$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB095/AABEB56A1A5311EEA4608814C4F9AE02/spEQIVRHIYPPUNKub6MOG940K_Q.mft File: spEQIVRHIYPPUNKub6MOG940K_Q.mft (raw, json) Hash identifier: Y+Nc2W+jZ5lJGKnWOrAv2YmW5dZDQG9IbMbWegd9oNk= Subject key identifier: D6:F7:1B:7B:81:15:D3:45:49:91:67:F4:6C:E1:12:BF:68:C4:70:45 Authority key identifier: B2:91:10:21:54:47:21:83:CF:50:D2:AE:6F:A3:0E:1B:DE:34:2B:F4 Certificate issuer: /CN=A91FB095/serialNumber=B291102154472183CF50D2AE6FA30E1BDE342BF4 Certificate serial: 0164 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/spEQIVRHIYPPUNKub6MOG940K_Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FB095/AABEB56A1A5311EEA4608814C4F9AE02/spEQIVRHIYPPUNKub6MOG940K_Q.mft Manifest number: 015D Signing time: Fri 25 Apr 2025 03:14:15 +0000 Manifest this update: Fri 25 Apr 2025 03:14:15 +0000 Manifest next update: Fri 02 May 2025 03:14:15 +0000 Files and hashes: 1: spEQIVRHIYPPUNKub6MOG940K_Q.crl (hash: FfDNx0N7+lTXY7F9Mw6msVVM7Cz+GQ20hlJlRRiFsLI=) 2: 35A46D4E1A5611EE93742844C4F9AE02.roa (hash: d+JJ+I8S/10V6aRjr1ig3NwOOf5vZtvPjsJauOreVMs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FB095/AABEB56A1A5311EEA4608814C4F9AE02/spEQIVRHIYPPUNKub6MOG940K_Q.crl rsync://rpki.apnic.net/member_repository/A91FB095/AABEB56A1A5311EEA4608814C4F9AE02/spEQIVRHIYPPUNKub6MOG940K_Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/spEQIVRHIYPPUNKub6MOG940K_Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:14:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 356 (0x164) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FB095, serialNumber=B291102154472183CF50D2AE6FA30E1BDE342BF4 Validity Not Before: Apr 25 03:14:15 2025 GMT Not After : May 2 03:14:15 2025 GMT Subject: CN=680afe07-c8a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:04:46:4d:bd:f3:29:38:22:da:00:db:2f:fa: 87:5e:79:18:56:c6:06:97:55:39:82:b5:56:c7:7d: 7c:89:cf:88:aa:0d:fa:bd:f3:48:cc:0d:d9:53:cb: 3c:66:00:db:18:67:fe:45:c7:fd:27:ff:54:d3:40: e3:35:49:60:f9:47:97:be:38:f0:f5:74:27:ed:ba: 5b:41:b7:fe:7a:85:ba:b1:65:8b:a9:f5:db:80:4f: 17:89:f8:ef:28:e6:26:6b:fc:5a:24:5a:d1:2f:6a: 6b:a2:d1:4b:98:80:45:00:94:be:8e:c7:b1:bd:f6: fe:c3:0d:8a:7d:bc:d0:b6:37:c2:0f:a1:30:bd:23: 1a:aa:79:6f:7c:25:59:da:a8:82:3a:8c:40:a6:29: d2:35:ca:4a:b0:78:c2:b0:9b:7e:08:29:14:0a:4d: ef:0a:8b:5f:73:e1:5f:a6:dd:e5:e3:ee:d6:64:9b: e7:dd:6d:af:79:03:20:f4:26:bf:7c:cb:65:d0:3e: ab:58:3c:ec:95:85:4c:d7:a8:74:bd:ce:ab:a4:63: a3:a4:8e:9d:2e:d1:4d:fd:ea:e5:05:a3:08:21:ab: d5:68:37:cc:6d:9b:56:71:57:ab:ca:67:5e:c1:2e: 0a:45:4a:0c:cc:08:7d:9e:a9:51:ff:7f:b6:82:bf: 11:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:F7:1B:7B:81:15:D3:45:49:91:67:F4:6C:E1:12:BF:68:C4:70:45 X509v3 Authority Key Identifier: keyid:B2:91:10:21:54:47:21:83:CF:50:D2:AE:6F:A3:0E:1B:DE:34:2B:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FB095/AABEB56A1A5311EEA4608814C4F9AE02/spEQIVRHIYPPUNKub6MOG940K_Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/spEQIVRHIYPPUNKub6MOG940K_Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB095/AABEB56A1A5311EEA4608814C4F9AE02/spEQIVRHIYPPUNKub6MOG940K_Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:c0:d2:98:20:3b:1d:99:60:d3:81:80:ce:a1:81:8e:c6:52: 44:34:2b:2b:bd:b7:29:0c:22:d7:d9:b1:96:55:4d:e0:f0:b9: 8a:62:96:93:0c:7d:48:c0:86:2b:ad:60:9a:25:a4:fc:ef:46: 19:44:c7:7f:f2:6f:44:3e:4a:d9:ca:f6:ab:b7:73:06:f0:9b: d9:24:07:e8:20:0a:ac:71:5e:92:e0:7e:7d:7e:3f:88:ac:3f: 2e:5b:b1:dd:75:ce:f9:92:be:84:6e:f1:63:81:4d:e7:de:a4: b0:24:fb:c7:68:ed:b2:25:ef:85:e3:8a:36:8a:ee:4b:61:49: 28:5c:d6:63:16:1d:4b:a6:2d:83:e6:88:e8:54:8b:5d:a7:c4: 72:00:21:a2:9c:e4:d4:8d:1d:e9:5a:e1:20:b5:3e:8a:d3:ee: ed:4f:54:72:9c:72:1b:a4:ed:3f:3d:e5:02:4b:d2:f2:ab:77: 1c:7f:61:bc:7b:20:4f:ad:08:54:7b:89:5f:3e:09:8f:a4:a5: 5d:84:71:56:9b:f3:4f:df:4a:6d:73:c5:03:d0:ef:1d:56:6c: 98:32:18:cb:42:9e:31:ad:28:82:cf:30:c1:5c:a5:4f:51:fe: bc:c3:b7:38:1c:43:2d:da:f6:a6:32:66:5d:4c:79:55:ef:cb: 3e:a6:cc:4c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkIwOTUxMTAvBgNVBAUTKEIyOTExMDIxNTQ0NzIxODNDRjUwRDJBRTZGQTMwRTFC REUzNDJCRjQwHhcNMjUwNDI1MDMxNDE1WhcNMjUwNTAyMDMxNDE1WjAYMRYwFAYD VQQDEw02ODBhZmUwNy1jOGE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArQRGTb3zKTgi2gDbL/qHXnkYVsYGl1U5grVWx318ic+Iqg36vfNIzA3ZU8s8 ZgDbGGf+Rcf9J/9U00DjNUlg+UeXvjjw9XQn7bpbQbf+eoW6sWWLqfXbgE8Xifjv KOYma/xaJFrRL2protFLmIBFAJS+jsexvfb+ww2KfbzQtjfCD6EwvSMaqnlvfCVZ 2qiCOoxApinSNcpKsHjCsJt+CCkUCk3vCotfc+Ffpt3l4+7WZJvn3W2veQMg9Ca/ fMtl0D6rWDzslYVM16h0vc6rpGOjpI6dLtFN/erlBaMIIavVaDfMbZtWcVerymde wS4KRUoMzAh9nqlR/3+2gr8RnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNb3G3uB FdNFSZFn9GzhEr9oxHBFMB8GA1UdIwQYMBaAFLKRECFURyGDz1DSrm+jDhveNCv0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQjA5NS9BQUJFQjU2QTFB NTMxMUVFQTQ2MDg4MTRDNEY5QUUwMi9zcEVRSVZSSElZUFBVTkt1YjZNT0c5NDBL X1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NwRVFJVlJISVlQUFVOS3ViNk1PRzk0MEtfUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QjA5NS9BQUJFQjU2QTFBNTMxMUVFQTQ2MDg4MTRDNEY5QUUwMi9zcEVRSVZSSElZ UFBVTkt1YjZNT0c5NDBLX1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFwNKYIDsdmWDTgYDOoYGOxlJENCsrvbcpDCLX2bGWVU3g8LmKYpaT DH1IwIYrrWCaJaT870YZRMd/8m9EPkrZyvart3MG8JvZJAfoIAqscV6S4H59fj+I rD8uW7Hddc75kr6EbvFjgU3n3qSwJPvHaO2yJe+F44o2iu5LYUkoXNZjFh1Lpi2D 5ojoVItdp8RyACGinOTUjR3pWuEgtT6K0+7tT1RynHIbpO0/PeUCS9Lyq3ccf2G8 eyBPrQhUe4lfPgmPpKVdhHFWm/NP30ptc8UD0O8dVmyYMhjLQp4xrSiCzzDBXKVP Uf68w7c4HEMt2vamMmZdTHlV78s+psxM -----END CERTIFICATE-----Generated at Sat Apr 26 04:29:04 2025 by rpki-client