$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBC50/E4858AC40CD411EBBCD79C69C4F9AE02/Q1TVz6Vk7nGzToh07rG5ho-IB90.mft File: Q1TVz6Vk7nGzToh07rG5ho-IB90.mft (raw, json) Hash identifier: KhfTMi8VgshiSO/60K8eSEDGC86xrR9mhQiFIS0W1bI= Subject key identifier: DB:E1:AF:51:44:A7:9E:54:C8:B6:8E:C0:B4:25:F6:E2:E9:C3:F4:AC Authority key identifier: 43:54:D5:CF:A5:64:EE:71:B3:4E:88:74:EE:B1:B9:86:8F:88:07:DD Certificate issuer: /CN=A91EBC50/serialNumber=4354D5CFA564EE71B34E8874EEB1B9868F8807DD Certificate serial: 0791 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q1TVz6Vk7nGzToh07rG5ho-IB90.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBC50/E4858AC40CD411EBBCD79C69C4F9AE02/Q1TVz6Vk7nGzToh07rG5ho-IB90.mft Manifest number: 0783 Signing time: Thu 24 Apr 2025 21:13:59 +0000 Manifest this update: Thu 24 Apr 2025 21:13:59 +0000 Manifest next update: Thu 01 May 2025 21:13:59 +0000 Files and hashes: 1: Q1TVz6Vk7nGzToh07rG5ho-IB90.crl (hash: crPNN54CVgcKA9jBGthiib1AD+DFQaWKZwMKePeTuPQ=) 2: A10812CA0CD511EB9433AE69C4F9AE02.roa (hash: Pp8lb1nzqx7e9rT/EQLbTNVmmjg6MQa2RdSIFuurOeU=) 3: 638149B88C2C11EBBB3B260BC4F9AE02.roa (hash: B/FCYm7yp7p+ieEmvmImAhcl/oemA2ZNjMcDSU18oaU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBC50/E4858AC40CD411EBBCD79C69C4F9AE02/Q1TVz6Vk7nGzToh07rG5ho-IB90.crl rsync://rpki.apnic.net/member_repository/A91EBC50/E4858AC40CD411EBBCD79C69C4F9AE02/Q1TVz6Vk7nGzToh07rG5ho-IB90.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q1TVz6Vk7nGzToh07rG5ho-IB90.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:13:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1937 (0x791) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBC50, serialNumber=4354D5CFA564EE71B34E8874EEB1B9868F8807DD Validity Not Before: Apr 24 21:13:59 2025 GMT Not After : May 1 21:13:59 2025 GMT Subject: CN=680aa997-02f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:78:68:ab:4a:cb:99:37:27:29:77:71:8c:2b: 6b:c8:c3:a3:b5:9b:2a:e4:bf:fc:0d:74:34:ef:bb: f6:b3:5c:6c:07:f5:9e:39:e2:53:9e:43:a5:53:90: 81:9b:95:8f:ca:9a:06:3d:b4:fb:e4:76:44:63:fb: cf:35:0c:a4:dd:dd:bc:c0:41:45:a7:51:f9:b8:6a: b1:9e:8d:0a:97:44:53:01:b7:26:fc:55:6c:52:6b: db:ba:a2:f8:d9:4d:e8:9a:31:60:88:7e:45:56:d7: 96:73:13:0b:6a:b5:2f:1b:f3:90:6f:73:4a:42:04: 30:a4:64:ae:88:84:a0:94:af:75:a0:fc:fd:c3:2c: dc:78:b9:27:36:db:b0:3c:28:8c:7c:19:35:49:d0: 8a:1e:b4:7f:df:19:7f:4c:94:87:67:90:d9:2f:e0: 08:1d:b6:bf:51:07:78:dc:42:a5:ec:2e:e1:dd:18: c6:1e:3a:db:39:e5:64:2a:8f:9f:a7:c3:59:b4:b6: 35:21:ef:c4:ae:d7:cc:dc:61:b8:af:9b:0b:46:ea: fa:8f:aa:96:81:b3:59:c2:6b:7d:0e:ac:71:66:b3: 46:68:7f:51:23:58:fc:e4:d8:b8:b3:ee:8d:7c:84: 8d:4f:3c:4c:c1:4a:8b:6a:0c:73:2a:f8:02:b0:36: d8:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:E1:AF:51:44:A7:9E:54:C8:B6:8E:C0:B4:25:F6:E2:E9:C3:F4:AC X509v3 Authority Key Identifier: keyid:43:54:D5:CF:A5:64:EE:71:B3:4E:88:74:EE:B1:B9:86:8F:88:07:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBC50/E4858AC40CD411EBBCD79C69C4F9AE02/Q1TVz6Vk7nGzToh07rG5ho-IB90.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q1TVz6Vk7nGzToh07rG5ho-IB90.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBC50/E4858AC40CD411EBBCD79C69C4F9AE02/Q1TVz6Vk7nGzToh07rG5ho-IB90.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:03:bb:47:b5:52:4c:86:61:47:20:2b:64:a8:6e:b6:27:01: e9:db:46:ee:4e:7d:a6:11:6c:2a:48:fd:69:9e:06:83:81:1a: 20:54:28:92:ae:ac:4b:66:02:e2:71:54:71:6f:a8:8a:c8:95: 61:0d:5e:38:d1:49:2c:ce:d0:33:0b:c6:2b:88:0d:6a:a6:2e: db:42:5e:64:89:4b:52:69:a4:b4:0e:a1:a0:11:c3:ba:f2:44: 14:98:10:e4:b4:80:e7:fe:88:15:c0:5f:97:1a:83:d6:61:f2: ea:32:fa:68:e7:0f:fe:ae:a2:22:09:c3:d1:8d:0e:d2:af:0c: d3:76:97:27:ca:cb:81:4c:20:4b:52:eb:51:87:fb:2e:32:b0: 7d:ab:5b:7f:f0:90:ef:36:56:e6:e8:50:56:ba:3e:e8:09:a4: 98:24:5f:6c:ba:89:33:bc:90:07:c6:e2:44:a2:16:0d:47:74: db:14:11:db:dc:09:36:3e:82:18:2b:c9:9a:4d:bb:62:03:40: c5:5e:bc:5c:4e:77:2b:11:c6:e2:81:87:af:f7:a8:90:55:23: 7d:d5:d2:8c:3c:89:e3:01:fe:bf:25:0a:bb:f2:f6:a0:3d:47: 2d:ae:35:52:2d:b0:60:c8:b8:f6:ce:ee:c2:1b:94:40:48:6d: f2:f2:bd:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB5EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUJDNTAxMTAvBgNVBAUTKDQzNTRENUNGQTU2NEVFNzFCMzRFODg3NEVFQjFCOTg2 OEY4ODA3REQwHhcNMjUwNDI0MjExMzU5WhcNMjUwNTAxMjExMzU5WjAYMRYwFAYD VQQDEw02ODBhYTk5Ny0wMmYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu3hoq0rLmTcnKXdxjCtryMOjtZsq5L/8DXQ077v2s1xsB/WeOeJTnkOlU5CB m5WPypoGPbT75HZEY/vPNQyk3d28wEFFp1H5uGqxno0Kl0RTAbcm/FVsUmvbuqL4 2U3omjFgiH5FVteWcxMLarUvG/OQb3NKQgQwpGSuiISglK91oPz9wyzceLknNtuw PCiMfBk1SdCKHrR/3xl/TJSHZ5DZL+AIHba/UQd43EKl7C7h3RjGHjrbOeVkKo+f p8NZtLY1Ie/ErtfM3GG4r5sLRur6j6qWgbNZwmt9DqxxZrNGaH9RI1j85Ni4s+6N fISNTzxMwUqLagxzKvgCsDbYmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNvhr1FE p55UyLaOwLQl9uLpw/SsMB8GA1UdIwQYMBaAFENU1c+lZO5xs06IdO6xuYaPiAfd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkM1MC9FNDg1OEFDNDBD RDQxMUVCQkNENzlDNjlDNEY5QUUwMi9RMVRWejZWazduR3pUb2gwN3JHNWhvLUlC OTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ExVFZ6NlZrN25HelRvaDA3ckc1aG8tSUI5MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QkM1MC9FNDg1OEFDNDBDRDQxMUVCQkNENzlDNjlDNEY5QUUwMi9RMVRWejZWazdu R3pUb2gwN3JHNWhvLUlCOTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSA7tHtVJMhmFHICtkqG62JwHp20buTn2mEWwqSP1pngaDgRogVCiS rqxLZgLicVRxb6iKyJVhDV440UksztAzC8YriA1qpi7bQl5kiUtSaaS0DqGgEcO6 8kQUmBDktIDn/ogVwF+XGoPWYfLqMvpo5w/+rqIiCcPRjQ7SrwzTdpcnysuBTCBL UutRh/suMrB9q1t/8JDvNlbm6FBWuj7oCaSYJF9suokzvJAHxuJEohYNR3TbFBHb 3Ak2PoIYK8maTbtiA0DFXrxcTncrEcbigYev96iQVSN91dKMPInjAf6/JQq78vag PUctrjVSLbBgyLj2zu7CG5RASG3y8r0V -----END CERTIFICATE-----Generated at Sat Apr 26 12:28:26 2025 by rpki-client