$ rpki-client -vvf rpki.apnic.net/member_repository/A913BB9E/43E2C426C7F811EB80947515C4F9AE02/qKOD5jSR4Rute14s0kFBYh9NtBY.mft File: qKOD5jSR4Rute14s0kFBYh9NtBY.mft (raw, json) Hash identifier: sEQG9ekgTJPN447LP30WUmRTxe69RWQDA5eXNRSr6Wo= Subject key identifier: AF:90:3C:19:31:6C:25:09:88:1A:B6:41:CF:E7:5A:4D:AE:40:87:AE Authority key identifier: A8:A3:83:E6:34:91:E1:1B:AD:7B:5E:2C:D2:41:41:62:1F:4D:B4:16 Certificate issuer: /CN=A913BB9E/serialNumber=A8A383E63491E11BAD7B5E2CD24141621F4DB416 Certificate serial: 05B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qKOD5jSR4Rute14s0kFBYh9NtBY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913BB9E/43E2C426C7F811EB80947515C4F9AE02/qKOD5jSR4Rute14s0kFBYh9NtBY.mft Manifest number: 05AA Signing time: Fri 02 May 2025 23:17:29 +0000 Manifest this update: Fri 02 May 2025 23:17:28 +0000 Manifest next update: Fri 09 May 2025 23:17:28 +0000 Files and hashes: 1: qKOD5jSR4Rute14s0kFBYh9NtBY.crl (hash: hAdXzCfvbJ1/eB49FlsSeKuFJEcAAz3AZBXXNZ5443Q=) 2: FD62B046DF1611ED81C1BE7CC4F9AE02.roa (hash: g89YmoUlNGoW7vM9eZWI3Zges2WlbrLyhloBI6u/31Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913BB9E/43E2C426C7F811EB80947515C4F9AE02/qKOD5jSR4Rute14s0kFBYh9NtBY.crl rsync://rpki.apnic.net/member_repository/A913BB9E/43E2C426C7F811EB80947515C4F9AE02/qKOD5jSR4Rute14s0kFBYh9NtBY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qKOD5jSR4Rute14s0kFBYh9NtBY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 May 2025 23:17:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1458 (0x5b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913BB9E, serialNumber=A8A383E63491E11BAD7B5E2CD24141621F4DB416 Validity Not Before: May 2 23:17:28 2025 GMT Not After : May 9 23:17:28 2025 GMT Subject: CN=68155288-c3d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:7e:bb:02:71:02:af:97:3c:e4:1d:7b:71:2e: d5:5f:71:b3:4d:e7:fc:a3:0b:a9:85:f4:23:81:06: 37:41:ce:25:47:45:b8:a5:77:f2:dd:23:44:5e:25: 5d:72:73:1e:86:bc:0d:1c:2f:2b:44:ac:bd:0b:f8: 86:a6:32:92:f9:94:48:5b:ae:41:df:b7:b7:68:9a: 98:af:4e:8b:29:07:fc:22:39:cf:95:b2:a9:7f:11: e5:95:b6:14:5d:e5:9a:e3:60:88:84:70:b2:54:61: b9:09:19:c9:77:71:0b:c3:0c:9b:3d:08:5a:73:88: e1:3a:7c:23:55:d4:dd:c6:af:99:80:2a:ca:4b:f9: e7:0d:a1:6d:df:c5:b1:ae:f8:88:e8:a8:25:83:39: 38:22:28:68:a3:cf:4c:5b:c2:1f:e3:51:c4:54:41: f9:d9:f3:a8:a4:64:7e:ab:87:93:02:4f:cd:15:03: e8:6e:98:60:b5:ef:b6:e3:62:28:4e:37:af:d3:c1: ec:3c:35:20:56:1a:f6:c8:e5:a5:21:11:a0:7d:ad: 51:02:66:18:df:8c:1c:bf:0f:14:56:7b:17:38:6a: d6:43:54:95:e4:ba:1e:79:c5:a0:6a:01:fa:f1:fb: 31:8d:c1:ce:d9:b7:c9:48:83:04:3d:13:99:6f:93: f1:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:90:3C:19:31:6C:25:09:88:1A:B6:41:CF:E7:5A:4D:AE:40:87:AE X509v3 Authority Key Identifier: keyid:A8:A3:83:E6:34:91:E1:1B:AD:7B:5E:2C:D2:41:41:62:1F:4D:B4:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913BB9E/43E2C426C7F811EB80947515C4F9AE02/qKOD5jSR4Rute14s0kFBYh9NtBY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qKOD5jSR4Rute14s0kFBYh9NtBY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913BB9E/43E2C426C7F811EB80947515C4F9AE02/qKOD5jSR4Rute14s0kFBYh9NtBY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:f8:3b:34:c2:71:56:03:c3:f0:90:1a:02:ff:af:09:73:65: 24:ce:81:c5:30:6c:87:4d:cd:e6:ea:9e:3f:45:e7:d8:80:2c: bb:59:3c:f9:15:fd:67:e4:55:cd:4e:a0:cd:b0:ea:3c:a4:81: b7:49:69:eb:9e:13:94:49:fc:d6:85:5e:58:97:4f:c1:75:fa: b1:4b:b4:b7:e1:a3:cb:a8:50:1e:c0:1a:8d:13:7c:f8:0b:6f: 72:a3:34:38:7d:a6:da:e7:96:e9:93:4f:de:2f:2b:58:51:21: 04:cc:18:bb:84:ae:9f:9d:e5:39:cf:b0:85:ec:f6:60:0a:72: 36:08:36:e2:09:34:e9:2e:31:b7:2b:39:a5:b6:76:c8:33:85: 06:1e:c8:5c:5c:14:fa:9c:ba:56:74:ab:dc:b4:9f:e6:1a:cf: ff:bb:eb:bf:80:a8:ce:ee:1c:c5:db:0a:f9:f4:34:f8:4a:05: 12:f6:c6:8b:28:48:97:90:5e:83:88:85:cf:97:29:c5:5c:9f: de:fe:ab:52:20:19:46:2d:aa:20:b3:af:c0:1c:7e:6f:fd:25: 5d:ee:66:53:f4:02:8b:c5:09:20:89:3f:a7:e2:ba:8c:d3:66: d8:77:3f:46:21:4f:59:1e:49:13:5a:a2:c9:87:39:40:57:eb: a7:50:c4:d6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBbIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0JCOUUxMTAvBgNVBAUTKEE4QTM4M0U2MzQ5MUUxMUJBRDdCNUUyQ0QyNDE0MTYy MUY0REI0MTYwHhcNMjUwNTAyMjMxNzI4WhcNMjUwNTA5MjMxNzI4WjAYMRYwFAYD VQQDEw02ODE1NTI4OC1jM2Q2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp367AnECr5c85B17cS7VX3GzTef8owuphfQjgQY3Qc4lR0W4pXfy3SNEXiVd cnMehrwNHC8rRKy9C/iGpjKS+ZRIW65B37e3aJqYr06LKQf8IjnPlbKpfxHllbYU XeWa42CIhHCyVGG5CRnJd3ELwwybPQhac4jhOnwjVdTdxq+ZgCrKS/nnDaFt38Wx rviI6Kglgzk4Iihoo89MW8If41HEVEH52fOopGR+q4eTAk/NFQPobphgte+242Io Tjev08HsPDUgVhr2yOWlIRGgfa1RAmYY34wcvw8UVnsXOGrWQ1SV5LoeecWgagH6 8fsxjcHO2bfJSIMEPROZb5PxSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK+QPBkx bCUJiBq2Qc/nWk2uQIeuMB8GA1UdIwQYMBaAFKijg+Y0keEbrXteLNJBQWIfTbQW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQkI5RS80M0UyQzQyNkM3 RjgxMUVCODA5NDc1MTVDNEY5QUUwMi9xS09ENWpTUjRSdXRlMTRzMGtGQlloOU50 QlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FLT0Q1alNSNFJ1dGUxNHMwa0ZCWWg5TnRCWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QkI5RS80M0UyQzQyNkM3RjgxMUVCODA5NDc1MTVDNEY5QUUwMi9xS09ENWpTUjRS dXRlMTRzMGtGQlloOU50QlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBh+Ds0wnFWA8PwkBoC/68Jc2UkzoHFMGyHTc3m6p4/RefYgCy7WTz5 Ff1n5FXNTqDNsOo8pIG3SWnrnhOUSfzWhV5Yl0/BdfqxS7S34aPLqFAewBqNE3z4 C29yozQ4faba55bpk0/eLytYUSEEzBi7hK6fneU5z7CF7PZgCnI2CDbiCTTpLjG3 KzmltnbIM4UGHshcXBT6nLpWdKvctJ/mGs//u+u/gKjO7hzF2wr59DT4SgUS9saL KEiXkF6DiIXPlynFXJ/e/qtSIBlGLaogs6/AHH5v/SVd7mZT9AKLxQkgiT+n4rqM 02bYdz9GIU9ZHkkTWqLJhzlAV+unUMTW -----END CERTIFICATE-----Generated at Sat May 3 19:01:21 2025 by rpki-client