$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4EF7/C46FD7741B8F11E7AC4C7229C4F9AE02/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.mft File: qrUk5ZWlMOEsE6ohHC7ya2ndnJs.mft (raw, json) Hash identifier: 5g/Kz9euZpd8U8mpdDDV2T/HVvBp+ROb9JLlToqV8ho= Subject key identifier: DA:92:A1:3A:83:13:0C:FA:6E:D1:41:31:6C:EC:52:09:B4:6D:99:7E Authority key identifier: AA:B5:24:E5:95:A5:30:E1:2C:13:AA:21:1C:2E:F2:6B:69:DD:9C:9B Certificate issuer: /CN=A91E4EF7/serialNumber=AAB524E595A530E12C13AA211C2EF26B69DD9C9B Certificate serial: 1B11 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4EF7/C46FD7741B8F11E7AC4C7229C4F9AE02/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.mft Manifest number: 1B06 Signing time: Thu 24 Apr 2025 16:18:29 +0000 Manifest this update: Thu 24 Apr 2025 16:18:29 +0000 Manifest next update: Thu 01 May 2025 16:18:29 +0000 Files and hashes: 1: qrUk5ZWlMOEsE6ohHC7ya2ndnJs.crl (hash: tK4OnpJEke+Te73wMvd9cfTu7cDGzAniggadrvdYKLc=) 2: E24736EC9D9011EC89314083C4F9AE02.roa (hash: MQLW+ckG9k/91Edmhff4+dci4t4G4rJfBHrG+oHBPHU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4EF7/C46FD7741B8F11E7AC4C7229C4F9AE02/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.crl rsync://rpki.apnic.net/member_repository/A91E4EF7/C46FD7741B8F11E7AC4C7229C4F9AE02/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:18:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6929 (0x1b11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4EF7, serialNumber=AAB524E595A530E12C13AA211C2EF26B69DD9C9B Validity Not Before: Apr 24 16:18:29 2025 GMT Not After : May 1 16:18:29 2025 GMT Subject: CN=680a6455-269a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:d6:4e:b3:66:da:c6:cb:36:4f:77:83:4e:ec: 8c:38:be:dc:2f:26:8b:95:4e:a0:9d:70:d2:00:d7: f0:43:f8:78:6a:fe:7e:3d:7d:8b:e9:07:8d:91:03: 71:8d:b1:ff:51:2e:54:2f:f1:fc:f8:be:f9:36:de: dc:9e:90:ce:3f:87:92:49:fe:1d:59:fd:c0:46:48: ce:f8:ff:af:d6:7c:13:29:84:97:ab:fb:f2:f1:4c: 0f:88:ed:98:d8:dd:85:e9:ee:14:14:c9:3e:e9:a4: 93:65:84:8c:28:b6:da:e4:29:19:07:5f:35:36:f9: fd:68:71:77:b4:2d:f5:81:94:4a:a8:dd:f6:ea:40: e4:92:b0:96:6f:55:a3:d6:d5:d3:71:0d:22:90:36: 61:10:51:31:43:23:44:30:c8:71:8a:ba:52:b0:7f: 0e:ea:39:e1:3b:08:67:4e:6e:ec:aa:dd:3f:92:06: 98:dd:f6:87:10:93:3f:a3:14:ec:c5:0b:20:e9:29: 56:7c:7c:75:3a:0e:7b:47:a2:41:8a:15:04:8e:a5: 04:33:fd:05:c5:34:94:d2:78:4e:16:b9:2e:5c:d9: f7:96:0a:0c:62:37:1b:a9:08:b6:36:bf:aa:d2:79: d4:8e:8f:2b:c8:10:14:da:04:9e:58:1e:11:ab:10: 35:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:92:A1:3A:83:13:0C:FA:6E:D1:41:31:6C:EC:52:09:B4:6D:99:7E X509v3 Authority Key Identifier: keyid:AA:B5:24:E5:95:A5:30:E1:2C:13:AA:21:1C:2E:F2:6B:69:DD:9C:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4EF7/C46FD7741B8F11E7AC4C7229C4F9AE02/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4EF7/C46FD7741B8F11E7AC4C7229C4F9AE02/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:67:37:77:60:89:55:76:b4:8e:ca:46:d7:4c:b9:f4:83:46: f1:79:c3:98:e0:6c:6a:df:3d:5f:d1:e0:4d:04:0d:05:0a:88: 29:01:67:cb:96:71:3f:08:86:6a:97:1f:29:cf:c5:da:89:58: 7c:6a:09:26:e4:88:59:65:b7:41:2b:a0:22:f1:c1:2b:28:be: 91:0a:0b:4b:29:00:16:bf:13:c9:82:07:30:1e:d2:fd:c1:08: e4:25:4f:d4:ad:d7:d5:f4:56:99:ef:88:84:b2:ca:24:ca:d7: fe:3d:a0:8c:cc:60:04:37:38:1c:0f:63:c8:a5:a7:43:10:22: 95:ab:58:ef:a7:25:7b:8e:ff:06:e8:7a:a9:bb:00:8a:16:f2: 77:ea:85:53:75:8e:59:80:af:a2:40:01:e0:9c:25:48:8a:dc: ec:c0:0b:b4:61:ac:b4:64:4d:71:a1:6d:d7:d3:eb:a4:1b:a0: d3:c0:ea:02:4c:eb:7f:e9:83:02:f0:43:36:3a:c4:48:6c:d8: d0:86:d2:1b:7b:d7:8a:1b:82:13:ab:33:b9:74:24:c7:d6:c3: b9:ce:f5:3c:63:14:b6:a2:76:68:56:e6:b8:78:62:86:49:b2: 15:b2:49:4c:ea:ed:eb:6f:38:e0:bc:13:e6:e6:35:93:54:37: 68:59:65:ad -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGxEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTRFRjcxMTAvBgNVBAUTKEFBQjUyNEU1OTVBNTMwRTEyQzEzQUEyMTFDMkVGMjZC NjlERDlDOUIwHhcNMjUwNDI0MTYxODI5WhcNMjUwNTAxMTYxODI5WjAYMRYwFAYD VQQDEw02ODBhNjQ1NS0yNjlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzdZOs2baxss2T3eDTuyMOL7cLyaLlU6gnXDSANfwQ/h4av5+PX2L6QeNkQNx jbH/US5UL/H8+L75Nt7cnpDOP4eSSf4dWf3ARkjO+P+v1nwTKYSXq/vy8UwPiO2Y 2N2F6e4UFMk+6aSTZYSMKLba5CkZB181Nvn9aHF3tC31gZRKqN326kDkkrCWb1Wj 1tXTcQ0ikDZhEFExQyNEMMhxirpSsH8O6jnhOwhnTm7sqt0/kgaY3faHEJM/oxTs xQsg6SlWfHx1Og57R6JBihUEjqUEM/0FxTSU0nhOFrkuXNn3lgoMYjcbqQi2Nr+q 0nnUjo8ryBAU2gSeWB4RqxA1uwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNqSoTqD Ewz6btFBMWzsUgm0bZl+MB8GA1UdIwQYMBaAFKq1JOWVpTDhLBOqIRwu8mtp3Zyb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNEVGNy9DNDZGRDc3NDFC OEYxMUU3QUM0QzcyMjlDNEY5QUUwMi9xclVrNVpXbE1PRXNFNm9oSEM3eWEybmRu SnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FyVWs1WldsTU9Fc0U2b2hIQzd5YTJuZG5Kcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NEVGNy9DNDZGRDc3NDFCOEYxMUU3QUM0QzcyMjlDNEY5QUUwMi9xclVrNVpXbE1P RXNFNm9oSEM3eWEybmRuSnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXZzd3YIlVdrSOykbXTLn0g0bxecOY4Gxq3z1f0eBNBA0FCogpAWfL lnE/CIZqlx8pz8XaiVh8agkm5IhZZbdBK6Ai8cErKL6RCgtLKQAWvxPJggcwHtL9 wQjkJU/UrdfV9FaZ74iEssokytf+PaCMzGAENzgcD2PIpadDECKVq1jvpyV7jv8G 6HqpuwCKFvJ36oVTdY5ZgK+iQAHgnCVIitzswAu0Yay0ZE1xoW3X0+ukG6DTwOoC TOt/6YMC8EM2OsRIbNjQhtIbe9eKG4ITqzO5dCTH1sO5zvU8YxS2onZoVua4eGKG SbIVsklM6u3rbzjgvBPm5jWTVDdoWWWt -----END CERTIFICATE-----Generated at Sat Apr 26 12:20:07 2025 by rpki-client