$ rpki-client -vvf rpki.apnic.net/member_repository/A9196480/45DA3FE62B8011EE9FF2F576C4F9AE02/qS9M5InNDpfRZ2BD-MNPgwZ52Pc.mft File: qS9M5InNDpfRZ2BD-MNPgwZ52Pc.mft (raw, json) Hash identifier: r6XnUg1UroWyHsOMJFEb9u4wBI8RM3dRs7lH0VpotQU= Subject key identifier: F4:74:A9:9D:10:F7:5A:F0:DD:6D:5F:5A:B6:AB:B9:A9:A6:D3:21:37 Authority key identifier: A9:2F:4C:E4:89:CD:0E:97:D1:67:60:43:F8:C3:4F:83:06:79:D8:F7 Certificate issuer: /CN=A9196480/serialNumber=A92F4CE489CD0E97D1676043F8C34F830679D8F7 Certificate serial: 014E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qS9M5InNDpfRZ2BD-MNPgwZ52Pc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196480/45DA3FE62B8011EE9FF2F576C4F9AE02/qS9M5InNDpfRZ2BD-MNPgwZ52Pc.mft Manifest number: 014B Signing time: Fri 25 Apr 2025 03:20:49 +0000 Manifest this update: Fri 25 Apr 2025 03:20:49 +0000 Manifest next update: Fri 02 May 2025 03:20:49 +0000 Files and hashes: 1: qS9M5InNDpfRZ2BD-MNPgwZ52Pc.crl (hash: r7YcSAqEEfY8ooH2liWHJmaOHPp/cwhZFOmE/T79m/M=) 2: C43988E4472611EE8CB34245C4F9AE02.roa (hash: cfTEsX0/fqXximCGDgwjpxYW14EquVhqMbg4z9DcvEI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196480/45DA3FE62B8011EE9FF2F576C4F9AE02/qS9M5InNDpfRZ2BD-MNPgwZ52Pc.crl rsync://rpki.apnic.net/member_repository/A9196480/45DA3FE62B8011EE9FF2F576C4F9AE02/qS9M5InNDpfRZ2BD-MNPgwZ52Pc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qS9M5InNDpfRZ2BD-MNPgwZ52Pc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:20:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 334 (0x14e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196480, serialNumber=A92F4CE489CD0E97D1676043F8C34F830679D8F7 Validity Not Before: Apr 25 03:20:49 2025 GMT Not After : May 2 03:20:49 2025 GMT Subject: CN=680aff91-888b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:c9:79:e3:88:b0:14:16:6d:7f:73:ec:8d:b4: 19:5f:f1:64:13:24:2d:92:1d:ee:af:f4:73:23:64: f0:70:c8:67:ae:06:e8:80:10:b9:98:15:99:3f:3c: d0:90:5b:fe:f9:f3:e9:b3:94:58:07:ea:f7:e5:b3: a2:27:f2:e3:95:39:35:05:3a:8a:eb:50:72:07:d1: ff:a2:61:b4:10:22:b8:ff:27:49:07:f9:dc:e6:09: aa:62:02:b1:a4:81:e5:38:9c:1e:d9:c4:b5:2b:16: 8c:d6:86:de:38:30:a9:7b:11:fb:4b:12:57:f0:6c: ad:3b:b0:7a:33:5a:ae:8f:2a:61:45:7c:f3:9b:7a: 08:aa:05:9b:fc:1f:db:00:c3:29:35:d9:ca:81:95: 21:fa:86:b9:1d:67:de:5d:fc:a7:78:fe:57:c0:f9: 52:2d:8b:d5:dc:4f:b3:6d:92:a3:d8:a1:7c:dd:93: 7b:cb:56:bc:46:2f:5e:0d:7b:7b:84:1a:f2:07:11: 82:91:96:89:e7:94:38:1d:5c:e4:8d:ea:92:9b:46: 84:dd:0c:d4:81:0d:47:fe:95:71:98:2d:44:78:b8: 21:c4:9b:7a:0c:b7:99:80:cc:a1:75:31:06:1c:16: 51:49:92:06:de:9b:d9:ab:de:04:09:c8:e3:44:74: d8:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:74:A9:9D:10:F7:5A:F0:DD:6D:5F:5A:B6:AB:B9:A9:A6:D3:21:37 X509v3 Authority Key Identifier: keyid:A9:2F:4C:E4:89:CD:0E:97:D1:67:60:43:F8:C3:4F:83:06:79:D8:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196480/45DA3FE62B8011EE9FF2F576C4F9AE02/qS9M5InNDpfRZ2BD-MNPgwZ52Pc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qS9M5InNDpfRZ2BD-MNPgwZ52Pc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196480/45DA3FE62B8011EE9FF2F576C4F9AE02/qS9M5InNDpfRZ2BD-MNPgwZ52Pc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:14:35:71:7c:31:d6:fe:9c:b0:22:00:63:5b:02:30:8f:51: 0a:17:08:17:e1:c2:bf:b2:f2:dc:e6:08:22:d0:99:1e:49:3f: c8:aa:ad:91:ab:0c:3f:f8:34:21:a2:90:19:b7:b2:d5:09:c1: 0b:61:fd:87:a2:56:60:de:04:2a:00:ff:70:80:81:1a:e4:c5: 1a:a4:41:50:0f:4d:43:86:90:68:21:cd:f7:6c:32:98:7f:e7: 36:74:e3:c8:67:54:20:97:8c:da:df:d2:57:1f:5b:c0:b9:94: ad:2a:87:1c:66:71:1b:73:a8:e7:a0:06:65:2e:e3:80:7e:d5: 4b:12:50:58:99:a0:c2:a8:80:12:76:be:b8:a7:f6:f3:94:c5: d3:05:ca:55:c5:f3:f8:c7:da:2b:26:09:02:60:86:eb:57:1b: ac:04:44:d1:ee:67:d4:0c:c0:50:79:9e:b7:ae:ca:ac:12:c1: a2:e7:df:18:dc:81:a6:00:2d:ef:41:8a:ab:fd:49:f5:8b:ed: a4:a4:74:6e:81:fd:bd:19:73:9e:ef:69:e6:d0:63:3a:5f:ec: e2:00:ca:f9:40:fc:83:10:48:49:67:a6:b8:44:64:b4:4a:32: 64:a5:67:ae:17:5b:18:fc:e3:1c:3e:53:00:49:5f:e0:51:2d: d1:76:44:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAU4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTY0ODAxMTAvBgNVBAUTKEE5MkY0Q0U0ODlDRDBFOTdEMTY3NjA0M0Y4QzM0Rjgz MDY3OUQ4RjcwHhcNMjUwNDI1MDMyMDQ5WhcNMjUwNTAyMDMyMDQ5WjAYMRYwFAYD VQQDEw02ODBhZmY5MS04ODhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3sl544iwFBZtf3PsjbQZX/FkEyQtkh3ur/RzI2TwcMhnrgbogBC5mBWZPzzQ kFv++fPps5RYB+r35bOiJ/LjlTk1BTqK61ByB9H/omG0ECK4/ydJB/nc5gmqYgKx pIHlOJwe2cS1KxaM1obeODCpexH7SxJX8GytO7B6M1qujyphRXzzm3oIqgWb/B/b AMMpNdnKgZUh+oa5HWfeXfyneP5XwPlSLYvV3E+zbZKj2KF83ZN7y1a8Ri9eDXt7 hBryBxGCkZaJ55Q4HVzkjeqSm0aE3QzUgQ1H/pVxmC1EeLghxJt6DLeZgMyhdTEG HBZRSZIG3pvZq94ECcjjRHTYdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPR0qZ0Q 91rw3W1fWraruamm0yE3MB8GA1UdIwQYMBaAFKkvTOSJzQ6X0WdgQ/jDT4MGedj3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NjQ4MC80NURBM0ZFNjJC ODAxMUVFOUZGMkY1NzZDNEY5QUUwMi9xUzlNNUluTkRwZlJaMkJELU1OUGd3WjUy UGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FTOU01SW5ORHBmUloyQkQtTU5QZ3daNTJQYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NjQ4MC80NURBM0ZFNjJCODAxMUVFOUZGMkY1NzZDNEY5QUUwMi9xUzlNNUluTkRw ZlJaMkJELU1OUGd3WjUyUGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVFDVxfDHW/pywIgBjWwIwj1EKFwgX4cK/svLc5ggi0JkeST/Iqq2R qww/+DQhopAZt7LVCcELYf2HolZg3gQqAP9wgIEa5MUapEFQD01DhpBoIc33bDKY f+c2dOPIZ1Qgl4za39JXH1vAuZStKoccZnEbc6jnoAZlLuOAftVLElBYmaDCqIAS dr64p/bzlMXTBcpVxfP4x9orJgkCYIbrVxusBETR7mfUDMBQeZ63rsqsEsGi598Y 3IGmAC3vQYqr/Un1i+2kpHRugf29GXOe72nm0GM6X+ziAMr5QPyDEEhJZ6a4RGS0 SjJkpWeuF1sY/OMcPlMASV/gUS3RdkQ6 -----END CERTIFICATE-----Generated at Sat Apr 26 14:16:17 2025 by rpki-client