$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3B2E/0F55C696D67D11ED86D33750C4F9AE02/QSPpAOai7I_ptdcDt5KA7yFAfIE.mft File: QSPpAOai7I_ptdcDt5KA7yFAfIE.mft (raw, json) Hash identifier: 2mFg2TrRypkmRNJPo2d5ciquchVTk2AFUcvWgAxv98c= Subject key identifier: 49:F0:91:56:50:97:63:DA:00:C4:FB:07:CF:34:21:A0:85:13:7A:73 Authority key identifier: 41:23:E9:00:E6:A2:EC:8F:E9:B5:D7:03:B7:92:80:EF:21:40:7C:81 Certificate issuer: /CN=A91F3B2E/serialNumber=4123E900E6A2EC8FE9B5D703B79280EF21407C81 Certificate serial: 01AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSPpAOai7I_ptdcDt5KA7yFAfIE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3B2E/0F55C696D67D11ED86D33750C4F9AE02/QSPpAOai7I_ptdcDt5KA7yFAfIE.mft Manifest number: 019B Signing time: Fri 25 Apr 2025 02:48:53 +0000 Manifest this update: Fri 25 Apr 2025 02:48:53 +0000 Manifest next update: Fri 02 May 2025 02:48:53 +0000 Files and hashes: 1: QSPpAOai7I_ptdcDt5KA7yFAfIE.crl (hash: 3F+BNP0/OjUKrtPlVLpChOG6HBunMkHJyhlc/cW4nQs=) 2: A91AF6A8CE7811EF89FA3944C4F9AE02.roa (hash: xYipp+ZcmQFz/ogxlth1vHSd96eYxW/drt1nbOwk66E=) 3: 2B8EF9AA083911F0A051CE72C4F9AE02.roa (hash: NUJLc0QRL6TCVIjI3d7tAKvp2NahPW0NGI52wQUI1t4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3B2E/0F55C696D67D11ED86D33750C4F9AE02/QSPpAOai7I_ptdcDt5KA7yFAfIE.crl rsync://rpki.apnic.net/member_repository/A91F3B2E/0F55C696D67D11ED86D33750C4F9AE02/QSPpAOai7I_ptdcDt5KA7yFAfIE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSPpAOai7I_ptdcDt5KA7yFAfIE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:48:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 431 (0x1af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3B2E, serialNumber=4123E900E6A2EC8FE9B5D703B79280EF21407C81 Validity Not Before: Apr 25 02:48:53 2025 GMT Not After : May 2 02:48:53 2025 GMT Subject: CN=680af815-bb1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:d7:a8:91:fd:57:30:3b:b0:1b:dc:6f:1a:b7: a9:1a:93:22:78:1d:f1:10:e2:43:4b:a3:a6:e1:57: 37:99:3e:23:06:d9:2e:00:dd:f2:23:e4:59:c9:f3: 4e:98:79:12:26:de:fd:7c:a5:53:cf:86:e4:d9:98: d2:e3:53:35:b8:85:cf:f8:3a:db:93:af:57:0f:9a: 1b:bb:22:f1:1e:77:2d:f7:e4:63:00:49:da:b4:11: eb:99:2c:a3:5e:7e:f4:c5:1b:80:87:b2:b8:99:9f: 1c:f8:2d:13:c8:10:2f:56:dd:05:97:c5:bb:a9:9c: 9d:c5:f7:31:cc:4d:b0:34:26:84:ea:fe:30:1f:7e: 8f:60:b5:87:27:77:73:ad:3d:32:02:76:53:49:06: 8f:70:e6:95:1e:c9:07:d5:1f:2f:22:ff:b5:6d:2e: 94:fa:99:d0:65:14:2d:83:f4:4e:b1:2a:c2:81:a5: fd:6d:64:ff:85:79:7d:c3:f0:dc:12:a1:c9:8b:d7: 56:fd:83:4f:3d:76:12:c5:80:9e:13:a9:c9:60:43: 14:d3:1e:e6:f6:44:9e:de:dc:5c:5c:65:38:94:f3: 35:f4:7f:89:e1:05:5e:d1:1b:71:d2:4d:67:a5:b4: 76:9e:df:b8:83:b2:80:64:8b:ef:28:4d:35:e3:be: e2:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:F0:91:56:50:97:63:DA:00:C4:FB:07:CF:34:21:A0:85:13:7A:73 X509v3 Authority Key Identifier: keyid:41:23:E9:00:E6:A2:EC:8F:E9:B5:D7:03:B7:92:80:EF:21:40:7C:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3B2E/0F55C696D67D11ED86D33750C4F9AE02/QSPpAOai7I_ptdcDt5KA7yFAfIE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSPpAOai7I_ptdcDt5KA7yFAfIE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3B2E/0F55C696D67D11ED86D33750C4F9AE02/QSPpAOai7I_ptdcDt5KA7yFAfIE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:8a:e6:45:1e:86:7f:50:56:11:3b:d9:49:74:65:47:f4:e5: f0:f5:53:f5:52:e8:02:46:a8:9b:7f:a1:aa:e2:1f:1d:d1:f0: 35:de:bb:44:e6:3f:0e:3d:16:1c:00:a5:9d:b1:f9:90:b7:01: f1:c5:cb:df:20:9d:dd:c0:86:12:ee:b5:38:32:fa:48:4c:98: 7e:fe:04:ef:d8:c1:a4:ce:8d:28:86:70:27:2e:02:7b:ab:8f: 61:e5:fc:5e:dd:30:a2:dd:c7:c2:fa:ae:7f:fe:b5:f5:f4:e9: 02:84:6f:f4:76:be:9d:b0:a0:af:89:a4:95:ee:ae:c5:56:30: 18:1c:4f:34:15:81:9a:4c:3e:a1:5d:12:9a:1f:09:92:de:21: 82:f0:7c:78:06:d2:73:2e:c0:d0:e5:3e:2a:4d:2f:c1:19:f2: 75:ad:38:e9:0f:2c:46:80:9f:01:33:8c:7a:5c:23:76:10:c9: 63:df:05:6c:d9:9f:cf:ce:71:8c:c7:35:a7:21:aa:db:a4:8b: 8a:27:82:78:47:32:3a:1b:df:a0:34:04:09:30:be:17:de:35: 5c:c6:1d:5a:86:38:d9:66:bf:26:b8:6e:93:22:50:df:46:ab: de:b2:c6:9b:7f:6a:5b:f6:3f:03:56:3a:df:85:c2:38:4f:76: a1:66:ef:3d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAa8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjNCMkUxMTAvBgNVBAUTKDQxMjNFOTAwRTZBMkVDOEZFOUI1RDcwM0I3OTI4MEVG MjE0MDdDODEwHhcNMjUwNDI1MDI0ODUzWhcNMjUwNTAyMDI0ODUzWjAYMRYwFAYD VQQDEw02ODBhZjgxNS1iYjFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAldeokf1XMDuwG9xvGrepGpMieB3xEOJDS6Om4Vc3mT4jBtkuAN3yI+RZyfNO mHkSJt79fKVTz4bk2ZjS41M1uIXP+Drbk69XD5obuyLxHnct9+RjAEnatBHrmSyj Xn70xRuAh7K4mZ8c+C0TyBAvVt0Fl8W7qZydxfcxzE2wNCaE6v4wH36PYLWHJ3dz rT0yAnZTSQaPcOaVHskH1R8vIv+1bS6U+pnQZRQtg/ROsSrCgaX9bWT/hXl9w/Dc EqHJi9dW/YNPPXYSxYCeE6nJYEMU0x7m9kSe3txcXGU4lPM19H+J4QVe0Rtx0k1n pbR2nt+4g7KAZIvvKE01477iNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEnwkVZQ l2PaAMT7B880IaCFE3pzMB8GA1UdIwQYMBaAFEEj6QDmouyP6bXXA7eSgO8hQHyB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGM0IyRS8wRjU1QzY5NkQ2 N0QxMUVEODZEMzM3NTBDNEY5QUUwMi9RU1BwQU9haTdJX3B0ZGNEdDVLQTd5RkFm SUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FTUHBBT2FpN0lfcHRkY0R0NUtBN3lGQWZJRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG M0IyRS8wRjU1QzY5NkQ2N0QxMUVEODZEMzM3NTBDNEY5QUUwMi9RU1BwQU9haTdJ X3B0ZGNEdDVLQTd5RkFmSUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbiuZFHoZ/UFYRO9lJdGVH9OXw9VP1UugCRqibf6Gq4h8d0fA13rtE 5j8OPRYcAKWdsfmQtwHxxcvfIJ3dwIYS7rU4MvpITJh+/gTv2MGkzo0ohnAnLgJ7 q49h5fxe3TCi3cfC+q5//rX19OkChG/0dr6dsKCviaSV7q7FVjAYHE80FYGaTD6h XRKaHwmS3iGC8Hx4BtJzLsDQ5T4qTS/BGfJ1rTjpDyxGgJ8BM4x6XCN2EMlj3wVs 2Z/PznGMxzWnIarbpIuKJ4J4RzI6G9+gNAQJML4X3jVcxh1ahjjZZr8muG6TIlDf Rqvessabf2pb9j8DVjrfhcI4T3ahZu89 -----END CERTIFICATE-----Generated at Sat Apr 26 04:23:58 2025 by rpki-client