$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5A57/76F267FA56EC11EF8A0CB24FC4F9AE02/QBwaNjT5h86fnlzvVAncG9D_K6o.mft File: QBwaNjT5h86fnlzvVAncG9D_K6o.mft (raw, json) Hash identifier: RUprYnvnvsOeWP+jhEZlj52CrLjIHaQedCv3u/b3HA4= Subject key identifier: DB:D0:BA:E2:13:E2:93:93:45:6F:14:B0:9A:CB:5A:25:DF:AA:71:23 Authority key identifier: 40:1C:1A:36:34:F9:87:CE:9F:9E:5C:EF:54:09:DC:1B:D0:FF:2B:AA Certificate issuer: /CN=A91A5A57/serialNumber=401C1A3634F987CE9F9E5CEF5409DC1BD0FF2BAA Certificate serial: 86 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBwaNjT5h86fnlzvVAncG9D_K6o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5A57/76F267FA56EC11EF8A0CB24FC4F9AE02/QBwaNjT5h86fnlzvVAncG9D_K6o.mft Manifest number: 86 Signing time: Fri 25 Apr 2025 05:31:14 +0000 Manifest this update: Fri 25 Apr 2025 05:31:13 +0000 Manifest next update: Fri 02 May 2025 05:31:13 +0000 Files and hashes: 1: QBwaNjT5h86fnlzvVAncG9D_K6o.crl (hash: 8bUeAoos02JDd8YQMFAHFmpkB3hhHiCo379r2Fd0yTQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5A57/76F267FA56EC11EF8A0CB24FC4F9AE02/QBwaNjT5h86fnlzvVAncG9D_K6o.crl rsync://rpki.apnic.net/member_repository/A91A5A57/76F267FA56EC11EF8A0CB24FC4F9AE02/QBwaNjT5h86fnlzvVAncG9D_K6o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBwaNjT5h86fnlzvVAncG9D_K6o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:31:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 134 (0x86) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5A57, serialNumber=401C1A3634F987CE9F9E5CEF5409DC1BD0FF2BAA Validity Not Before: Apr 25 05:31:13 2025 GMT Not After : May 2 05:31:13 2025 GMT Subject: CN=680b1e22-55b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:7d:16:35:69:33:dc:62:5c:f5:c0:65:6d:5a: 7d:57:bc:fa:bd:1e:a5:18:dc:a6:0d:dc:8c:3f:5b: fe:b5:09:b7:f5:b1:ee:9e:58:63:df:d1:ba:ec:76: 20:c2:84:f8:f6:c8:1d:64:67:17:e3:f5:7a:a6:55: 45:a7:98:86:c5:74:1d:07:85:40:b8:5d:0f:ca:96: cb:92:22:25:e1:89:03:83:20:55:99:33:e6:b3:f4: 2f:1a:c7:10:4e:af:54:de:fd:27:49:d4:77:f0:8e: b7:07:ae:28:4c:64:ce:56:ae:6a:3c:b8:b9:77:23: 0c:ad:e7:04:9e:76:12:65:cb:c9:fa:43:c5:70:9f: 1f:85:d0:ae:60:9d:ca:70:e1:15:60:9f:f2:6c:c2: cc:77:15:cb:21:ca:03:83:66:ef:78:d6:60:4b:12: 1f:18:f7:6f:9e:18:95:82:11:74:3c:ad:e7:26:ed: 08:65:d0:7e:fd:d5:04:52:4b:bf:ca:c9:e9:49:31: 32:6b:70:c9:35:13:aa:c3:c2:52:5a:50:be:f4:18: 0a:89:72:af:04:cf:e2:94:26:d8:86:64:17:a8:84: 43:a5:e1:37:67:2b:05:9b:7e:c5:bc:13:52:6a:94: 03:f2:31:db:6c:d4:fe:92:e0:e3:fa:22:8f:88:3c: 72:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:D0:BA:E2:13:E2:93:93:45:6F:14:B0:9A:CB:5A:25:DF:AA:71:23 X509v3 Authority Key Identifier: keyid:40:1C:1A:36:34:F9:87:CE:9F:9E:5C:EF:54:09:DC:1B:D0:FF:2B:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5A57/76F267FA56EC11EF8A0CB24FC4F9AE02/QBwaNjT5h86fnlzvVAncG9D_K6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBwaNjT5h86fnlzvVAncG9D_K6o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5A57/76F267FA56EC11EF8A0CB24FC4F9AE02/QBwaNjT5h86fnlzvVAncG9D_K6o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:74:f3:2b:33:bd:47:33:30:39:94:25:7a:30:d0:19:70:a6: f7:34:14:ae:35:a9:06:02:93:15:52:d5:bf:7a:67:7b:03:bc: 21:f3:ff:06:a1:02:79:e0:e6:41:6f:5c:78:54:36:50:13:48: ca:3f:31:7e:97:63:22:33:cf:e9:50:bd:d2:71:db:0c:1b:33: c6:cc:07:4f:f3:af:d7:76:b0:84:21:9c:ad:03:7b:30:c5:e3: 5e:a6:a5:61:fd:e9:fd:99:44:97:e6:bb:b4:40:02:d6:e5:40: ba:cc:db:8e:02:cf:dd:74:0c:e0:9b:32:27:0e:fd:a3:9c:fc: 41:a5:07:a5:fa:e6:0f:43:44:a8:c5:dc:c1:23:eb:ea:a0:5c: b1:d2:90:b9:f8:8f:24:74:07:0a:c4:16:61:6d:39:67:8a:7a: ce:cd:fb:c2:a8:0d:65:fa:4f:64:3c:0d:3f:29:f2:25:e4:87: 84:8d:92:29:ad:88:32:71:e4:cc:74:9e:8a:95:8a:85:50:2c: a3:ba:1c:a5:bf:04:31:6b:8a:45:77:e8:fe:7f:1c:28:69:50: 4c:9d:30:f9:28:bc:e1:d5:5a:db:ce:e7:64:7e:86:bc:d5:a5: 02:f7:39:2e:e9:1e:aa:f2:56:3e:4f:ff:af:40:a4:f8:d7:54: 27:db:4e:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTVBNTcxMTAvBgNVBAUTKDQwMUMxQTM2MzRGOTg3Q0U5RjlFNUNFRjU0MDlEQzFC RDBGRjJCQUEwHhcNMjUwNDI1MDUzMTEzWhcNMjUwNTAyMDUzMTEzWjAYMRYwFAYD VQQDEw02ODBiMWUyMi01NWI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4H0WNWkz3GJc9cBlbVp9V7z6vR6lGNymDdyMP1v+tQm39bHunlhj39G67HYg woT49sgdZGcX4/V6plVFp5iGxXQdB4VAuF0PypbLkiIl4YkDgyBVmTPms/QvGscQ Tq9U3v0nSdR38I63B64oTGTOVq5qPLi5dyMMrecEnnYSZcvJ+kPFcJ8fhdCuYJ3K cOEVYJ/ybMLMdxXLIcoDg2bveNZgSxIfGPdvnhiVghF0PK3nJu0IZdB+/dUEUku/ ysnpSTEya3DJNROqw8JSWlC+9BgKiXKvBM/ilCbYhmQXqIRDpeE3ZysFm37FvBNS apQD8jHbbNT+kuDj+iKPiDxyYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNvQuuIT 4pOTRW8UsJrLWiXfqnEjMB8GA1UdIwQYMBaAFEAcGjY0+YfOn55c71QJ3BvQ/yuq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUE1Ny83NkYyNjdGQTU2 RUMxMUVGOEEwQ0IyNEZDNEY5QUUwMi9RQndhTmpUNWg4NmZubHp2VkFuY0c5RF9L Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FCd2FOalQ1aDg2Zm5senZWQW5jRzlEX0s2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NUE1Ny83NkYyNjdGQTU2RUMxMUVGOEEwQ0IyNEZDNEY5QUUwMi9RQndhTmpUNWg4 NmZubHp2VkFuY0c5RF9LNm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAAdPMrM71HMzA5lCV6MNAZcKb3NBSuNakGApMVUtW/emd7A7wh8/8G oQJ54OZBb1x4VDZQE0jKPzF+l2MiM8/pUL3ScdsMGzPGzAdP86/XdrCEIZytA3sw xeNepqVh/en9mUSX5ru0QALW5UC6zNuOAs/ddAzgmzInDv2jnPxBpQel+uYPQ0So xdzBI+vqoFyx0pC5+I8kdAcKxBZhbTlninrOzfvCqA1l+k9kPA0/KfIl5IeEjZIp rYgyceTMdJ6KlYqFUCyjuhylvwQxa4pFd+j+fxwoaVBMnTD5KLzh1Vrbzudkfoa8 1aUC9zku6R6q8lY+T/+vQKT411Qn207F -----END CERTIFICATE-----Generated at Sat Apr 26 04:31:43 2025 by rpki-client