$ rpki-client -vvf rpki.apnic.net/member_repository/A9188F72/CAAF0D4C0E2C11F08F1D6981C4F9AE02/qpCd6zVb4xTwVTIZQw0JrOLY53E.mft File: qpCd6zVb4xTwVTIZQw0JrOLY53E.mft (raw, json) Hash identifier: fvPisrDKPXGUZZMrcNiCi2LjkwPnCmp57UPXC0MYZbQ= Subject key identifier: 48:DE:C5:02:A1:85:C5:43:9D:87:56:0F:87:91:56:6B:59:43:D2:B2 Authority key identifier: AA:90:9D:EB:35:5B:E3:14:F0:55:32:19:43:0D:09:AC:E2:D8:E7:71 Certificate issuer: /CN=A9188F72/serialNumber=AA909DEB355BE314F0553219430D09ACE2D8E771 Certificate serial: 0F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qpCd6zVb4xTwVTIZQw0JrOLY53E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9188F72/CAAF0D4C0E2C11F08F1D6981C4F9AE02/qpCd6zVb4xTwVTIZQw0JrOLY53E.mft Manifest number: 0F Signing time: Fri 25 Apr 2025 07:04:42 +0000 Manifest this update: Fri 25 Apr 2025 07:04:42 +0000 Manifest next update: Fri 02 May 2025 07:04:42 +0000 Files and hashes: 1: qpCd6zVb4xTwVTIZQw0JrOLY53E.crl (hash: sNW9PFtKxO8CF1tWiyvsba5FfZIU52HVw3Jz89wnkcM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9188F72/CAAF0D4C0E2C11F08F1D6981C4F9AE02/qpCd6zVb4xTwVTIZQw0JrOLY53E.crl rsync://rpki.apnic.net/member_repository/A9188F72/CAAF0D4C0E2C11F08F1D6981C4F9AE02/qpCd6zVb4xTwVTIZQw0JrOLY53E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qpCd6zVb4xTwVTIZQw0JrOLY53E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 07:04:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15 (0xf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9188F72, serialNumber=AA909DEB355BE314F0553219430D09ACE2D8E771 Validity Not Before: Apr 25 07:04:42 2025 GMT Not After : May 2 07:04:42 2025 GMT Subject: CN=680b340a-0713 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:8b:88:b5:78:4e:2a:36:cf:68:49:2e:20:90: bf:68:1c:8a:e1:35:e8:fd:6d:5b:2d:7c:be:14:3e: cb:3b:c7:cd:76:19:cb:6e:fa:e1:5b:82:6d:a1:f2: a6:0c:99:94:87:22:23:b8:29:a4:af:08:7a:a2:75: 62:75:aa:1d:2d:5c:9e:df:90:20:f2:58:48:43:07: 56:fd:5f:5a:ab:2c:70:9c:69:97:04:e4:a9:a3:aa: 43:e8:8d:ff:60:e5:01:bd:72:5a:1c:cd:b6:00:98: ee:02:2f:23:09:80:a7:6d:29:93:af:a1:24:31:27: 7e:6a:df:f9:7d:b1:85:6e:6a:24:4c:4a:1f:82:57: 5c:a1:2f:4b:16:6c:6b:9c:a8:50:7b:37:d8:7b:b7: 3b:ba:d4:42:57:3e:21:35:67:53:e7:43:d5:38:b6: b9:35:9a:b1:0f:3c:de:14:2e:8f:6b:cc:b9:25:e3: dd:29:b1:32:74:e3:78:03:ee:24:a3:ef:ff:66:4f: 36:5e:31:b0:59:31:0c:e8:46:fc:21:72:62:e1:bc: 18:41:4e:cc:c8:08:1e:56:75:2e:aa:57:e4:ed:14: cc:80:53:cd:7a:aa:7b:09:c3:26:f2:68:08:f1:07: a4:66:77:31:88:e4:4c:66:86:83:e6:ca:80:38:e2: 23:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:DE:C5:02:A1:85:C5:43:9D:87:56:0F:87:91:56:6B:59:43:D2:B2 X509v3 Authority Key Identifier: keyid:AA:90:9D:EB:35:5B:E3:14:F0:55:32:19:43:0D:09:AC:E2:D8:E7:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9188F72/CAAF0D4C0E2C11F08F1D6981C4F9AE02/qpCd6zVb4xTwVTIZQw0JrOLY53E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qpCd6zVb4xTwVTIZQw0JrOLY53E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188F72/CAAF0D4C0E2C11F08F1D6981C4F9AE02/qpCd6zVb4xTwVTIZQw0JrOLY53E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:63:42:b9:f7:1b:eb:e1:28:ec:da:a5:eb:3c:90:fb:e6:d4: 5d:d9:90:bd:bd:21:77:df:0e:db:bf:11:41:b3:b8:5a:ae:73: 8d:46:78:96:b0:89:ee:5a:95:e2:30:e6:24:b8:6c:78:4c:da: cd:72:88:42:5d:7a:37:5a:09:52:61:27:f5:8c:2f:19:93:66: 16:a1:2b:b9:b4:0c:f1:13:c5:ca:ff:6d:e4:0d:e8:ee:34:e6: 29:54:fd:7c:42:ef:f6:6f:5c:3f:cd:a4:fa:19:67:de:82:5c: 71:d8:9b:c1:1f:06:e0:ce:cb:c9:cf:42:4e:7c:2d:ab:d6:f9: 87:c0:02:44:79:93:24:08:e6:5a:13:ba:83:c3:69:fc:02:c6: 35:c2:73:83:4c:c3:95:aa:18:dd:78:86:e2:8b:cb:cb:7a:90: bd:66:6b:22:36:8b:6c:bc:4b:e4:38:8b:4f:ca:ce:62:91:f7: 75:72:75:d0:a5:d8:35:62:ac:66:69:b3:d4:4f:4e:ef:cf:75: f3:f9:f7:81:a9:f4:0b:77:01:07:87:32:76:58:40:92:61:0e: b6:33:43:d3:3b:2e:7a:23:fa:1a:89:16:ca:12:99:bb:ab:98: 59:47:be:96:d6:20:87:10:31:6f:55:0b:0c:c4:b6:62:d1:b6: a4:b6:0a:d9 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 OEY3MjExMC8GA1UEBRMoQUE5MDlERUIzNTVCRTMxNEYwNTUzMjE5NDMwRDA5QUNF MkQ4RTc3MTAeFw0yNTA0MjUwNzA0NDJaFw0yNTA1MDIwNzA0NDJaMBgxFjAUBgNV BAMTDTY4MGIzNDBhLTA3MTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDIi4i1eE4qNs9oSS4gkL9oHIrhNej9bVstfL4UPss7x812Gctu+uFbgm2h8qYM mZSHIiO4KaSvCHqidWJ1qh0tXJ7fkCDyWEhDB1b9X1qrLHCcaZcE5KmjqkPojf9g 5QG9cloczbYAmO4CLyMJgKdtKZOvoSQxJ35q3/l9sYVuaiRMSh+CV1yhL0sWbGuc qFB7N9h7tzu61EJXPiE1Z1PnQ9U4trk1mrEPPN4ULo9rzLkl490psTJ043gD7iSj 7/9mTzZeMbBZMQzoRvwhcmLhvBhBTszICB5WdS6qV+TtFMyAU816qnsJwybyaAjx B6RmdzGI5ExmhoPmyoA44iMPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUSN7FAqGF xUOdh1YPh5FWa1lD0rIwHwYDVR0jBBgwFoAUqpCd6zVb4xTwVTIZQw0JrOLY53Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg4RjcyL0NBQUYwRDRDMEUy QzExRjA4RjFENjk4MUM0RjlBRTAyL3FwQ2Q2elZiNHhUd1ZUSVpRdzBKck9MWTUz RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcXBDZDZ6VmI0eFR3VlRJWlF3MEpyT0xZNTNFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg4 RjcyL0NBQUYwRDRDMEUyQzExRjA4RjFENjk4MUM0RjlBRTAyL3FwQ2Q2elZiNHhU d1ZUSVpRdzBKck9MWTUzRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAhjQrn3G+vhKOzapes8kPvm1F3ZkL29IXffDtu/EUGzuFquc41GeJaw ie5aleIw5iS4bHhM2s1yiEJdejdaCVJhJ/WMLxmTZhahK7m0DPETxcr/beQN6O40 5ilU/XxC7/ZvXD/NpPoZZ96CXHHYm8EfBuDOy8nPQk58LavW+YfAAkR5kyQI5loT uoPDafwCxjXCc4NMw5WqGN14huKLy8t6kL1mayI2i2y8S+Q4i0/KzmKR93VyddCl 2DVirGZps9RPTu/PdfP594Gp9At3AQeHMnZYQJJhDrYzQ9M7Lnoj+hqJFsoSmbur mFlHvpbWIIcQMW9VCwzEtmLRtqS2Ctk= -----END CERTIFICATE-----Generated at Sat Apr 26 05:13:01 2025 by rpki-client