$ rpki-client -vvf rpki.apnic.net/member_repository/A9186D9F/A936E4402E0411EF86F29D79C4F9AE02/Q_dCP5PWuglpQFn7I974Uo0mSZ0.mft File: Q_dCP5PWuglpQFn7I974Uo0mSZ0.mft (raw, json) Hash identifier: ODdnGay+PqT8cACPN8MbGHZw3fGIwHj/GDxcrfZ5Jbg= Subject key identifier: 4C:2F:DB:E3:5B:69:FB:1A:12:8C:7D:C1:FC:9F:40:1F:13:9D:A1:7F Authority key identifier: 43:F7:42:3F:93:D6:BA:09:69:40:59:FB:23:DE:F8:52:8D:26:49:9D Certificate issuer: /CN=A9186D9F/serialNumber=43F7423F93D6BA09694059FB23DEF8528D26499D Certificate serial: A3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q_dCP5PWuglpQFn7I974Uo0mSZ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186D9F/A936E4402E0411EF86F29D79C4F9AE02/Q_dCP5PWuglpQFn7I974Uo0mSZ0.mft Manifest number: A1 Signing time: Fri 25 Apr 2025 05:12:54 +0000 Manifest this update: Fri 25 Apr 2025 05:12:53 +0000 Manifest next update: Fri 02 May 2025 05:12:53 +0000 Files and hashes: 1: Q_dCP5PWuglpQFn7I974Uo0mSZ0.crl (hash: FXTjPIVRb8TPF3giC8w2/GinqySTlzjOZklaWZCSKYM=) 2: 17EA0C7A38DF11EF8EEDB25EC4F9AE02.roa (hash: sflqoJJiQSUE3/D/FoYHXfA8MjGPanF4iuCvuWOV/9c=) 3: A63A2DFA2F5411EF9A12027FC4F9AE02.roa (hash: 3L8GR/TKBQutwByYr9Yt28Y5Yf6Lgn2PEAhMb4FmV9A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186D9F/A936E4402E0411EF86F29D79C4F9AE02/Q_dCP5PWuglpQFn7I974Uo0mSZ0.crl rsync://rpki.apnic.net/member_repository/A9186D9F/A936E4402E0411EF86F29D79C4F9AE02/Q_dCP5PWuglpQFn7I974Uo0mSZ0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q_dCP5PWuglpQFn7I974Uo0mSZ0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:12:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 163 (0xa3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186D9F, serialNumber=43F7423F93D6BA09694059FB23DEF8528D26499D Validity Not Before: Apr 25 05:12:53 2025 GMT Not After : May 2 05:12:53 2025 GMT Subject: CN=680b19d5-ba73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:a1:bb:54:64:ae:9e:13:0d:29:11:ef:2e:42: 9d:7e:3d:c4:77:e8:ba:08:42:b5:95:fe:54:d5:0a: 39:9f:ae:13:dc:09:47:ca:8b:5f:7b:bb:22:6a:fe: af:58:c7:a3:c3:f6:c4:01:ca:c7:ad:11:9a:08:60: 7d:2d:09:8c:72:93:d7:fb:e1:b9:05:07:72:b9:db: 14:4b:ec:95:22:78:f2:f7:39:0f:43:a4:af:7e:1d: 93:b1:22:0f:08:2d:87:48:0a:fe:d7:67:7b:6b:e2: 06:77:22:de:06:bf:0b:92:5e:4c:1e:3c:74:06:4b: 6f:26:f6:2d:e1:f1:a4:18:b8:10:10:8c:16:a7:c2: 44:61:ce:52:26:2d:d5:6c:e6:8c:8d:f8:0e:8c:66: 48:0a:3b:07:3f:54:15:57:ce:00:fe:5c:af:5e:af: b1:80:62:70:1f:14:94:9f:93:07:b7:09:42:72:54: c2:a8:a1:86:4e:f7:70:98:64:7f:f0:68:ee:dd:eb: 4b:59:ef:bf:47:09:89:08:16:a7:31:90:56:37:77: ef:5c:9b:9c:44:dc:4c:74:8f:cf:e2:9b:4d:5d:c5: dd:72:f7:a3:47:99:8a:c7:10:f4:fb:60:43:27:fa: d3:94:54:63:e5:a8:6d:9c:40:9d:df:62:f4:98:59: af:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:2F:DB:E3:5B:69:FB:1A:12:8C:7D:C1:FC:9F:40:1F:13:9D:A1:7F X509v3 Authority Key Identifier: keyid:43:F7:42:3F:93:D6:BA:09:69:40:59:FB:23:DE:F8:52:8D:26:49:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186D9F/A936E4402E0411EF86F29D79C4F9AE02/Q_dCP5PWuglpQFn7I974Uo0mSZ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q_dCP5PWuglpQFn7I974Uo0mSZ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186D9F/A936E4402E0411EF86F29D79C4F9AE02/Q_dCP5PWuglpQFn7I974Uo0mSZ0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:35:6a:00:10:0f:fd:09:bb:22:aa:6a:2a:cf:76:b2:6c:33: f8:37:c8:f3:6a:49:99:b0:9d:ce:67:a0:87:5a:de:5a:7d:8f: 96:95:ad:52:9f:7d:58:ad:52:c7:2b:92:01:39:5a:24:2d:17: 77:df:fa:81:a2:09:4c:b1:a0:66:0d:01:4d:ca:65:e1:a0:14: df:e6:23:e6:a0:9e:8e:9c:f3:7e:3f:df:d1:78:da:7c:c3:2c: 6c:f1:59:40:a2:68:83:e7:2f:c1:7c:24:c7:2e:22:cf:90:54: 58:42:77:7a:3b:5f:69:ec:d3:be:84:5a:93:09:77:a2:ac:ca: 7b:4b:84:fb:52:ca:33:ea:49:02:5e:26:fb:47:a6:b2:b1:bf: 29:c2:78:e3:e4:8c:b1:0f:9b:47:4a:12:4c:86:7d:6a:46:29: d2:51:74:f2:47:29:05:59:e8:16:57:0e:0b:be:51:ac:e7:b6: a7:0c:e8:32:90:c2:02:4c:6b:f0:3c:6b:d4:45:93:9f:ee:69: dc:0b:1a:2d:ef:b7:aa:12:8f:a7:88:7d:8b:0f:0f:e1:a2:95: 84:ce:8d:5b:5e:7d:52:54:37:62:bc:0a:52:c3:1d:fe:64:d9: 68:31:34:2b:d2:12:97:2f:a2:ad:5d:08:05:90:6c:e9:53:e2: 46:5e:13:4e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODZEOUYxMTAvBgNVBAUTKDQzRjc0MjNGOTNENkJBMDk2OTQwNTlGQjIzREVGODUy OEQyNjQ5OUQwHhcNMjUwNDI1MDUxMjUzWhcNMjUwNTAyMDUxMjUzWjAYMRYwFAYD VQQDEw02ODBiMTlkNS1iYTczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy6G7VGSunhMNKRHvLkKdfj3Ed+i6CEK1lf5U1Qo5n64T3AlHyotfe7siav6v WMejw/bEAcrHrRGaCGB9LQmMcpPX++G5BQdyudsUS+yVInjy9zkPQ6Svfh2TsSIP CC2HSAr+12d7a+IGdyLeBr8Lkl5MHjx0BktvJvYt4fGkGLgQEIwWp8JEYc5SJi3V bOaMjfgOjGZICjsHP1QVV84A/lyvXq+xgGJwHxSUn5MHtwlCclTCqKGGTvdwmGR/ 8Gju3etLWe+/RwmJCBanMZBWN3fvXJucRNxMdI/P4ptNXcXdcvejR5mKxxD0+2BD J/rTlFRj5ahtnECd32L0mFmvvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEwv2+Nb afsaEox9wfyfQB8TnaF/MB8GA1UdIwQYMBaAFEP3Qj+T1roJaUBZ+yPe+FKNJkmd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkQ5Ri9BOTM2RTQ0MDJF MDQxMUVGODZGMjlENzlDNEY5QUUwMi9RX2RDUDVQV3VnbHBRRm43STk3NFVvMG1T WjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1FfZENQNVBXdWdscFFGbjdJOTc0VW8wbVNaMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NkQ5Ri9BOTM2RTQ0MDJFMDQxMUVGODZGMjlENzlDNEY5QUUwMi9RX2RDUDVQV3Vn bHBRRm43STk3NFVvMG1TWjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGNWoAEA/9Cbsiqmoqz3aybDP4N8jzakmZsJ3OZ6CHWt5afY+Wla1S n31YrVLHK5IBOVokLRd33/qBoglMsaBmDQFNymXhoBTf5iPmoJ6OnPN+P9/ReNp8 wyxs8VlAomiD5y/BfCTHLiLPkFRYQnd6O19p7NO+hFqTCXeirMp7S4T7Usoz6kkC Xib7R6aysb8pwnjj5IyxD5tHShJMhn1qRinSUXTyRykFWegWVw4LvlGs57anDOgy kMICTGvwPGvURZOf7mncCxot77eqEo+niH2LDw/hopWEzo1bXn1SVDdivApSwx3+ ZNloMTQr0hKXL6KtXQgFkGzpU+JGXhNO -----END CERTIFICATE-----Generated at Sat Apr 26 12:36:50 2025 by rpki-client