$ rpki-client -vvf rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/sQG1q1GcKuZKv61qVvhD3AmQqFM.mft File: sQG1q1GcKuZKv61qVvhD3AmQqFM.mft (raw, json) Hash identifier: kw6kUjZSXoF8CNbX4tRPI/XT0EJ2hYQhY+/vPufE3fI= Subject key identifier: FF:14:52:F4:13:F5:0B:1B:6D:E2:70:1E:97:BE:AB:AC:EC:61:EE:43 Authority key identifier: B1:01:B5:AB:51:9C:2A:E6:4A:BF:AD:6A:56:F8:43:DC:09:90:A8:53 Certificate issuer: /CN=A919B06C/serialNumber=B101B5AB519C2AE64ABFAD6A56F843DC0990A853 Certificate serial: 1169 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sQG1q1GcKuZKv61qVvhD3AmQqFM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/sQG1q1GcKuZKv61qVvhD3AmQqFM.mft Manifest number: 1F5B Signing time: Thu 24 Apr 2025 17:15:17 +0000 Manifest this update: Thu 24 Apr 2025 17:15:17 +0000 Manifest next update: Thu 01 May 2025 17:15:17 +0000 Files and hashes: 1: sQG1q1GcKuZKv61qVvhD3AmQqFM.crl (hash: xiSBc0GlrX1aNSAmBxUQKSDrQ4WlHL0a+YcCX4W4PRo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/sQG1q1GcKuZKv61qVvhD3AmQqFM.crl rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/sQG1q1GcKuZKv61qVvhD3AmQqFM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sQG1q1GcKuZKv61qVvhD3AmQqFM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:15:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4457 (0x1169) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919B06C, serialNumber=B101B5AB519C2AE64ABFAD6A56F843DC0990A853 Validity Not Before: Apr 24 17:15:17 2025 GMT Not After : May 1 17:15:17 2025 GMT Subject: CN=680a71a5-419b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ab:61:ee:ac:76:a8:64:f3:45:83:e0:10:90: cc:f2:d7:5b:0c:20:d8:7f:96:d0:48:65:b1:74:10: 52:22:e4:ab:e6:9b:68:35:80:27:b5:04:e4:a2:15: 84:12:16:6b:9b:0b:89:86:61:e5:85:cc:a7:5c:84: 89:d6:62:02:47:e9:39:68:18:f2:f2:94:7c:ff:c0: 29:85:22:c7:58:2a:07:35:4f:2c:96:24:6b:e9:5b: 6e:3f:be:aa:a1:e8:2e:54:e2:18:55:59:3a:21:ca: 41:13:98:1c:f0:9a:03:f4:69:47:9c:b9:a6:f7:aa: 41:ee:47:ce:bf:ff:30:49:b1:de:ec:93:98:77:d8: dd:e3:c5:bc:fb:6c:21:1d:71:64:22:df:a3:0d:7d: fa:c8:13:0d:46:5c:36:20:53:48:05:c0:e3:13:01: 09:49:09:bc:46:aa:cd:b4:98:c7:d2:10:54:a1:b2: b2:4a:5d:24:51:06:4d:cf:8b:a9:8a:28:81:9a:b4: bc:c5:50:51:35:e3:af:47:96:5d:11:6f:71:a3:c5: 93:18:97:f3:98:66:e6:97:e7:df:fa:eb:7a:d2:af: 88:70:9b:97:6e:7f:ec:b8:11:d4:d4:19:a3:ce:0e: 97:56:82:6b:f8:af:97:f0:62:12:ce:c5:42:98:ca: cb:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:14:52:F4:13:F5:0B:1B:6D:E2:70:1E:97:BE:AB:AC:EC:61:EE:43 X509v3 Authority Key Identifier: keyid:B1:01:B5:AB:51:9C:2A:E6:4A:BF:AD:6A:56:F8:43:DC:09:90:A8:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/sQG1q1GcKuZKv61qVvhD3AmQqFM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sQG1q1GcKuZKv61qVvhD3AmQqFM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/sQG1q1GcKuZKv61qVvhD3AmQqFM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:10:0d:55:2b:db:ee:c3:81:e7:95:b8:21:97:69:27:ad:05: 83:db:d9:b1:7c:32:19:47:46:01:10:76:2c:90:20:8c:ae:54: 48:32:90:bc:18:29:8a:35:30:a2:51:9c:95:b7:77:d0:19:14: 6f:43:66:bd:ef:3e:43:52:c7:f6:f0:3c:7a:95:9b:83:a8:04: bd:5c:df:6d:f4:5f:ba:60:fd:bd:75:02:29:97:be:0b:6c:ab: ac:b8:5e:e4:1a:8c:b4:7e:06:23:36:40:e3:b5:f6:e0:9f:18: b8:90:b3:5d:90:b1:f2:7b:93:13:25:d6:92:ab:a2:f9:09:53: 64:eb:cd:64:09:2a:d1:37:fa:f4:5e:18:56:a4:09:93:f7:18: 78:d6:3f:d7:1c:67:a7:52:ea:ca:00:95:86:29:83:c9:65:78: 82:40:c8:28:97:79:96:b0:f8:5d:6d:ab:c4:f3:ef:ac:09:7d: a7:94:98:e3:f3:6c:c6:5a:4d:7e:ae:b3:d8:8b:a9:a8:ee:7c: 12:b2:65:6c:c9:c7:b2:7b:ec:48:86:ad:d8:d5:95:9e:5f:a5: 53:83:42:fc:f6:cd:a7:bd:b1:00:da:e3:cf:ee:87:66:94:8f: 3c:70:ac:da:6b:1b:cc:d9:f1:f9:37:a9:f1:aa:c6:8f:7e:8a: 36:3e:97:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEWkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUIwNkMxMTAvBgNVBAUTKEIxMDFCNUFCNTE5QzJBRTY0QUJGQUQ2QTU2Rjg0M0RD MDk5MEE4NTMwHhcNMjUwNDI0MTcxNTE3WhcNMjUwNTAxMTcxNTE3WjAYMRYwFAYD VQQDEw02ODBhNzFhNS00MTliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzKth7qx2qGTzRYPgEJDM8tdbDCDYf5bQSGWxdBBSIuSr5ptoNYAntQTkohWE EhZrmwuJhmHlhcynXISJ1mICR+k5aBjy8pR8/8AphSLHWCoHNU8sliRr6VtuP76q oeguVOIYVVk6IcpBE5gc8JoD9GlHnLmm96pB7kfOv/8wSbHe7JOYd9jd48W8+2wh HXFkIt+jDX36yBMNRlw2IFNIBcDjEwEJSQm8RqrNtJjH0hBUobKySl0kUQZNz4up iiiBmrS8xVBRNeOvR5ZdEW9xo8WTGJfzmGbml+ff+ut60q+IcJuXbn/suBHU1Bmj zg6XVoJr+K+X8GISzsVCmMrL/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP8UUvQT 9QsbbeJwHpe+q6zsYe5DMB8GA1UdIwQYMBaAFLEBtatRnCrmSr+talb4Q9wJkKhT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QjA2Qy9FOUQ2MkU3NEZF QUUxMUU4OTEwRDRENjZDNEY5QUUwMi9zUUcxcTFHY0t1Wkt2NjFxVnZoRDNBbVFx Rk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NRRzFxMUdjS3VaS3Y2MXFWdmhEM0FtUXFGTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QjA2Qy9FOUQ2MkU3NEZFQUUxMUU4OTEwRDRENjZDNEY5QUUwMi9zUUcxcTFHY0t1 Wkt2NjFxVnZoRDNBbVFxRk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVEA1VK9vuw4Hnlbghl2knrQWD29mxfDIZR0YBEHYskCCMrlRIMpC8 GCmKNTCiUZyVt3fQGRRvQ2a97z5DUsf28Dx6lZuDqAS9XN9t9F+6YP29dQIpl74L bKusuF7kGoy0fgYjNkDjtfbgnxi4kLNdkLHye5MTJdaSq6L5CVNk681kCSrRN/r0 XhhWpAmT9xh41j/XHGenUurKAJWGKYPJZXiCQMgol3mWsPhdbavE8++sCX2nlJjj 82zGWk1+rrPYi6mo7nwSsmVsyceye+xIhq3Y1ZWeX6VTg0L89s2nvbEA2uPP7odm lI88cKzaaxvM2fH5N6nxqsaPfoo2PpeF -----END CERTIFICATE-----Generated at Sat Apr 26 14:05:49 2025 by rpki-client