$ rpki-client -vvf rpki.apnic.net/member_repository/A91D23D1/1F338AC490CC11EBB1BE102DC4F9AE02/SQP-uXRPViXit-FaT4CyXtPdCfM.mft File: SQP-uXRPViXit-FaT4CyXtPdCfM.mft (raw, json) Hash identifier: n8ZlfUdezuGYgSsHggFJtmYxcHWvBqAtBBerusD+Hbc= Subject key identifier: F1:1F:FA:DC:67:62:A1:E5:37:99:B9:D1:FE:97:AB:78:E2:8D:6B:32 Authority key identifier: 49:03:FE:B9:74:4F:56:25:E2:B7:E1:5A:4F:80:B2:5E:D3:DD:09:F3 Certificate issuer: /CN=A91D23D1/serialNumber=4903FEB9744F5625E2B7E15A4F80B25ED3DD09F3 Certificate serial: 0630 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SQP-uXRPViXit-FaT4CyXtPdCfM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D23D1/1F338AC490CC11EBB1BE102DC4F9AE02/SQP-uXRPViXit-FaT4CyXtPdCfM.mft Manifest number: 062B Signing time: Thu 24 Apr 2025 22:28:47 +0000 Manifest this update: Thu 24 Apr 2025 22:28:46 +0000 Manifest next update: Thu 01 May 2025 22:28:46 +0000 Files and hashes: 1: SQP-uXRPViXit-FaT4CyXtPdCfM.crl (hash: PiqmEh6qJgsmc9CAmCigsb9Jg7CB2y3T1n/YJu7Ovhc=) 2: 32BA4EE0913311EB96A8E810C4F9AE02.roa (hash: sQNOj4qancKoB72U0bVcoarcyKvmrTavihgBPexyxuM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D23D1/1F338AC490CC11EBB1BE102DC4F9AE02/SQP-uXRPViXit-FaT4CyXtPdCfM.crl rsync://rpki.apnic.net/member_repository/A91D23D1/1F338AC490CC11EBB1BE102DC4F9AE02/SQP-uXRPViXit-FaT4CyXtPdCfM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SQP-uXRPViXit-FaT4CyXtPdCfM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:28:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1584 (0x630) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D23D1, serialNumber=4903FEB9744F5625E2B7E15A4F80B25ED3DD09F3 Validity Not Before: Apr 24 22:28:46 2025 GMT Not After : May 1 22:28:46 2025 GMT Subject: CN=680abb1e-8431 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:4b:e7:0f:d4:7d:a6:62:34:9d:36:41:e6:40: 14:28:2b:b5:f4:5c:d8:e4:9b:16:eb:39:46:01:62: d7:f0:25:78:ed:7b:57:94:e5:16:a6:17:c9:b9:6b: 02:08:bb:ec:4d:53:cd:ad:a6:40:4b:60:f5:8b:55: 3b:d6:a7:71:6c:1c:af:7e:0f:6d:d3:57:e4:11:0c: a2:23:c4:ee:3d:68:ed:de:2b:11:5e:db:f1:f4:cb: 35:6e:78:aa:8b:07:95:b9:a9:b8:5c:f6:57:e9:b6: e5:f2:72:63:86:0a:5d:a8:cf:52:de:1b:82:e6:8d: 7d:6c:fd:e6:ca:4f:09:d4:c6:f4:46:f4:47:ea:07: a9:3b:1a:98:60:04:12:78:27:c0:f6:0a:65:1c:12: 5d:9d:2b:46:50:1e:9d:15:09:3b:12:f9:74:35:23: 44:4c:20:4b:95:1f:5b:1d:87:92:5d:98:8c:8e:c1: 7d:23:3d:55:e7:a1:77:77:81:73:2b:b0:2b:96:e5: fb:b7:2e:46:1a:e4:22:df:a5:c8:90:66:19:01:06: 49:02:af:08:9a:32:db:23:41:42:7b:2f:64:86:45: 6a:c1:0b:0d:54:f1:16:31:25:65:f9:b8:d0:04:da: 13:31:aa:2c:3a:3d:35:c0:ae:86:d2:b9:fa:67:99: 72:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:1F:FA:DC:67:62:A1:E5:37:99:B9:D1:FE:97:AB:78:E2:8D:6B:32 X509v3 Authority Key Identifier: keyid:49:03:FE:B9:74:4F:56:25:E2:B7:E1:5A:4F:80:B2:5E:D3:DD:09:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D23D1/1F338AC490CC11EBB1BE102DC4F9AE02/SQP-uXRPViXit-FaT4CyXtPdCfM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SQP-uXRPViXit-FaT4CyXtPdCfM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D23D1/1F338AC490CC11EBB1BE102DC4F9AE02/SQP-uXRPViXit-FaT4CyXtPdCfM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:21:93:55:49:c6:b9:e2:c7:ff:2f:0a:06:53:33:41:b8:41: 69:d0:ae:b9:4b:00:3c:03:4e:64:a4:db:0f:80:e8:bb:ba:70: 6b:d6:f0:2f:8b:3f:e0:1e:03:15:fd:55:f8:ce:67:f0:1f:6a: 90:d0:4a:05:f8:07:b4:ed:f2:ad:65:cb:ef:82:47:b3:38:68: 48:33:be:e9:c7:20:e4:e0:bf:6e:e6:78:62:4c:09:85:88:9f: d1:65:bd:8b:14:c2:a5:4c:7d:8b:0c:64:6f:9e:d3:ba:4d:9c: 41:cf:e1:67:b4:e2:58:59:e4:9b:a7:d2:93:cc:b0:7a:58:00: 21:74:60:56:af:96:b8:cb:5a:f1:d4:1d:5a:f5:61:fd:b7:df: 9b:63:17:ea:a7:7b:68:41:01:5e:1b:e6:ea:ec:f3:6b:a1:c4: dc:a7:a6:a0:fe:39:75:56:3c:91:81:ea:59:99:a6:35:7f:e8: b7:b3:89:ad:83:f4:a0:58:6e:ff:e3:69:40:c5:b3:71:be:97: 6c:b1:7b:44:4b:ce:ff:0b:60:81:3e:b0:4a:2b:72:26:42:fc: c0:b6:8d:b3:ab:04:c7:41:2b:40:65:30:fb:bf:3b:a2:b5:ad: 8e:89:ea:75:d3:9b:85:fb:55:4f:ca:51:e1:1c:da:64:3d:e6: 7f:ab:ca:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBjAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDIzRDExMTAvBgNVBAUTKDQ5MDNGRUI5NzQ0RjU2MjVFMkI3RTE1QTRGODBCMjVF RDNERDA5RjMwHhcNMjUwNDI0MjIyODQ2WhcNMjUwNTAxMjIyODQ2WjAYMRYwFAYD VQQDEw02ODBhYmIxZS04NDMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvEvnD9R9pmI0nTZB5kAUKCu19FzY5JsW6zlGAWLX8CV47XtXlOUWphfJuWsC CLvsTVPNraZAS2D1i1U71qdxbByvfg9t01fkEQyiI8TuPWjt3isRXtvx9Ms1bniq iweVuam4XPZX6bbl8nJjhgpdqM9S3huC5o19bP3myk8J1Mb0RvRH6gepOxqYYAQS eCfA9gplHBJdnStGUB6dFQk7Evl0NSNETCBLlR9bHYeSXZiMjsF9Iz1V56F3d4Fz K7ArluX7ty5GGuQi36XIkGYZAQZJAq8ImjLbI0FCey9khkVqwQsNVPEWMSVl+bjQ BNoTMaosOj01wK6G0rn6Z5ly1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPEf+txn YqHlN5m50f6Xq3jijWsyMB8GA1UdIwQYMBaAFEkD/rl0T1Yl4rfhWk+Asl7T3Qnz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjNEMS8xRjMzOEFDNDkw Q0MxMUVCQjFCRTEwMkRDNEY5QUUwMi9TUVAtdVhSUFZpWGl0LUZhVDRDeVh0UGRD Zk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NRUC11WFJQVmlYaXQtRmFUNEN5WHRQZENmTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MjNEMS8xRjMzOEFDNDkwQ0MxMUVCQjFCRTEwMkRDNEY5QUUwMi9TUVAtdVhSUFZp WGl0LUZhVDRDeVh0UGRDZk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLIZNVSca54sf/LwoGUzNBuEFp0K65SwA8A05kpNsPgOi7unBr1vAv iz/gHgMV/VX4zmfwH2qQ0EoF+Ae07fKtZcvvgkezOGhIM77pxyDk4L9u5nhiTAmF iJ/RZb2LFMKlTH2LDGRvntO6TZxBz+FntOJYWeSbp9KTzLB6WAAhdGBWr5a4y1rx 1B1a9WH9t9+bYxfqp3toQQFeG+bq7PNrocTcp6ag/jl1VjyRgepZmaY1f+i3s4mt g/SgWG7/42lAxbNxvpdssXtES87/C2CBPrBKK3ImQvzAto2zqwTHQStAZTD7vzui ta2Oiep105uF+1VPylHhHNpkPeZ/q8oA -----END CERTIFICATE-----Generated at Sat Apr 26 12:57:46 2025 by rpki-client