$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC8C9/738DDFC494C811EC95CB9765C4F9AE02/QSOsLsBp0u8nIB9NvKrGwZEhkCw.mft File: QSOsLsBp0u8nIB9NvKrGwZEhkCw.mft (raw, json) Hash identifier: 5yHl/83qp0sYKiLWp5HR+8d30x3CIGyY3s+Q8XSZAn0= Subject key identifier: 93:74:CD:73:D4:6B:A4:DA:B5:9A:AA:37:8D:73:97:36:29:2E:32:30 Authority key identifier: 41:23:AC:2E:C0:69:D2:EF:27:20:1F:4D:BC:AA:C6:C1:91:21:90:2C Certificate issuer: /CN=A91EC8C9/serialNumber=4123AC2EC069D2EF27201F4DBCAAC6C19121902C Certificate serial: 03A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSOsLsBp0u8nIB9NvKrGwZEhkCw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC8C9/738DDFC494C811EC95CB9765C4F9AE02/QSOsLsBp0u8nIB9NvKrGwZEhkCw.mft Manifest number: 039B Signing time: Fri 25 Apr 2025 00:31:53 +0000 Manifest this update: Fri 25 Apr 2025 00:31:52 +0000 Manifest next update: Fri 02 May 2025 00:31:52 +0000 Files and hashes: 1: QSOsLsBp0u8nIB9NvKrGwZEhkCw.crl (hash: 9bXUOzUKf4nPs9yKyy169tDzM5XQcdofQ6P6hNpEVs0=) 2: FFDA736894CB11ECA827746DC4F9AE02.roa (hash: pj2LnVj5JMKgQoW/CIO4SmTNgNuQfByzQiOUhiNM/dY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC8C9/738DDFC494C811EC95CB9765C4F9AE02/QSOsLsBp0u8nIB9NvKrGwZEhkCw.crl rsync://rpki.apnic.net/member_repository/A91EC8C9/738DDFC494C811EC95CB9765C4F9AE02/QSOsLsBp0u8nIB9NvKrGwZEhkCw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSOsLsBp0u8nIB9NvKrGwZEhkCw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:31:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 928 (0x3a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC8C9, serialNumber=4123AC2EC069D2EF27201F4DBCAAC6C19121902C Validity Not Before: Apr 25 00:31:52 2025 GMT Not After : May 2 00:31:52 2025 GMT Subject: CN=680ad7f8-9dc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:cb:20:9b:fa:70:b4:d5:49:67:e5:6a:c3:5a: d7:e9:1f:05:f4:c0:81:ac:4f:cf:6d:cb:37:e6:d4: 73:23:57:ac:9c:b6:18:56:ca:f3:3e:9f:c2:64:d4: 2e:31:08:c2:db:ba:58:7b:cb:55:70:5d:7f:2f:b7: 81:90:33:17:29:4f:16:ef:20:76:86:4e:6a:93:b5: 26:cf:26:c9:95:b5:1b:86:54:51:ff:36:f5:c1:e0: 02:5b:21:91:8d:ff:34:45:8c:c9:26:d1:56:8b:04: 97:81:f5:aa:5a:f3:12:2e:99:28:42:c1:a0:f3:2f: 62:74:55:ac:31:53:e7:49:e9:67:d9:64:32:94:25: 7a:58:c8:a9:5c:cf:0a:da:f1:11:97:27:34:76:77: 98:b8:41:68:56:6d:12:a7:c1:87:50:58:52:ac:63: f0:4e:42:77:cc:90:f5:9d:91:91:8f:f4:97:17:89: ab:38:a4:fe:0e:d6:e8:c5:d4:d2:4f:fc:15:a2:4f: 50:e6:e7:47:8a:70:cd:02:39:64:b5:bf:28:de:e3: fc:ae:83:3a:d0:41:1a:96:55:2c:a0:e7:5a:56:03: 13:db:84:48:96:55:8f:11:4e:ea:db:45:28:d0:32: 71:ec:b6:44:c4:73:19:15:ce:34:df:4c:a5:26:9b: 77:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:74:CD:73:D4:6B:A4:DA:B5:9A:AA:37:8D:73:97:36:29:2E:32:30 X509v3 Authority Key Identifier: keyid:41:23:AC:2E:C0:69:D2:EF:27:20:1F:4D:BC:AA:C6:C1:91:21:90:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC8C9/738DDFC494C811EC95CB9765C4F9AE02/QSOsLsBp0u8nIB9NvKrGwZEhkCw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSOsLsBp0u8nIB9NvKrGwZEhkCw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC8C9/738DDFC494C811EC95CB9765C4F9AE02/QSOsLsBp0u8nIB9NvKrGwZEhkCw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:d0:5d:01:f5:22:fc:ea:e2:0e:8e:c9:ce:40:88:83:a9:9f: 4e:70:e8:23:7a:2d:4f:82:59:a2:48:db:2c:91:b1:8d:1f:6c: 77:72:98:df:38:dc:67:c7:c9:27:b5:d6:53:4e:dc:e4:b6:3a: 78:df:98:f8:e9:a8:53:83:8c:11:63:52:e1:e0:e7:a3:ac:37: 22:c2:58:0b:f5:5a:85:10:01:10:ba:47:c8:97:58:60:5d:95: 41:9f:37:8f:50:c2:56:8e:4d:b2:91:96:8d:8f:93:ef:b7:d0: be:92:fe:c8:39:39:96:30:02:82:9c:83:41:76:ac:2e:b3:6a: 8d:da:74:64:9a:fb:14:74:a7:30:d5:25:d0:6c:18:36:75:c5: ca:24:4f:83:c0:cc:1e:27:a6:e8:e3:b5:40:32:3e:1c:66:90: 6a:4e:c6:a5:e3:6e:dc:e8:e7:17:51:cc:29:22:b3:42:90:78: ab:d1:a6:67:5a:71:9f:4d:46:43:9d:6f:ef:ff:25:ea:09:64: 5d:85:1a:5b:90:4e:9f:b8:83:cf:d0:39:e8:c0:34:a1:3b:8a: 48:0b:dd:60:58:7e:44:ba:38:2a:c3:e1:e4:30:29:f9:20:04: f1:21:9c:ca:b1:a4:bd:10:0d:1e:75:00:53:73:6f:56:6a:3b: dc:db:2d:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA6AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUM4QzkxMTAvBgNVBAUTKDQxMjNBQzJFQzA2OUQyRUYyNzIwMUY0REJDQUFDNkMx OTEyMTkwMkMwHhcNMjUwNDI1MDAzMTUyWhcNMjUwNTAyMDAzMTUyWjAYMRYwFAYD VQQDEw02ODBhZDdmOC05ZGMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt8sgm/pwtNVJZ+Vqw1rX6R8F9MCBrE/Pbcs35tRzI1esnLYYVsrzPp/CZNQu MQjC27pYe8tVcF1/L7eBkDMXKU8W7yB2hk5qk7UmzybJlbUbhlRR/zb1weACWyGR jf80RYzJJtFWiwSXgfWqWvMSLpkoQsGg8y9idFWsMVPnSeln2WQylCV6WMipXM8K 2vERlyc0dneYuEFoVm0Sp8GHUFhSrGPwTkJ3zJD1nZGRj/SXF4mrOKT+DtboxdTS T/wVok9Q5udHinDNAjlktb8o3uP8roM60EEallUsoOdaVgMT24RIllWPEU7q20Uo 0DJx7LZExHMZFc4030ylJpt38wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJN0zXPU a6TatZqqN41zlzYpLjIwMB8GA1UdIwQYMBaAFEEjrC7AadLvJyAfTbyqxsGRIZAs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQzhDOS83MzhEREZDNDk0 QzgxMUVDOTVDQjk3NjVDNEY5QUUwMi9RU09zTHNCcDB1OG5JQjlOdktyR3daRWhr Q3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FTT3NMc0JwMHU4bklCOU52S3JHd1pFaGtDdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QzhDOS83MzhEREZDNDk0QzgxMUVDOTVDQjk3NjVDNEY5QUUwMi9RU09zTHNCcDB1 OG5JQjlOdktyR3daRWhrQ3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBg0F0B9SL86uIOjsnOQIiDqZ9OcOgjei1PglmiSNsskbGNH2x3cpjf ONxnx8kntdZTTtzktjp435j46ahTg4wRY1Lh4OejrDciwlgL9VqFEAEQukfIl1hg XZVBnzePUMJWjk2ykZaNj5Pvt9C+kv7IOTmWMAKCnINBdqwus2qN2nRkmvsUdKcw 1SXQbBg2dcXKJE+DwMweJ6bo47VAMj4cZpBqTsal427c6OcXUcwpIrNCkHir0aZn WnGfTUZDnW/v/yXqCWRdhRpbkE6fuIPP0DnowDShO4pIC91gWH5Eujgqw+HkMCn5 IATxIZzKsaS9EA0edQBTc29Wajvc2y1T -----END CERTIFICATE-----Generated at Sat Apr 26 12:25:51 2025 by rpki-client