$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4519/0426491E8CAE11EBAA1B1F5EC4F9AE02/qadVVe1wZy9x1S9lk7kbRCC6pws.mft File: qadVVe1wZy9x1S9lk7kbRCC6pws.mft (raw, json) Hash identifier: k8KRN3yym64jtQitCJcJfH1fZXMSFrdUSUwazqT6Y18= Subject key identifier: 34:61:BE:43:2C:BB:06:D5:3D:D5:06:04:CB:FF:66:3C:A3:18:93:98 Authority key identifier: A9:A7:55:55:ED:70:67:2F:71:D5:2F:65:93:B9:1B:44:20:BA:A7:0B Certificate issuer: /CN=A91E4519/serialNumber=A9A75555ED70672F71D52F6593B91B4420BAA70B Certificate serial: 063A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qadVVe1wZy9x1S9lk7kbRCC6pws.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4519/0426491E8CAE11EBAA1B1F5EC4F9AE02/qadVVe1wZy9x1S9lk7kbRCC6pws.mft Manifest number: 0635 Signing time: Thu 24 Apr 2025 22:25:40 +0000 Manifest this update: Thu 24 Apr 2025 22:25:40 +0000 Manifest next update: Thu 01 May 2025 22:25:40 +0000 Files and hashes: 1: qadVVe1wZy9x1S9lk7kbRCC6pws.crl (hash: LSxGv9w0gBxML24DCCrAGiLPW3UylH9K4kY4XF71bB0=) 2: C2B5BE908CAF11EBBADF6F60C4F9AE02.roa (hash: Tp6yV6aNCHUMLxFxEsezUBZI5iOsrCF8OtHjSK1vpw0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4519/0426491E8CAE11EBAA1B1F5EC4F9AE02/qadVVe1wZy9x1S9lk7kbRCC6pws.crl rsync://rpki.apnic.net/member_repository/A91E4519/0426491E8CAE11EBAA1B1F5EC4F9AE02/qadVVe1wZy9x1S9lk7kbRCC6pws.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qadVVe1wZy9x1S9lk7kbRCC6pws.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:25:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1594 (0x63a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4519, serialNumber=A9A75555ED70672F71D52F6593B91B4420BAA70B Validity Not Before: Apr 24 22:25:40 2025 GMT Not After : May 1 22:25:40 2025 GMT Subject: CN=680aba64-a608 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:7e:ea:e5:e8:a0:a4:b9:6e:30:4b:72:5b:b3: cd:d6:93:b3:83:00:fb:13:68:bd:f2:8e:00:f6:63: aa:e4:4a:f7:fd:dd:f7:5f:3a:f1:cc:d8:db:9f:d8: 29:5f:e5:88:f3:3a:06:35:67:c3:c2:09:35:01:c2: 5c:ba:25:8e:ca:dc:87:4f:fc:68:98:6f:e4:02:a9: 7f:ec:4f:84:57:15:41:59:2f:be:0a:3b:8d:c0:c0: 89:ba:61:2f:40:2f:6c:e2:74:02:e9:94:fd:bb:43: c7:79:31:84:11:bd:a2:e6:82:9b:7b:cd:91:81:65: 8d:97:fd:dc:09:38:ad:18:11:48:47:6c:aa:81:c9: a7:a3:af:cf:50:d7:56:6d:b4:e0:99:08:fb:cb:ec: be:fd:54:cc:c9:8b:73:58:4f:93:25:af:3b:54:62: ac:1a:ed:ad:a9:33:34:5d:70:ef:4b:b7:a2:94:44: f9:49:b2:72:1e:54:fb:ab:c9:30:50:81:7c:5e:5b: 3f:0f:29:a6:d6:15:b7:f6:46:f7:62:5d:25:05:f0: 8a:32:80:29:98:01:4d:8a:d5:1c:17:cb:35:5f:3a: 74:f5:5e:39:f7:a6:0a:1a:ee:d5:dc:c9:7f:87:7b: 17:90:16:b7:af:6c:20:b8:27:74:23:b1:38:fb:9f: 01:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:61:BE:43:2C:BB:06:D5:3D:D5:06:04:CB:FF:66:3C:A3:18:93:98 X509v3 Authority Key Identifier: keyid:A9:A7:55:55:ED:70:67:2F:71:D5:2F:65:93:B9:1B:44:20:BA:A7:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4519/0426491E8CAE11EBAA1B1F5EC4F9AE02/qadVVe1wZy9x1S9lk7kbRCC6pws.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qadVVe1wZy9x1S9lk7kbRCC6pws.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4519/0426491E8CAE11EBAA1B1F5EC4F9AE02/qadVVe1wZy9x1S9lk7kbRCC6pws.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ec:4a:9b:71:32:38:dc:fe:87:c1:d3:9a:af:07:61:f2:78:12: 73:80:a7:60:59:61:46:29:b7:c7:5b:80:91:1c:16:54:41:24: 6a:34:f1:3f:a3:09:26:7e:e1:d3:47:22:03:ec:63:15:ad:da: 51:3e:b6:1d:e6:3d:4f:24:0b:8c:52:6b:af:02:80:4f:07:5c: 67:6d:75:0e:a0:02:1c:bf:7d:9b:a3:f4:93:7a:24:bb:dc:fe: 0c:6d:af:f6:f3:84:a8:15:eb:44:67:15:1e:d5:66:4c:0a:d4: ea:4e:f3:d0:4a:8c:23:77:65:ab:6d:6f:aa:bf:df:37:7a:15: b2:fe:79:ba:79:31:fe:6d:7a:0b:9b:40:e0:b4:20:dc:9c:39: dc:bc:26:8b:52:01:ca:02:4a:bc:c4:4a:bc:ae:ca:67:87:c0: 39:00:bf:6f:c5:d0:94:7f:55:4b:ca:a0:b7:41:36:ec:4a:84: 93:7c:dd:67:4d:59:84:db:44:a8:42:3a:4a:8c:e3:f2:8c:27: 39:6d:30:53:8c:c8:38:c2:ec:bd:74:7f:38:4a:1f:51:da:00: c2:88:b2:ea:73:d4:25:52:e0:8f:b5:f8:02:ee:dd:9e:56:16: 1a:7c:c5:db:5e:30:61:42:f0:2b:33:09:94:e2:75:f3:52:7e: 0f:11:05:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBjowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQ1MTkxMTAvBgNVBAUTKEE5QTc1NTU1RUQ3MDY3MkY3MUQ1MkY2NTkzQjkxQjQ0 MjBCQUE3MEIwHhcNMjUwNDI0MjIyNTQwWhcNMjUwNTAxMjIyNTQwWjAYMRYwFAYD VQQDEw02ODBhYmE2NC1hNjA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA537q5eigpLluMEtyW7PN1pOzgwD7E2i98o4A9mOq5Er3/d33XzrxzNjbn9gp X+WI8zoGNWfDwgk1AcJcuiWOytyHT/xomG/kAql/7E+EVxVBWS++CjuNwMCJumEv QC9s4nQC6ZT9u0PHeTGEEb2i5oKbe82RgWWNl/3cCTitGBFIR2yqgcmno6/PUNdW bbTgmQj7y+y+/VTMyYtzWE+TJa87VGKsGu2tqTM0XXDvS7eilET5SbJyHlT7q8kw UIF8Xls/Dymm1hW39kb3Yl0lBfCKMoApmAFNitUcF8s1Xzp09V4596YKGu7V3Ml/ h3sXkBa3r2wguCd0I7E4+58BMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDRhvkMs uwbVPdUGBMv/ZjyjGJOYMB8GA1UdIwQYMBaAFKmnVVXtcGcvcdUvZZO5G0QguqcL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDUxOS8wNDI2NDkxRThD QUUxMUVCQUExQjFGNUVDNEY5QUUwMi9xYWRWVmUxd1p5OXgxUzlsazdrYlJDQzZw d3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FhZFZWZTF3Wnk5eDFTOWxrN2tiUkNDNnB3cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NDUxOS8wNDI2NDkxRThDQUUxMUVCQUExQjFGNUVDNEY5QUUwMi9xYWRWVmUxd1p5 OXgxUzlsazdrYlJDQzZwd3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDsSptxMjjc/ofB05qvB2HyeBJzgKdgWWFGKbfHW4CRHBZUQSRqNPE/ owkmfuHTRyID7GMVrdpRPrYd5j1PJAuMUmuvAoBPB1xnbXUOoAIcv32bo/STeiS7 3P4Mba/284SoFetEZxUe1WZMCtTqTvPQSowjd2WrbW+qv983ehWy/nm6eTH+bXoL m0DgtCDcnDncvCaLUgHKAkq8xEq8rspnh8A5AL9vxdCUf1VLyqC3QTbsSoSTfN1n TVmE20SoQjpKjOPyjCc5bTBTjMg4wuy9dH84Sh9R2gDCiLLqc9QlUuCPtfgC7t2e VhYafMXbXjBhQvArMwmU4nXzUn4PEQXy -----END CERTIFICATE-----Generated at Sat Apr 26 04:34:52 2025 by rpki-client