$ rpki-client -vvf rpki.apnic.net/member_repository/A918779B/7CF59FAA4A7211E983912180C4F9AE02/lqQx7QZ8PrHkc8EwSsbfm3YiVaM.mft File: lqQx7QZ8PrHkc8EwSsbfm3YiVaM.mft (raw, json) Hash identifier: MzkNb3XN6JEZMVo0RqdMp0VKe/RcEg1y25mDpjBbtU0= Subject key identifier: E6:DB:28:F2:23:F7:4E:02:A5:81:42:E3:7D:ED:5B:EC:CC:48:09:BC Authority key identifier: 96:A4:31:ED:06:7C:3E:B1:E4:73:C1:30:4A:C6:DF:9B:76:22:55:A3 Certificate issuer: /CN=A918779B/serialNumber=96A431ED067C3EB1E473C1304AC6DF9B762255A3 Certificate serial: 0FEA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lqQx7QZ8PrHkc8EwSsbfm3YiVaM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918779B/7CF59FAA4A7211E983912180C4F9AE02/lqQx7QZ8PrHkc8EwSsbfm3YiVaM.mft Manifest number: 16A3 Signing time: Thu 24 Apr 2025 17:27:49 +0000 Manifest this update: Thu 24 Apr 2025 17:27:49 +0000 Manifest next update: Thu 01 May 2025 17:27:49 +0000 Files and hashes: 1: lqQx7QZ8PrHkc8EwSsbfm3YiVaM.crl (hash: yYDHBJCADK9SKgwqoR7k1qRaae217GLIGU4TKTdRZto=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918779B/7CF59FAA4A7211E983912180C4F9AE02/lqQx7QZ8PrHkc8EwSsbfm3YiVaM.crl rsync://rpki.apnic.net/member_repository/A918779B/7CF59FAA4A7211E983912180C4F9AE02/lqQx7QZ8PrHkc8EwSsbfm3YiVaM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lqQx7QZ8PrHkc8EwSsbfm3YiVaM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:27:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4074 (0xfea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918779B, serialNumber=96A431ED067C3EB1E473C1304AC6DF9B762255A3 Validity Not Before: Apr 24 17:27:49 2025 GMT Not After : May 1 17:27:49 2025 GMT Subject: CN=680a7495-ef32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:19:68:ed:e1:15:20:bf:e2:53:d0:b1:0f:b0: fc:96:77:01:2a:bc:4d:fb:58:51:6b:83:2a:f7:1f: a8:7f:6c:23:8b:28:84:02:b9:69:14:2a:55:8e:e1: 46:05:e2:9b:cb:ce:45:7f:05:24:db:14:eb:13:4b: 30:47:80:1b:55:14:06:58:ab:00:c5:76:e6:6c:f9: d5:01:73:8d:ee:30:4e:1e:ab:06:de:93:97:31:70: 71:50:0c:ef:8d:13:d8:db:28:9f:8f:41:3d:48:14: e8:9f:e8:b6:52:6b:f3:7f:a7:e6:dd:b6:09:92:46: 17:bb:ad:6e:e5:f2:5c:d9:b4:35:35:84:eb:65:9e: c7:c5:d5:a1:81:25:db:a6:e2:e0:22:cf:39:5c:e2: d3:a5:7b:72:34:e0:8e:4d:41:dd:19:13:0d:be:53: 0a:c4:51:e1:7b:01:91:6a:eb:4b:c9:92:44:99:e7: 63:10:a6:4a:06:4d:0b:55:47:c0:9c:aa:0a:a9:93: 8f:ac:20:44:32:bf:2d:f9:a9:36:ce:f4:ec:75:fd: 63:f6:d6:05:89:ac:5e:d0:2c:4d:64:fd:11:0e:70: 9a:f9:7e:3c:7e:23:a8:74:6c:65:2b:cf:de:db:3a: 91:05:22:04:71:0e:86:ce:af:5d:60:4a:27:77:de: 97:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:DB:28:F2:23:F7:4E:02:A5:81:42:E3:7D:ED:5B:EC:CC:48:09:BC X509v3 Authority Key Identifier: keyid:96:A4:31:ED:06:7C:3E:B1:E4:73:C1:30:4A:C6:DF:9B:76:22:55:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918779B/7CF59FAA4A7211E983912180C4F9AE02/lqQx7QZ8PrHkc8EwSsbfm3YiVaM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lqQx7QZ8PrHkc8EwSsbfm3YiVaM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918779B/7CF59FAA4A7211E983912180C4F9AE02/lqQx7QZ8PrHkc8EwSsbfm3YiVaM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:04:68:99:cb:68:05:0f:61:56:45:95:ea:b8:85:af:ca:2a: 18:73:fe:e3:b4:df:34:3d:67:eb:68:29:d7:7d:cf:d3:2f:79: 61:3f:09:ce:4e:cf:4d:af:3d:5f:af:dd:f6:65:d9:ce:0b:70: 41:40:42:f6:dd:d1:f6:c1:6d:30:5b:d8:85:90:9d:6d:b3:d7: 85:02:28:73:88:e8:4e:53:e6:4e:e5:3f:32:9d:f7:45:7a:30: 2e:70:61:24:e7:6e:9a:e6:4d:7a:96:cd:53:98:e7:2b:0d:77: b1:2f:6a:2f:96:f7:e9:fb:b3:20:a3:74:92:c1:5b:53:d2:9c: c7:f3:9b:c9:a9:87:03:58:59:22:c2:e7:3c:ab:fd:f5:90:6f: f4:35:61:59:6e:ec:99:db:d8:ef:d2:8e:90:af:0d:ad:ff:b1: cb:bb:40:46:a5:0d:da:20:1c:fe:a4:ff:39:9a:d6:c9:cd:a0: 2e:03:e3:ca:22:99:82:0b:de:67:a3:bf:e2:d9:7e:40:45:62: c9:51:4a:97:71:75:bd:5b:df:fb:ad:f3:a4:e8:75:62:c0:28: 23:9c:50:56:33:de:53:e9:8c:26:9a:4c:98:1f:01:dd:ad:11: 93:69:88:7d:5c:4d:1d:17:01:0d:4a:13:c1:43:cf:d4:cd:85: 03:aa:1f:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD+owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODc3OUIxMTAvBgNVBAUTKDk2QTQzMUVEMDY3QzNFQjFFNDczQzEzMDRBQzZERjlC NzYyMjU1QTMwHhcNMjUwNDI0MTcyNzQ5WhcNMjUwNTAxMTcyNzQ5WjAYMRYwFAYD VQQDEw02ODBhNzQ5NS1lZjMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvBlo7eEVIL/iU9CxD7D8lncBKrxN+1hRa4Mq9x+of2wjiyiEArlpFCpVjuFG BeKby85FfwUk2xTrE0swR4AbVRQGWKsAxXbmbPnVAXON7jBOHqsG3pOXMXBxUAzv jRPY2yifj0E9SBTon+i2Umvzf6fm3bYJkkYXu61u5fJc2bQ1NYTrZZ7HxdWhgSXb puLgIs85XOLTpXtyNOCOTUHdGRMNvlMKxFHhewGRautLyZJEmedjEKZKBk0LVUfA nKoKqZOPrCBEMr8t+ak2zvTsdf1j9tYFiaxe0CxNZP0RDnCa+X48fiOodGxlK8/e 2zqRBSIEcQ6Gzq9dYEond96XawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFObbKPIj 904CpYFC433tW+zMSAm8MB8GA1UdIwQYMBaAFJakMe0GfD6x5HPBMErG35t2IlWj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Nzc5Qi83Q0Y1OUZBQTRB NzIxMUU5ODM5MTIxODBDNEY5QUUwMi9scVF4N1FaOFBySGtjOEV3U3NiZm0zWWlW YU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xxUXg3UVo4UHJIa2M4RXdTc2JmbTNZaVZhTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Nzc5Qi83Q0Y1OUZBQTRBNzIxMUU5ODM5MTIxODBDNEY5QUUwMi9scVF4N1FaOFBy SGtjOEV3U3NiZm0zWWlWYU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBFBGiZy2gFD2FWRZXquIWvyioYc/7jtN80PWfraCnXfc/TL3lhPwnO Ts9Nrz1fr932ZdnOC3BBQEL23dH2wW0wW9iFkJ1ts9eFAihziOhOU+ZO5T8ynfdF ejAucGEk526a5k16ls1TmOcrDXexL2ovlvfp+7Mgo3SSwVtT0pzH85vJqYcDWFki wuc8q/31kG/0NWFZbuyZ29jv0o6Qrw2t/7HLu0BGpQ3aIBz+pP85mtbJzaAuA+PK IpmCC95no7/i2X5ARWLJUUqXcXW9W9/7rfOk6HViwCgjnFBWM95T6YwmmkyYHwHd rRGTaYh9XE0dFwENShPBQ8/UzYUDqh9L -----END CERTIFICATE-----Generated at Sat Apr 26 04:36:59 2025 by rpki-client