$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4668/7C9009AC97F111E9A2E51981C4F9AE02/PQVW0ZO8kqIep0f5WMaXqX7F1dY.mft File: PQVW0ZO8kqIep0f5WMaXqX7F1dY.mft (raw, json) Hash identifier: RzJVBtIui8VZDF4NQNcqTWBfU48ITxj/zCau93f1PFU= Subject key identifier: 75:75:2D:35:9D:11:72:C5:88:66:E6:CA:B5:8E:70:0F:9C:4F:77:59 Authority key identifier: 3D:05:56:D1:93:BC:92:A2:1E:A7:47:F9:58:C6:97:A9:7E:C5:D5:D6 Certificate issuer: /CN=A91E4668/serialNumber=3D0556D193BC92A21EA747F958C697A97EC5D5D6 Certificate serial: 0E6D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PQVW0ZO8kqIep0f5WMaXqX7F1dY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4668/7C9009AC97F111E9A2E51981C4F9AE02/PQVW0ZO8kqIep0f5WMaXqX7F1dY.mft Manifest number: 0E62 Signing time: Thu 24 Apr 2025 17:42:24 +0000 Manifest this update: Thu 24 Apr 2025 17:42:24 +0000 Manifest next update: Thu 01 May 2025 17:42:23 +0000 Files and hashes: 1: PQVW0ZO8kqIep0f5WMaXqX7F1dY.crl (hash: c8sYNT80htgX0XaeQlMpxf1+YwESOb4YaW5rwqCaqRA=) 2: A5B7D874091F11EFA6EDE141C4F9AE02.roa (hash: 2rvUxpqj7Y+E1RimjzmymQTO9YIeEHWwe9dn2EcRiJ4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4668/7C9009AC97F111E9A2E51981C4F9AE02/PQVW0ZO8kqIep0f5WMaXqX7F1dY.crl rsync://rpki.apnic.net/member_repository/A91E4668/7C9009AC97F111E9A2E51981C4F9AE02/PQVW0ZO8kqIep0f5WMaXqX7F1dY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PQVW0ZO8kqIep0f5WMaXqX7F1dY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:42:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3693 (0xe6d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4668, serialNumber=3D0556D193BC92A21EA747F958C697A97EC5D5D6 Validity Not Before: Apr 24 17:42:24 2025 GMT Not After : May 1 17:42:23 2025 GMT Subject: CN=680a7800-aafa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:20:47:dd:cc:70:39:22:95:15:be:7d:27:30: ee:39:a7:e3:96:ac:7a:6f:05:55:1a:f8:68:70:e8: 72:1a:47:30:e3:1c:b3:5e:08:97:e1:9b:f2:af:85: 2f:60:e3:8a:5d:91:d8:40:f8:c9:20:a7:f7:ef:9d: ae:43:1b:ff:f4:ca:92:6b:ca:a7:64:14:aa:be:67: 1f:f6:64:ea:5d:ec:74:01:38:be:9e:98:9a:c5:7f: ab:ca:35:72:f9:25:98:58:8e:95:2e:ae:21:96:e6: f5:20:7c:5c:a8:e6:44:42:36:f6:5d:d6:2a:38:c5: 3f:0b:6a:c2:60:a3:2a:45:e8:0d:b3:00:fb:33:8f: 4e:31:09:ef:a3:9f:75:22:6a:e5:13:84:f8:2d:f4: df:50:68:19:e0:25:46:f1:07:b3:b1:a6:66:2a:37: 8a:b9:81:ae:c8:6e:c5:42:0c:0b:02:6d:9d:06:3a: 3d:25:61:fd:38:a6:c7:64:22:1c:df:3c:69:ab:15: 91:f9:9b:90:12:0a:83:20:fe:6f:7a:bd:bb:39:d5: f0:01:4d:c1:db:7a:d6:48:a4:c8:9f:6b:4c:41:2d: 66:3d:d5:3b:4c:3d:ac:52:e0:f0:14:fe:fa:73:b9: 38:2c:96:60:1c:ba:58:07:03:98:4f:90:f5:35:65: 24:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:75:2D:35:9D:11:72:C5:88:66:E6:CA:B5:8E:70:0F:9C:4F:77:59 X509v3 Authority Key Identifier: keyid:3D:05:56:D1:93:BC:92:A2:1E:A7:47:F9:58:C6:97:A9:7E:C5:D5:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4668/7C9009AC97F111E9A2E51981C4F9AE02/PQVW0ZO8kqIep0f5WMaXqX7F1dY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PQVW0ZO8kqIep0f5WMaXqX7F1dY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4668/7C9009AC97F111E9A2E51981C4F9AE02/PQVW0ZO8kqIep0f5WMaXqX7F1dY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:95:d0:8d:71:50:32:8d:70:9f:f4:0e:0d:56:41:4e:fc:8f: 70:c5:6e:85:3e:a5:af:18:eb:52:a9:27:5e:97:58:4d:f2:5c: 61:17:ae:ed:48:80:1c:8e:d5:e3:83:d2:65:39:1b:a1:e3:b5: 26:86:aa:e0:75:ab:f6:ba:9d:8d:34:40:20:44:c0:a9:13:a6: 1d:42:8f:a4:ec:71:2c:2f:e8:de:65:2f:62:2e:64:24:3f:c0: 60:a5:47:fc:74:04:68:e6:03:04:e8:69:89:d1:b0:31:50:64: b9:d0:a1:e0:e7:f8:6c:04:73:97:cc:99:21:80:f4:28:e6:00: 74:9d:57:b9:ae:dc:c4:34:14:40:77:47:72:e1:50:fe:7d:5b: 53:e4:e2:6e:7c:c5:5e:9e:e6:22:bd:13:e3:e2:e6:cf:ce:d5: 0d:02:ae:d6:51:e3:88:0a:f6:d4:5e:62:83:7a:b6:d1:eb:1b: 2c:4f:ec:68:10:74:54:9b:66:33:f7:76:fb:2c:6f:c0:66:23: 79:8c:4e:ac:32:24:43:58:88:c7:d7:1d:d0:a7:da:93:03:82: 4d:32:81:4b:5d:63:39:57:e9:65:6a:5d:16:77:50:88:3d:dc: e0:82:7d:c2:57:28:88:d9:f4:f8:31:7a:72:e9:62:7d:56:df: a3:24:24:a5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDm0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQ2NjgxMTAvBgNVBAUTKDNEMDU1NkQxOTNCQzkyQTIxRUE3NDdGOTU4QzY5N0E5 N0VDNUQ1RDYwHhcNMjUwNDI0MTc0MjI0WhcNMjUwNTAxMTc0MjIzWjAYMRYwFAYD VQQDEw02ODBhNzgwMC1hYWZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAziBH3cxwOSKVFb59JzDuOafjlqx6bwVVGvhocOhyGkcw4xyzXgiX4Zvyr4Uv YOOKXZHYQPjJIKf3752uQxv/9MqSa8qnZBSqvmcf9mTqXex0ATi+npiaxX+ryjVy +SWYWI6VLq4hlub1IHxcqOZEQjb2XdYqOMU/C2rCYKMqRegNswD7M49OMQnvo591 ImrlE4T4LfTfUGgZ4CVG8QezsaZmKjeKuYGuyG7FQgwLAm2dBjo9JWH9OKbHZCIc 3zxpqxWR+ZuQEgqDIP5ver27OdXwAU3B23rWSKTIn2tMQS1mPdU7TD2sUuDwFP76 c7k4LJZgHLpYBwOYT5D1NWUkTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHV1LTWd EXLFiGbmyrWOcA+cT3dZMB8GA1UdIwQYMBaAFD0FVtGTvJKiHqdH+VjGl6l+xdXW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDY2OC83QzkwMDlBQzk3 RjExMUU5QTJFNTE5ODFDNEY5QUUwMi9QUVZXMFpPOGtxSWVwMGY1V01hWHFYN0Yx ZFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BRVlcwWk84a3FJZXAwZjVXTWFYcVg3RjFkWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NDY2OC83QzkwMDlBQzk3RjExMUU5QTJFNTE5ODFDNEY5QUUwMi9QUVZXMFpPOGtx SWVwMGY1V01hWHFYN0YxZFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCqldCNcVAyjXCf9A4NVkFO/I9wxW6FPqWvGOtSqSdel1hN8lxhF67t SIAcjtXjg9JlORuh47Umhqrgdav2up2NNEAgRMCpE6YdQo+k7HEsL+jeZS9iLmQk P8BgpUf8dARo5gME6GmJ0bAxUGS50KHg5/hsBHOXzJkhgPQo5gB0nVe5rtzENBRA d0dy4VD+fVtT5OJufMVenuYivRPj4ubPztUNAq7WUeOICvbUXmKDerbR6xssT+xo EHRUm2Yz93b7LG/AZiN5jE6sMiRDWIjH1x3Qp9qTA4JNMoFLXWM5V+llal0Wd1CI Pdzggn3CVyiI2fT4MXpy6WJ9Vt+jJCSl -----END CERTIFICATE-----Generated at Sat Apr 26 15:07:20 2025 by rpki-client