$ rpki-client -vvf rpki.apnic.net/member_repository/A91B72D9/AA23FA96697111ECB625930CC4F9AE02/QeXcIVUGn_MX5e44x1t4icIhl-M.mft File: QeXcIVUGn_MX5e44x1t4icIhl-M.mft (raw, json) Hash identifier: QcpRuvvJ9ZWWX+Kc/r7ldJfGapEBmXAMKNchpxO9PMA= Subject key identifier: E8:68:89:7D:86:DF:5D:37:FE:C5:52:E5:A1:5F:9E:BC:C1:2D:C9:1A Authority key identifier: 41:E5:DC:21:55:06:9F:F3:17:E5:EE:38:C7:5B:78:89:C2:21:97:E3 Certificate issuer: /CN=A91B72D9/serialNumber=41E5DC2155069FF317E5EE38C75B7889C22197E3 Certificate serial: 042E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QeXcIVUGn_MX5e44x1t4icIhl-M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B72D9/AA23FA96697111ECB625930CC4F9AE02/QeXcIVUGn_MX5e44x1t4icIhl-M.mft Manifest number: 041A Signing time: Fri 25 Apr 2025 00:13:50 +0000 Manifest this update: Fri 25 Apr 2025 00:13:49 +0000 Manifest next update: Fri 02 May 2025 00:13:49 +0000 Files and hashes: 1: QeXcIVUGn_MX5e44x1t4icIhl-M.crl (hash: vUzYm4uxi0QAEzbcMnRZEpRN3vCk8Ms7OxU6t/DD/Y8=) 2: 43E6BE1AF53411EF9DE3BD34C4F9AE02.roa (hash: d0073l1e/pxbjtRy8RJAwD/f1Qu4geicKXKAmauL91Y=) 3: 4FD9C050F53411EFBF7FCA34C4F9AE02.roa (hash: UdXjbAhF6oniMP9h+eQndIWcxlYyRMTp0LAX//sl/pw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B72D9/AA23FA96697111ECB625930CC4F9AE02/QeXcIVUGn_MX5e44x1t4icIhl-M.crl rsync://rpki.apnic.net/member_repository/A91B72D9/AA23FA96697111ECB625930CC4F9AE02/QeXcIVUGn_MX5e44x1t4icIhl-M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QeXcIVUGn_MX5e44x1t4icIhl-M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:13:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1070 (0x42e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B72D9, serialNumber=41E5DC2155069FF317E5EE38C75B7889C22197E3 Validity Not Before: Apr 25 00:13:49 2025 GMT Not After : May 2 00:13:49 2025 GMT Subject: CN=680ad3bd-9c42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:60:58:83:7e:8e:16:96:f7:ec:30:f5:79:cb: 80:fd:89:5c:8b:ec:7c:1a:4c:b5:f8:d8:eb:5b:ac: b0:28:b1:3c:7e:56:3a:6b:87:b5:17:29:b2:02:bc: cc:a4:1a:64:19:f0:81:8f:f6:0f:2e:bc:bd:0c:2e: 94:e3:ab:7c:bb:5a:7a:f2:99:7a:87:0c:9c:90:60: 45:6b:95:73:27:91:97:f7:79:b3:c3:c9:bb:eb:e9: 09:2b:8f:91:1a:20:1c:6d:8a:45:4e:29:79:56:57: 88:22:16:c4:bb:15:f0:54:e5:78:e6:17:c8:e7:ed: b9:d9:8a:19:a9:49:7f:00:7f:fd:e4:20:0d:a9:f3: 6c:37:6b:c4:32:9c:28:95:6b:8b:90:53:8f:2c:6e: a6:1d:5d:95:25:14:b0:18:cc:19:d8:ba:c3:e5:de: 9e:8c:10:33:06:6d:12:9c:ff:d9:61:3e:8c:a2:86: 3c:31:09:b9:66:66:4c:01:ad:ee:af:17:e0:9f:2d: 04:f4:0a:b2:02:1a:60:1a:40:5e:7a:46:a5:55:c3: d2:8b:1c:55:40:bf:0a:22:07:c2:b4:1c:c3:cc:6f: 72:90:2c:9b:3b:ef:11:4e:9b:e4:00:6a:53:9d:74: 45:85:07:ae:ff:2b:6a:56:52:da:f4:96:19:df:7b: 14:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:68:89:7D:86:DF:5D:37:FE:C5:52:E5:A1:5F:9E:BC:C1:2D:C9:1A X509v3 Authority Key Identifier: keyid:41:E5:DC:21:55:06:9F:F3:17:E5:EE:38:C7:5B:78:89:C2:21:97:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B72D9/AA23FA96697111ECB625930CC4F9AE02/QeXcIVUGn_MX5e44x1t4icIhl-M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QeXcIVUGn_MX5e44x1t4icIhl-M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B72D9/AA23FA96697111ECB625930CC4F9AE02/QeXcIVUGn_MX5e44x1t4icIhl-M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:8b:c7:96:98:a1:ec:7a:ad:21:7d:56:2d:e9:5e:75:b2:3b: a4:27:97:36:37:50:e0:ef:ad:f4:95:a1:fc:f5:bb:70:b5:8c: 08:8a:a0:62:ab:d3:c7:53:3d:3e:49:0a:69:68:7b:92:a6:72: fc:fb:d5:5b:df:7b:5b:b4:0a:0f:4b:9b:cb:ec:a0:5b:c3:d4: 20:fe:fb:d4:41:43:4e:f0:1e:f4:19:f5:55:e1:12:f5:b3:29: 87:c7:d4:52:16:7f:21:00:d0:31:e8:1f:ce:e3:71:45:0f:04: 70:0c:49:5d:8f:19:5a:91:9a:1f:22:ac:4f:6f:8b:99:c8:5d: af:3d:4e:46:8e:95:fb:4b:59:1a:a8:c1:dd:2f:38:03:f9:11: 41:90:3d:1e:29:9f:13:a5:cd:73:42:c4:b4:0b:cc:31:4a:bd: 1c:a6:6a:01:4f:2d:eb:29:f2:34:d3:d8:ce:c8:68:95:f6:ca: 42:2a:a5:62:a0:19:1e:a2:11:7e:91:72:6a:19:c5:9b:82:4a: ff:37:3d:fd:1d:aa:7f:2b:9b:6f:10:80:40:b5:14:81:e5:59: 28:d7:4a:d1:ac:85:09:38:ea:4d:95:1b:59:d9:d9:85:86:38: 41:ae:b5:8c:58:6e:a3:58:f8:4c:47:48:37:17:a1:b7:7a:b1: b7:c8:b2:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBC4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjcyRDkxMTAvBgNVBAUTKDQxRTVEQzIxNTUwNjlGRjMxN0U1RUUzOEM3NUI3ODg5 QzIyMTk3RTMwHhcNMjUwNDI1MDAxMzQ5WhcNMjUwNTAyMDAxMzQ5WjAYMRYwFAYD VQQDEw02ODBhZDNiZC05YzQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwWBYg36OFpb37DD1ecuA/Ylci+x8Gky1+NjrW6ywKLE8flY6a4e1FymyArzM pBpkGfCBj/YPLry9DC6U46t8u1p68pl6hwyckGBFa5VzJ5GX93mzw8m76+kJK4+R GiAcbYpFTil5VleIIhbEuxXwVOV45hfI5+252YoZqUl/AH/95CANqfNsN2vEMpwo lWuLkFOPLG6mHV2VJRSwGMwZ2LrD5d6ejBAzBm0SnP/ZYT6MooY8MQm5ZmZMAa3u rxfgny0E9AqyAhpgGkBeekalVcPSixxVQL8KIgfCtBzDzG9ykCybO+8RTpvkAGpT nXRFhQeu/ytqVlLa9JYZ33sUqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOhoiX2G 3103/sVS5aFfnrzBLckaMB8GA1UdIwQYMBaAFEHl3CFVBp/zF+XuOMdbeInCIZfj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzJEOS9BQTIzRkE5NjY5 NzExMUVDQjYyNTkzMENDNEY5QUUwMi9RZVhjSVZVR25fTVg1ZTQ0eDF0NGljSWhs LU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FlWGNJVlVHbl9NWDVlNDR4MXQ0aWNJaGwtTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NzJEOS9BQTIzRkE5NjY5NzExMUVDQjYyNTkzMENDNEY5QUUwMi9RZVhjSVZVR25f TVg1ZTQ0eDF0NGljSWhsLU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgi8eWmKHseq0hfVYt6V51sjukJ5c2N1Dg7630laH89btwtYwIiqBi q9PHUz0+SQppaHuSpnL8+9Vb33tbtAoPS5vL7KBbw9Qg/vvUQUNO8B70GfVV4RL1 symHx9RSFn8hANAx6B/O43FFDwRwDEldjxlakZofIqxPb4uZyF2vPU5GjpX7S1ka qMHdLzgD+RFBkD0eKZ8Tpc1zQsS0C8wxSr0cpmoBTy3rKfI009jOyGiV9spCKqVi oBkeohF+kXJqGcWbgkr/Nz39Hap/K5tvEIBAtRSB5Vko10rRrIUJOOpNlRtZ2dmF hjhBrrWMWG6jWPhMR0g3F6G3erG3yLKG -----END CERTIFICATE-----Generated at Sat Apr 26 14:01:40 2025 by rpki-client