$ rpki-client -vvf rpki.apnic.net/member_repository/A919F55C/9F19F96E370F11ECBEB72A42C4F9AE02/rQbbzFM0xtdRNy-xeVT0qq3cnD8.mft File: rQbbzFM0xtdRNy-xeVT0qq3cnD8.mft (raw, json) Hash identifier: ZqrsnXUrl1PkTQTMFIzRSIeqvsR+4iN1E6aykczMwmM= Subject key identifier: 29:E0:49:9F:E2:76:53:42:A5:BD:95:DE:EE:91:2E:56:E4:06:55:36 Authority key identifier: AD:06:DB:CC:53:34:C6:D7:51:37:2F:B1:79:54:F4:AA:AD:DC:9C:3F Certificate issuer: /CN=A919F55C/serialNumber=AD06DBCC5334C6D751372FB17954F4AAADDC9C3F Certificate serial: 0491 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQbbzFM0xtdRNy-xeVT0qq3cnD8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919F55C/9F19F96E370F11ECBEB72A42C4F9AE02/rQbbzFM0xtdRNy-xeVT0qq3cnD8.mft Manifest number: 048C Signing time: Thu 24 Apr 2025 23:48:11 +0000 Manifest this update: Thu 24 Apr 2025 23:48:10 +0000 Manifest next update: Thu 01 May 2025 23:48:10 +0000 Files and hashes: 1: rQbbzFM0xtdRNy-xeVT0qq3cnD8.crl (hash: 2vCTXB3VQYS5Nwfp1RNhJftVFEznggtZXQ5UqibRZIU=) 2: 0EC6A7E0372D11ECA616091EC4F9AE02.roa (hash: xRvy8+EZ4EWMUGqE/C33LsDCdW9x6WHrip13g/dJz5k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919F55C/9F19F96E370F11ECBEB72A42C4F9AE02/rQbbzFM0xtdRNy-xeVT0qq3cnD8.crl rsync://rpki.apnic.net/member_repository/A919F55C/9F19F96E370F11ECBEB72A42C4F9AE02/rQbbzFM0xtdRNy-xeVT0qq3cnD8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQbbzFM0xtdRNy-xeVT0qq3cnD8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:48:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1169 (0x491) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919F55C, serialNumber=AD06DBCC5334C6D751372FB17954F4AAADDC9C3F Validity Not Before: Apr 24 23:48:10 2025 GMT Not After : May 1 23:48:10 2025 GMT Subject: CN=680acdbb-15f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:1f:50:99:b6:15:e0:47:7d:25:51:7f:2d:43: 80:8c:dc:bc:32:89:e0:15:70:4b:7f:dd:a1:47:d1: 69:e7:36:80:ab:90:9f:61:44:50:5b:b2:02:34:46: ce:f0:69:ba:96:cf:fa:76:a7:41:aa:32:4d:01:40: 06:3d:f3:60:25:1d:6a:c8:1d:c6:7b:56:b6:33:ea: d0:d1:a9:83:73:64:8e:ce:33:3a:dd:aa:5d:d5:6e: 2b:55:ce:be:23:0d:88:40:f3:2d:7b:a3:3e:88:eb: f1:bc:c6:30:a1:49:a7:aa:ab:91:3e:16:42:a5:cf: d9:c5:b6:0b:c6:86:bf:91:4c:b6:71:74:dc:c2:b3: 7d:33:be:66:df:29:0b:4c:8f:2f:78:32:9d:45:02: 46:62:0b:d1:56:f2:c7:89:44:d1:d4:44:5a:04:27: fe:be:77:f4:27:ae:bf:a8:79:13:4a:e1:0e:a7:5e: 65:34:91:2d:05:c6:c0:2d:13:79:77:73:a4:ad:51: d5:f7:2b:61:6a:c9:6c:f5:96:76:50:a9:90:c3:5d: 39:38:9e:30:88:f5:48:bd:e8:85:d6:a0:08:0a:18: 87:64:44:60:67:cf:83:0f:42:5d:45:85:72:a4:19: 3e:0e:31:07:ff:3c:26:09:8c:54:03:72:e2:fe:30: c8:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:E0:49:9F:E2:76:53:42:A5:BD:95:DE:EE:91:2E:56:E4:06:55:36 X509v3 Authority Key Identifier: keyid:AD:06:DB:CC:53:34:C6:D7:51:37:2F:B1:79:54:F4:AA:AD:DC:9C:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919F55C/9F19F96E370F11ECBEB72A42C4F9AE02/rQbbzFM0xtdRNy-xeVT0qq3cnD8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQbbzFM0xtdRNy-xeVT0qq3cnD8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F55C/9F19F96E370F11ECBEB72A42C4F9AE02/rQbbzFM0xtdRNy-xeVT0qq3cnD8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cf:3d:13:25:dc:17:4e:ca:d4:c1:f2:dc:43:11:97:ce:2b:3a: 8e:a7:b2:ce:6a:99:96:ad:61:84:be:32:5e:51:d5:e9:b0:b0: d4:e7:8f:28:8a:71:9e:a4:0e:fa:f1:80:37:1a:6d:cc:3a:44: 1a:df:19:5e:5d:be:55:ea:61:1b:9d:d2:fb:21:43:8b:ec:53: a8:8c:26:6f:da:65:43:e0:f0:42:9e:81:7c:6b:70:86:06:18: 59:3b:19:bd:76:19:c7:b6:15:24:39:1d:46:27:23:42:59:4b: 44:0e:fa:a9:14:e8:3b:41:31:db:47:36:0c:14:9b:7a:0a:1c: d4:56:a1:03:e8:92:38:68:10:0b:14:37:c3:ec:d1:b4:e9:31: a9:b3:76:bb:44:b4:c6:11:6a:11:42:41:c4:2f:aa:87:c4:8f: b3:64:85:59:ec:b7:c7:ec:3b:60:f5:fc:fb:e7:b5:65:86:02: 1c:77:34:3c:b5:1b:98:41:95:2f:80:20:39:f5:93:b6:95:e6: c5:fa:03:f7:a2:85:88:d4:c0:41:79:a7:c5:30:9a:79:2f:eb: 88:b8:f3:43:5a:8d:bf:0f:44:b8:90:7e:a5:cb:56:71:40:cf: c9:64:cb:99:88:bb:bd:ad:44:3d:13:8a:84:e3:05:74:d8:5b: 8f:1c:92:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBJEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUY1NUMxMTAvBgNVBAUTKEFEMDZEQkNDNTMzNEM2RDc1MTM3MkZCMTc5NTRGNEFB QUREQzlDM0YwHhcNMjUwNDI0MjM0ODEwWhcNMjUwNTAxMjM0ODEwWjAYMRYwFAYD VQQDEw02ODBhY2RiYi0xNWY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoh9QmbYV4Ed9JVF/LUOAjNy8MongFXBLf92hR9Fp5zaAq5CfYURQW7ICNEbO 8Gm6ls/6dqdBqjJNAUAGPfNgJR1qyB3Ge1a2M+rQ0amDc2SOzjM63apd1W4rVc6+ Iw2IQPMte6M+iOvxvMYwoUmnqquRPhZCpc/ZxbYLxoa/kUy2cXTcwrN9M75m3ykL TI8veDKdRQJGYgvRVvLHiUTR1ERaBCf+vnf0J66/qHkTSuEOp15lNJEtBcbALRN5 d3OkrVHV9ythasls9ZZ2UKmQw105OJ4wiPVIveiF1qAIChiHZERgZ8+DD0JdRYVy pBk+DjEH/zwmCYxUA3Li/jDI6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCngSZ/i dlNCpb2V3u6RLlbkBlU2MB8GA1UdIwQYMBaAFK0G28xTNMbXUTcvsXlU9Kqt3Jw/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjU1Qy85RjE5Rjk2RTM3 MEYxMUVDQkVCNzJBNDJDNEY5QUUwMi9yUWJiekZNMHh0ZFJOeS14ZVZUMHFxM2Nu RDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JRYmJ6Rk0weHRkUk55LXhlVlQwcXEzY25EOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RjU1Qy85RjE5Rjk2RTM3MEYxMUVDQkVCNzJBNDJDNEY5QUUwMi9yUWJiekZNMHh0 ZFJOeS14ZVZUMHFxM2NuRDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDPPRMl3BdOytTB8txDEZfOKzqOp7LOapmWrWGEvjJeUdXpsLDU548o inGepA768YA3Gm3MOkQa3xleXb5V6mEbndL7IUOL7FOojCZv2mVD4PBCnoF8a3CG BhhZOxm9dhnHthUkOR1GJyNCWUtEDvqpFOg7QTHbRzYMFJt6ChzUVqED6JI4aBAL FDfD7NG06TGps3a7RLTGEWoRQkHEL6qHxI+zZIVZ7LfH7Dtg9fz757VlhgIcdzQ8 tRuYQZUvgCA59ZO2lebF+gP3ooWI1MBBeafFMJp5L+uIuPNDWo2/D0S4kH6ly1Zx QM/JZMuZiLu9rUQ9E4qE4wV02FuPHJJR -----END CERTIFICATE-----Generated at Sat Apr 26 04:19:58 2025 by rpki-client