$ rpki-client -vvf rpki.apnic.net/member_repository/A91953AF/043160B0CA0411EEBCD01770C4F9AE02/qCS2Y_P1o0-C7iJyqK795Dt5vZM.mft File: qCS2Y_P1o0-C7iJyqK795Dt5vZM.mft (raw, json) Hash identifier: DHpislcdQMkyifEdU5krFVWvMmW5BrWN9Ec9Ht6QeTY= Subject key identifier: 5C:B0:91:C5:5A:11:6B:47:5C:CD:C8:8B:46:56:96:8A:D2:44:B4:78 Authority key identifier: A8:24:B6:63:F3:F5:A3:4F:82:EE:22:72:A8:AE:FD:E4:3B:79:BD:93 Certificate issuer: /CN=A91953AF/serialNumber=A824B663F3F5A34F82EE2272A8AEFDE43B79BD93 Certificate serial: E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qCS2Y_P1o0-C7iJyqK795Dt5vZM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91953AF/043160B0CA0411EEBCD01770C4F9AE02/qCS2Y_P1o0-C7iJyqK795Dt5vZM.mft Manifest number: E1 Signing time: Fri 25 Apr 2025 04:32:09 +0000 Manifest this update: Fri 25 Apr 2025 04:32:08 +0000 Manifest next update: Fri 02 May 2025 04:32:08 +0000 Files and hashes: 1: qCS2Y_P1o0-C7iJyqK795Dt5vZM.crl (hash: Qt5/vShgBGElibtoJUcj7W57k3VY9/iK+x2jXpLu7oA=) 2: 593AFF1ACA0611EEBA01A22CC4F9AE02.roa (hash: 5Igi5uwLEP9LNSo1jtb9EAzRP4JXP+61tZCh/iJ8p+M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91953AF/043160B0CA0411EEBCD01770C4F9AE02/qCS2Y_P1o0-C7iJyqK795Dt5vZM.crl rsync://rpki.apnic.net/member_repository/A91953AF/043160B0CA0411EEBCD01770C4F9AE02/qCS2Y_P1o0-C7iJyqK795Dt5vZM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qCS2Y_P1o0-C7iJyqK795Dt5vZM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:32:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 227 (0xe3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91953AF, serialNumber=A824B663F3F5A34F82EE2272A8AEFDE43B79BD93 Validity Not Before: Apr 25 04:32:08 2025 GMT Not After : May 2 04:32:08 2025 GMT Subject: CN=680b1049-eecb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:3f:22:d1:0c:a4:ac:7e:a1:33:3e:c8:0f:7f: b3:d3:6c:06:32:fb:f2:aa:85:0e:ff:86:b3:bf:93: 77:66:af:51:ed:8d:d6:59:f4:0e:fe:8a:ac:48:ef: 49:06:c5:34:3a:4d:92:60:00:94:0f:e9:94:96:1a: 2f:72:6e:64:c7:89:8c:c4:1c:a5:10:bd:ee:1e:de: f6:fa:27:fe:33:1b:75:66:1a:64:38:6e:8c:5e:23: 7a:2d:e1:80:cc:7f:6e:b4:ae:38:25:0e:26:a3:76: 1c:95:91:9a:36:72:10:01:e0:e1:37:db:8f:b8:c0: 9a:65:20:52:05:20:b4:0f:03:78:bc:fc:c3:2c:d3: 30:0f:06:34:cf:a1:cf:82:56:3f:1a:02:04:58:64: 94:48:a8:54:8f:c4:13:95:e8:bd:b2:e9:52:cb:72: 95:05:cf:4c:9c:01:e0:1c:e0:4b:15:ac:84:97:63: d4:b0:15:6a:f4:76:3f:a7:46:c9:8e:5d:cb:72:7b: 20:7d:27:66:f2:a3:cb:f4:11:52:2d:a0:56:63:41: 9d:63:bd:ba:a4:38:71:bd:2c:22:f7:39:60:ef:87: be:1f:b3:20:08:29:18:f0:5e:6c:9d:8e:2b:16:0b: 3a:6a:85:7b:9c:71:83:cd:75:c6:4b:a5:92:a9:06: fd:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:B0:91:C5:5A:11:6B:47:5C:CD:C8:8B:46:56:96:8A:D2:44:B4:78 X509v3 Authority Key Identifier: keyid:A8:24:B6:63:F3:F5:A3:4F:82:EE:22:72:A8:AE:FD:E4:3B:79:BD:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91953AF/043160B0CA0411EEBCD01770C4F9AE02/qCS2Y_P1o0-C7iJyqK795Dt5vZM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qCS2Y_P1o0-C7iJyqK795Dt5vZM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91953AF/043160B0CA0411EEBCD01770C4F9AE02/qCS2Y_P1o0-C7iJyqK795Dt5vZM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:52:10:4c:6f:48:b5:ef:03:c2:ce:39:29:f9:22:15:d8:70: e8:56:13:71:ed:93:8c:59:b4:e1:51:cf:bb:80:73:a6:cc:6f: a0:99:a2:9a:92:22:4c:f2:70:f0:cb:14:ce:84:d4:46:16:37: eb:37:b9:93:c4:5b:5b:e6:0f:db:e5:7e:a7:ec:d4:15:da:23: 28:d3:a5:89:89:43:c4:33:42:a6:9b:a3:87:ca:f7:ea:bc:08: 42:3b:3e:b5:da:b7:2c:ab:39:02:cf:48:0d:3f:1b:48:70:b2: c4:a9:5d:1e:8e:e9:56:79:db:82:fe:6c:20:1e:bd:0b:b4:a7: 34:c3:c4:f7:36:c5:82:10:cf:99:e6:41:3f:41:d8:28:58:d0: e2:8c:6e:03:c1:cf:fb:e2:94:0c:19:60:68:5f:78:01:fb:d4: ed:cc:dd:3d:ce:3f:dd:d0:10:48:8c:35:45:df:e0:ec:8b:54: 82:82:52:33:93:7d:1b:df:24:9a:bd:fb:70:7a:4d:6e:aa:50: 50:c3:38:b3:e0:1a:98:d1:b4:12:37:93:41:f6:ae:d4:be:32: e7:98:9b:c7:e5:52:1c:e3:aa:6d:3e:9f:55:fc:a4:2a:c3:15: 2f:1d:a0:0f:06:f2:d2:4f:b3:c9:a5:44:c6:c6:eb:1d:dd:f0: b8:a7:3d:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTUzQUYxMTAvBgNVBAUTKEE4MjRCNjYzRjNGNUEzNEY4MkVFMjI3MkE4QUVGREU0 M0I3OUJEOTMwHhcNMjUwNDI1MDQzMjA4WhcNMjUwNTAyMDQzMjA4WjAYMRYwFAYD VQQDEw02ODBiMTA0OS1lZWNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxD8i0QykrH6hMz7ID3+z02wGMvvyqoUO/4azv5N3Zq9R7Y3WWfQO/oqsSO9J BsU0Ok2SYACUD+mUlhovcm5kx4mMxBylEL3uHt72+if+Mxt1ZhpkOG6MXiN6LeGA zH9utK44JQ4mo3YclZGaNnIQAeDhN9uPuMCaZSBSBSC0DwN4vPzDLNMwDwY0z6HP glY/GgIEWGSUSKhUj8QTlei9sulSy3KVBc9MnAHgHOBLFayEl2PUsBVq9HY/p0bJ jl3LcnsgfSdm8qPL9BFSLaBWY0GdY726pDhxvSwi9zlg74e+H7MgCCkY8F5snY4r Fgs6aoV7nHGDzXXGS6WSqQb9MQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFywkcVa EWtHXM3Ii0ZWlorSRLR4MB8GA1UdIwQYMBaAFKgktmPz9aNPgu4icqiu/eQ7eb2T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTNBRi8wNDMxNjBCMENB MDQxMUVFQkNEMDE3NzBDNEY5QUUwMi9xQ1MyWV9QMW8wLUM3aUp5cUs3OTVEdDV2 Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FDUzJZX1AxbzAtQzdpSnlxSzc5NUR0NXZaTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NTNBRi8wNDMxNjBCMENBMDQxMUVFQkNEMDE3NzBDNEY5QUUwMi9xQ1MyWV9QMW8w LUM3aUp5cUs3OTVEdDV2Wk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJUhBMb0i17wPCzjkp+SIV2HDoVhNx7ZOMWbThUc+7gHOmzG+gmaKa kiJM8nDwyxTOhNRGFjfrN7mTxFtb5g/b5X6n7NQV2iMo06WJiUPEM0Kmm6OHyvfq vAhCOz612rcsqzkCz0gNPxtIcLLEqV0ejulWeduC/mwgHr0LtKc0w8T3NsWCEM+Z 5kE/QdgoWNDijG4Dwc/74pQMGWBoX3gB+9TtzN09zj/d0BBIjDVF3+Dsi1SCglIz k30b3ySavftwek1uqlBQwziz4BqY0bQSN5NB9q7UvjLnmJvH5VIc46ptPp9V/KQq wxUvHaAPBvLST7PJpUTGxusd3fC4pz0q -----END CERTIFICATE-----Generated at Sat Apr 26 04:24:37 2025 by rpki-client