$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6353/3BFDED6486BA11EBBCC39875C4F9AE02/qq7HHKNN7wjYjud72RwVcXXMPAk.mft File: qq7HHKNN7wjYjud72RwVcXXMPAk.mft (raw, json) Hash identifier: GMN+rC2HJ1bvn8JppryAuOPtZzIsbFn976g26vH9fyQ= Subject key identifier: 45:1D:EA:96:FF:24:10:54:FC:36:6B:00:C9:60:FF:9E:47:7F:E4:D3 Authority key identifier: AA:AE:C7:1C:A3:4D:EF:08:D8:8E:E7:7B:D9:1C:15:71:75:CC:3C:09 Certificate issuer: /CN=A91A6353/serialNumber=AAAEC71CA34DEF08D88EE77BD91C157175CC3C09 Certificate serial: 0694 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qq7HHKNN7wjYjud72RwVcXXMPAk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6353/3BFDED6486BA11EBBCC39875C4F9AE02/qq7HHKNN7wjYjud72RwVcXXMPAk.mft Manifest number: 066C Signing time: Thu 24 Apr 2025 22:21:43 +0000 Manifest this update: Thu 24 Apr 2025 22:21:42 +0000 Manifest next update: Thu 01 May 2025 22:21:42 +0000 Files and hashes: 1: qq7HHKNN7wjYjud72RwVcXXMPAk.crl (hash: SD+ZEFQTxuWNhs99C3c2lA6nPlAyWsYdNNvMbpIthvg=) 2: A43A27DAFC0911EF99725548C4F9AE02.roa (hash: emr+zhY1TbaeDkC7dmXT1lGYaVo4KENev4IW3OP2K7Q=) 3: 17687AB8D18F11EF8C6F8687C4F9AE02.roa (hash: WWuXoRDgSFC35DFMV3idQp1hR/mdc4d4fur1hKvZ27k=) 4: 94D84328C2BE11EFA78A383CC4F9AE02.roa (hash: ILedb+K4luFgP1u+0Lt3UnlTE9tN7xoj1804tP59xoo=) 5: C7DF2FAEB31C11EF92C86228C4F9AE02.roa (hash: nedZ6CxgF0ng6a51eLIMspuxhTSJIeVR5Q+BtX9A36g=) 6: 7B34351E6C4011EFB07AFE4DC4F9AE02.roa (hash: a8hiZQY4feWw7cGzPQPoFMY0Vgh/L0UfvR1IyLlgJEI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6353/3BFDED6486BA11EBBCC39875C4F9AE02/qq7HHKNN7wjYjud72RwVcXXMPAk.crl rsync://rpki.apnic.net/member_repository/A91A6353/3BFDED6486BA11EBBCC39875C4F9AE02/qq7HHKNN7wjYjud72RwVcXXMPAk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qq7HHKNN7wjYjud72RwVcXXMPAk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:21:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1684 (0x694) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6353, serialNumber=AAAEC71CA34DEF08D88EE77BD91C157175CC3C09 Validity Not Before: Apr 24 22:21:42 2025 GMT Not After : May 1 22:21:42 2025 GMT Subject: CN=680ab976-3504 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:f4:f2:40:f7:8b:b1:f7:c8:47:53:bb:8d:66: 9e:cf:84:b6:2f:ac:a5:15:4c:9f:c5:f9:14:69:01: 16:fa:0a:7e:0e:8f:1c:8c:7f:51:e3:70:e4:f7:68: 18:5a:d1:59:21:17:a5:1c:e3:29:19:ff:ca:ae:19: 87:d3:90:2e:7d:2e:0c:98:3f:5c:67:cd:cc:0d:ca: e8:4f:e1:43:24:42:f9:b3:f6:56:4b:01:86:2b:94: 8d:d1:98:a7:4b:a5:a2:11:a0:9f:26:30:c6:d9:8f: ae:fa:10:3e:ed:3f:bf:de:72:80:c3:b3:b5:b2:ca: a7:6e:d2:c0:2d:fc:88:46:7e:e5:e1:bc:b2:5e:9c: f3:54:d9:ee:dd:da:89:df:35:b5:aa:35:79:83:cf: 05:6f:a2:75:fb:d9:d1:5e:fb:50:0a:5a:55:bb:a7: b3:da:4b:43:95:cd:1c:14:21:b8:33:6c:b4:82:c4: 6c:81:fc:31:a4:e2:83:c3:d5:87:f3:74:a2:b3:22: 68:ef:ad:5d:b5:d2:a5:79:8e:de:c8:c2:63:eb:66: 02:e2:4a:e6:be:a3:3a:e3:68:39:aa:30:86:58:a2: ed:3b:fc:ed:4e:71:34:c7:80:ec:b5:ac:f8:3f:c6: 4b:52:6d:b4:69:48:ba:4d:62:2c:29:25:52:c8:64: 90:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:1D:EA:96:FF:24:10:54:FC:36:6B:00:C9:60:FF:9E:47:7F:E4:D3 X509v3 Authority Key Identifier: keyid:AA:AE:C7:1C:A3:4D:EF:08:D8:8E:E7:7B:D9:1C:15:71:75:CC:3C:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6353/3BFDED6486BA11EBBCC39875C4F9AE02/qq7HHKNN7wjYjud72RwVcXXMPAk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qq7HHKNN7wjYjud72RwVcXXMPAk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6353/3BFDED6486BA11EBBCC39875C4F9AE02/qq7HHKNN7wjYjud72RwVcXXMPAk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:ff:fb:09:9a:2e:24:08:87:85:12:46:96:cc:9b:2d:f1:04: 6e:6d:32:cb:e9:02:23:dc:6e:e8:8a:62:ef:12:29:5d:49:f2: 09:f7:7a:87:4b:a7:af:3f:48:c9:31:b2:20:d9:cc:ed:eb:58: c1:2d:05:9b:60:c0:b4:f2:1c:7e:a1:b4:be:2c:5c:fb:29:d3: 35:8f:29:08:6d:b2:9c:e0:05:6c:7f:48:3e:3c:6a:3d:f0:de: a5:71:40:36:87:f7:2f:f9:81:f0:84:aa:5d:4c:79:a4:29:0c: 7b:c6:bb:7a:57:75:ea:bb:aa:2e:7a:0a:0e:02:91:1d:45:9b: b8:c0:d6:91:24:af:f8:90:e5:82:81:c3:6d:95:bd:c5:db:6c: 69:e1:b9:81:b7:41:5d:7c:76:16:3f:64:40:a3:60:e4:f6:16: 9a:f5:a4:9c:55:5f:3e:24:e7:c9:7a:33:05:b6:c4:c9:64:01: 43:2a:57:d0:8f:6b:74:ce:fb:d9:64:60:4d:83:7a:0c:27:f4: 3e:27:21:6f:46:0e:42:d3:5d:7f:c5:0a:f9:d4:fa:a9:76:4a: 08:6f:a5:5d:9b:53:05:91:9a:55:a3:33:02:bb:83:2f:38:e8: 89:61:19:92:d5:a9:6c:d2:a5:98:ad:f2:ec:40:f9:82:b5:53: b0:b1:c8:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBpQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTYzNTMxMTAvBgNVBAUTKEFBQUVDNzFDQTM0REVGMDhEODhFRTc3QkQ5MUMxNTcx NzVDQzNDMDkwHhcNMjUwNDI0MjIyMTQyWhcNMjUwNTAxMjIyMTQyWjAYMRYwFAYD VQQDEw02ODBhYjk3Ni0zNTA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn/TyQPeLsffIR1O7jWaez4S2L6ylFUyfxfkUaQEW+gp+Do8cjH9R43Dk92gY WtFZIRelHOMpGf/KrhmH05AufS4MmD9cZ83MDcroT+FDJEL5s/ZWSwGGK5SN0Zin S6WiEaCfJjDG2Y+u+hA+7T+/3nKAw7O1ssqnbtLALfyIRn7l4byyXpzzVNnu3dqJ 3zW1qjV5g88Fb6J1+9nRXvtQClpVu6ez2ktDlc0cFCG4M2y0gsRsgfwxpOKDw9WH 83SisyJo761dtdKleY7eyMJj62YC4krmvqM642g5qjCGWKLtO/ztTnE0x4Dstaz4 P8ZLUm20aUi6TWIsKSVSyGSQXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEUd6pb/ JBBU/DZrAMlg/55Hf+TTMB8GA1UdIwQYMBaAFKquxxyjTe8I2I7ne9kcFXF1zDwJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNjM1My8zQkZERUQ2NDg2 QkExMUVCQkNDMzk4NzVDNEY5QUUwMi9xcTdISEtOTjd3allqdWQ3MlJ3VmNYWE1Q QWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FxN0hIS05ON3dqWWp1ZDcyUndWY1hYTVBBay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NjM1My8zQkZERUQ2NDg2QkExMUVCQkNDMzk4NzVDNEY5QUUwMi9xcTdISEtOTjd3 allqdWQ3MlJ3VmNYWE1QQWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCo//sJmi4kCIeFEkaWzJst8QRubTLL6QIj3G7oimLvEildSfIJ93qH S6evP0jJMbIg2czt61jBLQWbYMC08hx+obS+LFz7KdM1jykIbbKc4AVsf0g+PGo9 8N6lcUA2h/cv+YHwhKpdTHmkKQx7xrt6V3Xqu6ouegoOApEdRZu4wNaRJK/4kOWC gcNtlb3F22xp4bmBt0FdfHYWP2RAo2Dk9haa9aScVV8+JOfJejMFtsTJZAFDKlfQ j2t0zvvZZGBNg3oMJ/Q+JyFvRg5C011/xQr51PqpdkoIb6Vdm1MFkZpVozMCu4Mv OOiJYRmS1als0qWYrfLsQPmCtVOwscic -----END CERTIFICATE-----Generated at Sat Apr 26 12:34:02 2025 by rpki-client