$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/QmfPXQMASo_v3yE5XQ_oJFSLE8E.mft File: QmfPXQMASo_v3yE5XQ_oJFSLE8E.mft (raw, json) Hash identifier: BQqlAfcd24Q8k6U8WS+6t6ffAgMsyR5TuEcUCyHLsPo= Subject key identifier: 72:9C:05:22:FB:37:91:68:07:38:03:00:6C:8E:F8:4B:AC:BE:2D:AE Authority key identifier: 42:67:CF:5D:03:00:4A:8F:EF:DF:21:39:5D:0F:E8:24:54:8B:13:C1 Certificate issuer: /CN=A91FCEB1/serialNumber=4267CF5D03004A8FEFDF21395D0FE824548B13C1 Certificate serial: 2078 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QmfPXQMASo_v3yE5XQ_oJFSLE8E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/QmfPXQMASo_v3yE5XQ_oJFSLE8E.mft Manifest number: 2767 Signing time: Thu 24 Apr 2025 15:59:05 +0000 Manifest this update: Thu 24 Apr 2025 15:59:05 +0000 Manifest next update: Thu 01 May 2025 15:59:05 +0000 Files and hashes: 1: QmfPXQMASo_v3yE5XQ_oJFSLE8E.crl (hash: /E4NnJgPy56wkbMTYLMlETuKwsrxSISi7MX25EhLoS4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/QmfPXQMASo_v3yE5XQ_oJFSLE8E.crl rsync://rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/QmfPXQMASo_v3yE5XQ_oJFSLE8E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QmfPXQMASo_v3yE5XQ_oJFSLE8E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 15:59:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8312 (0x2078) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FCEB1, serialNumber=4267CF5D03004A8FEFDF21395D0FE824548B13C1 Validity Not Before: Apr 24 15:59:05 2025 GMT Not After : May 1 15:59:05 2025 GMT Subject: CN=680a5fc9-299f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:de:ba:8f:d4:ff:47:ad:0a:fa:20:94:bd:a8: 1f:a6:cd:ab:98:6d:21:a0:cb:ea:e3:6a:b3:93:8f: cd:07:e9:3e:77:8d:e6:a4:9a:d3:bd:d9:9f:25:07: df:b3:6a:fd:3d:61:05:20:74:f5:f9:04:03:56:15: 79:9a:92:a4:8c:c9:46:84:9c:9f:c4:1c:26:e4:af: 8b:cb:38:70:09:53:13:55:a0:9a:18:13:1e:4c:13: 5a:7b:51:0a:48:a6:e2:c9:bc:cb:ff:d4:87:1f:77: 4f:0a:84:f7:d6:2d:67:fc:65:25:f3:50:d7:8b:4a: 72:f4:f9:fe:01:c4:29:45:c5:d7:9f:0a:0a:b1:9b: 27:02:27:c9:76:e7:89:4b:85:90:44:62:85:cf:6a: 4e:d0:45:ee:bf:7b:58:55:b4:f1:03:93:6d:4e:81: 36:9c:df:86:ba:d3:a8:03:85:c2:ec:d2:e8:1a:74: 09:ed:ad:e9:7b:61:46:cb:ba:38:37:0a:25:d6:42: e4:d4:dd:e7:ee:71:4c:b6:94:51:4e:4c:fc:9b:ce: 14:60:34:07:a6:47:48:f6:87:8f:c5:38:0b:43:2c: 5a:64:f4:38:44:3f:3c:a7:87:aa:36:07:ba:90:20: de:7b:57:64:a3:0a:63:fc:3e:4b:b3:85:18:39:6b: c2:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:9C:05:22:FB:37:91:68:07:38:03:00:6C:8E:F8:4B:AC:BE:2D:AE X509v3 Authority Key Identifier: keyid:42:67:CF:5D:03:00:4A:8F:EF:DF:21:39:5D:0F:E8:24:54:8B:13:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/QmfPXQMASo_v3yE5XQ_oJFSLE8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QmfPXQMASo_v3yE5XQ_oJFSLE8E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/QmfPXQMASo_v3yE5XQ_oJFSLE8E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:fa:00:03:0b:f7:88:55:e1:c9:e1:ca:28:42:3e:36:24:5f: 3a:fd:c6:5e:e4:a9:c0:9e:1f:54:08:fb:e9:1c:a3:ff:79:34: 69:84:ff:35:2c:c3:24:ec:5f:46:b1:ef:c5:d5:0c:2e:b1:ef: 48:76:56:3e:1d:ea:68:de:16:a9:fe:ff:5f:f3:e5:e8:54:93: 8a:77:0a:94:43:a3:ca:af:7a:21:09:56:b6:3d:bc:1a:14:f4: 91:b8:12:8a:17:eb:8e:4b:a4:18:32:1c:67:fa:66:f7:88:ff: ec:12:8b:44:15:c2:f9:bc:29:a4:35:57:f7:7d:cf:fc:9a:6a: 0e:93:2a:5c:0c:28:5a:05:7e:b2:38:d5:e4:b2:4f:69:a1:a7: db:6b:6c:f6:f1:c9:f5:fa:57:d2:5b:98:84:51:20:9f:03:b7: 11:f6:85:d3:8b:63:41:22:d5:e4:3d:91:9a:e2:fc:5e:a8:c1: d5:08:e5:9a:a3:5c:42:4d:d1:a0:48:87:40:0e:3d:f8:b1:b1: 49:a2:99:e0:f9:16:99:8a:d3:b8:2f:c2:d5:18:b3:d0:c1:0a: 75:ac:c9:01:89:88:5b:b0:79:73:e6:18:ac:85:47:f9:b6:4f: af:0e:ea:4e:cf:4b:28:2c:99:2b:af:5f:1d:83:1e:06:75:69: cb:23:5b:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIHgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkNFQjExMTAvBgNVBAUTKDQyNjdDRjVEMDMwMDRBOEZFRkRGMjEzOTVEMEZFODI0 NTQ4QjEzQzEwHhcNMjUwNDI0MTU1OTA1WhcNMjUwNTAxMTU1OTA1WjAYMRYwFAYD VQQDEw02ODBhNWZjOS0yOTlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1N66j9T/R60K+iCUvagfps2rmG0hoMvq42qzk4/NB+k+d43mpJrTvdmfJQff s2r9PWEFIHT1+QQDVhV5mpKkjMlGhJyfxBwm5K+LyzhwCVMTVaCaGBMeTBNae1EK SKbiybzL/9SHH3dPCoT31i1n/GUl81DXi0py9Pn+AcQpRcXXnwoKsZsnAifJdueJ S4WQRGKFz2pO0EXuv3tYVbTxA5NtToE2nN+GutOoA4XC7NLoGnQJ7a3pe2FGy7o4 Nwol1kLk1N3n7nFMtpRRTkz8m84UYDQHpkdI9oePxTgLQyxaZPQ4RD88p4eqNge6 kCDee1dkowpj/D5Ls4UYOWvC1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHKcBSL7 N5FoBzgDAGyO+Eusvi2uMB8GA1UdIwQYMBaAFEJnz10DAEqP798hOV0P6CRUixPB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQ0VCMS9FRkI4NzVDODA4 QzkxMUU2OEM3Nzg4NzhDNEY5QUUwMi9RbWZQWFFNQVNvX3YzeUU1WFFfb0pGU0xF OEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FtZlBYUU1BU29fdjN5RTVYUV9vSkZTTEU4RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Q0VCMS9FRkI4NzVDODA4QzkxMUU2OEM3Nzg4NzhDNEY5QUUwMi9RbWZQWFFNQVNv X3YzeUU1WFFfb0pGU0xFOEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBm+gADC/eIVeHJ4cooQj42JF86/cZe5KnAnh9UCPvpHKP/eTRphP81 LMMk7F9Gse/F1Qwuse9IdlY+Hepo3hap/v9f8+XoVJOKdwqUQ6PKr3ohCVa2Pbwa FPSRuBKKF+uOS6QYMhxn+mb3iP/sEotEFcL5vCmkNVf3fc/8mmoOkypcDChaBX6y ONXksk9poafba2z28cn1+lfSW5iEUSCfA7cR9oXTi2NBItXkPZGa4vxeqMHVCOWa o1xCTdGgSIdADj34sbFJopng+RaZitO4L8LVGLPQwQp1rMkBiYhbsHlz5hishUf5 tk+vDupOz0soLJkrr18dgx4GdWnLI1sq -----END CERTIFICATE-----Generated at Sat Apr 26 08:24:47 2025 by rpki-client