$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB816/610466103DD611EBA0602C5BC4F9AE02/vQa9v4sO7byfBzlaZSVPy4WDmJ0.mft File: vQa9v4sO7byfBzlaZSVPy4WDmJ0.mft (raw, json) Hash identifier: D+db5Cj17p7ykbMFm6Ur9xoH1T9eoT0pueIt56YGaXw= Subject key identifier: 41:FC:AF:6D:13:75:10:F7:00:45:E8:BF:14:4D:34:85:56:80:9C:F8 Authority key identifier: BD:06:BD:BF:8B:0E:ED:BC:9F:07:39:5A:65:25:4F:CB:85:83:98:9D Certificate issuer: /CN=A91CB816/serialNumber=BD06BDBF8B0EEDBC9F07395A65254FCB8583989D Certificate serial: 0708 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vQa9v4sO7byfBzlaZSVPy4WDmJ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB816/610466103DD611EBA0602C5BC4F9AE02/vQa9v4sO7byfBzlaZSVPy4WDmJ0.mft Manifest number: 06FE Signing time: Thu 24 Apr 2025 21:44:17 +0000 Manifest this update: Thu 24 Apr 2025 21:44:17 +0000 Manifest next update: Thu 01 May 2025 21:44:17 +0000 Files and hashes: 1: vQa9v4sO7byfBzlaZSVPy4WDmJ0.crl (hash: n1ABdFkupnUYh0b1FnWFPptxJ5V7ifD8kwpP9gYA9z0=) 2: 122052A03DD811EBAE99F45CC4F9AE02.roa (hash: QraXnZCET4DytM5/10lXcxYbwH8hmrtP3mDCaQ6jJXk=) 3: 7D8845C43DD911EB8DA0EE5FC4F9AE02.roa (hash: TJhxFRJSMHDZftvXajaD5yBRa7CxOx/OA+78HFtd2eM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB816/610466103DD611EBA0602C5BC4F9AE02/vQa9v4sO7byfBzlaZSVPy4WDmJ0.crl rsync://rpki.apnic.net/member_repository/A91CB816/610466103DD611EBA0602C5BC4F9AE02/vQa9v4sO7byfBzlaZSVPy4WDmJ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vQa9v4sO7byfBzlaZSVPy4WDmJ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:44:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1800 (0x708) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB816, serialNumber=BD06BDBF8B0EEDBC9F07395A65254FCB8583989D Validity Not Before: Apr 24 21:44:17 2025 GMT Not After : May 1 21:44:17 2025 GMT Subject: CN=680ab0b1-75d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:08:60:a0:02:24:60:78:c7:62:e6:51:74:c7: 5a:d3:92:e2:27:17:5e:96:42:8a:82:ac:57:15:d4: ce:bb:41:b5:35:8c:b6:c8:0c:4d:f6:c3:76:58:bf: b2:a5:4f:4c:e7:03:c2:98:99:e3:6c:33:8c:49:85: 53:02:c1:14:5e:0a:7a:01:c1:c1:a2:4f:d6:08:65: a0:9f:ea:e3:ea:26:cd:1b:c0:27:0a:a6:01:9b:55: 2f:a1:2d:8a:2c:d3:36:20:fd:f7:fd:d6:ab:61:1c: 43:43:93:6c:a9:32:28:4f:e1:02:78:7f:a9:08:40: 2b:8d:84:58:0b:0c:21:a7:c3:88:21:48:d5:66:bd: 3b:91:ea:07:a3:77:94:ac:aa:10:57:12:ff:bf:bf: ce:d3:cf:53:bf:c4:83:f5:3a:63:17:fb:f3:dd:10: 55:42:93:a3:29:c4:18:11:dd:eb:3e:27:00:46:c9: 06:0c:d4:10:e7:37:4d:06:0d:fa:db:8a:54:d6:cc: 6f:e3:52:8f:19:f7:c4:4f:12:d7:31:fd:c5:64:18: b9:30:90:de:03:41:36:31:9a:94:6b:0a:14:ff:9a: e8:2d:7f:fb:92:cb:4b:1e:a9:41:6d:f1:a6:14:98: cf:ba:19:36:9a:30:20:92:40:ca:e0:6a:b7:ed:c4: ea:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:FC:AF:6D:13:75:10:F7:00:45:E8:BF:14:4D:34:85:56:80:9C:F8 X509v3 Authority Key Identifier: keyid:BD:06:BD:BF:8B:0E:ED:BC:9F:07:39:5A:65:25:4F:CB:85:83:98:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB816/610466103DD611EBA0602C5BC4F9AE02/vQa9v4sO7byfBzlaZSVPy4WDmJ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vQa9v4sO7byfBzlaZSVPy4WDmJ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB816/610466103DD611EBA0602C5BC4F9AE02/vQa9v4sO7byfBzlaZSVPy4WDmJ0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:f5:34:22:95:47:b2:4c:b3:2e:3e:f8:90:c3:54:67:8c:e6: 50:af:d6:52:d0:f6:d8:86:d6:c6:85:59:68:b3:ef:39:1b:fc: 8d:ed:63:22:04:bf:3f:4a:72:05:27:cb:ca:de:57:99:df:e0: 5d:0a:6b:08:51:8b:a7:38:0e:0a:19:0f:a2:c8:14:7d:f1:f4: 73:da:a9:64:e2:e5:45:b1:fb:46:ce:1b:ef:2c:58:02:f7:15: ab:87:bd:b8:bc:64:c3:f1:4d:ae:3f:56:be:38:06:4f:de:fb: f8:76:0a:1a:af:2d:0d:35:ec:69:de:00:f5:ac:b6:27:0a:52: aa:e9:97:f7:9b:63:3d:85:43:14:42:04:81:34:16:e4:a4:ed: 75:6a:59:f2:24:d9:c7:c4:c6:af:05:e5:0e:41:7a:c4:62:00: a3:6e:ae:1e:15:d8:37:5d:2a:e0:c1:5c:27:a1:e6:fd:2f:bd: 8b:d5:fc:b7:00:21:35:c0:a4:03:4f:ba:d0:78:2c:34:58:71: 6b:ca:0b:df:6a:21:3b:7f:8f:f0:9b:e7:14:8e:04:39:24:96: 8a:73:89:9c:d3:fb:03:dd:2e:81:4d:d3:ea:0d:57:73:4e:6d: e4:7a:70:ac:fc:fe:70:ab:38:3e:b1:35:e0:d6:58:35:99:87: 39:3d:f6:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBwgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0I4MTYxMTAvBgNVBAUTKEJEMDZCREJGOEIwRUVEQkM5RjA3Mzk1QTY1MjU0RkNC ODU4Mzk4OUQwHhcNMjUwNDI0MjE0NDE3WhcNMjUwNTAxMjE0NDE3WjAYMRYwFAYD VQQDEw02ODBhYjBiMS03NWQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuwhgoAIkYHjHYuZRdMda05LiJxdelkKKgqxXFdTOu0G1NYy2yAxN9sN2WL+y pU9M5wPCmJnjbDOMSYVTAsEUXgp6AcHBok/WCGWgn+rj6ibNG8AnCqYBm1UvoS2K LNM2IP33/darYRxDQ5NsqTIoT+ECeH+pCEArjYRYCwwhp8OIIUjVZr07keoHo3eU rKoQVxL/v7/O089Tv8SD9TpjF/vz3RBVQpOjKcQYEd3rPicARskGDNQQ5zdNBg36 24pU1sxv41KPGffETxLXMf3FZBi5MJDeA0E2MZqUawoU/5roLX/7kstLHqlBbfGm FJjPuhk2mjAgkkDK4Gq37cTqfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEH8r20T dRD3AEXovxRNNIVWgJz4MB8GA1UdIwQYMBaAFL0Gvb+LDu28nwc5WmUlT8uFg5id MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjgxNi82MTA0NjYxMDNE RDYxMUVCQTA2MDJDNUJDNEY5QUUwMi92UWE5djRzTzdieWZCemxhWlNWUHk0V0Rt SjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZRYTl2NHNPN2J5ZkJ6bGFaU1ZQeTRXRG1KMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QjgxNi82MTA0NjYxMDNERDYxMUVCQTA2MDJDNUJDNEY5QUUwMi92UWE5djRzTzdi eWZCemxhWlNWUHk0V0RtSjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCl9TQilUeyTLMuPviQw1RnjOZQr9ZS0PbYhtbGhVlos+85G/yN7WMi BL8/SnIFJ8vK3leZ3+BdCmsIUYunOA4KGQ+iyBR98fRz2qlk4uVFsftGzhvvLFgC 9xWrh724vGTD8U2uP1a+OAZP3vv4dgoary0NNexp3gD1rLYnClKq6Zf3m2M9hUMU QgSBNBbkpO11alnyJNnHxMavBeUOQXrEYgCjbq4eFdg3XSrgwVwnoeb9L72L1fy3 ACE1wKQDT7rQeCw0WHFrygvfaiE7f4/wm+cUjgQ5JJaKc4mc0/sD3S6BTdPqDVdz Tm3kenCs/P5wqzg+sTXg1lg1mYc5Pfaa -----END CERTIFICATE-----Generated at Sat Apr 26 04:24:36 2025 by rpki-client