$ rpki-client -vvf rpki.apnic.net/member_repository/A91E80FB/628D520C8FB611EC92BD2510C4F9AE02/QIWuE0tjOKEnZXKD67wWwS8guGI.mft File: QIWuE0tjOKEnZXKD67wWwS8guGI.mft (raw, json) Hash identifier: R4kysXzHDJ/yR+82NXm9tRjnXhFF+rGR3wnDYW0dBBY= Subject key identifier: F9:05:9C:7C:1B:99:58:0E:0B:9A:DF:B5:7C:CE:62:D7:D8:29:C3:A4 Authority key identifier: 40:85:AE:13:4B:63:38:A1:27:65:72:83:EB:BC:16:C1:2F:20:B8:62 Certificate issuer: /CN=A91E80FB/serialNumber=4085AE134B6338A127657283EBBC16C12F20B862 Certificate serial: 03BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QIWuE0tjOKEnZXKD67wWwS8guGI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E80FB/628D520C8FB611EC92BD2510C4F9AE02/QIWuE0tjOKEnZXKD67wWwS8guGI.mft Manifest number: 03B1 Signing time: Fri 25 Apr 2025 00:30:02 +0000 Manifest this update: Fri 25 Apr 2025 00:30:01 +0000 Manifest next update: Fri 02 May 2025 00:30:01 +0000 Files and hashes: 1: QIWuE0tjOKEnZXKD67wWwS8guGI.crl (hash: 1Hj9FB6yl5MtNR0z46Tw9nVsmbzXKWNkg07sCywqVNQ=) 2: 9FBFD358C0F911EFA63F3E64C4F9AE02.roa (hash: yc1nPimI0kUiUPjKIX7+rUbHKCs59csyBzZSSe87J8M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E80FB/628D520C8FB611EC92BD2510C4F9AE02/QIWuE0tjOKEnZXKD67wWwS8guGI.crl rsync://rpki.apnic.net/member_repository/A91E80FB/628D520C8FB611EC92BD2510C4F9AE02/QIWuE0tjOKEnZXKD67wWwS8guGI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QIWuE0tjOKEnZXKD67wWwS8guGI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:30:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 956 (0x3bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E80FB, serialNumber=4085AE134B6338A127657283EBBC16C12F20B862 Validity Not Before: Apr 25 00:30:01 2025 GMT Not After : May 2 00:30:01 2025 GMT Subject: CN=680ad789-9ead Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:78:db:35:88:10:ba:62:db:bf:50:6b:f8:8d: 08:3d:04:2f:14:d4:e7:07:f4:de:f4:21:3f:e1:70: 34:29:56:07:e5:2f:35:42:41:e5:fc:49:cb:20:80: 28:ea:89:0c:36:50:9c:62:f9:5f:7e:dc:ef:61:e3: 76:31:58:bb:a4:72:ef:7c:14:f3:22:e4:26:a1:47: 84:26:1f:15:5a:15:ac:26:23:a0:e2:2b:39:0a:9b: 21:64:18:80:09:9c:52:b9:71:87:c9:c0:b6:66:25: ea:2d:0c:9b:f8:fc:63:c5:18:28:5c:88:8c:4d:cb: 4a:e5:39:26:56:d1:52:32:1a:43:7b:7f:10:fc:dd: 36:0d:de:82:00:84:0c:c6:84:ca:f1:ae:5d:23:3e: 7f:65:a2:63:34:22:fa:86:7d:60:0f:5a:6b:0e:fc: be:de:a8:c0:e7:53:e0:18:c7:73:e0:5f:e1:94:b5: 75:e3:a2:c0:b9:c4:2a:84:c9:b2:8a:3f:cd:b0:19: 52:d3:cf:fd:84:bc:d8:55:55:b8:3b:fe:78:41:af: 37:a9:ee:ed:98:a6:a3:ac:d1:c3:04:fd:be:bc:cb: 9a:35:a2:f5:96:73:19:23:9b:9a:e8:e2:77:dc:54: 72:d6:c9:80:e7:92:f1:a9:39:6c:36:6d:38:c2:b0: ee:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:05:9C:7C:1B:99:58:0E:0B:9A:DF:B5:7C:CE:62:D7:D8:29:C3:A4 X509v3 Authority Key Identifier: keyid:40:85:AE:13:4B:63:38:A1:27:65:72:83:EB:BC:16:C1:2F:20:B8:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E80FB/628D520C8FB611EC92BD2510C4F9AE02/QIWuE0tjOKEnZXKD67wWwS8guGI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QIWuE0tjOKEnZXKD67wWwS8guGI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E80FB/628D520C8FB611EC92BD2510C4F9AE02/QIWuE0tjOKEnZXKD67wWwS8guGI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:de:0d:d8:1f:ae:6b:13:32:0e:3d:35:25:dd:e7:c3:92:07: 9d:14:84:96:5b:63:62:96:d6:63:48:66:2e:d0:70:c8:fb:96: 71:09:03:71:b7:12:24:48:9f:8a:d0:1a:b0:99:e7:5a:07:0c: 69:52:99:4c:e2:5f:05:db:dd:c1:bf:a2:38:cb:3a:0b:dd:9d: 5b:6a:a2:51:6e:bb:0d:df:41:a7:6f:43:45:8e:49:7f:a3:19: 7a:07:b8:05:5b:1f:d4:21:a8:fa:50:a1:29:74:7a:ea:a5:a6: 00:6f:1a:e9:78:78:34:d4:7b:6d:21:76:2c:16:e1:c5:83:81: bb:7c:f2:dd:ce:60:b5:3f:f6:82:35:37:05:64:85:d5:dc:0f: 9a:59:77:92:77:02:5c:df:06:eb:f6:e4:fb:81:a9:87:1d:0d: d8:4e:e6:c3:a3:5c:15:e1:ad:81:fc:fe:e1:47:64:0d:84:ae: 82:76:6e:e1:e2:0a:4a:40:fc:08:d1:6e:55:5c:38:54:63:aa: 24:65:0c:fc:4d:32:24:69:07:84:8b:cf:6b:03:59:87:2f:fd: 0e:a4:15:3e:28:d9:52:f0:58:02:b9:16:f0:b7:2e:d8:46:7d: 91:89:8a:60:d3:83:1f:4b:03:ba:81:8d:19:e0:3b:ea:fa:c0: 85:87:bc:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA7wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTgwRkIxMTAvBgNVBAUTKDQwODVBRTEzNEI2MzM4QTEyNzY1NzI4M0VCQkMxNkMx MkYyMEI4NjIwHhcNMjUwNDI1MDAzMDAxWhcNMjUwNTAyMDAzMDAxWjAYMRYwFAYD VQQDEw02ODBhZDc4OS05ZWFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5XjbNYgQumLbv1Br+I0IPQQvFNTnB/Te9CE/4XA0KVYH5S81QkHl/EnLIIAo 6okMNlCcYvlfftzvYeN2MVi7pHLvfBTzIuQmoUeEJh8VWhWsJiOg4is5CpshZBiA CZxSuXGHycC2ZiXqLQyb+PxjxRgoXIiMTctK5TkmVtFSMhpDe38Q/N02Dd6CAIQM xoTK8a5dIz5/ZaJjNCL6hn1gD1prDvy+3qjA51PgGMdz4F/hlLV146LAucQqhMmy ij/NsBlS08/9hLzYVVW4O/54Qa83qe7tmKajrNHDBP2+vMuaNaL1lnMZI5ua6OJ3 3FRy1smA55LxqTlsNm04wrDuqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPkFnHwb mVgOC5rftXzOYtfYKcOkMB8GA1UdIwQYMBaAFECFrhNLYzihJ2Vyg+u8FsEvILhi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODBGQi82MjhENTIwQzhG QjYxMUVDOTJCRDI1MTBDNEY5QUUwMi9RSVd1RTB0ak9LRW5aWEtENjd3V3dTOGd1 R0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FJV3VFMHRqT0tFblpYS0Q2N3dXd1M4Z3VHSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODBGQi82MjhENTIwQzhGQjYxMUVDOTJCRDI1MTBDNEY5QUUwMi9RSVd1RTB0ak9L RW5aWEtENjd3V3dTOGd1R0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCK3g3YH65rEzIOPTUl3efDkgedFISWW2NiltZjSGYu0HDI+5ZxCQNx txIkSJ+K0BqwmedaBwxpUplM4l8F293Bv6I4yzoL3Z1baqJRbrsN30Gnb0NFjkl/ oxl6B7gFWx/UIaj6UKEpdHrqpaYAbxrpeHg01HttIXYsFuHFg4G7fPLdzmC1P/aC NTcFZIXV3A+aWXeSdwJc3wbr9uT7gamHHQ3YTubDo1wV4a2B/P7hR2QNhK6Cdm7h 4gpKQPwI0W5VXDhUY6okZQz8TTIkaQeEi89rA1mHL/0OpBU+KNlS8FgCuRbwty7Y Rn2RiYpg04MfSwO6gY0Z4Dvq+sCFh7w2 -----END CERTIFICATE-----Generated at Sat Apr 26 12:35:36 2025 by rpki-client