$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADBA2/D6954412553B11E7AA0EDE2AC4F9AE02/qmMtxAKnAveanDaT6cxGxZge6Ow.mft File: qmMtxAKnAveanDaT6cxGxZge6Ow.mft (raw, json) Hash identifier: 1oyps8iQ7v1MauxHGsoMoCxdmCkphgz079uEVmoERRo= Subject key identifier: 0C:EE:AA:82:3A:E0:75:B1:E8:2C:4E:F1:A0:6C:B6:0A:B6:B0:E2:ED Authority key identifier: AA:63:2D:C4:02:A7:02:F7:9A:9C:36:93:E9:CC:46:C5:98:1E:E8:EC Certificate issuer: /CN=A91ADBA2/serialNumber=AA632DC402A702F79A9C3693E9CC46C5981EE8EC Certificate serial: 19E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qmMtxAKnAveanDaT6cxGxZge6Ow.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ADBA2/D6954412553B11E7AA0EDE2AC4F9AE02/qmMtxAKnAveanDaT6cxGxZge6Ow.mft Manifest number: 19DA Signing time: Thu 24 Apr 2025 16:23:42 +0000 Manifest this update: Thu 24 Apr 2025 16:23:42 +0000 Manifest next update: Thu 01 May 2025 16:23:42 +0000 Files and hashes: 1: qmMtxAKnAveanDaT6cxGxZge6Ow.crl (hash: qhl40YaoWtIgei67sfQBDncFLuXS90etY1vj51CQOHk=) 2: 6C30EF68D9AD11EBA5CFBB17C4F9AE02.roa (hash: JD/t6QBbxRTutJyXKFJnddzibwxtjVqq1blAC5X3uC4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ADBA2/D6954412553B11E7AA0EDE2AC4F9AE02/qmMtxAKnAveanDaT6cxGxZge6Ow.crl rsync://rpki.apnic.net/member_repository/A91ADBA2/D6954412553B11E7AA0EDE2AC4F9AE02/qmMtxAKnAveanDaT6cxGxZge6Ow.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qmMtxAKnAveanDaT6cxGxZge6Ow.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:23:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6625 (0x19e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ADBA2, serialNumber=AA632DC402A702F79A9C3693E9CC46C5981EE8EC Validity Not Before: Apr 24 16:23:42 2025 GMT Not After : May 1 16:23:42 2025 GMT Subject: CN=680a658e-6675 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:c7:a8:ad:30:7f:7b:30:ee:3f:9e:86:93:36: 2e:45:f2:63:e7:3b:4f:04:02:5c:54:fc:56:cc:a6: b2:21:33:09:e9:e8:3a:21:07:a4:80:da:08:e8:84: 14:67:89:85:74:df:09:3c:c9:17:2d:66:75:e8:ef: ca:25:10:eb:f3:0c:99:46:22:15:e0:c9:10:6d:cf: 0c:cf:2f:42:53:b4:00:42:b1:00:e9:94:8d:1b:aa: ef:8b:3d:57:05:e5:c3:7d:e5:9b:76:69:1a:68:3c: a3:81:f6:d1:0a:7c:7c:3c:9d:e5:b2:be:33:76:9d: cc:5e:30:d4:58:9a:b2:16:a6:2b:fe:b6:1e:fd:bc: 51:82:d8:50:8f:42:6b:e6:df:f7:a2:37:df:ac:6b: cd:4f:80:76:39:ca:b9:df:f1:58:09:a4:bf:5c:5b: d4:1f:01:2d:58:69:eb:2c:66:36:22:da:97:92:96: f7:53:89:26:fb:c4:1e:ea:01:0e:e9:c9:44:f2:cb: 84:c3:63:e7:5c:69:cd:8d:e8:35:5a:b2:c8:82:c9: 62:2c:b8:15:cf:af:b5:79:f0:52:ab:68:3f:bb:34: f7:c2:f2:a9:94:d0:d4:7e:4c:f0:58:a6:32:71:9d: 56:34:1d:01:7e:65:de:dc:78:f2:2b:a0:1b:c9:be: d8:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:EE:AA:82:3A:E0:75:B1:E8:2C:4E:F1:A0:6C:B6:0A:B6:B0:E2:ED X509v3 Authority Key Identifier: keyid:AA:63:2D:C4:02:A7:02:F7:9A:9C:36:93:E9:CC:46:C5:98:1E:E8:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ADBA2/D6954412553B11E7AA0EDE2AC4F9AE02/qmMtxAKnAveanDaT6cxGxZge6Ow.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qmMtxAKnAveanDaT6cxGxZge6Ow.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADBA2/D6954412553B11E7AA0EDE2AC4F9AE02/qmMtxAKnAveanDaT6cxGxZge6Ow.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:8d:a8:24:a1:3a:a2:9f:27:f8:52:b4:9c:65:2b:7b:41:e8: 3b:9f:50:52:3e:b3:ca:fd:ab:be:03:45:7c:89:9a:85:78:4b: c4:42:17:5f:63:00:77:de:0d:74:3b:ee:f0:96:0c:65:b7:77: d9:be:1d:29:4e:e8:73:89:35:13:3c:f8:a8:52:f2:a9:08:1b: e1:66:fc:0a:ee:e6:0e:36:53:20:79:f3:85:cb:ae:4e:18:5c: 52:5e:a2:de:dd:f8:cb:2e:22:82:a6:80:d3:8a:43:8d:bf:0c: fd:df:a5:2e:8b:43:c5:50:83:dd:e5:17:97:8f:08:24:aa:ab: b5:5c:da:a6:80:82:14:1f:4b:9b:81:aa:f0:7f:13:2a:f6:48: 03:3d:21:d8:93:cb:45:1c:57:cf:6b:5e:c7:10:6b:30:8c:f9: 94:27:53:ad:89:ba:68:88:d0:c2:06:3f:76:af:7c:47:2c:ec: 42:1a:c9:94:1c:23:9e:e4:65:7b:cd:e2:2c:f4:dd:39:ab:24: 05:61:b2:03:42:f2:e1:92:de:12:fc:eb:61:e5:24:32:1d:2d: 3b:05:cb:37:ec:cc:f4:dc:d4:d7:50:00:bb:b1:2f:b7:15:a3: 5b:4f:d4:96:61:a6:00:1a:fc:e7:80:79:f4:05:f9:26:17:ea: 61:9d:ed:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGeEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QURCQTIxMTAvBgNVBAUTKEFBNjMyREM0MDJBNzAyRjc5QTlDMzY5M0U5Q0M0NkM1 OTgxRUU4RUMwHhcNMjUwNDI0MTYyMzQyWhcNMjUwNTAxMTYyMzQyWjAYMRYwFAYD VQQDEw02ODBhNjU4ZS02Njc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm8eorTB/ezDuP56GkzYuRfJj5ztPBAJcVPxWzKayITMJ6eg6IQekgNoI6IQU Z4mFdN8JPMkXLWZ16O/KJRDr8wyZRiIV4MkQbc8Mzy9CU7QAQrEA6ZSNG6rviz1X BeXDfeWbdmkaaDyjgfbRCnx8PJ3lsr4zdp3MXjDUWJqyFqYr/rYe/bxRgthQj0Jr 5t/3ojffrGvNT4B2Ocq53/FYCaS/XFvUHwEtWGnrLGY2ItqXkpb3U4km+8Qe6gEO 6clE8suEw2PnXGnNjeg1WrLIgsliLLgVz6+1efBSq2g/uzT3wvKplNDUfkzwWKYy cZ1WNB0BfmXe3HjyK6Abyb7YCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAzuqoI6 4HWx6CxO8aBstgq2sOLtMB8GA1UdIwQYMBaAFKpjLcQCpwL3mpw2k+nMRsWYHujs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBREJBMi9ENjk1NDQxMjU1 M0IxMUU3QUEwRURFMkFDNEY5QUUwMi9xbU10eEFLbkF2ZWFuRGFUNmN4R3haZ2U2 T3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FtTXR4QUtuQXZlYW5EYVQ2Y3hHeFpnZTZPdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB REJBMi9ENjk1NDQxMjU1M0IxMUU3QUEwRURFMkFDNEY5QUUwMi9xbU10eEFLbkF2 ZWFuRGFUNmN4R3haZ2U2T3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3jagkoTqinyf4UrScZSt7Qeg7n1BSPrPK/au+A0V8iZqFeEvEQhdf YwB33g10O+7wlgxlt3fZvh0pTuhziTUTPPioUvKpCBvhZvwK7uYONlMgefOFy65O GFxSXqLe3fjLLiKCpoDTikONvwz936Uui0PFUIPd5ReXjwgkqqu1XNqmgIIUH0ub garwfxMq9kgDPSHYk8tFHFfPa17HEGswjPmUJ1OtibpoiNDCBj92r3xHLOxCGsmU HCOe5GV7zeIs9N05qyQFYbIDQvLhkt4S/Oth5SQyHS07Bcs37Mz03NTXUAC7sS+3 FaNbT9SWYaYAGvzngHn0BfkmF+phne0z -----END CERTIFICATE-----Generated at Sat Apr 26 04:30:40 2025 by rpki-client