$ rpki-client -vvf rpki.apnic.net/member_repository/A918DB4E/77E7F9A00CE511EAA20DDD82C4F9AE02/QnWN4MwM9iwq7uk-Du5nkDpQLMw.mft File: QnWN4MwM9iwq7uk-Du5nkDpQLMw.mft (raw, json) Hash identifier: nQAt+7SOwlLkB+hhalQT3DZxK4zszRkq6IfoWgtS1Uk= Subject key identifier: 69:FC:26:B3:48:4E:64:8E:7A:55:07:29:C1:75:EA:6E:1C:1B:94:CA Authority key identifier: 42:75:8D:E0:CC:0C:F6:2C:2A:EE:E9:3E:0E:EE:67:90:3A:50:2C:CC Certificate issuer: /CN=A918DB4E/serialNumber=42758DE0CC0CF62C2AEEE93E0EEE67903A502CCC Certificate serial: 0C5B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QnWN4MwM9iwq7uk-Du5nkDpQLMw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918DB4E/77E7F9A00CE511EAA20DDD82C4F9AE02/QnWN4MwM9iwq7uk-Du5nkDpQLMw.mft Manifest number: 0C35 Signing time: Thu 24 Apr 2025 18:36:27 +0000 Manifest this update: Thu 24 Apr 2025 18:36:27 +0000 Manifest next update: Thu 01 May 2025 18:36:27 +0000 Files and hashes: 1: QnWN4MwM9iwq7uk-Du5nkDpQLMw.crl (hash: TffoucAYKOKSRCqlr2TR5dc37BrMe6ivGJ3sXQLsxNE=) 2: CF3CF4A2DECD11EFA34A7C66C4F9AE02.roa (hash: WhFdwVA+Rqc9T4Pe4wg3jXjmM2B3Qv4g2BycMdAzMjs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918DB4E/77E7F9A00CE511EAA20DDD82C4F9AE02/QnWN4MwM9iwq7uk-Du5nkDpQLMw.crl rsync://rpki.apnic.net/member_repository/A918DB4E/77E7F9A00CE511EAA20DDD82C4F9AE02/QnWN4MwM9iwq7uk-Du5nkDpQLMw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QnWN4MwM9iwq7uk-Du5nkDpQLMw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:36:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3163 (0xc5b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918DB4E, serialNumber=42758DE0CC0CF62C2AEEE93E0EEE67903A502CCC Validity Not Before: Apr 24 18:36:27 2025 GMT Not After : May 1 18:36:27 2025 GMT Subject: CN=680a84ab-2b05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:e7:a1:3a:6c:49:a0:83:6a:40:9a:dc:e5:d2: 63:54:2b:46:95:fe:01:5c:5a:51:2a:ec:6d:92:3f: e9:bc:de:8c:e3:d8:c9:16:72:b9:0e:0a:9e:f9:6f: af:84:ec:9a:ad:70:a1:e1:59:d0:6e:3f:f2:2f:8e: f7:7d:ea:3c:e9:38:61:9a:9b:c6:45:7f:d9:d7:64: 9e:7d:9f:e1:bf:8e:d0:29:3c:8b:5b:f5:3d:00:5a: 6e:e4:f7:6c:76:c5:b4:0e:b3:5f:2c:27:fc:9a:a0: 1c:3e:a5:02:b9:16:a2:58:9e:dd:0f:21:9f:66:96: 67:aa:60:da:4f:b7:ac:3d:bd:ef:55:b1:b9:2c:aa: 6e:0e:79:e2:a4:b4:1e:aa:84:da:04:ee:ad:f8:6f: 2c:23:8c:f4:ec:ca:6b:66:80:79:4a:b0:8a:65:ca: 48:58:00:3b:31:2b:7b:e1:c9:b5:bd:33:24:cd:36: ec:2f:f9:21:55:cd:40:28:6d:2c:33:a0:1c:ae:15: 8d:0f:de:25:d0:82:e1:b9:62:e8:e3:a0:dd:c5:19: 67:8e:4d:10:2a:40:b8:fa:26:31:fa:66:3d:ec:95: c2:b7:20:2d:6b:8f:ee:57:d5:1c:86:f9:3c:e8:8e: 83:06:cb:78:24:77:6e:db:41:a9:ce:0f:34:24:b7: b2:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:FC:26:B3:48:4E:64:8E:7A:55:07:29:C1:75:EA:6E:1C:1B:94:CA X509v3 Authority Key Identifier: keyid:42:75:8D:E0:CC:0C:F6:2C:2A:EE:E9:3E:0E:EE:67:90:3A:50:2C:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918DB4E/77E7F9A00CE511EAA20DDD82C4F9AE02/QnWN4MwM9iwq7uk-Du5nkDpQLMw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QnWN4MwM9iwq7uk-Du5nkDpQLMw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918DB4E/77E7F9A00CE511EAA20DDD82C4F9AE02/QnWN4MwM9iwq7uk-Du5nkDpQLMw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:42:01:4d:e8:b2:1b:b2:4b:49:56:e2:61:9b:9c:9b:1d:5b: a5:69:bf:08:29:b5:df:f0:e8:72:c6:fd:c3:96:15:e3:0b:50: a1:52:ac:be:ad:75:35:35:14:62:e3:34:5e:2a:35:76:77:c0: 8e:ba:62:ca:58:3d:d6:a9:cf:fc:86:00:9b:f2:76:35:c0:1a: 1c:4e:80:4b:07:a2:e2:9e:79:91:94:4c:51:12:83:2f:b7:f3: 4c:12:3b:c7:bb:ea:9a:28:3f:16:11:45:09:22:e8:49:24:d7: 6d:72:a4:b8:b1:f3:b0:f5:d9:59:7b:43:54:e3:25:29:82:eb: 51:fb:e0:35:1c:36:2b:35:17:ec:7d:b2:23:23:b1:c1:48:88: f5:37:21:9f:cb:b1:5d:c9:96:cf:39:7a:94:98:4a:9e:96:c2: 2f:e1:e3:62:c3:ad:9b:99:73:02:32:2d:33:db:08:49:31:74: 90:f8:65:38:95:6f:94:35:f5:ce:71:24:16:21:17:e0:3d:6e: 81:76:5b:7f:e5:d4:11:74:15:e9:3b:f5:64:11:db:01:96:e7: 0f:40:82:22:8a:c7:0d:b0:95:c3:18:67:37:ee:49:5c:f7:ab: 09:ad:4f:8d:e4:ad:88:28:c7:d0:ba:89:fc:4f:c3:f8:c9:19: f1:30:0d:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDFswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OERCNEUxMTAvBgNVBAUTKDQyNzU4REUwQ0MwQ0Y2MkMyQUVFRTkzRTBFRUU2Nzkw M0E1MDJDQ0MwHhcNMjUwNDI0MTgzNjI3WhcNMjUwNTAxMTgzNjI3WjAYMRYwFAYD VQQDEw02ODBhODRhYi0yYjA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyuehOmxJoINqQJrc5dJjVCtGlf4BXFpRKuxtkj/pvN6M49jJFnK5Dgqe+W+v hOyarXCh4VnQbj/yL473feo86ThhmpvGRX/Z12SefZ/hv47QKTyLW/U9AFpu5Pds dsW0DrNfLCf8mqAcPqUCuRaiWJ7dDyGfZpZnqmDaT7esPb3vVbG5LKpuDnnipLQe qoTaBO6t+G8sI4z07MprZoB5SrCKZcpIWAA7MSt74cm1vTMkzTbsL/khVc1AKG0s M6AcrhWND94l0ILhuWLo46DdxRlnjk0QKkC4+iYx+mY97JXCtyAta4/uV9Uchvk8 6I6DBst4JHdu20Gpzg80JLeyfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGn8JrNI TmSOelUHKcF16m4cG5TKMB8GA1UdIwQYMBaAFEJ1jeDMDPYsKu7pPg7uZ5A6UCzM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4REI0RS83N0U3RjlBMDBD RTUxMUVBQTIwREREODJDNEY5QUUwMi9RbldONE13TTlpd3E3dWstRHU1bmtEcFFM TXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FuV040TXdNOWl3cTd1ay1EdTVua0RwUUxNdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 REI0RS83N0U3RjlBMDBDRTUxMUVBQTIwREREODJDNEY5QUUwMi9RbldONE13TTlp d3E3dWstRHU1bmtEcFFMTXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbQgFN6LIbsktJVuJhm5ybHVulab8IKbXf8Ohyxv3DlhXjC1ChUqy+ rXU1NRRi4zReKjV2d8COumLKWD3Wqc/8hgCb8nY1wBocToBLB6LinnmRlExREoMv t/NMEjvHu+qaKD8WEUUJIuhJJNdtcqS4sfOw9dlZe0NU4yUpgutR++A1HDYrNRfs fbIjI7HBSIj1NyGfy7FdyZbPOXqUmEqelsIv4eNiw62bmXMCMi0z2whJMXSQ+GU4 lW+UNfXOcSQWIRfgPW6Bdlt/5dQRdBXpO/VkEdsBlucPQIIiiscNsJXDGGc37klc 96sJrU+N5K2IKMfQuon8T8P4yRnxMA1H -----END CERTIFICATE-----Generated at Sat Apr 26 04:21:54 2025 by rpki-client