$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1AD0/86EF4BDE66CA11EBAC642735C4F9AE02/QwISXvsUnkUVYMdJW31DzZ6az_c.mft File: QwISXvsUnkUVYMdJW31DzZ6az_c.mft (raw, json) Hash identifier: PKQH0ztdTt6vVU+23UgPOgZ6jACrnkAIH1L1ZHZBHcY= Subject key identifier: C7:1A:F3:60:60:97:C9:90:7C:BA:79:48:49:AF:16:FB:82:45:F4:42 Authority key identifier: 43:02:12:5E:FB:14:9E:45:15:60:C7:49:5B:7D:43:CD:9E:9A:CF:F7 Certificate issuer: /CN=A91F1AD0/serialNumber=4302125EFB149E451560C7495B7D43CD9E9ACFF7 Certificate serial: 06A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QwISXvsUnkUVYMdJW31DzZ6az_c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F1AD0/86EF4BDE66CA11EBAC642735C4F9AE02/QwISXvsUnkUVYMdJW31DzZ6az_c.mft Manifest number: 0699 Signing time: Thu 24 Apr 2025 22:02:15 +0000 Manifest this update: Thu 24 Apr 2025 22:02:15 +0000 Manifest next update: Thu 01 May 2025 22:02:15 +0000 Files and hashes: 1: QwISXvsUnkUVYMdJW31DzZ6az_c.crl (hash: flVg+39/TeD7XzKGoKt7bDKEbjcpqi3paF7NaR3WLwM=) 2: 9507A58E66CC11EB8CD9533AC4F9AE02.roa (hash: mw0tfPfPL7FKi2Yof+LC4zjkegn0Gmah4wfaxap8CoE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F1AD0/86EF4BDE66CA11EBAC642735C4F9AE02/QwISXvsUnkUVYMdJW31DzZ6az_c.crl rsync://rpki.apnic.net/member_repository/A91F1AD0/86EF4BDE66CA11EBAC642735C4F9AE02/QwISXvsUnkUVYMdJW31DzZ6az_c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QwISXvsUnkUVYMdJW31DzZ6az_c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:02:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1696 (0x6a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F1AD0, serialNumber=4302125EFB149E451560C7495B7D43CD9E9ACFF7 Validity Not Before: Apr 24 22:02:15 2025 GMT Not After : May 1 22:02:15 2025 GMT Subject: CN=680ab4e7-9b1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:65:d9:48:08:31:86:ad:fb:06:41:46:fb:d7: 88:a4:8e:24:9a:3d:16:d1:94:cd:93:84:46:fe:05: 5a:1b:04:d7:67:cc:c9:a6:c1:f4:46:d6:bd:64:29: 5a:60:17:87:6e:96:2f:a5:3d:9d:e9:ea:2b:4c:9e: 66:74:c7:cb:73:2c:db:2c:8b:dd:f9:d3:09:7f:31: 82:a0:f8:f8:62:4f:dd:a7:e5:bf:3f:2b:72:fa:29: 8e:b6:88:29:be:d1:73:15:28:98:d1:be:53:2d:4d: 73:2c:2a:05:c5:69:a6:76:e6:83:d8:dd:72:b7:31: 41:e5:e7:fc:e2:13:54:dc:5a:97:81:06:b4:49:67: 47:21:4e:7e:14:dd:57:01:fd:ae:0a:f0:bc:fb:53: 3d:f9:6d:57:bf:fb:87:60:bf:f3:9e:47:e3:7a:86: 76:d5:06:00:0a:8f:d5:14:5e:61:a0:51:93:d2:78: 88:27:6c:e5:13:df:4d:b8:67:fd:a7:8b:3b:20:e8: e0:34:1a:24:12:79:81:96:ef:62:5b:5b:50:1e:68: 44:43:b0:75:93:6a:59:71:04:a0:57:b2:5b:e7:0a: f4:de:b3:b9:d3:f8:a3:2e:a4:af:31:95:6f:11:f7: 0d:51:fc:ee:e7:2e:6e:df:07:5c:93:1a:c0:89:2f: 89:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:1A:F3:60:60:97:C9:90:7C:BA:79:48:49:AF:16:FB:82:45:F4:42 X509v3 Authority Key Identifier: keyid:43:02:12:5E:FB:14:9E:45:15:60:C7:49:5B:7D:43:CD:9E:9A:CF:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F1AD0/86EF4BDE66CA11EBAC642735C4F9AE02/QwISXvsUnkUVYMdJW31DzZ6az_c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QwISXvsUnkUVYMdJW31DzZ6az_c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1AD0/86EF4BDE66CA11EBAC642735C4F9AE02/QwISXvsUnkUVYMdJW31DzZ6az_c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:37:95:6f:47:3b:af:30:2e:ed:f5:84:48:66:eb:1d:1e:71: ff:13:c8:70:f8:7e:2a:cc:a4:1f:9a:52:ee:9b:a7:b6:51:27: a1:9a:d3:3d:b2:97:e6:1a:d5:ab:c7:29:1b:5e:28:46:42:23: 3a:50:37:5c:cb:d4:de:a0:52:62:59:b9:9a:f0:19:ef:08:4e: 16:df:12:bb:e9:54:1b:54:33:c0:4a:c6:69:55:d8:82:e0:d7: e9:35:13:59:3d:bf:8e:58:3c:df:dd:aa:b7:70:a4:9d:ad:d3: 94:98:21:8f:91:fd:13:c2:84:a7:ee:db:ad:c1:7b:75:ae:12: 56:67:b9:16:ca:e7:e0:65:e4:20:71:6c:58:b9:9c:30:67:fa: c3:78:bf:ff:6e:03:44:00:94:f9:86:b2:98:00:a5:dd:bb:9d: f7:d1:54:0a:ae:32:3f:72:96:92:65:7b:2c:0c:9c:30:dc:0d: 01:e5:d9:42:3a:ca:8c:f3:29:e8:39:57:a6:dc:16:05:8f:ee: cb:24:31:8a:01:8c:28:c8:53:bc:d5:ff:7f:f3:7c:91:1f:9d: a4:63:a0:64:fa:14:87:1e:dc:2b:86:8d:62:e0:98:71:59:7a: 1f:2d:72:ac:a1:06:d6:be:d6:84:fa:99:9d:91:f4:fc:fc:b7: 25:f0:9b:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBqAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjFBRDAxMTAvBgNVBAUTKDQzMDIxMjVFRkIxNDlFNDUxNTYwQzc0OTVCN0Q0M0NE OUU5QUNGRjcwHhcNMjUwNDI0MjIwMjE1WhcNMjUwNTAxMjIwMjE1WjAYMRYwFAYD VQQDEw02ODBhYjRlNy05YjFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvWXZSAgxhq37BkFG+9eIpI4kmj0W0ZTNk4RG/gVaGwTXZ8zJpsH0Rta9ZCla YBeHbpYvpT2d6eorTJ5mdMfLcyzbLIvd+dMJfzGCoPj4Yk/dp+W/Pyty+imOtogp vtFzFSiY0b5TLU1zLCoFxWmmduaD2N1ytzFB5ef84hNU3FqXgQa0SWdHIU5+FN1X Af2uCvC8+1M9+W1Xv/uHYL/znkfjeoZ21QYACo/VFF5hoFGT0niIJ2zlE99NuGf9 p4s7IOjgNBokEnmBlu9iW1tQHmhEQ7B1k2pZcQSgV7Jb5wr03rO50/ijLqSvMZVv EfcNUfzu5y5u3wdckxrAiS+JGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMca82Bg l8mQfLp5SEmvFvuCRfRCMB8GA1UdIwQYMBaAFEMCEl77FJ5FFWDHSVt9Q82ems/3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMUFEMC84NkVGNEJERTY2 Q0ExMUVCQUM2NDI3MzVDNEY5QUUwMi9Rd0lTWHZzVW5rVVZZTWRKVzMxRHpaNmF6 X2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1F3SVNYdnNVbmtVVllNZEpXMzFEelo2YXpfYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MUFEMC84NkVGNEJERTY2Q0ExMUVCQUM2NDI3MzVDNEY5QUUwMi9Rd0lTWHZzVW5r VVZZTWRKVzMxRHpaNmF6X2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCxN5VvRzuvMC7t9YRIZusdHnH/E8hw+H4qzKQfmlLum6e2USehmtM9 spfmGtWrxykbXihGQiM6UDdcy9TeoFJiWbma8BnvCE4W3xK76VQbVDPASsZpVdiC 4NfpNRNZPb+OWDzf3aq3cKSdrdOUmCGPkf0TwoSn7tutwXt1rhJWZ7kWyufgZeQg cWxYuZwwZ/rDeL//bgNEAJT5hrKYAKXdu5330VQKrjI/cpaSZXssDJww3A0B5dlC OsqM8ynoOVem3BYFj+7LJDGKAYwoyFO81f9/83yRH52kY6Bk+hSHHtwrho1i4Jhx WXofLXKsoQbWvtaE+pmdkfT8/Lcl8JsP -----END CERTIFICATE-----Generated at Sat Apr 26 16:52:30 2025 by rpki-client