$ rpki-client -vvf rpki.apnic.net/member_repository/A918B5FE/32C300286A9E11EBB6762318C4F9AE02/q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.mft File: q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.mft (raw, json) Hash identifier: sFmhXvSLoSi7LnQh3yogglTqAB+8GN2rVjlP0EC3Isk= Subject key identifier: AA:4C:BC:A7:35:E0:BC:A8:74:F1:5E:CF:30:37:68:7E:89:9C:7C:F8 Authority key identifier: AB:90:5D:DC:0A:FB:BD:15:49:F6:6E:FE:81:17:AE:15:00:0A:5E:0F Certificate issuer: /CN=A918B5FE/serialNumber=AB905DDC0AFBBD1549F66EFE8117AE15000A5E0F Certificate serial: 06A5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918B5FE/32C300286A9E11EBB6762318C4F9AE02/q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.mft Manifest number: 0693 Signing time: Thu 24 Apr 2025 22:02:41 +0000 Manifest this update: Thu 24 Apr 2025 22:02:41 +0000 Manifest next update: Thu 01 May 2025 22:02:41 +0000 Files and hashes: 1: q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.crl (hash: 0oFG0+V+ZZBIZ1tctqa6oED2LbMEj4zDMcCCVLSw2kg=) 2: DAE15A7248F911EC9F04C439C4F9AE02.roa (hash: CcS2RgyDh/Mt65cyyvz7PDgLBgmPqkXqjVn09wN+d7I=) 3: DBB4BB6A48F911EC9F04C439C4F9AE02.roa (hash: sB2xN+NI3UCkCts4i5bUwtcZvKVfZaogReZtF2ClOtM=) 4: DCC969B048F911EC9F04C439C4F9AE02.roa (hash: Ey7sXMoZK5X/9B/g0P4vb+TT1dBxjAAcErSKVPBVZ8c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918B5FE/32C300286A9E11EBB6762318C4F9AE02/q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.crl rsync://rpki.apnic.net/member_repository/A918B5FE/32C300286A9E11EBB6762318C4F9AE02/q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:02:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1701 (0x6a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918B5FE, serialNumber=AB905DDC0AFBBD1549F66EFE8117AE15000A5E0F Validity Not Before: Apr 24 22:02:41 2025 GMT Not After : May 1 22:02:41 2025 GMT Subject: CN=680ab501-72d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:88:74:6f:28:6e:19:ed:b9:c0:ee:c2:cc:a9: 3d:1e:e2:2d:cc:68:9a:78:a7:55:4a:05:e3:07:1f: 16:69:10:bc:29:21:db:70:94:3e:15:97:fb:aa:3f: c5:cc:ee:10:8c:d6:e0:84:9d:17:a7:7a:0f:6e:a9: dc:31:54:b2:9a:2f:d8:32:69:cd:0f:4c:25:c5:be: da:8e:56:fd:1b:bf:21:53:99:06:99:b0:c5:09:74: f3:8f:6d:70:03:da:19:2d:0a:ed:ea:7b:9d:52:ab: 0d:06:1e:31:e1:5e:0b:ee:02:de:33:e3:5e:ff:a0: 8e:9e:f5:3a:e7:20:2e:c4:40:21:e8:26:27:26:85: 15:2c:d4:4d:37:55:5e:5e:ec:11:1c:75:0e:4c:27: d2:b4:29:55:a3:02:43:98:48:ef:b3:13:f2:cb:66: 10:7a:7f:28:23:c3:7a:88:50:22:e0:c4:ff:0f:73: 72:6e:38:50:39:49:09:86:d6:16:c3:e0:c2:84:bf: ea:2d:20:8c:3f:cf:a3:14:2f:d7:88:b3:b8:64:fd: 13:ee:0e:b6:d3:e4:dc:20:90:e6:97:41:9a:ec:05: e1:46:3c:17:81:e9:69:65:5e:bb:a0:5c:72:f3:b0: c7:24:68:d3:22:37:6b:63:c5:0a:4b:94:80:65:3f: 64:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:4C:BC:A7:35:E0:BC:A8:74:F1:5E:CF:30:37:68:7E:89:9C:7C:F8 X509v3 Authority Key Identifier: keyid:AB:90:5D:DC:0A:FB:BD:15:49:F6:6E:FE:81:17:AE:15:00:0A:5E:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918B5FE/32C300286A9E11EBB6762318C4F9AE02/q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B5FE/32C300286A9E11EBB6762318C4F9AE02/q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:cb:24:d3:0c:64:3a:eb:b2:f4:8e:a3:0e:28:46:02:37:05: 1c:c1:9e:08:be:da:1c:25:8d:1b:a6:10:17:25:be:b8:ba:eb: 37:4c:b5:c4:d5:61:84:e6:6b:f3:d7:cb:7a:19:b0:3d:f6:86: e9:47:62:12:7b:7f:1b:ca:96:00:32:57:7c:e2:14:7a:ce:6a: 11:a0:f4:fb:05:36:a9:16:00:e3:7b:32:3a:aa:1a:ec:f0:0f: 9e:c0:1c:ec:9f:55:a3:98:95:b3:20:8a:a0:29:7a:4e:4f:37: e6:22:c8:8f:ae:1c:bc:5c:86:32:25:7a:09:41:08:bf:21:dc: 90:a3:f6:d6:84:fd:ec:a1:c1:bc:cd:9c:69:23:ad:5d:38:85: 76:b1:82:36:33:f7:63:c4:a0:09:ce:13:c5:19:c9:1c:52:87: 97:fa:51:c3:09:d5:c0:6a:6a:36:43:4f:50:75:7a:08:a2:eb: cc:17:5b:fe:33:32:38:b0:9d:b9:7b:36:d7:b8:e4:1f:01:09: 5b:20:c4:fe:01:4d:7a:65:12:b8:ec:24:0a:45:64:66:b5:a2: 36:ca:77:be:1e:2a:15:d6:8d:5a:a8:68:32:01:06:5f:8c:b0: 04:7b:50:fb:fd:2b:8e:d0:ba:15:43:6a:e8:38:37:c0:bb:27: 9c:47:e7:49 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBqUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEI1RkUxMTAvBgNVBAUTKEFCOTA1RERDMEFGQkJEMTU0OUY2NkVGRTgxMTdBRTE1 MDAwQTVFMEYwHhcNMjUwNDI0MjIwMjQxWhcNMjUwNTAxMjIwMjQxWjAYMRYwFAYD VQQDEw02ODBhYjUwMS03MmQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsYh0byhuGe25wO7CzKk9HuItzGiaeKdVSgXjBx8WaRC8KSHbcJQ+FZf7qj/F zO4QjNbghJ0Xp3oPbqncMVSymi/YMmnND0wlxb7ajlb9G78hU5kGmbDFCXTzj21w A9oZLQrt6nudUqsNBh4x4V4L7gLeM+Ne/6COnvU65yAuxEAh6CYnJoUVLNRNN1Ve XuwRHHUOTCfStClVowJDmEjvsxPyy2YQen8oI8N6iFAi4MT/D3NybjhQOUkJhtYW w+DChL/qLSCMP8+jFC/XiLO4ZP0T7g620+TcIJDml0Ga7AXhRjwXgelpZV67oFxy 87DHJGjTIjdrY8UKS5SAZT9k0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKpMvKc1 4LyodPFezzA3aH6JnHz4MB8GA1UdIwQYMBaAFKuQXdwK+70VSfZu/oEXrhUACl4P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QjVGRS8zMkMzMDAyODZB OUUxMUVCQjY3NjIzMThDNEY5QUUwMi9xNUJkM0FyN3ZSVko5bTctZ1JldUZRQUtY ZzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3E1QmQzQXI3dlJWSjltNy1nUmV1RlFBS1hnOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QjVGRS8zMkMzMDAyODZBOUUxMUVCQjY3NjIzMThDNEY5QUUwMi9xNUJkM0FyN3ZS Vko5bTctZ1JldUZRQUtYZzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBoyyTTDGQ667L0jqMOKEYCNwUcwZ4IvtocJY0bphAXJb64uus3TLXE 1WGE5mvz18t6GbA99obpR2ISe38bypYAMld84hR6zmoRoPT7BTapFgDjezI6qhrs 8A+ewBzsn1WjmJWzIIqgKXpOTzfmIsiPrhy8XIYyJXoJQQi/IdyQo/bWhP3socG8 zZxpI61dOIV2sYI2M/djxKAJzhPFGckcUoeX+lHDCdXAamo2Q09QdXoIouvMF1v+ MzI4sJ25ezbXuOQfAQlbIMT+AU16ZRK47CQKRWRmtaI2yne+HioV1o1aqGgyAQZf jLAEe1D7/SuO0LoVQ2roODfAuyecR+dJ -----END CERTIFICATE-----Generated at Sat Apr 26 17:15:35 2025 by rpki-client