$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA582/974FCAA0A11911EC8C4FFA83C4F9AE02/qkjQtX4IXNlA26F5HapYc8wZx_4.mft File: qkjQtX4IXNlA26F5HapYc8wZx_4.mft (raw, json) Hash identifier: xBdwg+HHpU/8PdMtrHKlK8uIIfyB4QyOP31DGHeqeDw= Subject key identifier: F8:6E:FB:C6:7A:25:44:26:2D:32:26:A5:BE:A9:7D:BA:EB:7A:72:DD Authority key identifier: AA:48:D0:B5:7E:08:5C:D9:40:DB:A1:79:1D:AA:58:73:CC:19:C7:FE Certificate issuer: /CN=A91EA582/serialNumber=AA48D0B57E085CD940DBA1791DAA5873CC19C7FE Certificate serial: 037E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkjQtX4IXNlA26F5HapYc8wZx_4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA582/974FCAA0A11911EC8C4FFA83C4F9AE02/qkjQtX4IXNlA26F5HapYc8wZx_4.mft Manifest number: 0379 Signing time: Fri 25 Apr 2025 00:40:22 +0000 Manifest this update: Fri 25 Apr 2025 00:40:22 +0000 Manifest next update: Fri 02 May 2025 00:40:22 +0000 Files and hashes: 1: qkjQtX4IXNlA26F5HapYc8wZx_4.crl (hash: kkaeUzw5qW4cZb7z4saHYgzauHsx9AGm3n11Fkpduks=) 2: 9924B750A1AF11EC9A73D814C4F9AE02.roa (hash: IHCx8iKwFaHNBcD68Fjdjf74kAkM54IECqYXNmF+PP0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA582/974FCAA0A11911EC8C4FFA83C4F9AE02/qkjQtX4IXNlA26F5HapYc8wZx_4.crl rsync://rpki.apnic.net/member_repository/A91EA582/974FCAA0A11911EC8C4FFA83C4F9AE02/qkjQtX4IXNlA26F5HapYc8wZx_4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkjQtX4IXNlA26F5HapYc8wZx_4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:40:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 894 (0x37e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA582, serialNumber=AA48D0B57E085CD940DBA1791DAA5873CC19C7FE Validity Not Before: Apr 25 00:40:22 2025 GMT Not After : May 2 00:40:22 2025 GMT Subject: CN=680ad9f6-5f28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:87:ea:55:00:a3:35:68:15:02:d2:0e:31:0b: ff:d3:5d:95:95:0f:ac:f1:16:d8:fe:9c:f9:2b:8d: 3f:96:f2:54:6a:d1:51:1b:1c:fb:3a:14:5c:45:84: 9a:bb:7a:6f:99:26:7d:51:f0:9c:e4:5f:37:16:a3: ac:a8:dd:07:e3:a2:b5:6f:c9:dd:4d:df:ed:e0:35: fd:36:cc:d3:0c:24:a2:c3:f4:35:a7:cf:e7:3e:01: 79:25:ae:43:cb:ba:8f:e2:67:bf:a1:27:cc:f1:54: 79:49:75:0f:c4:31:df:67:68:5f:b0:b4:31:3e:bf: 88:0c:42:41:c4:9c:56:16:bc:bf:c3:28:2c:6d:4a: 6a:c0:db:45:b1:ef:49:17:d5:76:f0:70:81:4c:f8: cc:d8:a4:81:0c:b7:8b:1d:e7:14:f8:8e:87:e0:2f: 3b:2a:93:27:a5:81:50:5f:b6:3c:0d:88:7b:61:80: a9:dc:dc:93:da:2e:6c:98:7f:a5:2e:45:fb:d0:49: 08:49:11:b5:d6:da:4d:5a:90:74:85:2a:20:06:1c: 2f:50:be:dd:48:70:26:6a:80:16:af:10:46:88:5b: e5:b6:ec:39:95:1b:ed:bd:56:ca:ff:ff:52:57:c7: 2f:f0:26:90:9f:35:a6:c5:30:1a:61:81:8f:e7:fa: 76:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:6E:FB:C6:7A:25:44:26:2D:32:26:A5:BE:A9:7D:BA:EB:7A:72:DD X509v3 Authority Key Identifier: keyid:AA:48:D0:B5:7E:08:5C:D9:40:DB:A1:79:1D:AA:58:73:CC:19:C7:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA582/974FCAA0A11911EC8C4FFA83C4F9AE02/qkjQtX4IXNlA26F5HapYc8wZx_4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkjQtX4IXNlA26F5HapYc8wZx_4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA582/974FCAA0A11911EC8C4FFA83C4F9AE02/qkjQtX4IXNlA26F5HapYc8wZx_4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:ba:b9:eb:5b:6c:9f:f1:a8:42:fb:e9:57:86:e8:fe:a4:a6: d9:6a:1a:19:82:5a:96:ad:0b:cf:65:ad:14:36:d3:09:e3:25: 1d:31:21:77:7e:c6:05:d4:03:ee:ed:c2:ad:0d:4f:04:1f:56: ba:ee:4e:0b:23:14:ce:43:22:50:10:2f:38:9c:bd:14:ee:35: 9b:4a:d7:09:4f:1b:43:fe:c6:13:96:b5:0d:5f:f0:66:bb:a5: 3a:33:95:c1:ac:4b:2f:4f:ad:fc:24:62:ac:cc:48:48:52:35: be:48:69:58:6b:a3:5f:0d:34:b8:7b:2e:59:36:c3:95:b7:63: af:79:fd:f9:6c:1c:39:49:d2:b8:97:da:30:63:43:ec:c2:ea: f4:b5:c2:3a:cf:29:e1:5e:a7:17:c4:21:39:fe:31:92:86:ad: 6a:67:ef:f7:f3:e4:c0:27:69:1c:a3:8f:68:b1:61:9a:21:3c: 0a:a5:e7:24:2b:b1:74:31:f3:fd:cd:5c:be:0f:17:01:81:d7: 1d:31:c0:9e:d2:99:e3:9c:50:eb:7b:35:0a:5b:97:70:ec:a2: 23:6e:1a:ab:ac:ec:0f:68:29:38:d8:61:9c:b1:cb:a4:b7:51: 18:77:6c:6c:f6:e7:97:17:9e:e7:5d:d2:1a:af:ca:14:7a:cb: 5d:d3:5e:19 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA34wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE1ODIxMTAvBgNVBAUTKEFBNDhEMEI1N0UwODVDRDk0MERCQTE3OTFEQUE1ODcz Q0MxOUM3RkUwHhcNMjUwNDI1MDA0MDIyWhcNMjUwNTAyMDA0MDIyWjAYMRYwFAYD VQQDEw02ODBhZDlmNi01ZjI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA14fqVQCjNWgVAtIOMQv/012VlQ+s8RbY/pz5K40/lvJUatFRGxz7OhRcRYSa u3pvmSZ9UfCc5F83FqOsqN0H46K1b8ndTd/t4DX9NszTDCSiw/Q1p8/nPgF5Ja5D y7qP4me/oSfM8VR5SXUPxDHfZ2hfsLQxPr+IDEJBxJxWFry/wygsbUpqwNtFse9J F9V28HCBTPjM2KSBDLeLHecU+I6H4C87KpMnpYFQX7Y8DYh7YYCp3NyT2i5smH+l LkX70EkISRG11tpNWpB0hSogBhwvUL7dSHAmaoAWrxBGiFvltuw5lRvtvVbK//9S V8cv8CaQnzWmxTAaYYGP5/p24wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPhu+8Z6 JUQmLTImpb6pfbrrenLdMB8GA1UdIwQYMBaAFKpI0LV+CFzZQNuheR2qWHPMGcf+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTU4Mi85NzRGQ0FBMEEx MTkxMUVDOEM0RkZBODNDNEY5QUUwMi9xa2pRdFg0SVhObEEyNkY1SGFwWWM4d1p4 XzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FralF0WDRJWE5sQTI2RjVIYXBZYzh3WnhfNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTU4Mi85NzRGQ0FBMEExMTkxMUVDOEM0RkZBODNDNEY5QUUwMi9xa2pRdFg0SVhO bEEyNkY1SGFwWWM4d1p4XzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBcurnrW2yf8ahC++lXhuj+pKbZahoZglqWrQvPZa0UNtMJ4yUdMSF3 fsYF1APu7cKtDU8EH1a67k4LIxTOQyJQEC84nL0U7jWbStcJTxtD/sYTlrUNX/Bm u6U6M5XBrEsvT638JGKszEhIUjW+SGlYa6NfDTS4ey5ZNsOVt2Ovef35bBw5SdK4 l9owY0Pswur0tcI6zynhXqcXxCE5/jGShq1qZ+/38+TAJ2kco49osWGaITwKpeck K7F0MfP9zVy+DxcBgdcdMcCe0pnjnFDrezUKW5dw7KIjbhqrrOwPaCk42GGcscuk t1EYd2xs9ueXF57nXdIar8oUestd014Z -----END CERTIFICATE-----Generated at Sat Apr 26 13:04:33 2025 by rpki-client