$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF1D9/E37F13822A6C11EC95EB263FC4F9AE02/Q-SoHdWUZzBR6Mfgsa29McSDtlM.mft File: Q-SoHdWUZzBR6Mfgsa29McSDtlM.mft (raw, json) Hash identifier: nINYs9iAXFHBxbvrk6csc+F7I18IaHwDuQ93FfEYXAY= Subject key identifier: 28:60:BB:61:12:AD:5B:A4:DA:21:5E:F9:18:CF:BF:D6:ED:13:D4:BD Authority key identifier: 43:E4:A8:1D:D5:94:67:30:51:E8:C7:E0:B1:AD:BD:31:C4:83:B6:53 Certificate issuer: /CN=A91DF1D9/serialNumber=43E4A81DD594673051E8C7E0B1ADBD31C483B653 Certificate serial: 04B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-SoHdWUZzBR6Mfgsa29McSDtlM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF1D9/E37F13822A6C11EC95EB263FC4F9AE02/Q-SoHdWUZzBR6Mfgsa29McSDtlM.mft Manifest number: 04AB Signing time: Thu 24 Apr 2025 23:40:59 +0000 Manifest this update: Thu 24 Apr 2025 23:40:58 +0000 Manifest next update: Thu 01 May 2025 23:40:58 +0000 Files and hashes: 1: Q-SoHdWUZzBR6Mfgsa29McSDtlM.crl (hash: Qs6BTBhPqRnn6qjvUa/BW5WK50b/SiHdX4FeMAN8TFA=) 2: 083000C22A6F11EC9AD38840C4F9AE02.roa (hash: vTlreixIyByEZB7kEISmHGr1RyT4p8lVkdEoUi0bgqY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF1D9/E37F13822A6C11EC95EB263FC4F9AE02/Q-SoHdWUZzBR6Mfgsa29McSDtlM.crl rsync://rpki.apnic.net/member_repository/A91DF1D9/E37F13822A6C11EC95EB263FC4F9AE02/Q-SoHdWUZzBR6Mfgsa29McSDtlM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-SoHdWUZzBR6Mfgsa29McSDtlM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:40:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1200 (0x4b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF1D9, serialNumber=43E4A81DD594673051E8C7E0B1ADBD31C483B653 Validity Not Before: Apr 24 23:40:58 2025 GMT Not After : May 1 23:40:58 2025 GMT Subject: CN=680acc0b-e129 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:3b:94:0c:2c:5f:a9:ee:cf:df:52:c0:8e:30: 00:f2:e3:47:80:87:d4:f4:ee:c7:f4:5d:68:3f:dc: 2f:4b:f4:d9:f5:58:6d:9e:42:07:21:61:7c:08:c3: 87:4f:19:01:e6:69:43:19:a3:38:cf:39:05:82:91: f1:80:e8:af:b4:6b:5f:a8:e6:d7:a3:e3:20:8f:99: 37:50:81:f4:84:73:5e:92:e9:55:e6:66:7f:6c:cf: 85:be:9b:74:b5:a3:0f:62:80:73:ad:5f:cf:4e:ed: 66:7b:d5:09:35:20:d8:69:05:70:4c:d5:58:32:67: a8:b3:6a:7c:34:23:81:71:3b:0a:ab:9e:dc:14:02: 55:c5:a7:1a:d8:6d:e6:6c:47:a9:d4:a6:27:47:17: f3:44:b0:39:b9:e7:a1:a1:cf:f5:9a:9d:20:28:47: 8b:9b:98:31:ec:97:b1:f0:ee:04:82:88:5b:f2:76: ad:2d:37:03:9e:5d:97:b0:4c:42:40:b4:37:d1:39: f1:47:36:ad:ea:eb:20:6e:b8:ef:90:cc:9d:84:41: 45:b5:7e:ab:69:84:e7:98:05:7a:d2:ac:15:73:f7: bb:bd:c4:6d:b3:d8:f2:31:d5:c1:6d:55:2d:33:47: d8:e5:e9:5b:7c:4f:c5:63:50:0f:a8:ca:5f:95:99: 1a:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:60:BB:61:12:AD:5B:A4:DA:21:5E:F9:18:CF:BF:D6:ED:13:D4:BD X509v3 Authority Key Identifier: keyid:43:E4:A8:1D:D5:94:67:30:51:E8:C7:E0:B1:AD:BD:31:C4:83:B6:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF1D9/E37F13822A6C11EC95EB263FC4F9AE02/Q-SoHdWUZzBR6Mfgsa29McSDtlM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-SoHdWUZzBR6Mfgsa29McSDtlM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF1D9/E37F13822A6C11EC95EB263FC4F9AE02/Q-SoHdWUZzBR6Mfgsa29McSDtlM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:3b:69:00:48:6a:aa:84:79:3e:38:6f:ea:37:31:61:eb:ed: 02:21:3e:70:46:e7:0c:92:a9:1b:23:66:0c:af:aa:b1:38:d4: 88:92:7c:fc:4a:f5:17:c1:90:0e:c8:6b:96:d6:15:25:98:57: af:31:d3:40:9d:2c:a7:d6:77:dc:8f:a2:1c:e0:14:fe:96:cb: bc:48:89:e5:30:5d:b5:fd:b9:76:04:22:dd:e9:27:47:e7:fe: 63:b8:cc:75:ad:ad:de:c5:5c:6b:d8:c7:e9:64:e5:42:34:ec: 8b:bb:27:99:5b:23:f3:21:5d:cc:ef:db:62:6c:bc:ee:c5:4a: 95:73:b5:ff:06:06:3e:05:5a:12:2a:66:02:4d:4b:f9:ca:6a: fd:8e:95:14:0f:6b:4e:9b:7d:79:aa:76:c9:e7:b1:eb:dc:fe: ff:9d:b6:6f:d0:a4:09:3e:3b:63:2d:43:01:00:9f:20:12:47: e9:13:50:9a:58:ef:9d:4d:94:f7:81:99:97:85:09:e0:6b:5f: 19:62:a4:96:2f:4d:ae:2a:46:61:a1:42:ee:f9:4f:8b:7e:88: 50:81:93:bd:f9:a4:b3:c4:01:47:16:f5:3b:7c:2d:23:e8:b5: 40:1f:9b:b5:72:8c:45:c2:e4:b0:2a:b8:8d:56:55:41:bc:b7: b0:86:8f:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBLAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REYxRDkxMTAvBgNVBAUTKDQzRTRBODFERDU5NDY3MzA1MUU4QzdFMEIxQURCRDMx QzQ4M0I2NTMwHhcNMjUwNDI0MjM0MDU4WhcNMjUwNTAxMjM0MDU4WjAYMRYwFAYD VQQDEw02ODBhY2MwYi1lMTI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3zuUDCxfqe7P31LAjjAA8uNHgIfU9O7H9F1oP9wvS/TZ9VhtnkIHIWF8CMOH TxkB5mlDGaM4zzkFgpHxgOivtGtfqObXo+Mgj5k3UIH0hHNekulV5mZ/bM+Fvpt0 taMPYoBzrV/PTu1me9UJNSDYaQVwTNVYMmeos2p8NCOBcTsKq57cFAJVxaca2G3m bEep1KYnRxfzRLA5ueehoc/1mp0gKEeLm5gx7Jex8O4Egohb8natLTcDnl2XsExC QLQ30TnxRzat6usgbrjvkMydhEFFtX6raYTnmAV60qwVc/e7vcRts9jyMdXBbVUt M0fY5elbfE/FY1APqMpflZkaIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFChgu2ES rVuk2iFe+RjPv9btE9S9MB8GA1UdIwQYMBaAFEPkqB3VlGcwUejH4LGtvTHEg7ZT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjFEOS9FMzdGMTM4MjJB NkMxMUVDOTVFQjI2M0ZDNEY5QUUwMi9RLVNvSGRXVVp6QlI2TWZnc2EyOU1jU0R0 bE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1EtU29IZFdVWnpCUjZNZmdzYTI5TWNTRHRsTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RjFEOS9FMzdGMTM4MjJBNkMxMUVDOTVFQjI2M0ZDNEY5QUUwMi9RLVNvSGRXVVp6 QlI2TWZnc2EyOU1jU0R0bE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQByO2kASGqqhHk+OG/qNzFh6+0CIT5wRucMkqkbI2YMr6qxONSIknz8 SvUXwZAOyGuW1hUlmFevMdNAnSyn1nfcj6Ic4BT+lsu8SInlMF21/bl2BCLd6SdH 5/5juMx1ra3exVxr2MfpZOVCNOyLuyeZWyPzIV3M79tibLzuxUqVc7X/BgY+BVoS KmYCTUv5ymr9jpUUD2tOm315qnbJ57Hr3P7/nbZv0KQJPjtjLUMBAJ8gEkfpE1Ca WO+dTZT3gZmXhQnga18ZYqSWL02uKkZhoULu+U+LfohQgZO9+aSzxAFHFvU7fC0j 6LVAH5u1coxFwuSwKriNVlVBvLewho/i -----END CERTIFICATE-----Generated at Sat Apr 26 04:26:18 2025 by rpki-client