$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB04D/E958AFE6019C11EC91644B7BC4F9AE02/qhOo9ipv0n6bme44axRRnm_MhjI.mft File: qhOo9ipv0n6bme44axRRnm_MhjI.mft (raw, json) Hash identifier: BUkbIw/vNh/wVzTVFCRhZe0/rHPQAoHcIIEk8DtRhSs= Subject key identifier: 67:44:B8:AA:47:C4:75:07:90:B0:B0:8E:59:51:BB:03:02:28:6C:B8 Authority key identifier: AA:13:A8:F6:2A:6F:D2:7E:9B:99:EE:38:6B:14:51:9E:6F:CC:86:32 Certificate issuer: /CN=A91DB04D/serialNumber=AA13A8F62A6FD27E9B99EE386B14519E6FCC8632 Certificate serial: 0517 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qhOo9ipv0n6bme44axRRnm_MhjI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB04D/E958AFE6019C11EC91644B7BC4F9AE02/qhOo9ipv0n6bme44axRRnm_MhjI.mft Manifest number: 0511 Signing time: Thu 24 Apr 2025 23:25:09 +0000 Manifest this update: Thu 24 Apr 2025 23:25:09 +0000 Manifest next update: Thu 01 May 2025 23:25:09 +0000 Files and hashes: 1: qhOo9ipv0n6bme44axRRnm_MhjI.crl (hash: WWB0MGtZpdyjY+W7bSXlyHoL5RCPA00CSl+0KTMTnpw=) 2: 5913DBAA01A011ECBFF72849C4F9AE02.roa (hash: L2t/K4jYZMjKtZ2tLHjje+iSEvp8dgbz2aouwvg2y60=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB04D/E958AFE6019C11EC91644B7BC4F9AE02/qhOo9ipv0n6bme44axRRnm_MhjI.crl rsync://rpki.apnic.net/member_repository/A91DB04D/E958AFE6019C11EC91644B7BC4F9AE02/qhOo9ipv0n6bme44axRRnm_MhjI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qhOo9ipv0n6bme44axRRnm_MhjI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:25:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1303 (0x517) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB04D, serialNumber=AA13A8F62A6FD27E9B99EE386B14519E6FCC8632 Validity Not Before: Apr 24 23:25:09 2025 GMT Not After : May 1 23:25:09 2025 GMT Subject: CN=680ac855-958a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:76:44:65:3f:a8:f3:2f:0b:ff:b7:7a:29:12: 30:77:1a:ad:37:fe:dc:59:e7:ac:9f:c7:eb:21:22: 71:eb:e9:f8:4f:41:ec:23:7e:90:38:83:77:eb:68: 43:a1:d4:e6:dc:b6:85:01:ba:82:98:a1:ef:8e:5d: 37:4d:67:99:e5:f4:ee:be:30:3b:9c:56:46:e6:5e: 61:4f:92:6a:a3:f0:75:0a:69:9d:3a:73:3a:6c:ab: 34:02:7d:36:4c:c7:17:67:89:c9:44:7d:9a:a6:ff: 92:c2:1d:d0:1e:13:61:31:80:09:4e:c7:e8:bb:b1: 96:a0:05:74:c5:4a:aa:cb:7c:ea:79:78:73:c2:4a: 29:43:eb:24:96:bd:85:36:ba:ea:ee:05:5d:ed:42: fe:e6:5e:1f:7b:57:7e:10:e4:c2:6b:30:28:89:27: 55:b8:6b:ba:1a:67:cb:c3:15:d9:45:c7:5c:67:0f: 98:28:16:92:f8:33:4c:98:51:73:5e:f2:bd:3b:a9: 64:b4:53:88:37:11:44:55:72:4a:47:b9:74:72:e5: 57:a1:dc:68:2f:8c:c7:e8:bf:33:7b:d8:11:cc:24: fd:74:dd:bb:04:31:25:a3:e1:e4:fb:23:61:39:e5: ae:35:dd:26:62:17:e1:8e:be:5c:7a:45:27:c1:a6: c8:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:44:B8:AA:47:C4:75:07:90:B0:B0:8E:59:51:BB:03:02:28:6C:B8 X509v3 Authority Key Identifier: keyid:AA:13:A8:F6:2A:6F:D2:7E:9B:99:EE:38:6B:14:51:9E:6F:CC:86:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB04D/E958AFE6019C11EC91644B7BC4F9AE02/qhOo9ipv0n6bme44axRRnm_MhjI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qhOo9ipv0n6bme44axRRnm_MhjI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB04D/E958AFE6019C11EC91644B7BC4F9AE02/qhOo9ipv0n6bme44axRRnm_MhjI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:86:9d:77:29:be:52:33:9e:bf:f1:6e:6c:08:42:df:47:af: 42:b0:4d:21:4b:29:b8:05:d0:74:4a:6c:1b:2f:ef:9a:44:d0: d9:ed:59:f9:96:ed:08:85:e9:be:85:48:cf:2e:03:35:2e:95: 1e:1e:7d:87:d1:b3:c8:ac:1e:c1:1e:ad:f4:9e:a2:bd:6f:86: 9d:b8:f9:54:5e:d6:1e:2f:48:a2:2f:e4:e8:2d:e0:3f:5c:c6: 6d:4b:28:0f:5d:2b:15:82:a6:b8:83:09:ff:54:6d:ca:66:2f: cd:6f:1f:0d:fb:51:c2:8c:3a:c7:99:2b:ca:61:f9:7c:92:bd: 15:f0:55:8d:f9:0f:c9:78:3d:68:c8:bf:ca:93:6f:42:b3:7d: 13:6c:c7:e2:be:c4:5b:03:20:26:a7:20:5d:ba:5d:ab:db:09: cc:43:27:b9:b4:c8:4e:61:9b:19:c8:aa:d6:6c:93:5d:08:1b: 60:2e:72:0b:d6:13:a5:a3:29:6e:08:db:c6:72:d3:20:26:af: 55:95:60:9f:d0:41:17:1b:8e:2a:48:94:15:07:64:4d:23:28: 35:57:11:df:67:ee:f8:26:1c:60:1b:03:78:f6:51:4d:54:44: ad:96:80:23:77:3c:20:e6:af:03:0e:55:60:06:21:05:f4:2f: 47:0e:ba:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBRcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REIwNEQxMTAvBgNVBAUTKEFBMTNBOEY2MkE2RkQyN0U5Qjk5RUUzODZCMTQ1MTlF NkZDQzg2MzIwHhcNMjUwNDI0MjMyNTA5WhcNMjUwNTAxMjMyNTA5WjAYMRYwFAYD VQQDEw02ODBhYzg1NS05NThhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1XZEZT+o8y8L/7d6KRIwdxqtN/7cWeesn8frISJx6+n4T0HsI36QOIN362hD odTm3LaFAbqCmKHvjl03TWeZ5fTuvjA7nFZG5l5hT5Jqo/B1CmmdOnM6bKs0An02 TMcXZ4nJRH2apv+Swh3QHhNhMYAJTsfou7GWoAV0xUqqy3zqeXhzwkopQ+sklr2F Nrrq7gVd7UL+5l4fe1d+EOTCazAoiSdVuGu6GmfLwxXZRcdcZw+YKBaS+DNMmFFz XvK9O6lktFOINxFEVXJKR7l0cuVXodxoL4zH6L8ze9gRzCT9dN27BDElo+Hk+yNh OeWuNd0mYhfhjr5cekUnwabIrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGdEuKpH xHUHkLCwjllRuwMCKGy4MB8GA1UdIwQYMBaAFKoTqPYqb9J+m5nuOGsUUZ5vzIYy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjA0RC9FOTU4QUZFNjAx OUMxMUVDOTE2NDRCN0JDNEY5QUUwMi9xaE9vOWlwdjBuNmJtZTQ0YXhSUm5tX01o akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FoT285aXB2MG42Ym1lNDRheFJSbm1fTWhqSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjA0RC9FOTU4QUZFNjAxOUMxMUVDOTE2NDRCN0JDNEY5QUUwMi9xaE9vOWlwdjBu NmJtZTQ0YXhSUm5tX01oakkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBChp13Kb5SM56/8W5sCELfR69CsE0hSym4BdB0SmwbL++aRNDZ7Vn5 lu0Ihem+hUjPLgM1LpUeHn2H0bPIrB7BHq30nqK9b4aduPlUXtYeL0iiL+ToLeA/ XMZtSygPXSsVgqa4gwn/VG3KZi/Nbx8N+1HCjDrHmSvKYfl8kr0V8FWN+Q/JeD1o yL/Kk29Cs30TbMfivsRbAyAmpyBdul2r2wnMQye5tMhOYZsZyKrWbJNdCBtgLnIL 1hOloyluCNvGctMgJq9VlWCf0EEXG44qSJQVB2RNIyg1VxHfZ+74JhxgGwN49lFN VEStloAjdzwg5q8DDlVgBiEF9C9HDrp4 -----END CERTIFICATE-----Generated at Sat Apr 26 05:15:11 2025 by rpki-client