$ rpki-client -vvf rpki.apnic.net/member_repository/A91894BE/0B4D029C13C511ED9F5AF26AC4F9AE02/q-SlyJP0_Kxy2WRGir563z5vyP4.mft File: q-SlyJP0_Kxy2WRGir563z5vyP4.mft (raw, json) Hash identifier: bLS9o6ZKvoM4CULSoMTTe67zbPPyTl4n+5GIboBz7sk= Subject key identifier: 35:C0:97:AA:DB:C7:F6:EC:3A:00:85:3B:38:93:D7:3E:9C:8D:4A:9D Authority key identifier: AB:E4:A5:C8:93:F4:FC:AC:72:D9:64:46:8A:BE:7A:DF:3E:6F:C8:FE Certificate issuer: /CN=A91894BE/serialNumber=ABE4A5C893F4FCAC72D964468ABE7ADF3E6FC8FE Certificate serial: 025A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q-SlyJP0_Kxy2WRGir563z5vyP4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91894BE/0B4D029C13C511ED9F5AF26AC4F9AE02/q-SlyJP0_Kxy2WRGir563z5vyP4.mft Manifest number: 0256 Signing time: Fri 25 Apr 2025 01:34:48 +0000 Manifest this update: Fri 25 Apr 2025 01:34:47 +0000 Manifest next update: Fri 02 May 2025 01:34:47 +0000 Files and hashes: 1: q-SlyJP0_Kxy2WRGir563z5vyP4.crl (hash: UPgVj4SjII+1qmu/C0LG9taX0hNM5LYKkjtpglx5970=) 2: 942BF3C013CA11ED983E350EC4F9AE02.roa (hash: 7RgKIXJ+YIFOFiYNofYamgA+0eKHAOepqg8p2i4RVOc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91894BE/0B4D029C13C511ED9F5AF26AC4F9AE02/q-SlyJP0_Kxy2WRGir563z5vyP4.crl rsync://rpki.apnic.net/member_repository/A91894BE/0B4D029C13C511ED9F5AF26AC4F9AE02/q-SlyJP0_Kxy2WRGir563z5vyP4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q-SlyJP0_Kxy2WRGir563z5vyP4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:34:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 602 (0x25a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91894BE, serialNumber=ABE4A5C893F4FCAC72D964468ABE7ADF3E6FC8FE Validity Not Before: Apr 25 01:34:47 2025 GMT Not After : May 2 01:34:47 2025 GMT Subject: CN=680ae6b7-e188 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:43:31:1b:c3:e0:74:a5:32:c6:95:43:5f:45: 2c:2f:92:cd:e5:83:7c:57:2f:f4:2f:ca:ad:4c:b4: 7c:fe:b0:bb:6c:3c:38:fe:ac:96:81:f0:68:39:63: a2:76:1a:8c:c8:8d:7c:8a:74:b5:07:0d:9a:d5:ab: 05:17:cf:4c:8a:4a:35:10:30:c0:56:c2:5b:54:e8: a8:3c:ed:f1:c6:aa:2d:4e:15:e5:37:17:8c:d0:dd: 1e:0f:f0:28:47:f5:b1:16:be:7c:39:6c:39:ab:f9: da:11:db:4a:a2:33:83:94:61:48:52:f9:67:9f:25: d4:40:4a:8d:77:96:1a:e8:33:19:b9:3f:0a:69:8f: 16:e1:0c:ff:f3:d7:0d:bc:89:98:10:c0:e4:fc:97: da:a1:2a:60:10:05:1b:8a:1a:bf:d2:61:7c:49:34: d9:de:3d:a9:af:8a:7d:45:25:30:23:e0:5b:ad:d3: 89:6c:7e:73:6a:e8:84:93:32:e5:30:22:1d:e2:c2: 0b:5b:4a:57:ca:60:9c:bf:9b:de:72:fe:b4:8b:fc: 36:ab:84:42:19:43:14:ed:3b:9b:ae:19:33:e0:21: 40:32:60:7c:69:7d:2c:d4:97:68:dd:cc:bb:7e:6b: 8d:c9:94:36:e5:40:47:c3:6f:06:e7:55:85:f0:c4: 03:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:C0:97:AA:DB:C7:F6:EC:3A:00:85:3B:38:93:D7:3E:9C:8D:4A:9D X509v3 Authority Key Identifier: keyid:AB:E4:A5:C8:93:F4:FC:AC:72:D9:64:46:8A:BE:7A:DF:3E:6F:C8:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91894BE/0B4D029C13C511ED9F5AF26AC4F9AE02/q-SlyJP0_Kxy2WRGir563z5vyP4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q-SlyJP0_Kxy2WRGir563z5vyP4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91894BE/0B4D029C13C511ED9F5AF26AC4F9AE02/q-SlyJP0_Kxy2WRGir563z5vyP4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:68:21:43:66:5c:70:58:e1:22:69:32:7f:35:95:d3:7a:02: 96:22:4c:a6:25:b2:3b:23:70:c5:c8:56:56:73:e5:02:19:58: fb:a5:bf:b8:3e:e5:09:7c:75:fe:57:cc:5a:9d:83:55:f7:07: da:cf:a3:9f:0a:1e:de:88:13:97:a3:ff:33:fc:46:71:5b:0c: 10:72:c7:8c:c2:18:b3:2f:9b:fb:fc:1b:9b:15:5f:a7:f6:32: f9:cf:23:03:20:e2:16:ac:6c:92:95:1b:2d:85:ca:a9:ef:65: 0f:c4:89:5f:0a:92:11:fb:d9:82:b0:dc:75:91:19:72:32:7c: 29:96:57:8d:ac:cb:0a:50:82:27:10:84:3d:b3:74:ea:17:25: 84:de:df:85:9b:9d:f9:e6:3d:f7:ac:a2:50:54:d6:d7:1e:dc: 68:16:f4:19:28:14:c0:b3:64:22:00:1b:9e:ed:c4:61:20:91: ac:58:0c:b8:32:b9:ca:ea:49:f9:d0:d9:2d:d2:d3:49:aa:f0: b5:4b:bc:41:0e:db:46:92:0a:87:e4:22:56:bb:07:7a:48:b0: 62:b7:35:fe:a6:8a:46:e2:cc:ef:74:ef:32:8e:c1:b6:06:66: 94:a0:61:48:ff:05:ec:64:d2:41:6b:8b:d0:a9:65:c0:58:cc: 53:95:bc:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAlowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODk0QkUxMTAvBgNVBAUTKEFCRTRBNUM4OTNGNEZDQUM3MkQ5NjQ0NjhBQkU3QURG M0U2RkM4RkUwHhcNMjUwNDI1MDEzNDQ3WhcNMjUwNTAyMDEzNDQ3WjAYMRYwFAYD VQQDEw02ODBhZTZiNy1lMTg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0EMxG8PgdKUyxpVDX0UsL5LN5YN8Vy/0L8qtTLR8/rC7bDw4/qyWgfBoOWOi dhqMyI18inS1Bw2a1asFF89Miko1EDDAVsJbVOioPO3xxqotThXlNxeM0N0eD/Ao R/WxFr58OWw5q/naEdtKojODlGFIUvlnnyXUQEqNd5Ya6DMZuT8KaY8W4Qz/89cN vImYEMDk/JfaoSpgEAUbihq/0mF8STTZ3j2pr4p9RSUwI+BbrdOJbH5zauiEkzLl MCId4sILW0pXymCcv5vecv60i/w2q4RCGUMU7Tubrhkz4CFAMmB8aX0s1Jdo3cy7 fmuNyZQ25UBHw28G51WF8MQD4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDXAl6rb x/bsOgCFOziT1z6cjUqdMB8GA1UdIwQYMBaAFKvkpciT9PysctlkRoq+et8+b8j+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTRCRS8wQjREMDI5QzEz QzUxMUVEOUY1QUYyNkFDNEY5QUUwMi9xLVNseUpQMF9LeHkyV1JHaXI1NjN6NXZ5 UDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3EtU2x5SlAwX0t4eTJXUkdpcjU2M3o1dnlQNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OTRCRS8wQjREMDI5QzEzQzUxMUVEOUY1QUYyNkFDNEY5QUUwMi9xLVNseUpQMF9L eHkyV1JHaXI1NjN6NXZ5UDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2aCFDZlxwWOEiaTJ/NZXTegKWIkymJbI7I3DFyFZWc+UCGVj7pb+4 PuUJfHX+V8xanYNV9wfaz6OfCh7eiBOXo/8z/EZxWwwQcseMwhizL5v7/BubFV+n 9jL5zyMDIOIWrGySlRsthcqp72UPxIlfCpIR+9mCsNx1kRlyMnwplleNrMsKUIIn EIQ9s3TqFyWE3t+Fm5355j33rKJQVNbXHtxoFvQZKBTAs2QiABue7cRhIJGsWAy4 MrnK6kn50Nkt0tNJqvC1S7xBDttGkgqH5CJWuwd6SLBitzX+popG4szvdO8yjsG2 BmaUoGFI/wXsZNJBa4vQqWXAWMxTlbwA -----END CERTIFICATE-----Generated at Sat Apr 26 12:39:33 2025 by rpki-client