$ rpki-client -vvf rpki.apnic.net/member_repository/A918C64D/DAD4586AEDC711EABBA13746C4F9AE02/C-qOMYe9SY0l8kldarDunkU0p_E.mft File: C-qOMYe9SY0l8kldarDunkU0p_E.mft (raw, json) Hash identifier: j5RfljIeaXIFU67M0XqPsVbAv6dNWPtGKHIxV/7o54s= Subject key identifier: 8B:EA:19:0A:F7:7A:90:A1:E9:60:FE:A1:A9:9A:DD:11:3A:FF:69:E8 Authority key identifier: 0B:EA:8E:31:87:BD:49:8D:25:F2:49:5D:6A:B0:EE:9E:45:34:A7:F1 Certificate issuer: /CN=A918C64D/serialNumber=0BEA8E3187BD498D25F2495D6AB0EE9E4534A7F1 Certificate serial: 07CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C-qOMYe9SY0l8kldarDunkU0p_E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C64D/DAD4586AEDC711EABBA13746C4F9AE02/C-qOMYe9SY0l8kldarDunkU0p_E.mft Manifest number: 07C9 Signing time: Thu 24 Apr 2025 20:53:31 +0000 Manifest this update: Thu 24 Apr 2025 20:53:31 +0000 Manifest next update: Thu 01 May 2025 20:53:31 +0000 Files and hashes: 1: C-qOMYe9SY0l8kldarDunkU0p_E.crl (hash: fqkdR6OR0N3z4OnNd9JHfQc2GSn9ZtJgNzweybSL0k8=) 2: B7362AE0EDC811EAAFF8BD46C4F9AE02.roa (hash: NrRaGTGhuuOTZ4sgZcXvRyo7s7nlCIeG2H0kiEu0fzA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C64D/DAD4586AEDC711EABBA13746C4F9AE02/C-qOMYe9SY0l8kldarDunkU0p_E.crl rsync://rpki.apnic.net/member_repository/A918C64D/DAD4586AEDC711EABBA13746C4F9AE02/C-qOMYe9SY0l8kldarDunkU0p_E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C-qOMYe9SY0l8kldarDunkU0p_E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:53:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1998 (0x7ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C64D, serialNumber=0BEA8E3187BD498D25F2495D6AB0EE9E4534A7F1 Validity Not Before: Apr 24 20:53:31 2025 GMT Not After : May 1 20:53:31 2025 GMT Subject: CN=680aa4cb-ca2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b6:41:04:88:68:fa:5a:d0:f6:1e:ee:40:92: 83:fd:67:23:34:65:0c:88:23:f0:68:42:16:1e:d9: 6d:1e:81:1e:49:fb:a6:cd:a9:87:84:ac:18:2c:10: 05:4b:73:dc:1c:56:87:86:3e:f1:4a:96:bb:75:60: 47:25:08:80:f2:18:8d:fa:02:22:3b:95:98:ce:d1: 41:f3:ca:a9:f1:24:18:04:00:45:2b:a2:3a:bb:47: 88:29:98:d5:11:21:f0:0f:c1:1a:e6:e4:b3:1b:3f: 3d:0b:28:e9:ce:e7:d3:a5:54:64:6d:4a:5e:98:b2: e6:10:b3:b5:90:6e:8f:d4:84:06:e0:97:42:01:dd: 38:cf:0d:25:2e:93:cf:92:61:6f:7b:94:93:c8:47: d9:bc:8e:a7:c4:76:18:6c:ba:60:30:ae:f9:be:f9: 39:a9:b1:f8:2c:66:b0:bd:bb:59:da:d9:fb:f7:7f: 1a:7f:11:eb:8a:2d:a7:dd:24:71:7f:d9:c5:6c:60: c5:5f:cd:df:88:ee:20:1a:ee:71:7d:61:91:38:8c: 61:2f:6a:bb:15:7a:36:24:23:7b:0d:60:98:7c:1a: cf:31:f6:d6:bc:a8:e2:7a:85:86:cc:1a:17:c6:bf: 34:34:32:01:7d:e0:b7:45:dc:94:28:a6:e1:c3:ef: 69:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:EA:19:0A:F7:7A:90:A1:E9:60:FE:A1:A9:9A:DD:11:3A:FF:69:E8 X509v3 Authority Key Identifier: keyid:0B:EA:8E:31:87:BD:49:8D:25:F2:49:5D:6A:B0:EE:9E:45:34:A7:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C64D/DAD4586AEDC711EABBA13746C4F9AE02/C-qOMYe9SY0l8kldarDunkU0p_E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C-qOMYe9SY0l8kldarDunkU0p_E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C64D/DAD4586AEDC711EABBA13746C4F9AE02/C-qOMYe9SY0l8kldarDunkU0p_E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:61:a8:24:f0:93:1c:51:30:b5:c8:4c:0d:c5:9e:39:74:a8: 0e:12:c9:9f:ce:3c:87:ba:dc:4a:09:c7:4d:12:2a:7e:fc:d3: d6:13:19:82:53:da:bf:d4:38:c2:7b:8f:35:e6:5d:d9:c4:cb: 20:5f:d1:70:af:61:1b:1f:07:a1:fe:fc:ed:14:2d:10:3f:21: 76:7a:9c:14:56:41:c0:ec:9f:b4:a8:2d:df:bd:87:9e:2e:06: ed:2c:b5:0e:48:0a:08:6c:2e:01:33:cb:d1:52:d2:94:22:b8: c7:06:4d:ca:47:33:d1:ad:86:24:66:63:61:e1:40:f1:3f:0c: 28:8b:27:d8:20:5f:6f:41:a3:56:e2:ad:56:0b:31:75:88:2f: 08:68:52:cb:93:39:2e:35:b1:94:a3:56:53:cd:56:1c:eb:c2: a5:ee:c1:13:16:e3:18:31:03:fd:05:a9:5f:57:00:00:08:14: 04:1a:cb:53:e4:5f:93:74:fb:4a:a6:6e:e6:65:10:89:4e:e2: be:fc:cc:22:79:3d:80:b0:d8:78:86:5c:3a:a5:0d:74:10:9c: f6:14:17:90:cd:d6:f5:03:c5:88:3e:d5:18:7f:fd:30:23:a2: f2:3c:6f:ec:03:9e:39:fe:18:40:da:ab:8b:59:be:ad:e2:e8: a3:9f:cf:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB84wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEM2NEQxMTAvBgNVBAUTKDBCRUE4RTMxODdCRDQ5OEQyNUYyNDk1RDZBQjBFRTlF NDUzNEE3RjEwHhcNMjUwNDI0MjA1MzMxWhcNMjUwNTAxMjA1MzMxWjAYMRYwFAYD VQQDEw02ODBhYTRjYi1jYTJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqLZBBIho+lrQ9h7uQJKD/WcjNGUMiCPwaEIWHtltHoEeSfumzamHhKwYLBAF S3PcHFaHhj7xSpa7dWBHJQiA8hiN+gIiO5WYztFB88qp8SQYBABFK6I6u0eIKZjV ESHwD8Ea5uSzGz89CyjpzufTpVRkbUpemLLmELO1kG6P1IQG4JdCAd04zw0lLpPP kmFve5STyEfZvI6nxHYYbLpgMK75vvk5qbH4LGawvbtZ2tn7938afxHrii2n3SRx f9nFbGDFX83fiO4gGu5xfWGROIxhL2q7FXo2JCN7DWCYfBrPMfbWvKjieoWGzBoX xr80NDIBfeC3RdyUKKbhw+9p1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIvqGQr3 epCh6WD+oama3RE6/2noMB8GA1UdIwQYMBaAFAvqjjGHvUmNJfJJXWqw7p5FNKfx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzY0RC9EQUQ0NTg2QUVE QzcxMUVBQkJBMTM3NDZDNEY5QUUwMi9DLXFPTVllOVNZMGw4a2xkYXJEdW5rVTBw X0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0MtcU9NWWU5U1kwbDhrbGRhckR1bmtVMHBfRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QzY0RC9EQUQ0NTg2QUVEQzcxMUVBQkJBMTM3NDZDNEY5QUUwMi9DLXFPTVllOVNZ MGw4a2xkYXJEdW5rVTBwX0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBaYagk8JMcUTC1yEwNxZ45dKgOEsmfzjyHutxKCcdNEip+/NPWExmC U9q/1DjCe4815l3ZxMsgX9Fwr2EbHweh/vztFC0QPyF2epwUVkHA7J+0qC3fvYee LgbtLLUOSAoIbC4BM8vRUtKUIrjHBk3KRzPRrYYkZmNh4UDxPwwoiyfYIF9vQaNW 4q1WCzF1iC8IaFLLkzkuNbGUo1ZTzVYc68Kl7sETFuMYMQP9BalfVwAACBQEGstT 5F+TdPtKpm7mZRCJTuK+/MwieT2AsNh4hlw6pQ10EJz2FBeQzdb1A8WIPtUYf/0w I6LyPG/sA545/hhA2quLWb6t4uijn880 -----END CERTIFICATE-----Generated at Sat Apr 26 04:23:39 2025 by rpki-client