$ rpki-client -vvf rpki.apnic.net/member_repository/A91E237A/E882E46C5BA011EBAEBE5329C4F9AE02/qSMgEvL8BUJsBog1jP5vuRVHhrw.mft File: qSMgEvL8BUJsBog1jP5vuRVHhrw.mft (raw, json) Hash identifier: fHnZkkUu/4f3MZkBsxGy7yXKxaLgfTiV9Dzvw+lT9eU= Subject key identifier: 6C:29:90:A4:B4:70:C3:3A:79:77:3E:8A:FD:9C:03:34:E9:2E:24:9D Authority key identifier: A9:23:20:12:F2:FC:05:42:6C:06:88:35:8C:FE:6F:B9:15:47:86:BC Certificate issuer: /CN=A91E237A/serialNumber=A9232012F2FC05426C0688358CFE6FB9154786BC Certificate serial: 06B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSMgEvL8BUJsBog1jP5vuRVHhrw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E237A/E882E46C5BA011EBAEBE5329C4F9AE02/qSMgEvL8BUJsBog1jP5vuRVHhrw.mft Manifest number: 06B1 Signing time: Thu 24 Apr 2025 21:56:48 +0000 Manifest this update: Thu 24 Apr 2025 21:56:47 +0000 Manifest next update: Thu 01 May 2025 21:56:47 +0000 Files and hashes: 1: qSMgEvL8BUJsBog1jP5vuRVHhrw.crl (hash: 100dqwu830jha/6R65JMe5u4vrlb7F7UVSqTXoGoWgw=) 2: 5E7BBD38259A11ECB37EA938C4F9AE02.roa (hash: T2RcQUH8KtNgbj8nCU5DcM4WF5c1Qu/0XcpVPW8mvhI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E237A/E882E46C5BA011EBAEBE5329C4F9AE02/qSMgEvL8BUJsBog1jP5vuRVHhrw.crl rsync://rpki.apnic.net/member_repository/A91E237A/E882E46C5BA011EBAEBE5329C4F9AE02/qSMgEvL8BUJsBog1jP5vuRVHhrw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSMgEvL8BUJsBog1jP5vuRVHhrw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:56:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1717 (0x6b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E237A, serialNumber=A9232012F2FC05426C0688358CFE6FB9154786BC Validity Not Before: Apr 24 21:56:47 2025 GMT Not After : May 1 21:56:47 2025 GMT Subject: CN=680ab39f-aab0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:9a:81:fd:34:35:48:a9:f3:b4:f4:b6:cc:89: d5:b9:50:59:b7:d6:90:15:fd:d8:f0:b3:e9:f4:66: 6f:71:30:43:b2:5e:cf:f8:c7:45:71:93:da:7c:48: 7c:12:13:4c:f5:d9:2f:25:7c:0d:c0:60:ef:70:7e: ce:57:cb:86:ca:63:4b:a2:bc:d2:c3:1a:a9:e5:45: 85:95:19:3d:cc:0e:f4:8b:03:a6:43:bf:74:0a:20: 07:45:d4:c0:cd:25:8d:d1:48:f1:10:55:c6:19:9e: c3:b9:e8:f0:a4:9d:bc:f1:74:8a:e5:8d:88:b0:a9: a6:93:16:12:73:19:fb:cc:a5:b8:32:92:74:a3:cf: 28:3f:c8:68:7b:e8:f5:3b:5e:99:9e:d8:0b:9a:b8: c0:38:ed:fc:96:8e:04:8c:29:1f:45:2d:84:ca:ec: 7d:f5:55:1d:81:c7:89:9b:d2:c6:53:c1:5e:e0:09: 94:8c:86:ce:d3:03:12:60:5a:f5:2e:8d:3a:98:64: d4:74:71:b1:bd:08:47:d9:ad:ce:00:59:cf:a7:4f: 24:8a:dc:f8:22:33:62:9b:e2:a9:eb:06:4a:61:9a: cd:11:14:56:63:9b:60:e4:eb:ad:32:7d:2e:7f:25: a6:9b:0a:2c:00:d5:bd:8b:2b:ec:6f:85:ad:b2:00: b4:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:29:90:A4:B4:70:C3:3A:79:77:3E:8A:FD:9C:03:34:E9:2E:24:9D X509v3 Authority Key Identifier: keyid:A9:23:20:12:F2:FC:05:42:6C:06:88:35:8C:FE:6F:B9:15:47:86:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E237A/E882E46C5BA011EBAEBE5329C4F9AE02/qSMgEvL8BUJsBog1jP5vuRVHhrw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSMgEvL8BUJsBog1jP5vuRVHhrw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E237A/E882E46C5BA011EBAEBE5329C4F9AE02/qSMgEvL8BUJsBog1jP5vuRVHhrw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:4e:f5:86:83:c3:04:73:92:8e:09:d7:d4:c6:a9:29:23:49: df:7c:01:90:66:40:be:0e:87:48:44:23:5c:5f:0f:90:57:32: 66:0d:71:65:cb:ec:4a:5e:e0:32:e6:a4:d7:27:3c:a0:ed:7a: ef:40:23:8a:9e:2e:81:01:86:a5:63:a1:7a:62:50:28:a1:17: f7:9d:a3:a3:21:4d:dc:ad:a8:77:96:40:23:0f:41:2d:11:0b: a2:99:ac:49:aa:e3:21:f6:77:bc:34:48:c8:ed:70:44:ec:0c: 95:96:bb:b6:22:42:d6:db:ef:99:a9:f4:a0:9a:e9:53:6f:c6: ae:f7:c2:b3:72:7c:cb:87:af:31:53:e0:89:85:9e:bf:10:00: 93:38:5b:9a:98:26:8c:d7:da:72:1a:a1:c8:8d:f3:cf:52:be: 86:f7:f3:8c:64:5d:97:f0:02:56:e5:3c:fa:46:7e:de:68:ad: e1:47:bb:a7:e4:67:8d:ec:ee:b2:70:45:7b:32:ad:d8:62:27: 2a:4a:af:ce:78:cc:85:98:88:ca:a3:20:a2:80:99:d4:f7:d7: f2:25:b1:3a:69:82:52:9c:cc:0d:8f:05:b7:ac:a8:43:4e:be: 70:3d:80:e8:f1:d8:c7:c0:38:48:f3:98:c5:b0:df:a0:d7:33: cd:c5:97:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBrUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTIzN0ExMTAvBgNVBAUTKEE5MjMyMDEyRjJGQzA1NDI2QzA2ODgzNThDRkU2RkI5 MTU0Nzg2QkMwHhcNMjUwNDI0MjE1NjQ3WhcNMjUwNTAxMjE1NjQ3WjAYMRYwFAYD VQQDEw02ODBhYjM5Zi1hYWIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwpqB/TQ1SKnztPS2zInVuVBZt9aQFf3Y8LPp9GZvcTBDsl7P+MdFcZPafEh8 EhNM9dkvJXwNwGDvcH7OV8uGymNLorzSwxqp5UWFlRk9zA70iwOmQ790CiAHRdTA zSWN0UjxEFXGGZ7DuejwpJ288XSK5Y2IsKmmkxYScxn7zKW4MpJ0o88oP8hoe+j1 O16ZntgLmrjAOO38lo4EjCkfRS2Eyux99VUdgceJm9LGU8Fe4AmUjIbO0wMSYFr1 Lo06mGTUdHGxvQhH2a3OAFnPp08kitz4IjNim+Kp6wZKYZrNERRWY5tg5OutMn0u fyWmmwosANW9iyvsb4WtsgC0XwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGwpkKS0 cMM6eXc+iv2cAzTpLiSdMB8GA1UdIwQYMBaAFKkjIBLy/AVCbAaINYz+b7kVR4a8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjM3QS9FODgyRTQ2QzVC QTAxMUVCQUVCRTUzMjlDNEY5QUUwMi9xU01nRXZMOEJVSnNCb2cxalA1dnVSVkho cncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FTTWdFdkw4QlVKc0JvZzFqUDV2dVJWSGhydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjM3QS9FODgyRTQ2QzVCQTAxMUVCQUVCRTUzMjlDNEY5QUUwMi9xU01nRXZMOEJV SnNCb2cxalA1dnVSVkhocncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCgTvWGg8MEc5KOCdfUxqkpI0nffAGQZkC+DodIRCNcXw+QVzJmDXFl y+xKXuAy5qTXJzyg7XrvQCOKni6BAYalY6F6YlAooRf3naOjIU3crah3lkAjD0Et EQuimaxJquMh9ne8NEjI7XBE7AyVlru2IkLW2++ZqfSgmulTb8au98KzcnzLh68x U+CJhZ6/EACTOFuamCaM19pyGqHIjfPPUr6G9/OMZF2X8AJW5Tz6Rn7eaK3hR7un 5GeN7O6ycEV7Mq3YYicqSq/OeMyFmIjKoyCigJnU99fyJbE6aYJSnMwNjwW3rKhD Tr5wPYDo8djHwDhI85jFsN+g1zPNxZc7 -----END CERTIFICATE-----Generated at Sat Apr 26 03:37:17 2025 by rpki-client