$ rpki-client -vvf rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/qB0NYfe3MN23QsxIrdiKBNRv0CQ.mft File: qB0NYfe3MN23QsxIrdiKBNRv0CQ.mft (raw, json) Hash identifier: umEW5H2ukxo67nFvIZWF995IwZ7Pyy6XNnjBX1CF15w= Subject key identifier: 77:9C:33:01:AE:7D:EA:53:04:5B:6C:07:E7:D8:2C:40:A2:36:3B:94 Authority key identifier: A8:1D:0D:61:F7:B7:30:DD:B7:42:CC:48:AD:D8:8A:04:D4:6F:D0:24 Certificate issuer: /CN=A91A192D/serialNumber=A81D0D61F7B730DDB742CC48ADD88A04D46FD024 Certificate serial: 013F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qB0NYfe3MN23QsxIrdiKBNRv0CQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/qB0NYfe3MN23QsxIrdiKBNRv0CQ.mft Manifest number: 0121 Signing time: Fri 25 Apr 2025 04:14:51 +0000 Manifest this update: Fri 25 Apr 2025 04:14:50 +0000 Manifest next update: Fri 02 May 2025 04:14:50 +0000 Files and hashes: 1: qB0NYfe3MN23QsxIrdiKBNRv0CQ.crl (hash: AKtkgRDlJGSqVHqHjt/uDWejIVsyOFHvBfNKK9n/nVs=) 2: C352565AC6E011EF87D90241C4F9AE02.roa (hash: mUqqXY0c6pz96Csa4vpgVVN0TcEzh2ALUeu6fy0AUoM=) 3: 4B3A3F3CC6DD11EFA7A63533C4F9AE02.roa (hash: uACmpnSBSy2IF2u/5ZZ5RmpW3FYah3J395Q52mX87Ds=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/qB0NYfe3MN23QsxIrdiKBNRv0CQ.crl rsync://rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/qB0NYfe3MN23QsxIrdiKBNRv0CQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qB0NYfe3MN23QsxIrdiKBNRv0CQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:14:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 319 (0x13f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A192D, serialNumber=A81D0D61F7B730DDB742CC48ADD88A04D46FD024 Validity Not Before: Apr 25 04:14:50 2025 GMT Not After : May 2 04:14:50 2025 GMT Subject: CN=680b0c3a-3dcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:b1:d1:02:3e:3a:32:8a:ff:4d:99:40:60:11: 32:bd:4b:92:0a:ac:e2:0d:db:71:c8:b4:26:14:ef: 76:16:f5:9e:40:b3:17:4c:dd:ca:e9:09:52:47:86: 6a:b4:dd:35:36:e6:47:22:ed:65:a7:3e:65:41:42: 5b:be:17:d1:35:7d:1b:47:8c:09:f5:6b:b4:82:76: 81:9b:f3:1d:ca:b3:e3:8f:97:33:4c:c5:39:9f:61: e3:d6:8e:da:f1:ff:40:b5:34:f8:f7:ad:e2:96:20: a1:39:44:7e:97:c3:f3:46:26:ec:23:78:31:74:81: bc:4e:53:48:54:9f:2f:66:65:6e:de:5d:7e:99:54: f4:d0:b0:f4:2d:d0:3c:ff:83:5f:52:04:15:c6:6c: d7:1b:33:83:b6:29:11:4a:6b:ab:5e:d5:65:8c:24: 97:70:05:c8:24:8c:4a:10:53:af:6b:43:9e:5e:d2: 84:6e:b8:f0:1b:02:16:b7:20:73:e3:6c:72:74:aa: 90:09:77:bd:43:ed:0e:07:05:11:53:8c:5e:11:05: 6d:7f:bc:d9:03:ef:5b:56:ee:19:d3:ec:d1:0c:b0: 57:e9:fa:37:3c:e3:ab:a8:f9:5b:d6:cc:a3:97:13: ef:3c:4a:7b:a5:b7:ed:e9:85:b3:30:da:31:02:4f: 8a:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:9C:33:01:AE:7D:EA:53:04:5B:6C:07:E7:D8:2C:40:A2:36:3B:94 X509v3 Authority Key Identifier: keyid:A8:1D:0D:61:F7:B7:30:DD:B7:42:CC:48:AD:D8:8A:04:D4:6F:D0:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/qB0NYfe3MN23QsxIrdiKBNRv0CQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qB0NYfe3MN23QsxIrdiKBNRv0CQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/qB0NYfe3MN23QsxIrdiKBNRv0CQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:ce:ad:d5:d4:c8:05:07:5d:dc:bb:6f:a6:f1:1a:0c:ce:8f: 26:7e:7b:84:ec:61:73:8e:a0:7f:10:94:5e:92:82:1d:a2:fd: 66:ca:7f:50:92:a6:4c:d8:c7:82:39:35:47:7b:dd:3d:c7:d3: 4b:17:92:d2:c1:ca:22:82:2d:28:2c:0f:ca:a5:b5:87:d4:8f: f9:c0:09:d9:16:84:35:3e:15:41:b0:6e:5c:1d:26:0e:46:74: 05:a5:fa:13:c4:bf:61:d0:dd:51:74:47:7d:29:ee:27:e0:9a: bd:0b:f3:86:16:2e:1e:fb:e8:9a:ab:24:78:0f:93:bf:b2:e4: 2e:53:8c:3a:45:b2:94:99:bb:d8:1f:a7:d6:49:69:5c:83:d9: 26:b2:cf:04:41:38:c3:1f:77:ce:a3:2f:29:5a:3c:59:5d:3c: 1f:2a:18:62:35:cb:a7:ae:f2:24:fe:f5:79:d8:84:ab:72:ac: 08:6d:f8:62:94:ff:b5:95:b1:f5:d8:82:91:84:40:67:d4:60: 84:e4:65:d9:99:96:6b:e6:53:be:e7:09:ad:cc:8c:5f:a1:40: 30:b9:9e:d9:d9:52:ad:91:cf:4f:9f:ed:87:e5:10:1c:0f:3d: 23:0b:88:02:e5:48:da:9f:25:23:57:04:1a:1f:b9:93:e8:70: 4d:fc:58:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAT8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTE5MkQxMTAvBgNVBAUTKEE4MUQwRDYxRjdCNzMwRERCNzQyQ0M0OEFERDg4QTA0 RDQ2RkQwMjQwHhcNMjUwNDI1MDQxNDUwWhcNMjUwNTAyMDQxNDUwWjAYMRYwFAYD VQQDEw02ODBiMGMzYS0zZGNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzbHRAj46Mor/TZlAYBEyvUuSCqziDdtxyLQmFO92FvWeQLMXTN3K6QlSR4Zq tN01NuZHIu1lpz5lQUJbvhfRNX0bR4wJ9Wu0gnaBm/MdyrPjj5czTMU5n2Hj1o7a 8f9AtTT4963iliChOUR+l8PzRibsI3gxdIG8TlNIVJ8vZmVu3l1+mVT00LD0LdA8 /4NfUgQVxmzXGzODtikRSmurXtVljCSXcAXIJIxKEFOva0OeXtKEbrjwGwIWtyBz 42xydKqQCXe9Q+0OBwURU4xeEQVtf7zZA+9bVu4Z0+zRDLBX6fo3POOrqPlb1syj lxPvPEp7pbft6YWzMNoxAk+KdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHecMwGu fepTBFtsB+fYLECiNjuUMB8GA1UdIwQYMBaAFKgdDWH3tzDdt0LMSK3YigTUb9Ak MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMTkyRC9DQzY3RDI1MkE0 QkMxMUVFOUU1QTVENzJDNEY5QUUwMi9xQjBOWWZlM01OMjNRc3hJcmRpS0JOUnYw Q1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FCME5ZZmUzTU4yM1FzeElyZGlLQk5SdjBDUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MTkyRC9DQzY3RDI1MkE0QkMxMUVFOUU1QTVENzJDNEY5QUUwMi9xQjBOWWZlM01O MjNRc3hJcmRpS0JOUnYwQ1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATzq3V1MgFB13cu2+m8RoMzo8mfnuE7GFzjqB/EJRekoIdov1myn9Q kqZM2MeCOTVHe909x9NLF5LSwcoigi0oLA/KpbWH1I/5wAnZFoQ1PhVBsG5cHSYO RnQFpfoTxL9h0N1RdEd9Ke4n4Jq9C/OGFi4e++iaqyR4D5O/suQuU4w6RbKUmbvY H6fWSWlcg9kmss8EQTjDH3fOoy8pWjxZXTwfKhhiNcunrvIk/vV52ISrcqwIbfhi lP+1lbH12IKRhEBn1GCE5GXZmZZr5lO+5wmtzIxfoUAwuZ7Z2VKtkc9Pn+2H5RAc Dz0jC4gC5UjanyUjVwQaH7mT6HBN/FgG -----END CERTIFICATE-----Generated at Sat Apr 26 04:29:58 2025 by rpki-client