$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8A55/5FC658260BC911EE9C6F185EC4F9AE02/QyiNyelBKGI4XB6D3TeGNYMyDRg.mft File: QyiNyelBKGI4XB6D3TeGNYMyDRg.mft (raw, json) Hash identifier: mjBoMSFeJEiepExwjKvpPzmkP+mYYHQnA3mvTEwi/J8= Subject key identifier: 9C:28:E8:A1:74:1E:A6:FF:21:52:18:38:6B:D7:EC:3B:44:41:C3:70 Authority key identifier: 43:28:8D:C9:E9:41:28:62:38:5C:1E:83:DD:37:86:35:83:32:0D:18 Certificate issuer: /CN=A91D8A55/serialNumber=43288DC9E9412862385C1E83DD37863583320D18 Certificate serial: 0164 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QyiNyelBKGI4XB6D3TeGNYMyDRg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8A55/5FC658260BC911EE9C6F185EC4F9AE02/QyiNyelBKGI4XB6D3TeGNYMyDRg.mft Manifest number: 0160 Signing time: Fri 25 Apr 2025 03:10:11 +0000 Manifest this update: Fri 25 Apr 2025 03:10:10 +0000 Manifest next update: Fri 02 May 2025 03:10:10 +0000 Files and hashes: 1: QyiNyelBKGI4XB6D3TeGNYMyDRg.crl (hash: 4eR0lMvJq4BbpzWsnnT1aK0oBw6xRPbmn8zH4ooe5sQ=) 2: D1596F0E0BCF11EE8FB8EE16C4F9AE02.roa (hash: JnZnYwDPY6T9KAqalaHmfpI6/yYUrsg6tF5XISERaGQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8A55/5FC658260BC911EE9C6F185EC4F9AE02/QyiNyelBKGI4XB6D3TeGNYMyDRg.crl rsync://rpki.apnic.net/member_repository/A91D8A55/5FC658260BC911EE9C6F185EC4F9AE02/QyiNyelBKGI4XB6D3TeGNYMyDRg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QyiNyelBKGI4XB6D3TeGNYMyDRg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:10:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 356 (0x164) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8A55, serialNumber=43288DC9E9412862385C1E83DD37863583320D18 Validity Not Before: Apr 25 03:10:10 2025 GMT Not After : May 2 03:10:10 2025 GMT Subject: CN=680afd12-1c8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:9b:78:18:0d:d5:2e:64:7b:d6:b8:6a:61:a8: 68:44:7f:03:8c:a9:87:65:1d:5c:4f:71:fe:73:77: b2:ec:a6:19:e2:07:41:57:91:9d:16:0b:f7:c8:4b: a1:d0:9e:0b:10:95:84:de:1d:1d:94:b5:10:0c:a4: 3b:fd:92:3a:13:85:48:54:5c:1a:0d:66:59:0b:9b: a0:a0:d2:0f:3a:49:84:05:91:27:54:8c:df:07:c5: f7:21:07:4c:1b:3c:c3:a9:ff:a8:b2:06:18:4c:a9: ed:d4:2e:31:0b:94:30:41:4c:05:5e:1e:81:66:93: 75:b7:2a:3b:07:c4:48:94:0d:bc:5d:f6:de:87:b0: fa:bf:32:1e:0c:fe:b2:94:f0:0c:19:5c:6d:13:af: 09:8a:06:dd:c6:a5:bf:0c:5f:2a:29:08:cd:52:22: bd:2e:b6:43:fd:7f:cc:75:8e:40:7d:4c:2f:49:03: 94:53:27:72:28:0f:a6:3c:44:f4:3e:19:87:58:8f: 11:1a:3c:97:d4:d5:b5:86:7d:27:9d:b3:b5:1e:01: 58:37:e5:ea:4c:81:be:76:07:9a:03:7a:05:d0:64: 04:78:b6:f1:6c:1a:0f:e1:b4:0f:f2:37:5d:af:2c: c1:dc:fc:1d:e9:6e:fa:0d:a0:b2:2e:83:ad:e7:96: ce:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:28:E8:A1:74:1E:A6:FF:21:52:18:38:6B:D7:EC:3B:44:41:C3:70 X509v3 Authority Key Identifier: keyid:43:28:8D:C9:E9:41:28:62:38:5C:1E:83:DD:37:86:35:83:32:0D:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8A55/5FC658260BC911EE9C6F185EC4F9AE02/QyiNyelBKGI4XB6D3TeGNYMyDRg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QyiNyelBKGI4XB6D3TeGNYMyDRg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8A55/5FC658260BC911EE9C6F185EC4F9AE02/QyiNyelBKGI4XB6D3TeGNYMyDRg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:ef:d2:e3:46:b7:9d:77:c4:4b:b9:c2:f1:6b:32:a2:2e:ad: 13:5f:ec:68:1c:b2:2b:ab:9c:35:a0:64:01:39:79:f3:53:2c: 4a:4b:76:dc:83:aa:3a:6d:1e:2f:cc:16:0e:82:b3:4a:d3:ee: 91:23:42:81:f8:15:8b:45:46:d8:04:cd:28:7f:fb:a6:86:18: 5e:c1:93:e6:a7:71:bc:ba:54:83:da:99:5e:b8:7d:56:20:a7: 06:1c:29:81:a5:34:0c:a7:23:e0:f6:bc:dc:7c:6c:81:99:41: ed:ea:73:28:e5:e1:4d:e6:b4:c6:ce:8e:bc:a9:23:36:18:22: 44:00:2b:91:28:95:0b:be:d2:bb:cf:b4:3f:ef:63:31:3e:06: db:81:0d:e2:80:c8:2d:d7:59:df:d1:d6:bc:a5:51:ee:58:8c: f5:03:de:cd:e0:4c:07:cf:61:39:83:c5:04:ee:59:eb:cd:4c: 61:a3:90:e9:5e:75:30:a4:bd:11:f5:56:9b:57:09:8e:4b:e0: d1:10:fb:77:e7:b5:05:1c:e0:0d:0c:3e:12:57:a7:83:6d:a3: 38:eb:47:d2:f6:27:c5:d6:1a:95:9c:01:9b:83:57:78:58:8a: 6f:88:53:55:1b:a5:56:94:2e:a6:4f:c3:46:7c:5c:f3:29:7c: 92:e3:82:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDhBNTUxMTAvBgNVBAUTKDQzMjg4REM5RTk0MTI4NjIzODVDMUU4M0REMzc4NjM1 ODMzMjBEMTgwHhcNMjUwNDI1MDMxMDEwWhcNMjUwNTAyMDMxMDEwWjAYMRYwFAYD VQQDEw02ODBhZmQxMi0xYzhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6Zt4GA3VLmR71rhqYahoRH8DjKmHZR1cT3H+c3ey7KYZ4gdBV5GdFgv3yEuh 0J4LEJWE3h0dlLUQDKQ7/ZI6E4VIVFwaDWZZC5ugoNIPOkmEBZEnVIzfB8X3IQdM GzzDqf+osgYYTKnt1C4xC5QwQUwFXh6BZpN1tyo7B8RIlA28Xfbeh7D6vzIeDP6y lPAMGVxtE68JigbdxqW/DF8qKQjNUiK9LrZD/X/MdY5AfUwvSQOUUydyKA+mPET0 PhmHWI8RGjyX1NW1hn0nnbO1HgFYN+XqTIG+dgeaA3oF0GQEeLbxbBoP4bQP8jdd ryzB3Pwd6W76DaCyLoOt55bOqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJwo6KF0 Hqb/IVIYOGvX7DtEQcNwMB8GA1UdIwQYMBaAFEMojcnpQShiOFweg903hjWDMg0Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOEE1NS81RkM2NTgyNjBC QzkxMUVFOUM2RjE4NUVDNEY5QUUwMi9ReWlOeWVsQktHSTRYQjZEM1RlR05ZTXlE UmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1F5aU55ZWxCS0dJNFhCNkQzVGVHTllNeURSZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OEE1NS81RkM2NTgyNjBCQzkxMUVFOUM2RjE4NUVDNEY5QUUwMi9ReWlOeWVsQktH STRYQjZEM1RlR05ZTXlEUmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBX79LjRredd8RLucLxazKiLq0TX+xoHLIrq5w1oGQBOXnzUyxKS3bc g6o6bR4vzBYOgrNK0+6RI0KB+BWLRUbYBM0of/umhhhewZPmp3G8ulSD2pleuH1W IKcGHCmBpTQMpyPg9rzcfGyBmUHt6nMo5eFN5rTGzo68qSM2GCJEACuRKJULvtK7 z7Q/72MxPgbbgQ3igMgt11nf0da8pVHuWIz1A97N4EwHz2E5g8UE7lnrzUxho5Dp XnUwpL0R9VabVwmOS+DREPt357UFHOANDD4SV6eDbaM460fS9ifF1hqVnAGbg1d4 WIpviFNVG6VWlC6mT8NGfFzzKXyS44Im -----END CERTIFICATE-----Generated at Sat Apr 26 13:47:12 2025 by rpki-client