$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC415/BD1C935CD73211EEA183F50AC4F9AE02/qC5jMev0T1j8ZZmG2wVExmFfJvE.mft File: qC5jMev0T1j8ZZmG2wVExmFfJvE.mft (raw, json) Hash identifier: 5jXM0LfutC2p/edqVqTTdnRcX77yAJXvCAyz2ZI8k+I= Subject key identifier: 17:13:75:F2:AD:2E:58:22:BC:16:4B:8B:D6:D0:F6:29:B1:71:9D:B6 Authority key identifier: A8:2E:63:31:EB:F4:4F:58:FC:65:99:86:DB:05:44:C6:61:5F:26:F1 Certificate issuer: /CN=A91AC415/serialNumber=A82E6331EBF44F58FC659986DB0544C6615F26F1 Certificate serial: E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qC5jMev0T1j8ZZmG2wVExmFfJvE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AC415/BD1C935CD73211EEA183F50AC4F9AE02/qC5jMev0T1j8ZZmG2wVExmFfJvE.mft Manifest number: DD Signing time: Fri 25 Apr 2025 04:38:08 +0000 Manifest this update: Fri 25 Apr 2025 04:38:07 +0000 Manifest next update: Fri 02 May 2025 04:38:07 +0000 Files and hashes: 1: qC5jMev0T1j8ZZmG2wVExmFfJvE.crl (hash: Cjmg7fP32/6ElJuW8I3s/cI0T/LiubLyjJFZKw64u64=) 2: B57678E8D73711EEAECFA720C4F9AE02.roa (hash: 1mdRwvV5n8x0UgBPlIBjHnwgQhIGSx8VQkbewDudiQM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AC415/BD1C935CD73211EEA183F50AC4F9AE02/qC5jMev0T1j8ZZmG2wVExmFfJvE.crl rsync://rpki.apnic.net/member_repository/A91AC415/BD1C935CD73211EEA183F50AC4F9AE02/qC5jMev0T1j8ZZmG2wVExmFfJvE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qC5jMev0T1j8ZZmG2wVExmFfJvE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:38:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 227 (0xe3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AC415, serialNumber=A82E6331EBF44F58FC659986DB0544C6615F26F1 Validity Not Before: Apr 25 04:38:07 2025 GMT Not After : May 2 04:38:07 2025 GMT Subject: CN=680b11b0-5479 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:2b:75:ae:68:5f:74:c0:6b:c8:3e:87:fe:ca: 66:26:77:b3:8b:90:b3:77:aa:cc:b7:b3:bb:50:e0: e4:60:9f:8d:30:08:18:dd:16:77:df:22:10:22:70: 9a:ee:d3:44:a5:21:44:19:ad:4a:2b:ea:7c:0a:bc: ca:9e:8a:c2:ba:f2:ea:ab:2c:d2:78:ec:5a:d9:b6: 85:5b:99:1b:82:38:9c:06:86:40:53:28:4d:64:13: 30:a8:7c:24:e4:2d:c3:78:6d:98:ba:da:de:ad:aa: a8:cd:a2:62:1f:78:65:9d:96:74:60:c5:fb:84:4d: 19:34:ae:01:a3:7f:0b:c9:6a:45:8a:f4:73:13:59: ad:c9:3b:dd:5c:3e:52:8c:ac:a0:56:ba:97:72:89: c0:5b:e3:85:3d:60:9e:b1:0d:79:98:43:b0:07:b1: 26:9f:83:ad:c6:94:e9:37:6e:4c:eb:0e:1a:f6:49: b0:de:fa:7e:bb:ed:68:a5:e7:01:36:98:00:49:06: 7c:21:67:12:af:47:b8:a7:6d:3a:d5:81:d3:0b:f8: 0e:f0:66:58:11:13:77:1c:24:c5:ff:c9:55:67:0c: 6e:49:d6:78:8f:cf:08:e3:9f:a2:8a:d5:93:d2:9b: 3f:23:63:1e:41:31:c9:60:19:92:a0:d1:35:a6:58: 8d:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:13:75:F2:AD:2E:58:22:BC:16:4B:8B:D6:D0:F6:29:B1:71:9D:B6 X509v3 Authority Key Identifier: keyid:A8:2E:63:31:EB:F4:4F:58:FC:65:99:86:DB:05:44:C6:61:5F:26:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AC415/BD1C935CD73211EEA183F50AC4F9AE02/qC5jMev0T1j8ZZmG2wVExmFfJvE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qC5jMev0T1j8ZZmG2wVExmFfJvE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC415/BD1C935CD73211EEA183F50AC4F9AE02/qC5jMev0T1j8ZZmG2wVExmFfJvE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:90:b7:89:8e:6d:ea:37:ca:a3:06:a8:98:b1:74:ee:02:eb: cf:6f:bf:19:b9:a4:ac:b7:19:e2:bf:bb:b6:1c:6a:42:f7:7a: 7a:cc:e7:d0:47:bf:cc:c6:5a:ac:cb:d1:90:73:90:57:c4:72: 73:3c:2c:d8:56:7b:02:6d:db:5c:57:28:c8:6a:db:59:cb:1a: 29:51:46:54:e8:ff:f2:32:0a:ed:83:50:45:cf:77:54:11:f3: 14:9b:da:e1:6d:c6:32:0b:d8:4d:4e:b4:17:b5:d7:00:8f:7f: 79:dd:16:3b:c6:d2:a0:ea:21:0f:c5:1a:ed:d3:b9:87:9e:29: cf:a9:85:84:e4:3a:a8:7a:1c:2a:19:2b:24:77:28:45:f3:96: 1f:68:1f:c2:a4:84:0a:c2:7e:ad:83:56:2e:22:b6:5b:e4:af: 31:3e:25:d4:31:df:c6:5c:4b:41:8d:ac:4d:86:17:64:f5:52: f0:5c:d4:fb:7b:cc:a6:ff:9d:a9:07:a8:62:ab:a6:95:ae:bd: 10:ad:b3:fb:c2:cb:4d:58:e3:33:b3:e6:e9:da:64:26:73:ee: f4:e4:12:a5:c1:1c:27:ee:81:ac:db:97:ca:c8:82:eb:13:48: 35:2a:e6:96:e2:5d:60:a5:77:db:e8:0a:01:95:17:26:c1:65: 18:27:71:30 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUM0MTUxMTAvBgNVBAUTKEE4MkU2MzMxRUJGNDRGNThGQzY1OTk4NkRCMDU0NEM2 NjE1RjI2RjEwHhcNMjUwNDI1MDQzODA3WhcNMjUwNTAyMDQzODA3WjAYMRYwFAYD VQQDEw02ODBiMTFiMC01NDc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2Ct1rmhfdMBryD6H/spmJnezi5Czd6rMt7O7UODkYJ+NMAgY3RZ33yIQInCa 7tNEpSFEGa1KK+p8CrzKnorCuvLqqyzSeOxa2baFW5kbgjicBoZAUyhNZBMwqHwk 5C3DeG2YutreraqozaJiH3hlnZZ0YMX7hE0ZNK4Bo38LyWpFivRzE1mtyTvdXD5S jKygVrqXconAW+OFPWCesQ15mEOwB7Emn4OtxpTpN25M6w4a9kmw3vp+u+1opecB NpgASQZ8IWcSr0e4p2061YHTC/gO8GZYERN3HCTF/8lVZwxuSdZ4j88I45+iitWT 0ps/I2MeQTHJYBmSoNE1pliN3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBcTdfKt LlgivBZLi9bQ9imxcZ22MB8GA1UdIwQYMBaAFKguYzHr9E9Y/GWZhtsFRMZhXybx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQzQxNS9CRDFDOTM1Q0Q3 MzIxMUVFQTE4M0Y1MEFDNEY5QUUwMi9xQzVqTWV2MFQxajhaWm1HMndWRXhtRmZK dkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FDNWpNZXYwVDFqOFpabUcyd1ZFeG1GZkp2RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QzQxNS9CRDFDOTM1Q0Q3MzIxMUVFQTE4M0Y1MEFDNEY5QUUwMi9xQzVqTWV2MFQx ajhaWm1HMndWRXhtRmZKdkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABkLeJjm3qN8qjBqiYsXTuAuvPb78ZuaSstxniv7u2HGpC93p6zOfQ R7/Mxlqsy9GQc5BXxHJzPCzYVnsCbdtcVyjIattZyxopUUZU6P/yMgrtg1BFz3dU EfMUm9rhbcYyC9hNTrQXtdcAj3953RY7xtKg6iEPxRrt07mHninPqYWE5Dqoehwq GSskdyhF85YfaB/CpIQKwn6tg1YuIrZb5K8xPiXUMd/GXEtBjaxNhhdk9VLwXNT7 e8ym/52pB6hiq6aVrr0QrbP7wstNWOMzs+bp2mQmc+705BKlwRwn7oGs25fKyILr E0g1KuaW4l1gpXfb6AoBlRcmwWUYJ3Ew -----END CERTIFICATE-----Generated at Sat Apr 26 12:33:28 2025 by rpki-client