$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE1BC/896C6C4846CE11E992850A3CC4F9AE02/Qp6b3aKWYgADzsXvq7gj0wP-T3E.mft File: Qp6b3aKWYgADzsXvq7gj0wP-T3E.mft (raw, json) Hash identifier: W8OehDNLejnM4kgSa4SmU+3++vyHHfSOzF7wKadUqj8= Subject key identifier: DA:DA:B9:E7:C7:D1:6C:C5:9A:2F:63:B3:EC:49:25:52:35:CC:1C:53 Authority key identifier: 42:9E:9B:DD:A2:96:62:00:03:CE:C5:EF:AB:B8:23:D3:03:FE:4F:71 Certificate issuer: /CN=A91BE1BC/serialNumber=429E9BDDA296620003CEC5EFABB823D303FE4F71 Certificate serial: 1014 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qp6b3aKWYgADzsXvq7gj0wP-T3E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BE1BC/896C6C4846CE11E992850A3CC4F9AE02/Qp6b3aKWYgADzsXvq7gj0wP-T3E.mft Manifest number: 0FFF Signing time: Thu 24 Apr 2025 17:27:15 +0000 Manifest this update: Thu 24 Apr 2025 17:27:14 +0000 Manifest next update: Thu 01 May 2025 17:27:14 +0000 Files and hashes: 1: Qp6b3aKWYgADzsXvq7gj0wP-T3E.crl (hash: hx5Bb8iKVx3IqUa2XD4PAaFs8fKHF4FccvdGX+Q07GQ=) 2: 58FDD2EA10C211EA977E7378C4F9AE02.roa (hash: ZNHHRF85+z4Is0+eLKcAwqdcHd29O7GXMUqQBRk0J/w=) 3: 8C2FEEE0708811ED95A9DC75C4F9AE02.roa (hash: N1sk6XLj5xgH93qOL/I5QuR42p2aQ914FnE3hKMRCac=) 4: 8B7BDC02708811ED95A9DC75C4F9AE02.roa (hash: 9+Gtcwt1HizyRVjiJLATuFRgohbLeetX6+Rnfri/zZI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BE1BC/896C6C4846CE11E992850A3CC4F9AE02/Qp6b3aKWYgADzsXvq7gj0wP-T3E.crl rsync://rpki.apnic.net/member_repository/A91BE1BC/896C6C4846CE11E992850A3CC4F9AE02/Qp6b3aKWYgADzsXvq7gj0wP-T3E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qp6b3aKWYgADzsXvq7gj0wP-T3E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:27:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4116 (0x1014) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BE1BC, serialNumber=429E9BDDA296620003CEC5EFABB823D303FE4F71 Validity Not Before: Apr 24 17:27:14 2025 GMT Not After : May 1 17:27:14 2025 GMT Subject: CN=680a7472-c083 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:9a:25:9a:80:5f:a7:6d:86:ee:12:2e:cd:66: 13:2e:5a:b2:cc:e3:17:0c:cc:c3:2f:6d:2d:e6:63: 15:19:31:34:c2:8b:a9:a0:20:20:fe:e1:36:ab:90: ba:28:5b:d6:6f:98:d7:70:6f:3d:9e:8c:f1:42:2b: 7a:e7:eb:48:18:77:01:5d:81:86:09:8b:91:19:10: 12:35:3a:8f:f9:05:13:56:dc:04:93:0d:64:e9:64: 20:21:7b:89:a4:a9:35:37:99:f5:a6:5b:6b:69:49: 35:70:7e:cd:30:d9:4e:9e:e0:d1:f7:f8:10:da:9f: 0f:ba:ac:84:c2:90:d7:23:aa:9b:3f:04:28:bb:75: 96:d6:c7:24:c5:e5:44:c3:ce:60:48:82:1b:c4:08: 08:f6:9a:eb:a8:11:00:35:22:1a:2b:48:a7:d5:7f: c3:1d:f4:8a:ec:5f:84:97:5b:9c:dd:e7:b2:59:5c: b7:9e:39:9d:65:63:a4:59:f9:fa:9b:3a:b7:31:a9: a0:45:6b:76:72:0b:fa:89:73:3d:ad:b9:30:37:8c: aa:33:19:03:df:ca:b7:e0:0a:15:85:8a:55:53:be: 33:02:8f:0a:fb:e7:69:54:9a:1a:de:5c:d7:db:95: ef:d6:53:d0:eb:29:ba:5c:37:ad:7e:13:5b:43:94: 37:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:DA:B9:E7:C7:D1:6C:C5:9A:2F:63:B3:EC:49:25:52:35:CC:1C:53 X509v3 Authority Key Identifier: keyid:42:9E:9B:DD:A2:96:62:00:03:CE:C5:EF:AB:B8:23:D3:03:FE:4F:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BE1BC/896C6C4846CE11E992850A3CC4F9AE02/Qp6b3aKWYgADzsXvq7gj0wP-T3E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qp6b3aKWYgADzsXvq7gj0wP-T3E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE1BC/896C6C4846CE11E992850A3CC4F9AE02/Qp6b3aKWYgADzsXvq7gj0wP-T3E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:81:aa:4b:cb:50:5e:cf:12:41:80:08:25:61:12:57:d5:f6: 44:6f:e6:a1:b0:bd:dc:af:53:d3:b2:d8:63:af:c8:6e:1c:a5: f0:9a:72:e3:86:70:93:94:45:29:9b:f4:8a:87:5f:11:c5:d3: 65:c2:1c:e5:42:7f:20:0e:b0:ad:2f:02:77:00:7c:c9:32:59: 72:07:0b:7c:ba:cd:8e:1e:4e:11:8a:49:e5:41:90:b5:c6:80: 3b:54:ea:b0:bd:05:cc:97:0f:2b:ad:b6:56:3e:f1:9f:bb:89: 77:49:81:54:58:c4:60:d9:b9:5f:dd:71:a5:08:b5:63:c0:f2: 41:46:e5:fc:1b:9b:b7:f4:95:47:23:6e:83:8f:09:47:f0:de: d8:1f:88:75:25:85:27:57:d2:73:0c:4f:05:df:8f:2a:8c:dd: 5d:0f:83:e8:26:f3:cd:ba:7c:b2:ff:b3:db:76:fa:2c:a7:0b: 5f:b5:aa:20:f0:06:02:99:65:a9:98:b8:16:64:8f:2c:b1:ff: a8:3d:51:ae:13:5d:3c:2b:31:12:fd:fd:f4:b4:68:d2:38:ef: 98:93:02:ec:11:73:2e:d4:50:f1:f6:66:fa:61:3f:14:c2:1d: 58:60:8a:77:95:ea:0b:45:bf:da:2a:5a:b3:c6:fa:2d:d4:ab: 54:75:de:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEBQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkUxQkMxMTAvBgNVBAUTKDQyOUU5QkREQTI5NjYyMDAwM0NFQzVFRkFCQjgyM0Qz MDNGRTRGNzEwHhcNMjUwNDI0MTcyNzE0WhcNMjUwNTAxMTcyNzE0WjAYMRYwFAYD VQQDEw02ODBhNzQ3Mi1jMDgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt5olmoBfp22G7hIuzWYTLlqyzOMXDMzDL20t5mMVGTE0woupoCAg/uE2q5C6 KFvWb5jXcG89nozxQit65+tIGHcBXYGGCYuRGRASNTqP+QUTVtwEkw1k6WQgIXuJ pKk1N5n1pltraUk1cH7NMNlOnuDR9/gQ2p8PuqyEwpDXI6qbPwQou3WW1sckxeVE w85gSIIbxAgI9prrqBEANSIaK0in1X/DHfSK7F+El1uc3eeyWVy3njmdZWOkWfn6 mzq3MamgRWt2cgv6iXM9rbkwN4yqMxkD38q34AoVhYpVU74zAo8K++dpVJoa3lzX 25Xv1lPQ6ym6XDetfhNbQ5Q39wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNrauefH 0WzFmi9js+xJJVI1zBxTMB8GA1UdIwQYMBaAFEKem92ilmIAA87F76u4I9MD/k9x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRTFCQy84OTZDNkM0ODQ2 Q0UxMUU5OTI4NTBBM0NDNEY5QUUwMi9RcDZiM2FLV1lnQUR6c1h2cTdnajB3UC1U M0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FwNmIzYUtXWWdBRHpzWHZxN2dqMHdQLVQzRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RTFCQy84OTZDNkM0ODQ2Q0UxMUU5OTI4NTBBM0NDNEY5QUUwMi9RcDZiM2FLV1ln QUR6c1h2cTdnajB3UC1UM0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5gapLy1BezxJBgAglYRJX1fZEb+ahsL3cr1PTsthjr8huHKXwmnLj hnCTlEUpm/SKh18RxdNlwhzlQn8gDrCtLwJ3AHzJMllyBwt8us2OHk4RiknlQZC1 xoA7VOqwvQXMlw8rrbZWPvGfu4l3SYFUWMRg2blf3XGlCLVjwPJBRuX8G5u39JVH I26DjwlH8N7YH4h1JYUnV9JzDE8F348qjN1dD4PoJvPNunyy/7Pbdvospwtftaog 8AYCmWWpmLgWZI8ssf+oPVGuE108KzES/f30tGjSOO+YkwLsEXMu1FDx9mb6YT8U wh1YYIp3leoLRb/aKlqzxvot1KtUdd7D -----END CERTIFICATE-----Generated at Sat Apr 26 04:34:12 2025 by rpki-client