$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6E35/729CB23076FF11EBBFB60D14C4F9AE02/qg08vlkeG_ZBGL9vA2QSX6abipA.mft File: qg08vlkeG_ZBGL9vA2QSX6abipA.mft (raw, json) Hash identifier: mmwX1U+IYiVlkFv1F7XGHPLDWIXf7V+fZRE0M+EY4w0= Subject key identifier: 83:47:25:94:97:6A:9C:AB:A9:BF:33:94:36:72:4F:57:24:47:77:A0 Authority key identifier: AA:0D:3C:BE:59:1E:1B:F6:41:18:BF:6F:03:64:12:5F:A6:9B:8A:90 Certificate issuer: /CN=A91D6E35/serialNumber=AA0D3CBE591E1BF64118BF6F0364125FA69B8A90 Certificate serial: 0677 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qg08vlkeG_ZBGL9vA2QSX6abipA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6E35/729CB23076FF11EBBFB60D14C4F9AE02/qg08vlkeG_ZBGL9vA2QSX6abipA.mft Manifest number: 066E Signing time: Thu 24 Apr 2025 22:08:17 +0000 Manifest this update: Thu 24 Apr 2025 22:08:17 +0000 Manifest next update: Thu 01 May 2025 22:08:17 +0000 Files and hashes: 1: qg08vlkeG_ZBGL9vA2QSX6abipA.crl (hash: 1642o7yVeaeXVrO5fBOF8CpzA21qN61a1ZIwwpHhf3w=) 2: EE188D209F2B11EDBB1C587AC4F9AE02.roa (hash: xunDUR+vk1rAB3LOb72QA9qMR5Y4O+s76u7aM9CtIVg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6E35/729CB23076FF11EBBFB60D14C4F9AE02/qg08vlkeG_ZBGL9vA2QSX6abipA.crl rsync://rpki.apnic.net/member_repository/A91D6E35/729CB23076FF11EBBFB60D14C4F9AE02/qg08vlkeG_ZBGL9vA2QSX6abipA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qg08vlkeG_ZBGL9vA2QSX6abipA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:08:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1655 (0x677) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6E35, serialNumber=AA0D3CBE591E1BF64118BF6F0364125FA69B8A90 Validity Not Before: Apr 24 22:08:17 2025 GMT Not After : May 1 22:08:17 2025 GMT Subject: CN=680ab651-b6ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:f2:51:25:51:38:a2:76:a4:52:1f:9f:89:47: 45:5c:b8:72:65:0a:66:89:80:3b:da:b9:92:77:55: ed:06:f4:b3:33:19:26:8b:24:9b:4d:db:fa:c9:8d: 32:6b:d6:b1:5c:c9:28:d1:73:76:a9:7a:bc:6d:91: 77:e6:95:32:85:ae:a9:06:d6:a8:07:7f:56:66:0f: 08:53:e5:0a:65:72:ed:c0:25:33:2b:bf:ad:f6:13: 1a:a3:8a:48:ae:e8:af:05:d0:6d:c2:53:42:c2:eb: 08:8c:bf:4c:d2:ac:96:87:13:d0:44:3a:18:4b:d4: 13:ee:e8:b3:b6:b7:68:d8:73:06:aa:83:39:07:b8: 1b:81:df:3b:c7:69:6e:fe:0a:32:2f:0d:16:b7:96: 29:e4:3a:35:c2:e5:da:dd:4d:36:32:fa:aa:4e:f0: 1c:6c:c8:3d:45:c9:18:f2:3c:91:06:7c:a0:56:3c: 80:34:e4:52:3e:83:4a:9f:fe:ad:ee:ed:e1:df:c7: df:83:bd:13:7c:f7:6c:fb:a7:85:1d:a1:76:86:8f: c8:b9:0f:e6:4b:d6:02:53:68:be:58:4e:d5:23:11: db:6f:b8:3e:e7:e3:dc:8b:e0:93:8e:aa:fc:55:aa: db:65:ca:2b:53:1a:a8:5d:08:2b:87:fc:c0:53:d7: 4e:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:47:25:94:97:6A:9C:AB:A9:BF:33:94:36:72:4F:57:24:47:77:A0 X509v3 Authority Key Identifier: keyid:AA:0D:3C:BE:59:1E:1B:F6:41:18:BF:6F:03:64:12:5F:A6:9B:8A:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6E35/729CB23076FF11EBBFB60D14C4F9AE02/qg08vlkeG_ZBGL9vA2QSX6abipA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qg08vlkeG_ZBGL9vA2QSX6abipA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6E35/729CB23076FF11EBBFB60D14C4F9AE02/qg08vlkeG_ZBGL9vA2QSX6abipA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:44:84:d4:7c:88:88:98:64:ad:e3:a5:f1:e5:03:ca:e0:89: 84:0d:de:68:d3:f9:a0:d4:e2:da:de:69:bd:0c:ce:01:7e:20: 18:5c:e0:57:13:e8:ca:1f:cb:13:d4:a8:40:5c:ef:03:e5:e9: b4:ca:62:45:63:e2:eb:fc:16:de:05:6c:0d:ac:e4:a6:83:e6: aa:11:e8:88:2e:49:97:e5:87:ff:7f:6a:b6:d6:e8:d0:6e:80: 03:2c:be:1e:ae:5a:a0:93:1c:7c:b7:54:4c:78:d2:01:ce:94: be:f3:18:09:46:cc:5b:f9:53:4d:dc:a4:b3:43:34:c1:1e:79: 84:0e:fd:3c:1d:17:0b:2d:8c:71:45:60:58:6a:ce:62:9f:ff: f9:36:a6:f2:58:4d:d2:2e:8d:de:81:c4:08:51:7b:ce:55:47: 25:06:24:f1:5d:5d:51:d6:34:b0:1d:eb:ae:df:cd:70:aa:e3: 06:ac:5d:f1:d9:e8:97:f9:e9:1f:5d:01:85:19:52:e1:34:1c: 95:bd:6c:94:c1:1a:b3:fe:0b:ff:f9:d8:bb:7f:f0:1c:f9:3e: f4:75:bd:cf:ae:c1:19:50:b1:46:ae:d1:1a:df:6e:35:46:9f: c4:0b:f8:59:e6:0a:04:82:79:a8:cb:5f:0a:ab:36:52:0c:46: 21:19:cd:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBncwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDZFMzUxMTAvBgNVBAUTKEFBMEQzQ0JFNTkxRTFCRjY0MTE4QkY2RjAzNjQxMjVG QTY5QjhBOTAwHhcNMjUwNDI0MjIwODE3WhcNMjUwNTAxMjIwODE3WjAYMRYwFAYD VQQDEw02ODBhYjY1MS1iNmFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy/JRJVE4onakUh+fiUdFXLhyZQpmiYA72rmSd1XtBvSzMxkmiySbTdv6yY0y a9axXMko0XN2qXq8bZF35pUyha6pBtaoB39WZg8IU+UKZXLtwCUzK7+t9hMao4pI ruivBdBtwlNCwusIjL9M0qyWhxPQRDoYS9QT7uiztrdo2HMGqoM5B7gbgd87x2lu /goyLw0Wt5Yp5Do1wuXa3U02MvqqTvAcbMg9RckY8jyRBnygVjyANORSPoNKn/6t 7u3h38ffg70TfPds+6eFHaF2ho/IuQ/mS9YCU2i+WE7VIxHbb7g+5+Pci+CTjqr8 VarbZcorUxqoXQgrh/zAU9dOEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFINHJZSX apyrqb8zlDZyT1ckR3egMB8GA1UdIwQYMBaAFKoNPL5ZHhv2QRi/bwNkEl+mm4qQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENkUzNS83MjlDQjIzMDc2 RkYxMUVCQkZCNjBEMTRDNEY5QUUwMi9xZzA4dmxrZUdfWkJHTDl2QTJRU1g2YWJp cEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FnMDh2bGtlR19aQkdMOXZBMlFTWDZhYmlwQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NkUzNS83MjlDQjIzMDc2RkYxMUVCQkZCNjBEMTRDNEY5QUUwMi9xZzA4dmxrZUdf WkJHTDl2QTJRU1g2YWJpcEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqRITUfIiImGSt46Xx5QPK4ImEDd5o0/mg1OLa3mm9DM4BfiAYXOBX E+jKH8sT1KhAXO8D5em0ymJFY+Lr/BbeBWwNrOSmg+aqEeiILkmX5Yf/f2q21ujQ boADLL4erlqgkxx8t1RMeNIBzpS+8xgJRsxb+VNN3KSzQzTBHnmEDv08HRcLLYxx RWBYas5in//5NqbyWE3SLo3egcQIUXvOVUclBiTxXV1R1jSwHeuu381wquMGrF3x 2eiX+ekfXQGFGVLhNByVvWyUwRqz/gv/+di7f/Ac+T70db3PrsEZULFGrtEa3241 Rp/EC/hZ5goEgnmoy18KqzZSDEYhGc2J -----END CERTIFICATE-----Generated at Sat Apr 26 04:30:30 2025 by rpki-client