$ rpki-client -vvf rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/qeq8JGURbtEdbIza4gESN88fWd8.mft File: qeq8JGURbtEdbIza4gESN88fWd8.mft (raw, json) Hash identifier: IWMQL6CIsGohi+wfkBpbbHysPaTrUOEb7xxxrV9ysBQ= Subject key identifier: 7B:20:FA:14:9D:F7:1F:85:1F:C7:BF:D2:40:BC:91:51:6A:0F:75:50 Authority key identifier: A9:EA:BC:24:65:11:6E:D1:1D:6C:8C:DA:E2:01:12:37:CF:1F:59:DF Certificate issuer: /CN=A91871C2/serialNumber=A9EABC2465116ED11D6C8CDAE2011237CF1F59DF Certificate serial: 0744 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qeq8JGURbtEdbIza4gESN88fWd8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/qeq8JGURbtEdbIza4gESN88fWd8.mft Manifest number: 0711 Signing time: Thu 24 Apr 2025 21:54:34 +0000 Manifest this update: Thu 24 Apr 2025 21:54:34 +0000 Manifest next update: Thu 01 May 2025 21:54:33 +0000 Files and hashes: 1: qeq8JGURbtEdbIza4gESN88fWd8.crl (hash: bG7g3pzWIIft9D+nfCsfw1fLuNHvKRM9oHTpaZ0I+pc=) 2: 3BCBA04AE97211ECB2067F31C4F9AE02.roa (hash: S20AgwmMD32xuDu5IGHvW4IWHrtUSQ1t37c8fQjNokk=) 3: B43753D005AC11ECB86F694EC4F9AE02.roa (hash: 4k+rKheNnbTveN1MujuQeZF7WX147LGgGeCmhBGihc4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/qeq8JGURbtEdbIza4gESN88fWd8.crl rsync://rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/qeq8JGURbtEdbIza4gESN88fWd8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qeq8JGURbtEdbIza4gESN88fWd8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1860 (0x744) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91871C2, serialNumber=A9EABC2465116ED11D6C8CDAE2011237CF1F59DF Validity Not Before: Apr 24 21:54:34 2025 GMT Not After : May 1 21:54:33 2025 GMT Subject: CN=680ab31a-2277 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:97:50:c1:a1:9a:9a:47:62:3f:bd:6a:e2:50: 43:5a:37:9f:62:6e:a8:ae:44:7c:48:96:c2:fb:e2: 22:e3:72:78:c3:81:6d:9d:cf:6d:28:58:e4:15:40: 3d:78:51:20:ad:d4:9c:94:0e:13:59:7c:c3:85:6a: bb:d7:db:39:e5:1a:40:83:16:36:53:bf:7d:6b:7a: 10:27:a7:c4:70:ab:30:50:bd:b9:c0:b8:53:a7:f9: ae:e7:7f:46:e4:80:3f:a0:fb:a5:f0:ab:98:98:73: f8:e4:d9:a6:bb:ec:92:a0:5d:84:a6:45:82:c5:88: ed:ad:a0:02:b3:06:59:a6:07:95:5a:01:30:cb:9c: c5:a6:be:bc:b8:43:4c:20:8c:42:33:d1:0d:9a:7b: 4c:a8:2c:9c:09:78:f9:21:6b:58:7c:e1:e1:fe:1f: 02:ad:53:f2:9d:dd:d7:5f:fc:1e:53:fd:bd:64:38: a2:56:99:57:61:62:37:12:04:01:32:b8:bb:ec:32: 31:dd:37:be:ae:c6:90:c5:d5:d1:af:fb:4e:f1:61: 1b:5e:0a:d6:0f:63:7f:7d:61:09:b9:9a:cc:e6:f9: c7:0f:28:86:74:a2:31:84:4b:78:08:8a:d3:3d:67: 5f:fc:a5:71:7c:1e:e8:bd:aa:4a:f2:2a:ab:d5:4b: 52:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:20:FA:14:9D:F7:1F:85:1F:C7:BF:D2:40:BC:91:51:6A:0F:75:50 X509v3 Authority Key Identifier: keyid:A9:EA:BC:24:65:11:6E:D1:1D:6C:8C:DA:E2:01:12:37:CF:1F:59:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/qeq8JGURbtEdbIza4gESN88fWd8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qeq8JGURbtEdbIza4gESN88fWd8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/qeq8JGURbtEdbIza4gESN88fWd8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c6:91:0c:cb:71:10:92:c2:df:f8:8c:f3:69:6d:d8:aa:fb:f6: c4:63:0e:56:c4:5b:36:08:fe:bc:4a:f0:9d:61:39:0f:aa:8d: 87:85:2e:47:c0:b8:07:77:1e:c6:02:ef:95:73:77:7c:44:36: ae:d5:da:8a:41:5f:60:0f:38:08:1b:96:d8:07:13:c1:e2:1d: 13:42:f7:0c:bd:e6:15:8f:88:1a:d4:44:27:ec:c1:b4:ae:af: b8:04:08:d2:41:08:d2:a7:51:c0:8e:ee:7c:83:d8:0a:76:2d: aa:b1:29:93:8e:77:bd:c4:7a:5f:06:62:d7:f9:ac:65:a0:09: 8d:c7:6c:76:02:e5:21:8b:d3:4d:7c:b2:fa:44:54:92:d0:8f: e9:c7:43:fd:e5:fd:3f:0d:41:20:9b:0e:41:9b:6c:20:c3:12: d1:8e:a9:61:cf:42:a7:55:ef:ac:32:a4:30:bd:eb:16:48:bc: 7b:41:ed:80:9c:40:c0:e4:73:d2:17:ff:7b:80:73:92:ef:a6: 34:5a:17:42:58:54:34:2c:b2:40:bd:f4:d1:53:6a:06:ca:70: cf:c3:d4:d2:04:09:c6:12:2e:38:51:8c:6d:5f:93:7e:63:3a: 0b:dc:9a:78:68:5e:1e:26:5a:2e:7b:30:62:f4:a6:50:9a:33: ee:d9:c8:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB0QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODcxQzIxMTAvBgNVBAUTKEE5RUFCQzI0NjUxMTZFRDExRDZDOENEQUUyMDExMjM3 Q0YxRjU5REYwHhcNMjUwNDI0MjE1NDM0WhcNMjUwNTAxMjE1NDMzWjAYMRYwFAYD VQQDEw02ODBhYjMxYS0yMjc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwJdQwaGamkdiP71q4lBDWjefYm6orkR8SJbC++Ii43J4w4Ftnc9tKFjkFUA9 eFEgrdSclA4TWXzDhWq719s55RpAgxY2U799a3oQJ6fEcKswUL25wLhTp/mu539G 5IA/oPul8KuYmHP45Nmmu+ySoF2EpkWCxYjtraACswZZpgeVWgEwy5zFpr68uENM IIxCM9ENmntMqCycCXj5IWtYfOHh/h8CrVPynd3XX/weU/29ZDiiVplXYWI3EgQB Mri77DIx3Te+rsaQxdXRr/tO8WEbXgrWD2N/fWEJuZrM5vnHDyiGdKIxhEt4CIrT PWdf/KVxfB7ovapK8iqr1UtSCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHsg+hSd 9x+FH8e/0kC8kVFqD3VQMB8GA1UdIwQYMBaAFKnqvCRlEW7RHWyM2uIBEjfPH1nf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzFDMi9ERTYxNjY2ODU1 QTkxMUVCOTlBRkRBNURDNEY5QUUwMi9xZXE4SkdVUmJ0RWRiSXphNGdFU044OGZX ZDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FlcThKR1VSYnRFZGJJemE0Z0VTTjg4ZldkOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzFDMi9ERTYxNjY2ODU1QTkxMUVCOTlBRkRBNURDNEY5QUUwMi9xZXE4SkdVUmJ0 RWRiSXphNGdFU044OGZXZDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDGkQzLcRCSwt/4jPNpbdiq+/bEYw5WxFs2CP68SvCdYTkPqo2HhS5H wLgHdx7GAu+Vc3d8RDau1dqKQV9gDzgIG5bYBxPB4h0TQvcMveYVj4ga1EQn7MG0 rq+4BAjSQQjSp1HAju58g9gKdi2qsSmTjne9xHpfBmLX+axloAmNx2x2AuUhi9NN fLL6RFSS0I/px0P95f0/DUEgmw5Bm2wgwxLRjqlhz0KnVe+sMqQwvesWSLx7Qe2A nEDA5HPSF/97gHOS76Y0WhdCWFQ0LLJAvfTRU2oGynDPw9TSBAnGEi44UYxtX5N+ YzoL3Jp4aF4eJlouezBi9KZQmjPu2ch4 -----END CERTIFICATE-----Generated at Sat Apr 26 12:34:54 2025 by rpki-client