$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC017/105AC8FC90C311EDBA1DCC23C4F9AE02/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.mft File: CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.mft (raw, json) Hash identifier: /s6T7H0aR3GpK5SBU4IAetPfF+Pkvyt/UDtt8+FMUMo= Subject key identifier: B4:FE:B7:44:1B:58:72:7E:1C:87:37:A7:80:CD:AF:A2:F0:BE:7A:F1 Authority key identifier: 0A:A5:DE:29:26:5A:08:E2:7A:58:1D:89:44:65:BD:CD:B7:37:09:BB Certificate issuer: /CN=A91DC017/serialNumber=0AA5DE29265A08E27A581D894465BDCDB73709BB Certificate serial: 01CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC017/105AC8FC90C311EDBA1DCC23C4F9AE02/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.mft Manifest number: 01BA Signing time: Fri 25 Apr 2025 02:23:32 +0000 Manifest this update: Fri 25 Apr 2025 02:23:32 +0000 Manifest next update: Fri 02 May 2025 02:23:32 +0000 Files and hashes: 1: CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.crl (hash: +kv0i4jy0RJ7u9qaxIYxIiVTKslnxBLQYiJ38mhOpiM=) 2: C0C268B8441C11EF9E110F1EC4F9AE02.roa (hash: m6rZeuVTK1YDhuaaIVhiTv3yauwN9+tcZ5dIfBdhpRQ=) 3: 1B8DE01C641911EF83FFBF3CC4F9AE02.roa (hash: mAZNBvYiKFXdkzpTN4tNBsnyhqKr4h/2Tyrx/kSmdy8=) 4: 08A1C0B8DC5011EF9C212C5CC4F9AE02.roa (hash: Vaf4WstL1N3DSV5lZGZocpmDqTwW1A3D3RH6q2VNIFc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC017/105AC8FC90C311EDBA1DCC23C4F9AE02/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.crl rsync://rpki.apnic.net/member_repository/A91DC017/105AC8FC90C311EDBA1DCC23C4F9AE02/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:23:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 458 (0x1ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC017, serialNumber=0AA5DE29265A08E27A581D894465BDCDB73709BB Validity Not Before: Apr 25 02:23:32 2025 GMT Not After : May 2 02:23:32 2025 GMT Subject: CN=680af224-b78e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:32:4a:77:f5:ca:5a:e8:1c:3e:89:22:c0:e1: 69:9f:96:69:5a:c3:2c:c8:f1:9f:29:56:56:a2:3b: 3e:3a:46:67:81:2f:cb:08:82:09:5c:9d:f9:92:5b: 65:9e:20:46:7a:1e:b7:30:51:36:4f:f4:2b:be:34: bf:10:a5:2e:c8:24:ad:26:b4:60:93:43:49:18:e4: cb:55:89:d4:08:fe:a9:eb:33:3e:e9:5d:81:5f:c7: 1e:3e:c8:c8:5f:82:92:a5:25:9a:97:57:de:27:cd: 28:b4:5f:29:91:23:2e:d5:9c:07:03:52:e6:e0:af: 1c:47:0d:f6:de:fd:37:b5:46:12:78:46:9a:42:f2: b8:0f:87:26:86:e8:dc:6b:14:68:7a:b9:63:5b:fc: 89:61:53:d4:3a:fc:fc:a8:c5:d2:a7:b4:d1:5e:91: 38:94:9b:64:b3:b1:95:35:de:79:90:3e:70:0b:b9: 2f:87:72:7e:11:2d:96:ce:05:e9:bd:5a:9d:4a:99: 40:6c:97:76:f2:b7:37:ac:a1:5e:c3:18:af:c0:8b: 5c:5e:6a:31:b1:91:f4:51:58:77:75:73:41:bf:29: 07:d5:5c:89:aa:f7:69:09:ba:15:f8:e4:2b:30:c4: 37:1e:79:62:29:d7:22:6a:3f:3b:1b:82:76:d0:28: 9c:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:FE:B7:44:1B:58:72:7E:1C:87:37:A7:80:CD:AF:A2:F0:BE:7A:F1 X509v3 Authority Key Identifier: keyid:0A:A5:DE:29:26:5A:08:E2:7A:58:1D:89:44:65:BD:CD:B7:37:09:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC017/105AC8FC90C311EDBA1DCC23C4F9AE02/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC017/105AC8FC90C311EDBA1DCC23C4F9AE02/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:84:41:e9:0a:d0:70:49:34:66:a3:6d:b4:a3:8c:da:26:0c: 54:fe:6a:72:a6:86:ef:a7:b9:22:e7:b9:36:a9:3e:71:42:45: 84:c1:c3:ef:6f:f1:18:a6:cb:ee:a8:94:8e:4a:b1:d8:23:02: f9:07:25:c6:e7:6b:ec:dc:bb:43:94:dc:84:21:5e:8c:d1:73: 8e:73:f3:1f:bc:d7:ce:1b:5d:60:4d:a5:f5:69:ff:c9:b7:e3: dd:83:07:a5:a0:07:18:c1:2c:1f:83:a4:32:66:73:d8:de:30: 4f:7a:b2:a4:1a:58:f3:cf:06:11:3d:56:24:40:96:07:58:67: 64:16:7a:ce:7a:7f:ee:22:bd:5f:fb:54:cc:7d:a4:bf:a8:a6: 4b:f5:fc:7f:94:1b:0f:01:19:af:39:8f:ad:b8:ac:fc:55:0c: 69:32:ba:62:34:37:a6:36:f8:6d:77:bd:c6:9b:2d:45:1f:b1: 00:6f:00:d3:18:7d:a6:e5:01:0c:20:ff:09:2d:0d:e1:89:81: 08:8c:29:04:b0:31:55:d8:a5:c1:f4:b2:d5:f2:0d:9f:23:4c: cd:1f:5e:97:29:f5:8b:e3:10:81:5e:c8:a7:a5:0e:9f:65:0b: 94:94:10:12:aa:78:52:4f:a3:79:7c:97:77:0d:2a:8c:01:f2: 46:32:40:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REMwMTcxMTAvBgNVBAUTKDBBQTVERTI5MjY1QTA4RTI3QTU4MUQ4OTQ0NjVCRENE QjczNzA5QkIwHhcNMjUwNDI1MDIyMzMyWhcNMjUwNTAyMDIyMzMyWjAYMRYwFAYD VQQDEw02ODBhZjIyNC1iNzhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1jJKd/XKWugcPokiwOFpn5ZpWsMsyPGfKVZWojs+OkZngS/LCIIJXJ35kltl niBGeh63MFE2T/QrvjS/EKUuyCStJrRgk0NJGOTLVYnUCP6p6zM+6V2BX8cePsjI X4KSpSWal1feJ80otF8pkSMu1ZwHA1Lm4K8cRw323v03tUYSeEaaQvK4D4cmhujc axRoerljW/yJYVPUOvz8qMXSp7TRXpE4lJtks7GVNd55kD5wC7kvh3J+ES2WzgXp vVqdSplAbJd28rc3rKFewxivwItcXmoxsZH0UVh3dXNBvykH1VyJqvdpCboV+OQr MMQ3HnliKdciaj87G4J20CicqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLT+t0Qb WHJ+HIc3p4DNr6LwvnrxMB8GA1UdIwQYMBaAFAql3ikmWgjielgdiURlvc23Nwm7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzAxNy8xMDVBQzhGQzkw QzMxMUVEQkExRENDMjNDNEY5QUUwMi9DcVhlS1NaYUNPSjZXQjJKUkdXOXpiYzND YnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NxWGVLU1phQ09KNldCMkpSR1c5emJjM0Nicy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzAxNy8xMDVBQzhGQzkwQzMxMUVEQkExRENDMjNDNEY5QUUwMi9DcVhlS1NaYUNP SjZXQjJKUkdXOXpiYzNDYnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAuhEHpCtBwSTRmo220o4zaJgxU/mpypobvp7ki57k2qT5xQkWEwcPv b/EYpsvuqJSOSrHYIwL5ByXG52vs3LtDlNyEIV6M0XOOc/MfvNfOG11gTaX1af/J t+PdgweloAcYwSwfg6QyZnPY3jBPerKkGljzzwYRPVYkQJYHWGdkFnrOen/uIr1f +1TMfaS/qKZL9fx/lBsPARmvOY+tuKz8VQxpMrpiNDemNvhtd73Gmy1FH7EAbwDT GH2m5QEMIP8JLQ3hiYEIjCkEsDFV2KXB9LLV8g2fI0zNH16XKfWL4xCBXsinpQ6f ZQuUlBASqnhST6N5fJd3DSqMAfJGMkAz -----END CERTIFICATE-----Generated at Sat Apr 26 12:58:25 2025 by rpki-client