$ rpki-client -vvf rpki.apnic.net/member_repository/A91758DF/53191046DC2411EABD057F16C4F9AE02/QmtiDAQMg5RqS3WGQ27L0PxFRs8.mft File: QmtiDAQMg5RqS3WGQ27L0PxFRs8.mft (raw, json) Hash identifier: 9Y5bZfRVKeu8iiU0qMMo4Wa8WLt/d/3J6wcNxmFbrDE= Subject key identifier: 40:D4:D4:1D:F7:0D:A5:7D:04:51:A2:01:5E:44:E8:CD:71:32:FE:99 Authority key identifier: 42:6B:62:0C:04:0C:83:94:6A:4B:75:86:43:6E:CB:D0:FC:45:46:CF Certificate issuer: /CN=A91758DF/serialNumber=426B620C040C83946A4B7586436ECBD0FC4546CF Certificate serial: 082D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QmtiDAQMg5RqS3WGQ27L0PxFRs8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91758DF/53191046DC2411EABD057F16C4F9AE02/QmtiDAQMg5RqS3WGQ27L0PxFRs8.mft Manifest number: 0819 Signing time: Thu 24 Apr 2025 20:45:52 +0000 Manifest this update: Thu 24 Apr 2025 20:45:51 +0000 Manifest next update: Thu 01 May 2025 20:45:51 +0000 Files and hashes: 1: QmtiDAQMg5RqS3WGQ27L0PxFRs8.crl (hash: 7zyPQh5ng33LfHBuN6z1ONlqcXDzvzp8rYaq36CCPiA=) 2: 4F6913406BBF11EFA2832A74C4F9AE02.roa (hash: +e8I8Bn+e9DYeBtqHQQ6KWWC7iXcvB3bn0K/EgTSp6U=) 3: 4EA76BD26BBF11EFA2832A74C4F9AE02.roa (hash: SoizhIfWfVMFzbaPsRoPSJl0+AjhRi2T5wIECRdN0sY=) 4: F5E65C96FD6C11ECB2384E64C4F9AE02.roa (hash: jruCV8o7M+K9hoZkMPNs3l4bUYZ+XPug7o900UdOtso=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91758DF/53191046DC2411EABD057F16C4F9AE02/QmtiDAQMg5RqS3WGQ27L0PxFRs8.crl rsync://rpki.apnic.net/member_repository/A91758DF/53191046DC2411EABD057F16C4F9AE02/QmtiDAQMg5RqS3WGQ27L0PxFRs8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QmtiDAQMg5RqS3WGQ27L0PxFRs8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:45:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2093 (0x82d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91758DF, serialNumber=426B620C040C83946A4B7586436ECBD0FC4546CF Validity Not Before: Apr 24 20:45:51 2025 GMT Not After : May 1 20:45:51 2025 GMT Subject: CN=680aa2ff-80a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:29:e3:ba:8c:26:06:3c:ca:62:d4:d2:63:60: 71:25:fe:65:04:09:2b:4c:ef:a0:77:9c:f7:12:fc: 38:e8:a0:62:0e:1f:10:f7:ce:e9:4f:23:15:0a:b2: fc:d3:9c:b2:88:64:44:f1:a3:f4:af:eb:8a:96:af: 54:8e:ee:54:02:25:4a:1b:bf:be:d1:67:b4:c3:10: 62:39:51:ab:cc:1d:35:06:1e:3b:b0:fc:ad:02:d2: e2:17:b8:f9:fb:f6:a6:45:34:3d:9d:db:19:f3:4a: 4a:91:ca:81:6b:29:3e:18:6b:7a:63:c3:13:e4:92: 93:41:38:aa:dc:04:1d:ee:0a:00:5b:30:09:8d:0e: 99:22:ad:9a:c9:ef:3e:b1:a3:bf:20:c7:fa:3e:67: 64:63:ea:c2:90:21:a6:9a:4f:1e:b6:34:ff:24:4d: 52:72:d4:7d:48:37:80:34:1a:06:b2:97:56:c7:66: 5a:95:7f:ff:7a:0c:5a:17:25:bb:bf:df:98:3c:a1: 7f:bb:de:7d:4c:40:6e:24:48:12:ca:e5:11:d8:a2: f6:d3:be:ce:c9:1e:fe:ad:db:ef:26:c5:f7:4a:29: 96:af:d7:91:0b:95:85:09:42:ba:4b:29:fc:bb:cf: 01:ed:62:14:94:85:ac:28:f6:ef:ca:a2:74:50:b8: 0e:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:D4:D4:1D:F7:0D:A5:7D:04:51:A2:01:5E:44:E8:CD:71:32:FE:99 X509v3 Authority Key Identifier: keyid:42:6B:62:0C:04:0C:83:94:6A:4B:75:86:43:6E:CB:D0:FC:45:46:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91758DF/53191046DC2411EABD057F16C4F9AE02/QmtiDAQMg5RqS3WGQ27L0PxFRs8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QmtiDAQMg5RqS3WGQ27L0PxFRs8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91758DF/53191046DC2411EABD057F16C4F9AE02/QmtiDAQMg5RqS3WGQ27L0PxFRs8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d9:89:c1:3b:42:e3:6f:be:11:42:2a:d0:b7:bb:bf:e7:a2:55: a6:65:e3:2d:be:a3:da:9d:ec:1b:ca:cf:a8:e8:4e:f6:f5:fa: 30:a1:8f:58:6f:f0:33:8d:c2:ee:08:12:c2:5b:04:c4:2c:8e: 04:10:91:69:87:35:69:7e:ae:65:6c:01:cf:34:de:4b:44:12: b8:d2:30:d8:b7:9d:5d:c1:ef:9e:5e:36:e6:e2:30:db:6e:09: 54:7b:7a:61:9e:90:96:fa:0e:fe:69:ab:7b:b1:37:95:b3:15: 1d:36:fa:2a:0f:aa:37:67:18:74:88:ea:9a:63:99:f0:b5:9d: 90:0d:46:98:0b:2c:df:ad:8e:0d:e3:f2:a6:eb:6c:b6:83:69: 86:7c:e3:87:fe:70:ba:e7:69:18:2e:9b:b6:4a:7a:7d:8c:60: 56:17:66:9c:06:cb:18:2b:ae:e7:d4:0c:3e:dd:95:b7:99:a4: aa:da:76:b1:61:ae:09:1c:05:b7:0b:01:74:f4:79:4c:8e:38: 83:a8:ab:2d:bd:cf:fe:8f:e3:d3:9b:32:26:5b:87:ea:37:4e: 1c:f8:e8:14:2e:0f:a4:fb:4b:e4:75:ad:b9:ec:26:f3:5b:6b: bd:12:11:75:03:bf:33:ce:49:fd:76:e6:d4:2d:8d:a8:b4:5e: a9:1e:0d:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCC0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU4REYxMTAvBgNVBAUTKDQyNkI2MjBDMDQwQzgzOTQ2QTRCNzU4NjQzNkVDQkQw RkM0NTQ2Q0YwHhcNMjUwNDI0MjA0NTUxWhcNMjUwNTAxMjA0NTUxWjAYMRYwFAYD VQQDEw02ODBhYTJmZi04MGE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwinjuowmBjzKYtTSY2BxJf5lBAkrTO+gd5z3Evw46KBiDh8Q987pTyMVCrL8 05yyiGRE8aP0r+uKlq9Uju5UAiVKG7++0We0wxBiOVGrzB01Bh47sPytAtLiF7j5 +/amRTQ9ndsZ80pKkcqBayk+GGt6Y8MT5JKTQTiq3AQd7goAWzAJjQ6ZIq2aye8+ saO/IMf6PmdkY+rCkCGmmk8etjT/JE1SctR9SDeANBoGspdWx2ZalX//egxaFyW7 v9+YPKF/u959TEBuJEgSyuUR2KL2077OyR7+rdvvJsX3SimWr9eRC5WFCUK6Syn8 u88B7WIUlIWsKPbvyqJ0ULgOUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEDU1B33 DaV9BFGiAV5E6M1xMv6ZMB8GA1UdIwQYMBaAFEJrYgwEDIOUakt1hkNuy9D8RUbP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NThERi81MzE5MTA0NkRD MjQxMUVBQkQwNTdGMTZDNEY5QUUwMi9RbXRpREFRTWc1UnFTM1dHUTI3TDBQeEZS czguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FtdGlEQVFNZzVScVMzV0dRMjdMMFB4RlJzOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NThERi81MzE5MTA0NkRDMjQxMUVBQkQwNTdGMTZDNEY5QUUwMi9RbXRpREFRTWc1 UnFTM1dHUTI3TDBQeEZSczgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDZicE7QuNvvhFCKtC3u7/nolWmZeMtvqPanewbys+o6E729fowoY9Y b/AzjcLuCBLCWwTELI4EEJFphzVpfq5lbAHPNN5LRBK40jDYt51dwe+eXjbm4jDb bglUe3phnpCW+g7+aat7sTeVsxUdNvoqD6o3Zxh0iOqaY5nwtZ2QDUaYCyzfrY4N 4/Km62y2g2mGfOOH/nC652kYLpu2Snp9jGBWF2acBssYK67n1Aw+3ZW3maSq2nax Ya4JHAW3CwF09HlMjjiDqKstvc/+j+PTmzImW4fqN04c+OgULg+k+0vkda257Cbz W2u9EhF1A78zzkn9dubULY2otF6pHg3o -----END CERTIFICATE-----Generated at Sat Apr 26 17:18:33 2025 by rpki-client