$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5216/5CD5E7306E0811EDBEED6284C4F9AE02/qEG9xa-p6aCpW4hUYRPKdF7pY7U.mft File: qEG9xa-p6aCpW4hUYRPKdF7pY7U.mft (raw, json) Hash identifier: CS0nH/Pdggk8SWTu+fOfRMn/TrjrriQxDyoF5Q42Hyc= Subject key identifier: BA:58:1F:8D:85:65:25:15:15:E2:2D:D5:E5:46:08:4B:CC:5A:A2:6D Authority key identifier: A8:41:BD:C5:AF:A9:E9:A0:A9:5B:88:54:61:13:CA:74:5E:E9:63:B5 Certificate issuer: /CN=A91F5216/serialNumber=A841BDC5AFA9E9A0A95B88546113CA745EE963B5 Certificate serial: 01CF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qEG9xa-p6aCpW4hUYRPKdF7pY7U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F5216/5CD5E7306E0811EDBEED6284C4F9AE02/qEG9xa-p6aCpW4hUYRPKdF7pY7U.mft Manifest number: 01C9 Signing time: Fri 25 Apr 2025 02:08:51 +0000 Manifest this update: Fri 25 Apr 2025 02:08:50 +0000 Manifest next update: Fri 02 May 2025 02:08:50 +0000 Files and hashes: 1: qEG9xa-p6aCpW4hUYRPKdF7pY7U.crl (hash: vkBemNuMEfHJ7eiQhtAci0viu3S+SW1u2jgeThq4oVk=) 2: CDA9BB546E0C11ED8BF41547C4F9AE02.roa (hash: 5xUQVljU0BWWuc6LYolHHzG3Hqi8KmssX696YCKuce8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F5216/5CD5E7306E0811EDBEED6284C4F9AE02/qEG9xa-p6aCpW4hUYRPKdF7pY7U.crl rsync://rpki.apnic.net/member_repository/A91F5216/5CD5E7306E0811EDBEED6284C4F9AE02/qEG9xa-p6aCpW4hUYRPKdF7pY7U.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qEG9xa-p6aCpW4hUYRPKdF7pY7U.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:08:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 463 (0x1cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F5216, serialNumber=A841BDC5AFA9E9A0A95B88546113CA745EE963B5 Validity Not Before: Apr 25 02:08:50 2025 GMT Not After : May 2 02:08:50 2025 GMT Subject: CN=680aeeb2-0b00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:51:b2:ce:a1:89:0f:56:b8:6e:54:ac:47:2a: e1:cb:ea:ad:b2:28:85:fd:0f:32:c1:01:60:fb:9e: 3d:64:91:f4:6b:5e:aa:6c:1e:4b:83:1f:0d:5c:6c: 9c:22:85:ae:9f:a1:52:29:f5:87:7d:a2:4d:a3:4f: 37:b1:55:64:68:22:38:19:30:7f:57:28:ea:48:d7: 7a:0a:9c:34:5e:6f:5f:b8:25:4f:7e:d1:47:74:05: 0b:53:9d:80:b1:6c:be:4b:8f:ad:bc:6e:ed:a3:a5: 4a:6b:24:74:42:89:51:3e:b0:86:0c:d5:dd:61:26: c2:d4:7a:e3:a8:41:bb:01:64:18:f4:d1:ec:1e:40: 3a:d6:24:f9:82:3a:77:d1:14:b5:3a:df:52:b1:c0: 7b:f9:04:a0:cd:11:66:02:ed:7f:ee:6b:29:fe:22: 9e:63:8e:2f:fb:bf:70:33:7c:9c:8b:07:ca:30:7c: 5f:48:91:54:cf:77:fb:71:61:80:35:a3:f7:4b:6b: 6d:c4:c6:b1:9b:43:c9:d3:b3:3b:65:3a:ac:c6:08: 77:a8:49:e1:30:a2:53:6d:7d:54:22:77:ba:51:ba: 78:74:67:b8:ad:ee:8d:2e:72:69:83:02:ab:1a:54: 8e:2a:9c:7e:7c:42:79:91:cf:d2:a7:c9:59:66:87: 24:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:58:1F:8D:85:65:25:15:15:E2:2D:D5:E5:46:08:4B:CC:5A:A2:6D X509v3 Authority Key Identifier: keyid:A8:41:BD:C5:AF:A9:E9:A0:A9:5B:88:54:61:13:CA:74:5E:E9:63:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F5216/5CD5E7306E0811EDBEED6284C4F9AE02/qEG9xa-p6aCpW4hUYRPKdF7pY7U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qEG9xa-p6aCpW4hUYRPKdF7pY7U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5216/5CD5E7306E0811EDBEED6284C4F9AE02/qEG9xa-p6aCpW4hUYRPKdF7pY7U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:f1:05:16:56:6e:15:62:2f:e2:21:4b:b6:38:e4:2c:e0:4b: 83:ce:51:2f:9e:e6:74:b1:55:aa:69:53:aa:b6:e5:53:26:22: 50:5d:4f:86:a4:e5:d3:66:97:97:b3:f5:c0:f1:9e:7a:3b:79: ca:79:a1:38:61:d6:47:51:cf:4c:2b:5e:88:7c:4c:2a:46:d1: b2:b2:3e:87:f1:1f:89:a7:b1:27:70:0a:f1:e9:2d:fb:3f:72: 50:7d:ea:6f:52:e1:d2:81:10:74:f6:11:25:f6:2e:96:58:47: 61:45:8e:b0:e0:0a:1d:4d:8e:ad:6c:87:64:fe:e4:6c:27:ce: 94:20:67:05:8e:dc:bf:11:37:3d:d1:13:0d:d5:a3:ed:98:6b: 4b:c8:5f:c9:24:45:27:b7:a1:66:90:b9:20:83:b3:60:74:a1: 36:4e:d4:67:7a:54:c6:43:d6:ea:6f:dc:70:cd:5b:76:0a:50: 0c:77:f8:97:2c:9f:2e:92:34:51:b6:88:4a:60:a6:a7:f3:03: 28:d3:67:0f:4a:2d:3e:d5:c6:0d:3b:78:2d:96:7d:f1:a5:ba: 54:0a:4e:2d:de:38:42:f3:61:c2:bb:80:44:da:7f:54:2f:1e: 47:cd:89:3f:23:e3:78:53:53:13:88:f6:f2:76:ed:b5:ee:d2: b8:08:4c:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAc8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjUyMTYxMTAvBgNVBAUTKEE4NDFCREM1QUZBOUU5QTBBOTVCODg1NDYxMTNDQTc0 NUVFOTYzQjUwHhcNMjUwNDI1MDIwODUwWhcNMjUwNTAyMDIwODUwWjAYMRYwFAYD VQQDEw02ODBhZWViMi0wYjAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwFGyzqGJD1a4blSsRyrhy+qtsiiF/Q8ywQFg+549ZJH0a16qbB5Lgx8NXGyc IoWun6FSKfWHfaJNo083sVVkaCI4GTB/VyjqSNd6Cpw0Xm9fuCVPftFHdAULU52A sWy+S4+tvG7to6VKayR0QolRPrCGDNXdYSbC1HrjqEG7AWQY9NHsHkA61iT5gjp3 0RS1Ot9SscB7+QSgzRFmAu1/7msp/iKeY44v+79wM3yciwfKMHxfSJFUz3f7cWGA NaP3S2ttxMaxm0PJ07M7ZTqsxgh3qEnhMKJTbX1UIne6Ubp4dGe4re6NLnJpgwKr GlSOKpx+fEJ5kc/Sp8lZZock8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLpYH42F ZSUVFeIt1eVGCEvMWqJtMB8GA1UdIwQYMBaAFKhBvcWvqemgqVuIVGETynRe6WO1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTIxNi81Q0Q1RTczMDZF MDgxMUVEQkVFRDYyODRDNEY5QUUwMi9xRUc5eGEtcDZhQ3BXNGhVWVJQS2RGN3BZ N1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3FFRzl4YS1wNmFDcFc0aFVZUlBLZEY3cFk3VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTIxNi81Q0Q1RTczMDZFMDgxMUVEQkVFRDYyODRDNEY5QUUwMi9xRUc5eGEtcDZh Q3BXNGhVWVJQS2RGN3BZN1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBY8QUWVm4VYi/iIUu2OOQs4EuDzlEvnuZ0sVWqaVOqtuVTJiJQXU+G pOXTZpeXs/XA8Z56O3nKeaE4YdZHUc9MK16IfEwqRtGysj6H8R+Jp7EncArx6S37 P3JQfepvUuHSgRB09hEl9i6WWEdhRY6w4AodTY6tbIdk/uRsJ86UIGcFjty/ETc9 0RMN1aPtmGtLyF/JJEUnt6FmkLkgg7NgdKE2TtRnelTGQ9bqb9xwzVt2ClAMd/iX LJ8ukjRRtohKYKan8wMo02cPSi0+1cYNO3gtln3xpbpUCk4t3jhC82HCu4BE2n9U Lx5HzYk/I+N4U1MTiPbydu217tK4CExZ -----END CERTIFICATE-----Generated at Sat Apr 26 14:48:48 2025 by rpki-client