$ rpki-client -vvf rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.mft File: qxHoCfK8ZrDR5guKMfhrW4LgDjk.mft (raw, json) Hash identifier: Fq3fInJfXMxVc43vlfaTNoFeDQ9XIrpwLP8Rq7p1iJI= Subject key identifier: 68:21:BE:11:1B:E2:E4:F6:34:CC:92:17:13:8C:8A:9A:5C:D2:80:6B Authority key identifier: AB:11:E8:09:F2:BC:66:B0:D1:E6:0B:8A:31:F8:6B:5B:82:E0:0E:39 Certificate issuer: /CN=A9191FA5/serialNumber=AB11E809F2BC66B0D1E60B8A31F86B5B82E00E39 Certificate serial: 3601 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.mft Manifest number: 354D Signing time: Thu 24 Apr 2025 14:27:30 +0000 Manifest this update: Thu 24 Apr 2025 14:27:30 +0000 Manifest next update: Thu 01 May 2025 14:27:30 +0000 Files and hashes: 1: qxHoCfK8ZrDR5guKMfhrW4LgDjk.crl (hash: gXLLhXV/BlyqVBm1RIwASyP3yqYK0UcwpNyNQrnGL5M=) 2: B8E7D994D00711EAB66A1255C4F9AE02.roa (hash: NTDwpkNkDHYvPlbXgriI89H0onb/SkI96RAfrzWAkp8=) 3: FF09B6BEC2E511EBBDB1B180C4F9AE02.roa (hash: qhnG18/aMLm+bgbad5pzVpZ66jdrVbEJIQGuGTdYEbI=) 4: FDE510BCC2E511EBBDB1B180C4F9AE02.roa (hash: 20lxG5YaQGKYCeNDIccsMuS2DiiyPh+IbwNarzaaMG8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.crl rsync://rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 14:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13825 (0x3601) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191FA5, serialNumber=AB11E809F2BC66B0D1E60B8A31F86B5B82E00E39 Validity Not Before: Apr 24 14:27:30 2025 GMT Not After : May 1 14:27:30 2025 GMT Subject: CN=680a4a52-b6c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:85:b0:c7:79:85:e9:f1:27:35:dc:98:d1:43: 27:c7:2e:37:8f:20:ed:77:40:36:42:c3:aa:f2:da: 11:96:2c:f2:9d:91:36:19:8b:de:14:bd:6a:e2:cf: 7d:61:72:82:6c:cf:b8:57:12:5b:63:19:f8:ec:73: f6:fc:f6:72:3a:77:0c:87:b3:38:31:22:23:18:e0: 5f:90:cd:2c:8f:76:6b:6a:52:43:06:07:f4:ff:f0: d2:b8:a6:73:17:f8:1f:de:d0:3b:cd:a9:c3:f8:25: 4f:88:7b:71:7b:70:f4:b5:e5:4e:14:b3:7d:64:99: c9:dc:71:2a:78:cf:56:8d:a5:bb:31:19:f5:52:16: f0:e8:c5:08:19:bd:61:ab:41:dd:3d:7e:2b:e1:30: e1:12:75:e6:d1:99:e3:55:e6:5b:f9:a9:30:76:65: 08:6c:04:c2:cc:fd:8d:f6:d5:57:de:18:fd:de:b5: b5:19:1d:39:ca:f6:5b:a6:a6:2a:38:37:d3:a3:1c: cb:fe:90:f2:1a:9e:a8:1a:cd:67:c8:6b:22:21:b5: 30:60:30:a8:35:1c:8e:a1:16:0b:8d:4b:dc:b6:8b: 16:b7:bf:c5:6a:f1:94:80:85:0f:0d:6e:84:23:86: 4c:92:8d:ec:a8:e1:e9:c6:f9:a1:31:80:f3:a7:db: 0a:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:21:BE:11:1B:E2:E4:F6:34:CC:92:17:13:8C:8A:9A:5C:D2:80:6B X509v3 Authority Key Identifier: keyid:AB:11:E8:09:F2:BC:66:B0:D1:E6:0B:8A:31:F8:6B:5B:82:E0:0E:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:ca:fa:f7:8f:b9:61:ca:c5:fa:a3:c1:8f:af:b0:32:14:7f: 5a:f3:1f:3c:37:b7:eb:5f:16:84:a7:ca:6b:2d:a8:3a:13:02: 47:4f:4c:33:f3:a2:5f:7d:7f:20:c0:4c:56:53:1a:b3:b5:98: 3b:7c:96:1d:4d:8a:ed:33:b8:2b:74:08:cd:9a:a0:ed:56:2b: 89:66:73:60:e8:ca:5a:4b:21:1e:b8:9d:7d:c0:8f:38:5f:c2: 16:f1:94:73:10:da:7c:98:51:6b:9f:ea:76:aa:54:89:7f:d3: ed:9e:da:60:d2:75:02:ff:74:ce:41:c2:8b:29:3f:77:36:5e: 14:99:41:db:65:9c:b6:de:27:9e:43:ff:0d:8b:ca:e5:a3:47: 67:9b:c1:04:bf:10:fe:6b:c8:57:7d:56:91:d4:e9:07:dd:ce: 49:8c:8c:b0:c7:18:55:5e:9f:48:3d:cc:27:91:1c:5b:bd:4d: f5:27:12:f2:cf:c5:8c:64:2c:1c:7d:f5:07:b2:a9:9e:16:31: 17:45:15:50:70:73:1d:7e:f9:7b:f8:15:57:77:19:71:01:92: 83:13:14:d8:40:a4:fb:b4:1f:37:f7:35:a7:e9:f7:4b:80:68: 1d:c7:c3:ba:74:87:72:bb:05:77:a5:96:95:c6:89:ae:65:7e: 36:0f:96:ec -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNgEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTFGQTUxMTAvBgNVBAUTKEFCMTFFODA5RjJCQzY2QjBEMUU2MEI4QTMxRjg2QjVC ODJFMDBFMzkwHhcNMjUwNDI0MTQyNzMwWhcNMjUwNTAxMTQyNzMwWjAYMRYwFAYD VQQDEw02ODBhNGE1Mi1iNmMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo4Wwx3mF6fEnNdyY0UMnxy43jyDtd0A2QsOq8toRlizynZE2GYveFL1q4s99 YXKCbM+4VxJbYxn47HP2/PZyOncMh7M4MSIjGOBfkM0sj3ZralJDBgf0//DSuKZz F/gf3tA7zanD+CVPiHtxe3D0teVOFLN9ZJnJ3HEqeM9WjaW7MRn1Uhbw6MUIGb1h q0HdPX4r4TDhEnXm0ZnjVeZb+akwdmUIbATCzP2N9tVX3hj93rW1GR05yvZbpqYq ODfToxzL/pDyGp6oGs1nyGsiIbUwYDCoNRyOoRYLjUvctosWt7/FavGUgIUPDW6E I4ZMko3sqOHpxvmhMYDzp9sKxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGghvhEb 4uT2NMySFxOMippc0oBrMB8GA1UdIwQYMBaAFKsR6AnyvGaw0eYLijH4a1uC4A45 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MUZBNS8wODA1NkNFNDFE ODcxMUUyOUREM0M2REUwOEIwMkNEMi9xeEhvQ2ZLOFpyRFI1Z3VLTWZoclc0TGdE amsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3F4SG9DZks4WnJEUjVndUtNZmhyVzRMZ0Rqay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MUZBNS8wODA1NkNFNDFEODcxMUUyOUREM0M2REUwOEIwMkNEMi9xeEhvQ2ZLOFpy RFI1Z3VLTWZoclc0TGdEamsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKyvr3j7lhysX6o8GPr7AyFH9a8x88N7frXxaEp8prLag6EwJHT0wz 86JffX8gwExWUxqztZg7fJYdTYrtM7grdAjNmqDtViuJZnNg6MpaSyEeuJ19wI84 X8IW8ZRzENp8mFFrn+p2qlSJf9Ptntpg0nUC/3TOQcKLKT93Nl4UmUHbZZy23iee Q/8Ni8rlo0dnm8EEvxD+a8hXfVaR1OkH3c5JjIywxxhVXp9IPcwnkRxbvU31JxLy z8WMZCwcffUHsqmeFjEXRRVQcHMdfvl7+BVXdxlxAZKDExTYQKT7tB839zWn6fdL gGgdx8O6dIdyuwV3pZaVxomuZX42D5bs -----END CERTIFICATE-----Generated at Sat Apr 26 04:18:09 2025 by rpki-client