$ rpki-client -vvf rpki.apnic.net/member_repository/A91C27E8/692F72F2F9BA11E7A4C2943BC4F9AE02/qXUlmYQNbuyqG_aMCQWtffRpouc.mft File: qXUlmYQNbuyqG_aMCQWtffRpouc.mft (raw, json) Hash identifier: YSMT6/F9s+sghvYCI7ibK0I1DG6APBQC5IXBOSYNejY= Subject key identifier: B2:2B:06:11:77:75:83:B0:2C:F5:5F:BC:D4:7A:C7:9D:8C:95:AB:10 Authority key identifier: A9:75:25:99:84:0D:6E:EC:AA:1B:F6:8C:09:05:AD:7D:F4:69:A2:E7 Certificate issuer: /CN=A91C27E8/serialNumber=A9752599840D6EECAA1BF68C0905AD7DF469A2E7 Certificate serial: 16AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qXUlmYQNbuyqG_aMCQWtffRpouc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C27E8/692F72F2F9BA11E7A4C2943BC4F9AE02/qXUlmYQNbuyqG_aMCQWtffRpouc.mft Manifest number: 169D Signing time: Mon 28 Apr 2025 16:53:12 +0000 Manifest this update: Mon 28 Apr 2025 16:53:11 +0000 Manifest next update: Mon 05 May 2025 16:53:11 +0000 Files and hashes: 1: qXUlmYQNbuyqG_aMCQWtffRpouc.crl (hash: RYuawJit3EPK+KHwmOVldQ4+XNXkpquKAmfBOeMKHuI=) 2: BAD2356E153411E892E6D468C4F9AE02.roa (hash: ZwNXUOwbbGwEvsT0YYSZl1NqDpf0fkjGMPzYp65wdFE=) 3: 777FA9ECF9BC11E79E1A9E3FC4F9AE02.roa (hash: fI6pWEKhcfnz5T7b0Qu0ji5oi9dMvf4xCNtRiu+OZoY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C27E8/692F72F2F9BA11E7A4C2943BC4F9AE02/qXUlmYQNbuyqG_aMCQWtffRpouc.crl rsync://rpki.apnic.net/member_repository/A91C27E8/692F72F2F9BA11E7A4C2943BC4F9AE02/qXUlmYQNbuyqG_aMCQWtffRpouc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qXUlmYQNbuyqG_aMCQWtffRpouc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 16:53:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5805 (0x16ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C27E8, serialNumber=A9752599840D6EECAA1BF68C0905AD7DF469A2E7 Validity Not Before: Apr 28 16:53:11 2025 GMT Not After : May 5 16:53:11 2025 GMT Subject: CN=680fb277-2e21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:11:df:06:1d:8c:fb:73:be:9e:9f:07:bc:58: ca:8e:17:ff:19:2c:fc:de:1a:65:30:84:36:ef:94: 9c:76:55:1e:8d:cb:6b:f9:29:5f:1a:73:cc:29:9d: ac:e6:56:27:ff:fe:48:ca:e8:ae:a9:2c:7c:9f:8b: 71:fa:07:32:b3:a2:17:5c:20:70:1e:d6:82:4b:2e: 8c:af:72:b9:72:a4:62:e8:ed:e3:c7:55:be:f6:51: a1:7c:00:2e:b2:bb:87:49:8e:d0:b3:5c:23:98:81: 06:7e:dc:95:6f:44:23:90:47:b8:95:ac:9d:32:8a: a5:4e:f1:6e:33:bf:6b:3f:d6:f4:a2:dd:41:0c:fe: d8:55:3a:b6:dd:77:25:23:8e:02:48:b0:06:aa:ce: 07:36:f8:16:aa:52:85:03:8e:d3:a1:16:87:9a:12: 55:2d:26:66:cb:2c:78:bf:5e:e8:1f:56:ae:75:cb: b4:51:08:65:20:08:b8:e2:f2:ba:1b:0a:43:4d:88: 47:1d:15:b0:58:75:65:77:85:a1:ac:6d:1f:2e:37: c6:ef:5a:54:6d:6a:a3:3b:3f:9a:0b:b8:23:01:42: bd:ca:7f:28:21:63:ce:2f:80:cd:3b:c7:8f:12:b6: cf:c3:8a:bc:68:82:32:3d:5b:ea:50:d1:89:14:40: f8:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:2B:06:11:77:75:83:B0:2C:F5:5F:BC:D4:7A:C7:9D:8C:95:AB:10 X509v3 Authority Key Identifier: keyid:A9:75:25:99:84:0D:6E:EC:AA:1B:F6:8C:09:05:AD:7D:F4:69:A2:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C27E8/692F72F2F9BA11E7A4C2943BC4F9AE02/qXUlmYQNbuyqG_aMCQWtffRpouc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qXUlmYQNbuyqG_aMCQWtffRpouc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C27E8/692F72F2F9BA11E7A4C2943BC4F9AE02/qXUlmYQNbuyqG_aMCQWtffRpouc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:74:fc:ab:04:ff:49:5c:ce:13:43:a4:3b:c2:06:43:aa:fd: ce:56:50:42:c2:4a:55:b4:be:cf:b3:f9:3b:27:29:a8:de:dd: ec:d5:31:a6:5c:ab:13:94:29:74:b9:34:b8:0a:3b:08:94:fe: 73:aa:14:a0:f9:a3:10:fb:72:56:77:8c:52:6f:92:3a:93:b3: ef:76:5c:7d:50:31:de:3b:9e:23:5d:1b:c8:fc:e5:06:c1:b5: ec:52:04:50:8c:20:7b:1a:5c:04:ca:b4:67:bd:3f:55:36:3d: 66:85:b2:31:0a:15:2e:c7:c7:ed:b8:76:83:0c:46:cb:1e:9c: 8a:e2:55:36:ac:ca:01:5f:9f:66:0b:c2:23:d2:1a:49:24:e6: 17:8b:4b:b3:49:45:03:ea:3a:52:f4:2f:54:ba:f6:bf:e7:1d: 3e:93:fe:ca:28:aa:f2:c6:5d:37:4c:1b:d7:7d:29:b6:81:be: b5:c3:85:eb:33:64:cb:ca:0b:32:fb:10:16:4e:c0:5b:45:84: c7:5c:58:c1:6c:51:45:18:28:66:bb:d3:7f:45:70:a2:32:5a: e1:0a:55:db:ac:a6:74:02:1d:49:e6:f8:df:2b:8d:cf:c4:ff: 68:94:07:bc:7e:bd:ac:c9:3a:ed:05:75:ee:8a:8b:8b:d8:37: 75:a6:c2:bb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFq0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzI3RTgxMTAvBgNVBAUTKEE5NzUyNTk5ODQwRDZFRUNBQTFCRjY4QzA5MDVBRDdE RjQ2OUEyRTcwHhcNMjUwNDI4MTY1MzExWhcNMjUwNTA1MTY1MzExWjAYMRYwFAYD VQQDEw02ODBmYjI3Ny0yZTIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyxHfBh2M+3O+np8HvFjKjhf/GSz83hplMIQ275ScdlUejctr+SlfGnPMKZ2s 5lYn//5IyuiuqSx8n4tx+gcys6IXXCBwHtaCSy6Mr3K5cqRi6O3jx1W+9lGhfAAu sruHSY7Qs1wjmIEGftyVb0QjkEe4laydMoqlTvFuM79rP9b0ot1BDP7YVTq23Xcl I44CSLAGqs4HNvgWqlKFA47ToRaHmhJVLSZmyyx4v17oH1audcu0UQhlIAi44vK6 GwpDTYhHHRWwWHVld4WhrG0fLjfG71pUbWqjOz+aC7gjAUK9yn8oIWPOL4DNO8eP ErbPw4q8aIIyPVvqUNGJFED43QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLIrBhF3 dYOwLPVfvNR6x52MlasQMB8GA1UdIwQYMBaAFKl1JZmEDW7sqhv2jAkFrX30aaLn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMjdFOC82OTJGNzJGMkY5 QkExMUU3QTRDMjk0M0JDNEY5QUUwMi9xWFVsbVlRTmJ1eXFHX2FNQ1FXdGZmUnBv dWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FYVWxtWVFOYnV5cUdfYU1DUVd0ZmZScG91Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MjdFOC82OTJGNzJGMkY5QkExMUU3QTRDMjk0M0JDNEY5QUUwMi9xWFVsbVlRTmJ1 eXFHX2FNQ1FXdGZmUnBvdWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQdPyrBP9JXM4TQ6Q7wgZDqv3OVlBCwkpVtL7Ps/k7Jymo3t3s1TGm XKsTlCl0uTS4CjsIlP5zqhSg+aMQ+3JWd4xSb5I6k7Pvdlx9UDHeO54jXRvI/OUG wbXsUgRQjCB7GlwEyrRnvT9VNj1mhbIxChUux8ftuHaDDEbLHpyK4lU2rMoBX59m C8Ij0hpJJOYXi0uzSUUD6jpS9C9Uuva/5x0+k/7KKKryxl03TBvXfSm2gb61w4Xr M2TLygsy+xAWTsBbRYTHXFjBbFFFGChmu9N/RXCiMlrhClXbrKZ0Ah1J5vjfK43P xP9olAe8fr2syTrtBXXuiouL2Dd1psK7 -----END CERTIFICATE-----Generated at Tue Apr 29 06:16:37 2025 by rpki-client