$ rpki-client -vvf rpki.apnic.net/member_repository/A9192A47/E5BFEA46B82011EFAAE6F567C4F9AE02/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.mft File: Q7Ii_jvkka1wWL7TgEIUQl1pQbc.mft (raw, json) Hash identifier: BHrhhoLnBoUurittDMRiLfXnIxezy5TORINjKo8kMZU= Subject key identifier: 62:BE:FC:1F:AF:04:C6:6A:B5:E7:9D:F4:11:FD:5C:5B:F8:A6:33:18 Authority key identifier: 43:B2:22:FE:3B:E4:91:AD:70:58:BE:D3:80:42:14:42:5D:69:41:B7 Certificate issuer: /CN=A9192A47/serialNumber=43B222FE3BE491AD7058BED3804214425D6941B7 Certificate serial: 47 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192A47/E5BFEA46B82011EFAAE6F567C4F9AE02/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.mft Manifest number: 47 Signing time: Fri 25 Apr 2025 06:24:37 +0000 Manifest this update: Fri 25 Apr 2025 06:24:37 +0000 Manifest next update: Fri 02 May 2025 06:24:36 +0000 Files and hashes: 1: Q7Ii_jvkka1wWL7TgEIUQl1pQbc.crl (hash: n4U3eesPomS6Pa2QGlWkh1GwYA7eqxlpsVIS3Ux933c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192A47/E5BFEA46B82011EFAAE6F567C4F9AE02/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.crl rsync://rpki.apnic.net/member_repository/A9192A47/E5BFEA46B82011EFAAE6F567C4F9AE02/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:24:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71 (0x47) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192A47, serialNumber=43B222FE3BE491AD7058BED3804214425D6941B7 Validity Not Before: Apr 25 06:24:37 2025 GMT Not After : May 2 06:24:36 2025 GMT Subject: CN=680b2aa5-a66c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:65:ec:32:c2:7f:38:17:95:ea:d1:66:7d:f3: c4:80:34:13:f3:2d:df:08:f3:f8:53:34:9e:b5:b6: 2e:82:c9:21:43:59:ef:ca:05:ed:70:f6:17:6e:56: 62:7e:42:0d:10:61:ab:f9:c7:ad:59:33:93:df:3e: 12:6a:a4:1f:79:78:22:8f:c7:50:59:38:b9:ea:58: 6c:bb:2e:fd:4b:07:bd:33:59:6e:33:1b:f6:4b:a9: 6e:41:ec:d0:cc:5f:e0:d3:9e:b9:84:2d:71:7e:61: d2:75:2a:af:32:b8:59:4b:4b:00:e7:39:8f:3c:38: 1e:b4:4a:e5:00:27:af:33:91:e5:32:1a:8b:bb:d1: 88:5f:0c:8c:ce:01:ea:72:0f:37:94:3f:c6:f7:d6: 95:e0:f3:d8:df:80:1f:f1:75:af:31:53:87:fa:1f: 95:cf:a7:15:40:fc:62:aa:91:ba:c3:4b:fc:5d:c6: d2:d1:28:5a:c8:be:47:44:ad:2c:46:8c:de:7b:b9: de:e1:4f:5f:7c:4d:ab:05:1a:3a:dc:eb:f4:77:18: a7:c3:cb:39:65:73:d8:82:a4:6d:d8:54:9d:8f:95: 09:68:7b:21:b2:4c:34:a9:02:bf:7c:07:43:3b:e1: 3a:18:45:f3:dc:80:d3:e5:93:e7:f3:8a:ae:71:36: 2b:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:BE:FC:1F:AF:04:C6:6A:B5:E7:9D:F4:11:FD:5C:5B:F8:A6:33:18 X509v3 Authority Key Identifier: keyid:43:B2:22:FE:3B:E4:91:AD:70:58:BE:D3:80:42:14:42:5D:69:41:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192A47/E5BFEA46B82011EFAAE6F567C4F9AE02/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192A47/E5BFEA46B82011EFAAE6F567C4F9AE02/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:93:55:18:9a:68:77:9c:5f:e2:79:4f:fb:6e:60:3c:8f:39: dc:e1:0a:94:6f:fa:41:cb:c6:7f:7a:d8:15:b1:fb:d4:de:80: 5f:6b:06:d3:31:92:eb:70:f1:1b:1a:71:02:77:6a:d4:e5:6a: ed:f5:66:49:5e:9d:b2:7e:de:d0:51:c3:ee:5d:39:5d:06:74: 81:b2:c3:32:1d:5f:36:d1:7f:fc:28:78:1f:e2:ba:51:cc:73: 79:92:4a:b5:b9:4a:f9:35:13:c7:c9:ea:4d:22:e5:c0:f8:d6: 59:02:e0:ef:15:0e:0f:9a:85:4e:95:3e:fe:9c:5e:ce:dc:1f: 6c:43:30:41:1c:a4:8b:d1:91:0c:39:0b:88:d5:31:1b:c6:cf: c0:27:8f:b9:e9:05:c0:df:de:3f:b5:a8:3a:a7:92:69:9f:fb: 34:27:67:c4:25:f9:3d:20:e0:e3:18:f9:bb:85:7f:7b:5f:98: c8:e6:4f:41:a3:56:ad:da:4e:24:47:3f:eb:c5:c2:1c:87:34: 80:99:ac:37:6e:8c:7e:c6:4b:a1:47:a5:c1:f5:ee:d2:0d:8d: fa:71:dd:62:8f:70:e6:b0:8d:42:a2:71:21:97:af:25:76:49: 42:9b:98:44:f1:89:a9:2b:f4:e9:d0:c3:21:40:83:1f:a4:25: f5:fd:dc:25 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 MkE0NzExMC8GA1UEBRMoNDNCMjIyRkUzQkU0OTFBRDcwNThCRUQzODA0MjE0NDI1 RDY5NDFCNzAeFw0yNTA0MjUwNjI0MzdaFw0yNTA1MDIwNjI0MzZaMBgxFjAUBgNV BAMTDTY4MGIyYWE1LWE2NmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC6Zewywn84F5Xq0WZ988SANBPzLd8I8/hTNJ61ti6CySFDWe/KBe1w9hduVmJ+ Qg0QYav5x61ZM5PfPhJqpB95eCKPx1BZOLnqWGy7Lv1LB70zWW4zG/ZLqW5B7NDM X+DTnrmELXF+YdJ1Kq8yuFlLSwDnOY88OB60SuUAJ68zkeUyGou70YhfDIzOAepy DzeUP8b31pXg89jfgB/xda8xU4f6H5XPpxVA/GKqkbrDS/xdxtLRKFrIvkdErSxG jN57ud7hT198TasFGjrc6/R3GKfDyzllc9iCpG3YVJ2PlQloeyGyTDSpAr98B0M7 4ToYRfPcgNPlk+fziq5xNit5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUYr78H68E xmq15530Ef1cW/imMxgwHwYDVR0jBBgwFoAUQ7Ii/jvkka1wWL7TgEIUQl1pQbcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkyQTQ3L0U1QkZFQTQ2Qjgy MDExRUZBQUU2RjU2N0M0RjlBRTAyL1E3SWlfanZra2Exd1dMN1RnRUlVUWwxcFFi Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvUTdJaV9qdmtrYTF3V0w3VGdFSVVRbDFwUWJjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTky QTQ3L0U1QkZFQTQ2QjgyMDExRUZBQUU2RjU2N0M0RjlBRTAyL1E3SWlfanZra2Ex d1dMN1RnRUlVUWwxcFFiYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKOTVRiaaHecX+J5T/tuYDyPOdzhCpRv+kHLxn962BWx+9TegF9rBtMx kutw8RsacQJ3atTlau31ZklenbJ+3tBRw+5dOV0GdIGywzIdXzbRf/woeB/iulHM c3mSSrW5Svk1E8fJ6k0i5cD41lkC4O8VDg+ahU6VPv6cXs7cH2xDMEEcpIvRkQw5 C4jVMRvGz8Anj7npBcDf3j+1qDqnkmmf+zQnZ8Ql+T0g4OMY+buFf3tfmMjmT0Gj Vq3aTiRHP+vFwhyHNICZrDdujH7GS6FHpcH17tINjfpx3WKPcOawjUKicSGXryV2 SUKbmETxiakr9OnQwyFAgx+kJfX93CU= -----END CERTIFICATE-----Generated at Sat Apr 26 12:38:32 2025 by rpki-client