$ rpki-client -vvf rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.mft File: M3QGIt-Gs7_nv0q9XfE2FYfwORI.mft (raw, json) Hash identifier: 4l2vLzTb7ZKQEfamtp6Y62+ihdEnppyJEmMK9g7LMTI= Subject key identifier: C0:8A:94:CA:A5:C9:BD:A9:D6:9C:6C:00:58:B5:C7:9F:BB:D5:EB:C9 Authority key identifier: 33:74:06:22:DF:86:B3:BF:E7:BF:4A:BD:5D:F1:36:15:87:F0:39:12 Certificate issuer: /CN=A919337F/serialNumber=33740622DF86B3BFE7BF4ABD5DF1361587F03912 Certificate serial: 0C98 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3QGIt-Gs7_nv0q9XfE2FYfwORI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.mft Manifest number: 0C91 Signing time: Thu 24 Apr 2025 18:08:21 +0000 Manifest this update: Thu 24 Apr 2025 18:08:21 +0000 Manifest next update: Thu 01 May 2025 18:08:21 +0000 Files and hashes: 1: M3QGIt-Gs7_nv0q9XfE2FYfwORI.crl (hash: K/NrRrKGPAz9L3Y44WtST22XFK317MsfdrUx+dPFRJM=) 2: D0566D20F25411E9AEDBEA62C4F9AE02.roa (hash: JRm3KZLihVfX2Mjt/YikIApeielUsAEctutVAu4actQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.crl rsync://rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3QGIt-Gs7_nv0q9XfE2FYfwORI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:08:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3224 (0xc98) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919337F, serialNumber=33740622DF86B3BFE7BF4ABD5DF1361587F03912 Validity Not Before: Apr 24 18:08:21 2025 GMT Not After : May 1 18:08:21 2025 GMT Subject: CN=680a7e15-485b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:26:34:f6:53:3e:2f:5f:c8:63:7f:96:8f:46: 86:26:ab:b0:a1:e6:d5:88:e8:27:21:83:e3:09:00: bc:ec:0a:4a:71:1a:cb:e0:f3:95:ac:f7:d8:e3:dc: ad:5c:f2:28:d2:96:33:9e:24:63:a0:d1:7d:f4:f6: 88:cf:ab:90:d0:d2:b1:66:fd:10:45:58:97:c9:85: 96:db:48:1f:7e:49:6d:67:53:59:34:bf:e1:fe:81: b9:01:50:08:4d:ed:ce:b7:bf:35:cd:6b:51:f9:77: 2b:17:d1:52:3e:4e:3d:da:ee:a7:1d:dd:e2:33:0d: 5f:26:24:f0:84:cf:f2:9f:8f:c0:fa:ef:37:43:54: e8:a9:44:eb:28:b5:c2:96:c7:8d:97:83:42:0a:68: d9:27:5d:d7:83:46:a1:4f:40:f9:20:69:5a:fb:3f: 9b:93:30:84:3c:44:18:bd:4a:a1:a7:d1:7f:34:b7: 58:30:65:ed:16:72:04:85:fc:49:74:19:4d:6c:21: dd:14:59:c8:8b:6c:27:cf:43:30:df:78:3a:96:37: bc:5c:0b:ec:9a:61:04:53:24:62:6b:fa:1a:ac:2b: 52:1f:2c:c0:34:2e:f4:2a:6a:4e:51:0f:64:e7:a2: f3:43:6c:3b:e7:95:fa:ec:85:d8:76:aa:80:ef:82: 9b:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:8A:94:CA:A5:C9:BD:A9:D6:9C:6C:00:58:B5:C7:9F:BB:D5:EB:C9 X509v3 Authority Key Identifier: keyid:33:74:06:22:DF:86:B3:BF:E7:BF:4A:BD:5D:F1:36:15:87:F0:39:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3QGIt-Gs7_nv0q9XfE2FYfwORI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:37:74:ec:d8:84:50:01:ab:00:dc:c1:f2:d4:b8:b9:d0:ec: 76:39:8f:b4:3a:bb:66:03:bf:69:23:d0:c9:83:84:d6:86:ee: 5e:39:4f:f2:d8:53:79:92:da:cc:ea:52:80:69:82:f5:e5:65: 36:74:bf:13:f5:39:a2:20:49:a6:7f:8a:14:b1:ce:93:f8:1c: cd:7d:54:b9:e7:11:74:e8:3b:11:ad:a9:c4:72:da:c4:60:7f: 75:c9:3d:f1:a6:95:09:45:62:f3:df:20:0b:1d:c8:65:d3:8e: 7f:b1:e2:a1:1b:03:ef:35:3d:7e:3d:35:d8:92:a1:ce:97:f2: 02:9c:44:3d:ba:3e:28:fd:37:c5:5f:8e:18:da:31:95:e6:e8: cb:3d:b4:f1:97:ab:8e:17:6a:cc:90:f2:d2:26:95:47:43:7f: 46:a7:bd:73:d2:13:55:5d:90:76:b0:3b:2c:ab:13:ca:30:46: ce:42:f3:09:13:be:4d:bb:a8:54:27:65:84:20:ba:56:44:57: ae:4d:97:24:1e:b9:07:99:3c:13:7f:ad:46:ce:db:09:3a:63: ed:6e:40:3f:a2:95:9b:b5:cb:15:a4:90:ab:f3:51:fc:aa:0a: 3a:8a:8c:60:ce:50:65:52:a8:ea:e0:da:a7:6d:e0:29:0f:2b: 80:5d:f5:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDJgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTMzN0YxMTAvBgNVBAUTKDMzNzQwNjIyREY4NkIzQkZFN0JGNEFCRDVERjEzNjE1 ODdGMDM5MTIwHhcNMjUwNDI0MTgwODIxWhcNMjUwNTAxMTgwODIxWjAYMRYwFAYD VQQDEw02ODBhN2UxNS00ODViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqiY09lM+L1/IY3+Wj0aGJquwoebViOgnIYPjCQC87ApKcRrL4POVrPfY49yt XPIo0pYzniRjoNF99PaIz6uQ0NKxZv0QRViXyYWW20gffkltZ1NZNL/h/oG5AVAI Te3Ot781zWtR+XcrF9FSPk492u6nHd3iMw1fJiTwhM/yn4/A+u83Q1ToqUTrKLXC lseNl4NCCmjZJ13Xg0ahT0D5IGla+z+bkzCEPEQYvUqhp9F/NLdYMGXtFnIEhfxJ dBlNbCHdFFnIi2wnz0Mw33g6lje8XAvsmmEEUyRia/oarCtSHyzANC70KmpOUQ9k 56LzQ2w755X67IXYdqqA74KbDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMCKlMql yb2p1pxsAFi1x5+71evJMB8GA1UdIwQYMBaAFDN0BiLfhrO/579KvV3xNhWH8DkS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzM3Ri8xRTE3RTAxQ0Yy NTQxMUU5QUQzQkZCNjFDNEY5QUUwMi9NM1FHSXQtR3M3X252MHE5WGZFMkZZZndP UkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL00zUUdJdC1HczdfbnYwcTlYZkUyRllmd09SSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MzM3Ri8xRTE3RTAxQ0YyNTQxMUU5QUQzQkZCNjFDNEY5QUUwMi9NM1FHSXQtR3M3 X252MHE5WGZFMkZZZndPUkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjN3Ts2IRQAasA3MHy1Li50Ox2OY+0OrtmA79pI9DJg4TWhu5eOU/y 2FN5ktrM6lKAaYL15WU2dL8T9TmiIEmmf4oUsc6T+BzNfVS55xF06DsRranEctrE YH91yT3xppUJRWLz3yALHchl045/seKhGwPvNT1+PTXYkqHOl/ICnEQ9uj4o/TfF X44Y2jGV5ujLPbTxl6uOF2rMkPLSJpVHQ39Gp71z0hNVXZB2sDssqxPKMEbOQvMJ E75Nu6hUJ2WEILpWRFeuTZckHrkHmTwTf61GztsJOmPtbkA/opWbtcsVpJCr81H8 qgo6ioxgzlBlUqjq4NqnbeApDyuAXfUI -----END CERTIFICATE-----Generated at Sat Apr 26 03:43:55 2025 by rpki-client