$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0435/D2885BC4445D11EBA517457EC4F9AE02/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.mft File: QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.mft (raw, json) Hash identifier: 0VDFg55GDTQC5RaN7QwUNRkxtGSnN+bl49A+FFfwYvM= Subject key identifier: F3:08:AC:EF:A4:0C:21:4B:1F:06:1D:92:A0:ED:82:D9:92:A5:B5:C3 Authority key identifier: 42:91:1B:10:9D:46:E8:86:61:FA:85:61:6C:81:28:03:C5:AB:3C:64 Certificate issuer: /CN=A91E0435/serialNumber=42911B109D46E88661FA85616C812803C5AB3C64 Certificate serial: 06F6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0435/D2885BC4445D11EBA517457EC4F9AE02/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.mft Manifest number: 06F0 Signing time: Thu 24 Apr 2025 21:47:45 +0000 Manifest this update: Thu 24 Apr 2025 21:47:45 +0000 Manifest next update: Thu 01 May 2025 21:47:45 +0000 Files and hashes: 1: QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.crl (hash: HXU6iuKQOi7j9kW65juR/MtfseFwvaNBMqM0tQacDiY=) 2: FCC3542E445E11EBB692887EC4F9AE02.roa (hash: mIOY2vhOsc+nNqge7lnkHLB5M4DsgX2WsmX/mvk1lyU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0435/D2885BC4445D11EBA517457EC4F9AE02/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.crl rsync://rpki.apnic.net/member_repository/A91E0435/D2885BC4445D11EBA517457EC4F9AE02/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:47:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1782 (0x6f6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0435, serialNumber=42911B109D46E88661FA85616C812803C5AB3C64 Validity Not Before: Apr 24 21:47:45 2025 GMT Not After : May 1 21:47:45 2025 GMT Subject: CN=680ab181-7b90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:cf:a9:81:75:dd:25:20:f8:0d:e2:4f:99:b3: f5:a9:a8:bb:05:42:27:78:18:ce:e9:1f:12:1e:56: 62:46:23:de:60:b6:1c:13:7a:26:6a:2f:90:1d:e6: 85:34:a8:c5:39:ec:7c:5c:af:e8:71:2e:a4:cc:14: 7b:ae:86:a8:fb:d5:6c:d4:c3:17:96:4f:6c:28:62: e0:24:6f:f6:3e:10:cf:c1:ed:12:e8:ed:9e:2a:fd: f3:45:0d:f5:43:ba:75:53:54:08:76:88:3a:3e:61: 99:aa:59:50:81:ab:62:cf:24:c9:77:e3:5c:fd:2c: 39:11:19:1a:90:2c:40:a7:8b:f9:9c:78:1c:94:8b: ad:3e:e4:e1:67:91:63:33:4d:e8:92:b5:6f:d4:e7: c6:e9:69:07:3e:8c:b1:0f:21:f0:b9:cd:c9:8b:10: ee:df:be:1c:dd:5a:63:52:85:e0:d9:cc:09:b2:76: 2a:9c:ab:e6:53:70:a0:6f:ef:3f:00:c5:07:c0:b4: a1:aa:a1:0c:73:87:c3:1e:33:67:22:58:4d:67:b1: 34:e2:6f:4e:f9:0f:6e:d1:1c:cf:d0:76:bd:f2:8b: 4f:1d:35:1d:bc:0c:1b:3a:f5:01:a2:be:97:81:2a: dd:1b:b3:d0:41:8c:8e:96:80:81:49:44:52:78:49: 8c:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:08:AC:EF:A4:0C:21:4B:1F:06:1D:92:A0:ED:82:D9:92:A5:B5:C3 X509v3 Authority Key Identifier: keyid:42:91:1B:10:9D:46:E8:86:61:FA:85:61:6C:81:28:03:C5:AB:3C:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0435/D2885BC4445D11EBA517457EC4F9AE02/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0435/D2885BC4445D11EBA517457EC4F9AE02/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:2a:7c:a6:65:ae:bf:68:88:b8:3a:41:72:08:34:ba:63:5e: 7a:06:7e:4f:58:70:b4:f2:89:cd:8e:1b:3f:24:c5:12:b8:78: 49:f7:6a:64:75:5a:9c:22:7a:6c:32:75:73:5c:03:86:76:58: 23:23:38:e9:be:ca:08:6b:a7:6d:21:7f:a8:4e:fb:19:cc:dc: e0:71:ab:b2:c1:f6:01:85:4c:d0:60:1a:4f:33:4c:9c:e0:01: 90:7d:5a:18:17:b8:f1:12:90:c8:88:1f:e4:2c:66:ee:79:e4: b1:7e:c3:46:29:45:92:3e:27:ff:cc:91:03:98:51:00:02:57: 82:fe:07:63:3c:93:bd:eb:09:b2:c2:4f:f9:50:e2:6c:1f:60: 29:b1:3d:25:8c:29:23:b2:54:28:0a:c4:bc:1c:50:bc:64:9f: 3c:4b:af:30:c9:cc:98:4e:b8:72:41:49:14:7e:cf:46:01:de: f0:ad:0c:71:a2:f0:5b:11:9b:7a:33:24:e1:1a:65:1b:06:8a: 7f:08:55:22:90:d8:9b:66:46:b6:a5:5e:17:18:18:91:a7:b7: 83:c8:a7:58:91:96:41:c7:0b:76:55:05:76:20:1e:6e:1a:8b: e3:94:d0:d3:69:9a:76:1f:25:bb:e6:82:d9:24:e7:12:8a:c2: 18:86:2e:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBvYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTA0MzUxMTAvBgNVBAUTKDQyOTExQjEwOUQ0NkU4ODY2MUZBODU2MTZDODEyODAz QzVBQjNDNjQwHhcNMjUwNDI0MjE0NzQ1WhcNMjUwNTAxMjE0NzQ1WjAYMRYwFAYD VQQDEw02ODBhYjE4MS03YjkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2c+pgXXdJSD4DeJPmbP1qai7BUIneBjO6R8SHlZiRiPeYLYcE3omai+QHeaF NKjFOex8XK/ocS6kzBR7roao+9Vs1MMXlk9sKGLgJG/2PhDPwe0S6O2eKv3zRQ31 Q7p1U1QIdog6PmGZqllQgatizyTJd+Nc/Sw5ERkakCxAp4v5nHgclIutPuThZ5Fj M03okrVv1OfG6WkHPoyxDyHwuc3JixDu374c3VpjUoXg2cwJsnYqnKvmU3Cgb+8/ AMUHwLShqqEMc4fDHjNnIlhNZ7E04m9O+Q9u0RzP0Ha98otPHTUdvAwbOvUBor6X gSrdG7PQQYyOloCBSURSeEmM1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPMIrO+k DCFLHwYdkqDtgtmSpbXDMB8GA1UdIwQYMBaAFEKRGxCdRuiGYfqFYWyBKAPFqzxk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDQzNS9EMjg4NUJDNDQ0 NUQxMUVCQTUxNzQ1N0VDNEY5QUUwMi9RcEViRUoxRzZJWmgtb1ZoYklFb0E4V3JQ R1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FwRWJFSjFHNklaaC1vVmhiSUVvQThXclBHUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MDQzNS9EMjg4NUJDNDQ0NUQxMUVCQTUxNzQ1N0VDNEY5QUUwMi9RcEViRUoxRzZJ Wmgtb1ZoYklFb0E4V3JQR1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqKnymZa6/aIi4OkFyCDS6Y156Bn5PWHC08onNjhs/JMUSuHhJ92pk dVqcInpsMnVzXAOGdlgjIzjpvsoIa6dtIX+oTvsZzNzgcauywfYBhUzQYBpPM0yc 4AGQfVoYF7jxEpDIiB/kLGbueeSxfsNGKUWSPif/zJEDmFEAAleC/gdjPJO96wmy wk/5UOJsH2ApsT0ljCkjslQoCsS8HFC8ZJ88S68wycyYTrhyQUkUfs9GAd7wrQxx ovBbEZt6MyThGmUbBop/CFUikNibZka2pV4XGBiRp7eDyKdYkZZBxwt2VQV2IB5u GovjlNDTaZp2HyW75oLZJOcSisIYhi7l -----END CERTIFICATE-----Generated at Sat Apr 26 04:35:01 2025 by rpki-client