$ rpki-client -vvf rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.mft File: _QaxUIVX9l9ozLo8ID7KrQdd0Zs.mft (raw, json) Hash identifier: nakaLS2e3ke7LL5PhOXqvzbD7KVSL/FQp8eUrz87NwE= Subject key identifier: 6D:89:46:01:71:30:CB:AE:3E:7B:5C:34:C1:3A:5C:E0:DC:95:D1:09 Authority key identifier: FD:06:B1:50:85:57:F6:5F:68:CC:BA:3C:20:3E:CA:AD:07:5D:D1:9B Certificate issuer: /CN=A9188F6D/serialNumber=FD06B1508557F65F68CCBA3C203ECAAD075DD19B Certificate serial: 0D15 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.mft Manifest number: 0CCE Signing time: Thu 24 Apr 2025 18:11:41 +0000 Manifest this update: Thu 24 Apr 2025 18:11:41 +0000 Manifest next update: Thu 01 May 2025 18:11:41 +0000 Files and hashes: 1: _QaxUIVX9l9ozLo8ID7KrQdd0Zs.crl (hash: oOtkLX07ZxBzSYF7IDBQZrJpp5EqE/keCG0GM/d7GEE=) 2: BA4B6EF2FFC611EEBEC2A923C4F9AE02.roa (hash: FgvpUN85rtr+i1GuoDsaGwxZYbJ7H8djnKwJKhetLt8=) 3: C22B92AA081011EDBC3C4374C4F9AE02.roa (hash: OxkEmLMGkxV9qU2vxCISEVaV7VxznjkiRbOpszB8G5c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.crl rsync://rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:11:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3349 (0xd15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9188F6D, serialNumber=FD06B1508557F65F68CCBA3C203ECAAD075DD19B Validity Not Before: Apr 24 18:11:41 2025 GMT Not After : May 1 18:11:41 2025 GMT Subject: CN=680a7edd-947e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:d4:11:bc:5d:a6:b0:b2:09:f8:3c:e5:78:30: aa:fd:12:e9:ff:63:a1:65:95:0e:55:56:4f:67:55: cc:af:aa:7c:35:78:8f:9b:c7:7e:70:30:e0:dc:3f: 14:b6:63:0a:ef:91:ed:0a:75:da:2f:07:32:07:2c: 39:23:e3:94:ef:45:d4:1d:95:0e:36:b2:4f:e3:e8: b0:eb:dc:0b:69:fa:f0:05:d2:ba:dd:9b:02:c0:25: 7b:25:14:8a:2d:f8:17:81:33:bd:c8:36:5b:99:3c: 65:71:4d:8d:6b:82:a4:9b:10:a0:93:f2:73:22:3d: db:fc:0f:18:2d:60:f8:88:f0:4a:15:cf:00:dc:a6: ca:2f:b0:af:37:b8:9d:bd:32:fd:61:2b:b5:2b:24: 77:e1:0c:8c:03:9e:c6:15:80:e4:c4:20:39:9b:3c: 81:8c:4e:cd:16:52:fb:40:df:47:4f:54:d3:b8:5a: 7a:ce:f9:f6:0e:d7:7b:42:b6:73:a2:88:55:71:7b: d1:d3:39:f0:b2:04:1e:12:be:8f:3c:cf:4e:73:41: 67:03:b2:1e:ae:d8:f6:f8:32:0c:77:51:c8:6f:7a: a9:eb:64:f0:20:3f:e1:96:b9:1c:eb:ce:17:d5:a1: 37:f9:c2:50:c9:a6:1a:5c:33:86:c4:11:53:d8:5d: 03:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:89:46:01:71:30:CB:AE:3E:7B:5C:34:C1:3A:5C:E0:DC:95:D1:09 X509v3 Authority Key Identifier: keyid:FD:06:B1:50:85:57:F6:5F:68:CC:BA:3C:20:3E:CA:AD:07:5D:D1:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:08:84:a4:a9:4b:e1:08:4b:51:a4:c7:86:c6:02:e7:a1:73: a8:19:d4:f3:e3:65:1c:9e:fe:70:fa:6d:ef:26:4b:da:81:cb: 39:f8:10:72:35:1c:bd:e3:f5:60:60:ff:23:24:8d:04:cd:65: 06:32:6d:36:3f:23:01:bf:47:65:1f:7e:0d:36:d7:53:11:56: 80:9e:f6:30:8d:0f:a9:9c:87:70:1b:e0:1d:34:1f:b5:4e:7c: 21:90:20:2a:a1:d5:e3:80:8a:3d:2c:50:2a:20:17:99:04:32: 0f:7e:da:d1:5d:8a:8c:0e:6c:95:39:0f:99:2a:86:1f:44:48: 06:04:43:a1:01:c2:6b:c2:c4:d2:df:4b:c4:00:24:10:4f:f0: be:37:e6:5a:fa:57:c4:48:c1:33:22:23:24:02:12:7a:69:61: 1b:ba:fa:3e:02:42:50:f3:05:71:4d:ea:39:4c:2f:1f:22:88: 1c:66:93:e7:a3:21:39:68:3f:29:b6:44:f2:63:a1:51:23:d9: ba:9f:f2:63:41:2f:6b:cb:c1:51:c8:6a:12:3a:8f:df:90:4d: aa:d4:f7:4f:35:d1:cc:94:09:78:23:05:78:9a:b4:3b:00:3d: 6d:b0:b4:ce:97:86:4c:44:57:66:a3:f6:7c:14:b2:05:a6:30: c6:78:1c:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDRUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODhGNkQxMTAvBgNVBAUTKEZEMDZCMTUwODU1N0Y2NUY2OENDQkEzQzIwM0VDQUFE MDc1REQxOUIwHhcNMjUwNDI0MTgxMTQxWhcNMjUwNTAxMTgxMTQxWjAYMRYwFAYD VQQDEw02ODBhN2VkZC05NDdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwdQRvF2msLIJ+DzleDCq/RLp/2OhZZUOVVZPZ1XMr6p8NXiPm8d+cDDg3D8U tmMK75HtCnXaLwcyByw5I+OU70XUHZUONrJP4+iw69wLafrwBdK63ZsCwCV7JRSK LfgXgTO9yDZbmTxlcU2Na4KkmxCgk/JzIj3b/A8YLWD4iPBKFc8A3KbKL7CvN7id vTL9YSu1KyR34QyMA57GFYDkxCA5mzyBjE7NFlL7QN9HT1TTuFp6zvn2Dtd7QrZz oohVcXvR0znwsgQeEr6PPM9Oc0FnA7Iertj2+DIMd1HIb3qp62TwID/hlrkc684X 1aE3+cJQyaYaXDOGxBFT2F0D1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG2JRgFx MMuuPntcNME6XODcldEJMB8GA1UdIwQYMBaAFP0GsVCFV/ZfaMy6PCA+yq0HXdGb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OEY2RC85QTVCMUE5RUY2 NkExMUU5QkY1MDY5N0FDNEY5QUUwMi9fUWF4VUlWWDlsOW96TG84SUQ3S3JRZGQw WnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19RYXhVSVZYOWw5b3pMbzhJRDdLclFkZDBacy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OEY2RC85QTVCMUE5RUY2NkExMUU5QkY1MDY5N0FDNEY5QUUwMi9fUWF4VUlWWDls OW96TG84SUQ3S3JRZGQwWnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdCISkqUvhCEtRpMeGxgLnoXOoGdTz42Ucnv5w+m3vJkvagcs5+BBy NRy94/VgYP8jJI0EzWUGMm02PyMBv0dlH34NNtdTEVaAnvYwjQ+pnIdwG+AdNB+1 TnwhkCAqodXjgIo9LFAqIBeZBDIPftrRXYqMDmyVOQ+ZKoYfREgGBEOhAcJrwsTS 30vEACQQT/C+N+Za+lfESMEzIiMkAhJ6aWEbuvo+AkJQ8wVxTeo5TC8fIogcZpPn oyE5aD8ptkTyY6FRI9m6n/JjQS9ry8FRyGoSOo/fkE2q1PdPNdHMlAl4IwV4mrQ7 AD1tsLTOl4ZMRFdmo/Z8FLIFpjDGeBwU -----END CERTIFICATE-----Generated at Sat Apr 26 04:39:45 2025 by rpki-client