$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDCB6/F077598ECC3D11EA8BC45C29C4F9AE02/_qFPI_25d6xkidIQbjXgI7KJaNw.mft File: _qFPI_25d6xkidIQbjXgI7KJaNw.mft (raw, json) Hash identifier: mPRO0PI4v2KQg4FYt8YgsUs+OAWsuuMsPupNBXgF15g= Subject key identifier: EA:D2:5D:F8:4F:BC:7F:9C:1F:2B:78:09:70:46:1F:B7:C5:44:8A:7E Authority key identifier: FE:A1:4F:23:FD:B9:77:AC:64:89:D2:10:6E:35:E0:23:B2:89:68:DC Certificate issuer: /CN=A91DDCB6/serialNumber=FEA14F23FDB977AC6489D2106E35E023B28968DC Certificate serial: 086E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_qFPI_25d6xkidIQbjXgI7KJaNw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DDCB6/F077598ECC3D11EA8BC45C29C4F9AE02/_qFPI_25d6xkidIQbjXgI7KJaNw.mft Manifest number: 0856 Signing time: Thu 24 Apr 2025 20:38:49 +0000 Manifest this update: Thu 24 Apr 2025 20:38:48 +0000 Manifest next update: Thu 01 May 2025 20:38:48 +0000 Files and hashes: 1: _qFPI_25d6xkidIQbjXgI7KJaNw.crl (hash: gj4J9ibIR/pJIJwN96IhG7VbVH9emGbNhf93vVU+XUA=) 2: 9CB5878688DD11ECAC36C11FC4F9AE02.roa (hash: AdjuOXYS3zA7izh/H5q+WmUmDKawZvVShn5CM75yFQs=) 3: 2086256888B911ECAC54E716C4F9AE02.roa (hash: /smgLTvvzRlAwFgnnrG53rcZxe+TUuxudK7zpLwd5hk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DDCB6/F077598ECC3D11EA8BC45C29C4F9AE02/_qFPI_25d6xkidIQbjXgI7KJaNw.crl rsync://rpki.apnic.net/member_repository/A91DDCB6/F077598ECC3D11EA8BC45C29C4F9AE02/_qFPI_25d6xkidIQbjXgI7KJaNw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_qFPI_25d6xkidIQbjXgI7KJaNw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:38:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2158 (0x86e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DDCB6, serialNumber=FEA14F23FDB977AC6489D2106E35E023B28968DC Validity Not Before: Apr 24 20:38:48 2025 GMT Not After : May 1 20:38:48 2025 GMT Subject: CN=680aa158-c45b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:51:1f:b2:4b:41:e8:0b:70:fb:15:79:31:a1: e0:e5:bd:83:0d:81:af:cf:95:13:11:1f:ae:11:db: 65:78:a2:7c:df:d0:32:7d:3e:29:42:a3:e9:88:1e: 71:ca:58:f1:9b:07:f6:c4:66:df:0b:6a:e8:cc:a8: 1e:ac:76:08:b2:c5:bc:0f:f5:83:29:be:48:9b:0a: 58:df:12:c1:bf:f9:2b:f4:4f:a9:e2:78:da:de:fe: 1f:07:16:ae:d2:4c:f7:a2:fc:a7:59:3b:27:87:9a: 87:39:37:63:a9:b8:96:59:0e:0c:b5:3a:09:71:cf: 15:a3:94:af:6c:8e:36:f4:78:83:02:52:ec:bd:09: 18:7f:fb:9f:e1:08:7d:4d:81:a2:1c:65:1c:f4:d8: 9a:1e:cb:df:e1:a1:06:ef:e4:ed:7f:0f:74:72:92: 4c:44:72:22:65:63:3c:d6:8d:0d:be:9d:6b:70:fe: f5:06:86:87:62:1b:d9:74:42:f5:2a:44:2b:11:dc: bb:4f:8c:07:5c:e6:5d:65:7a:d3:0b:fa:ca:5f:01: d0:8d:10:2a:71:dd:aa:09:5c:ab:8e:09:6a:59:e3: 49:be:24:07:d4:b3:e2:6f:6b:82:ed:4f:94:0a:d6: 5f:dc:09:cb:e9:9e:e6:9f:97:6d:45:f1:b0:11:8a: bc:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:D2:5D:F8:4F:BC:7F:9C:1F:2B:78:09:70:46:1F:B7:C5:44:8A:7E X509v3 Authority Key Identifier: keyid:FE:A1:4F:23:FD:B9:77:AC:64:89:D2:10:6E:35:E0:23:B2:89:68:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/F077598ECC3D11EA8BC45C29C4F9AE02/_qFPI_25d6xkidIQbjXgI7KJaNw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_qFPI_25d6xkidIQbjXgI7KJaNw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/F077598ECC3D11EA8BC45C29C4F9AE02/_qFPI_25d6xkidIQbjXgI7KJaNw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:5e:ba:1a:a3:2f:8b:87:c8:5a:90:71:07:cf:3f:c5:af:0b: aa:41:d9:9b:5b:ba:9d:40:08:af:8d:ee:35:ab:c9:46:5d:9f: 89:72:59:80:3f:43:75:00:8b:d1:62:72:c3:3f:72:6d:12:14: 75:0f:e6:d2:f5:1c:97:c7:0e:81:07:82:bf:66:09:56:90:b6: 70:63:30:e5:21:7d:60:f2:6e:5b:25:fc:9b:36:7e:1c:a3:0e: 07:2b:8b:e3:0f:a3:37:7a:08:cb:b5:34:e3:8e:79:03:25:7f: bc:e0:9d:2c:f0:1a:62:28:d4:c7:a6:73:94:d1:7e:1c:7a:46: c4:02:81:cd:41:7b:7b:9a:b3:14:f3:a1:19:3c:c3:36:45:f5: dd:68:2e:a8:ee:14:52:05:6d:31:1d:25:b2:ae:2b:f4:fe:e1: 65:ba:dc:22:2a:2a:0e:f5:36:64:a5:7c:70:b6:5e:ae:9f:d2: 3c:a2:a4:16:cd:97:05:2b:d3:62:5f:6b:8f:ea:db:1f:16:8e: 45:4a:0c:60:e9:ee:c3:bd:3f:60:32:e0:92:b8:1f:2e:a1:df: 51:04:56:dd:8d:e5:91:b7:1d:dc:dd:88:00:86:70:f0:ce:71: 2a:27:b6:39:f6:73:2d:f1:ae:7b:66:c7:db:6b:4c:ae:24:89: 3d:02:ec:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCG4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RERDQjYxMTAvBgNVBAUTKEZFQTE0RjIzRkRCOTc3QUM2NDg5RDIxMDZFMzVFMDIz QjI4OTY4REMwHhcNMjUwNDI0MjAzODQ4WhcNMjUwNTAxMjAzODQ4WjAYMRYwFAYD VQQDEw02ODBhYTE1OC1jNDViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuFEfsktB6Atw+xV5MaHg5b2DDYGvz5UTER+uEdtleKJ839AyfT4pQqPpiB5x yljxmwf2xGbfC2rozKgerHYIssW8D/WDKb5ImwpY3xLBv/kr9E+p4nja3v4fBxau 0kz3ovynWTsnh5qHOTdjqbiWWQ4MtToJcc8Vo5SvbI429HiDAlLsvQkYf/uf4Qh9 TYGiHGUc9NiaHsvf4aEG7+Ttfw90cpJMRHIiZWM81o0Nvp1rcP71BoaHYhvZdEL1 KkQrEdy7T4wHXOZdZXrTC/rKXwHQjRAqcd2qCVyrjglqWeNJviQH1LPib2uC7U+U CtZf3AnL6Z7mn5dtRfGwEYq84wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOrSXfhP vH+cHyt4CXBGH7fFRIp+MB8GA1UdIwQYMBaAFP6hTyP9uXesZInSEG414COyiWjc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERENCNi9GMDc3NTk4RUND M0QxMUVBOEJDNDVDMjlDNEY5QUUwMi9fcUZQSV8yNWQ2eGtpZElRYmpYZ0k3S0ph TncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19xRlBJXzI1ZDZ4a2lkSVFialhnSTdLSmFOdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RENCNi9GMDc3NTk4RUNDM0QxMUVBOEJDNDVDMjlDNEY5QUUwMi9fcUZQSV8yNWQ2 eGtpZElRYmpYZ0k3S0phTncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBXroaoy+Lh8hakHEHzz/FrwuqQdmbW7qdQAivje41q8lGXZ+JclmA P0N1AIvRYnLDP3JtEhR1D+bS9RyXxw6BB4K/ZglWkLZwYzDlIX1g8m5bJfybNn4c ow4HK4vjD6M3egjLtTTjjnkDJX+84J0s8BpiKNTHpnOU0X4cekbEAoHNQXt7mrMU 86EZPMM2RfXdaC6o7hRSBW0xHSWyriv0/uFlutwiKioO9TZkpXxwtl6un9I8oqQW zZcFK9NiX2uP6tsfFo5FSgxg6e7DvT9gMuCSuB8uod9RBFbdjeWRtx3c3YgAhnDw znEqJ7Y59nMt8a57Zsfba0yuJIk9AuyG -----END CERTIFICATE-----Generated at Sat Apr 26 04:23:05 2025 by rpki-client