0MOwRkU=) 2: D3A7743C19EA11EC9C11D95AC4F9AE02.roa (hash: JnyQcmBv8MumIf8qvh8E711qakyrMUVoNJzBwPEqLFk=) 3: 9C09360E0C3411EDB8619843C4F9AE02.roa (hash: iYMv0Y2btiNQDsASykiNYZLlnHo5rRZ4eb3rA88k1B0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186B80/B869805E123B11EC8A135F42C4F9AE02/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.crl rsync://rpki.apnic.net/member_repository/A9186B80/B869805E123B11EC8A135F42C4F9AE02/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:31:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1267 (0x4f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186B80, serialNumber=A8FC259A101EAB826EE8CBEA2A0BDA5CDECFDAF2 Validity Not Before: Apr 24 23:31:56 2025 GMT Not After : May 1 23:31:56 2025 GMT Subject: CN=680ac9ed-f2aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:e1:2d:d4:79:62:a3:5e:6c:5d:5b:1e:7e:ac: 6d:f6:56:f5:01:bf:d9:eb:67:fb:43:25:18:44:42: fa:2e:b3:0b:9a:4b:b7:3e:d3:ea:07:af:98:03:e5: 9d:8b:da:c9:a5:8d:0d:68:9c:1e:c1:7d:a7:37:67: 93:12:4c:17:10:af:d5:80:f1:cc:ea:4d:86:ea:a1: 9b:01:d9:e1:75:d9:17:16:65:67:0d:f4:76:02:fc: 9b:d4:f4:df:13:3f:ef:f4:0a:a7:0b:18:49:0f:0d: 9b:9f:ff:6d:dd:06:0e:46:a7:ed:b1:6f:a2:4d:57: 80:25:56:43:41:5b:eb:50:e3:81:58:6a:a1:71:71: 2b:07:b8:ce:b9:c6:3b:33:b6:ee:66:99:c5:81:e7: d0:a1:c0:5a:f0:14:bf:14:76:fa:17:06:78:a8:d9: 51:cb:d0:6c:f9:ff:fc:5d:0f:8e:2e:f4:d1:5d:16: 7a:50:c1:99:1a:b3:ab:68:04:69:04:d5:fc:cb:64: e4:12:5b:01:6e:db:61:b8:f9:9f:54:8c:a6:7d:77: bf:39:d4:ae:d6:66:94:de:6c:e7:9c:2d:07:f4:66: 51:36:c2:69:6a:29:18:9d:0d:3b:8b:0b:f3:95:1d: 08:61:68:31:9a:c3:a7:b6:f5:4b:b0:8e:90:46:3a: 75:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:4B:E0:C8:A1:6D:27:E7:CB:43:62:74:12:5B:92:62:6E:F1:3F:C1 X509v3 Authority Key Identifier: keyid:A8:FC:25:9A:10:1E:AB:82:6E:E8:CB:EA:2A:0B:DA:5C:DE:CF:DA:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186B80/B869805E123B11EC8A135F42C4F9AE02/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186B80/B869805E123B11EC8A135F42C4F9AE02/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c3:96:c1:93:b5:3a:1c:25:33:0b:34:ce:42:bb:bf:ab:07:cc: 64:31:25:1b:5e:2b:29:5f:a9:5b:3a:c3:d2:a2:18:06:5e:c7: 07:34:68:b8:6c:d1:73:b7:5e:10:5c:b5:f4:88:b9:73:46:60: 23:38:fb:fd:af:f0:09:55:37:d9:b5:68:f1:89:42:c1:e4:9c: 80:e3:28:06:46:09:10:48:5d:ec:f0:c1:e3:d5:ef:b5:11:3e: 0f:c2:99:2d:26:c7:da:0e:7f:6f:8e:a9:a2:3b:f9:f2:2e:ff: 5e:e9:0b:2a:16:97:d1:b1:ec:37:21:10:0f:83:18:4f:27:59: 28:c6:08:51:66:e8:6d:80:56:56:a2:f1:c1:c6:4d:ae:e1:d7: 8b:4f:6f:b4:64:0f:a2:06:89:f9:f7:e1:39:05:86:40:ba:b9: 78:7e:fd:f9:6a:bc:a6:42:ee:e7:02:72:13:fc:93:78:32:85: 2c:cb:26:72:14:e3:4c:b2:d1:46:ed:18:11:06:1e:62:6f:b3: f3:19:ae:41:cb:90:fa:ce:6c:c5:ba:be:6e:f9:b0:1d:b6:0b: 16:8e:ea:1b:7f:46:91:f9:91:91:8f:db:3c:49:d6:05:b4:eb: c8:df:0c:9c:d2:6e:87:a0:d6:77:48:50:35:74:82:dd:61:ba: 2b:f8:3e:05 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBPMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODZCODAxMTAvBgNVBAUTKEE4RkMyNTlBMTAxRUFCODI2RUU4Q0JFQTJBMEJEQTVD REVDRkRBRjIwHhcNMjUwNDI0MjMzMTU2WhcNMjUwNTAxMjMzMTU2WjAYMRYwFAYD VQQDEw02ODBhYzllZC1mMmFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzuEt1Hlio15sXVsefqxt9lb1Ab/Z62f7QyUYREL6LrMLmku3PtPqB6+YA+Wd i9rJpY0NaJwewX2nN2eTEkwXEK/VgPHM6k2G6qGbAdnhddkXFmVnDfR2Avyb1PTf Ez/v9AqnCxhJDw2bn/9t3QYORqftsW+iTVeAJVZDQVvrUOOBWGqhcXErB7jOucY7 M7buZpnFgefQocBa8BS/FHb6FwZ4qNlRy9Bs+f/8XQ+OLvTRXRZ6UMGZGrOraARp BNX8y2TkElsBbtthuPmfVIymfXe/OdSu1maU3mznnC0H9GZRNsJpaikYnQ07iwvz lR0IYWgxmsOntvVLsI6QRjp1PQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBFL4Mih bSfny0NidBJbkmJu8T/BMB8GA1UdIwQYMBaAFKj8JZoQHquCbujL6ioL2lzez9ry MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkI4MC9CODY5ODA1RTEy M0IxMUVDOEExMzVGNDJDNEY5QUUwMi9xUHdsbWhBZXE0SnU2TXZxS2d2YVhON1Ay dkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FQd2xtaEFlcTRKdTZNdnFLZ3ZhWE43UDJ2SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NkI4MC9CODY5ODA1RTEyM0IxMUVDOEExMzVGNDJDNEY5QUUwMi9xUHdsbWhBZXE0 SnU2TXZxS2d2YVhON1AydkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDDlsGTtTocJTMLNM5Cu7+rB8xkMSUbXispX6lbOsPSohgGXscHNGi4 bNFzt14QXLX0iLlzRmAjOPv9r/AJVTfZtWjxiULB5JyA4ygGRgkQSF3s8MHj1e+1 ET4PwpktJsfaDn9vjqmiO/nyLv9e6QsqFpfRsew3IRAPgxhPJ1koxghRZuhtgFZW ovHBxk2u4deLT2+0ZA+iBon59+E5BYZAurl4fv35arymQu7nAnIT/JN4MoUsyyZy FONMstFG7RgRBh5ib7PzGa5By5D6zmzFur5u+bAdtgsWjuobf0aR+ZGRj9s8SdYF tOvI3wyc0m6HoNZ3SFA1dILdYbor+D4F -----END CERTIFICATE-----Generated at Sat Apr 26 16:10:37 2025 by rpki-client