$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDEFE/1164CAE0A51611EF890ECD3EC4F9AE02/qCkvYgTIIT15H6bMqvV4UZTvgaA.mft File: qCkvYgTIIT15H6bMqvV4UZTvgaA.mft (raw, json) Hash identifier: VBUEdlCPBwD90C6fkWfPmexPdYx7P22y8O4QF+OTCb8= Subject key identifier: 2D:47:94:52:3B:16:40:30:14:67:04:60:5E:6A:1A:D6:1F:12:4F:00 Authority key identifier: A8:29:2F:62:04:C8:21:3D:79:1F:A6:CC:AA:F5:78:51:94:EF:81:A0 Certificate issuer: /CN=A91FDEFE/serialNumber=A8292F6204C8213D791FA6CCAAF5785194EF81A0 Certificate serial: 55 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qCkvYgTIIT15H6bMqvV4UZTvgaA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDEFE/1164CAE0A51611EF890ECD3EC4F9AE02/qCkvYgTIIT15H6bMqvV4UZTvgaA.mft Manifest number: 54 Signing time: Fri 25 Apr 2025 06:13:39 +0000 Manifest this update: Fri 25 Apr 2025 06:13:38 +0000 Manifest next update: Fri 02 May 2025 06:13:38 +0000 Files and hashes: 1: qCkvYgTIIT15H6bMqvV4UZTvgaA.crl (hash: MwM6REMih+CWvzC6gGhQDk3pQ1H/CwJCYyAN14UaY4s=) 2: E7695EC6A53411EFB98AFE51C4F9AE02.roa (hash: Lu7YmWMIdl1OwrJtUhBGFe6+OAHwy7pjCKEXO1Xq/dY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDEFE/1164CAE0A51611EF890ECD3EC4F9AE02/qCkvYgTIIT15H6bMqvV4UZTvgaA.crl rsync://rpki.apnic.net/member_repository/A91FDEFE/1164CAE0A51611EF890ECD3EC4F9AE02/qCkvYgTIIT15H6bMqvV4UZTvgaA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qCkvYgTIIT15H6bMqvV4UZTvgaA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:13:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 85 (0x55) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDEFE, serialNumber=A8292F6204C8213D791FA6CCAAF5785194EF81A0 Validity Not Before: Apr 25 06:13:38 2025 GMT Not After : May 2 06:13:38 2025 GMT Subject: CN=680b2813-f29e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:0f:e4:b3:c8:d0:f2:8c:a9:44:16:58:a5:d0: 48:f2:e4:88:e1:4c:08:6e:55:72:69:6c:e2:fe:4d: c2:33:7e:57:2c:63:56:fd:6e:c6:ee:7f:c9:64:df: 49:8a:96:74:ee:d4:e0:20:0b:18:d7:a7:ee:50:8d: 86:1a:34:39:c0:7e:43:20:97:71:a5:64:fe:ab:3d: 6a:64:0e:9f:ce:5d:32:9e:c1:d0:21:07:ec:07:37: 47:be:e4:62:ca:17:c6:f6:c3:5e:95:69:35:07:76: a5:e5:0d:91:ad:0c:01:7a:e7:90:72:0a:1b:c0:e4: 34:05:a3:49:ce:60:8c:e3:85:9a:11:8e:9f:85:71: 0f:52:49:a7:49:37:a2:1f:89:89:7b:2c:d6:8c:0d: 02:c0:69:55:13:35:d7:1e:44:58:8c:43:8f:f1:3e: 93:47:57:e7:39:69:76:0c:cc:00:62:98:9f:44:d2: 0d:3b:91:b4:cc:36:2e:04:59:91:31:a1:c4:e4:54: 93:ef:b8:b9:a0:42:3d:0b:0e:5b:f6:0d:b8:f5:75: e7:20:da:8f:70:1b:c6:aa:bd:de:dc:3d:bf:e0:43: 23:82:2e:98:02:0f:2e:b1:fb:19:1e:06:9c:23:98: 15:35:63:2f:70:1a:c3:75:24:c9:cc:b4:ff:e8:5b: 49:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:47:94:52:3B:16:40:30:14:67:04:60:5E:6A:1A:D6:1F:12:4F:00 X509v3 Authority Key Identifier: keyid:A8:29:2F:62:04:C8:21:3D:79:1F:A6:CC:AA:F5:78:51:94:EF:81:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDEFE/1164CAE0A51611EF890ECD3EC4F9AE02/qCkvYgTIIT15H6bMqvV4UZTvgaA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qCkvYgTIIT15H6bMqvV4UZTvgaA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDEFE/1164CAE0A51611EF890ECD3EC4F9AE02/qCkvYgTIIT15H6bMqvV4UZTvgaA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:ec:ba:5b:0e:52:ba:e3:48:93:ca:16:fa:bf:69:5c:e0:be: 6a:cc:7d:cf:85:14:e8:1b:fa:c8:58:1b:41:59:20:01:80:6c: 40:62:43:05:dd:cc:1f:95:4b:2c:22:61:b5:76:29:90:1c:b9: c9:36:59:87:84:f7:b8:8b:a7:02:13:f9:b1:59:4b:cb:eb:9b: f1:5b:15:73:02:8c:3b:b6:43:78:e3:ef:9c:06:64:3d:42:f0: 8e:36:a0:58:9f:32:b9:d0:53:da:44:3b:9f:d4:65:14:2c:c4: e5:f8:fb:7e:ad:c8:f2:ec:23:0a:78:4c:b6:5f:a1:22:2b:24: fc:70:1c:87:68:67:16:18:24:b1:d3:41:1f:02:b4:7e:b3:db: 33:52:26:4a:8f:67:cd:b1:07:c9:23:9f:f7:ca:da:ce:ea:a6: 48:f6:10:a8:a7:66:01:c0:c1:89:c6:bb:2b:51:ab:af:b1:b4: 04:ba:62:82:9e:bf:4f:10:43:9a:ca:94:5a:c7:30:3c:eb:45: 74:6a:9f:f7:86:4c:0e:a8:60:04:4e:7c:d8:25:c5:42:63:bc: fa:df:a7:7a:14:26:0d:bb:ec:2e:1d:47:67:0d:73:c3:37:e6: d3:b1:6a:2d:62:47:07:88:24:b2:d4:7d:28:0c:9d:a7:73:46: 42:7f:bb:5e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG REVGRTExMC8GA1UEBRMoQTgyOTJGNjIwNEM4MjEzRDc5MUZBNkNDQUFGNTc4NTE5 NEVGODFBMDAeFw0yNTA0MjUwNjEzMzhaFw0yNTA1MDIwNjEzMzhaMBgxFjAUBgNV BAMTDTY4MGIyODEzLWYyOWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDID+SzyNDyjKlEFlil0Ejy5IjhTAhuVXJpbOL+TcIzflcsY1b9bsbuf8lk30mK lnTu1OAgCxjXp+5QjYYaNDnAfkMgl3GlZP6rPWpkDp/OXTKewdAhB+wHN0e+5GLK F8b2w16VaTUHdqXlDZGtDAF655ByChvA5DQFo0nOYIzjhZoRjp+FcQ9SSadJN6If iYl7LNaMDQLAaVUTNdceRFiMQ4/xPpNHV+c5aXYMzABimJ9E0g07kbTMNi4EWZEx ocTkVJPvuLmgQj0LDlv2Dbj1decg2o9wG8aqvd7cPb/gQyOCLpgCDy6x+xkeBpwj mBU1Yy9wGsN1JMnMtP/oW0npAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQULUeUUjsW QDAUZwRgXmoa1h8STwAwHwYDVR0jBBgwFoAUqCkvYgTIIT15H6bMqvV4UZTvgaAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZERUZFLzExNjRDQUUwQTUx NjExRUY4OTBFQ0QzRUM0RjlBRTAyL3FDa3ZZZ1RJSVQxNUg2Yk1xdlY0VVpUdmdh QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvcUNrdllnVElJVDE1SDZiTXF2VjRVWlR2Z2FBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZE RUZFLzExNjRDQUUwQTUxNjExRUY4OTBFQ0QzRUM0RjlBRTAyL3FDa3ZZZ1RJSVQx NUg2Yk1xdlY0VVpUdmdhQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEPsulsOUrrjSJPKFvq/aVzgvmrMfc+FFOgb+shYG0FZIAGAbEBiQwXd zB+VSywiYbV2KZAcuck2WYeE97iLpwIT+bFZS8vrm/FbFXMCjDu2Q3jj75wGZD1C 8I42oFifMrnQU9pEO5/UZRQsxOX4+36tyPLsIwp4TLZfoSIrJPxwHIdoZxYYJLHT QR8CtH6z2zNSJkqPZ82xB8kjn/fK2s7qpkj2EKinZgHAwYnGuytRq6+xtAS6YoKe v08QQ5rKlFrHMDzrRXRqn/eGTA6oYAROfNglxUJjvPrfp3oUJg277C4dR2cNc8M3 5tOxai1iRweIJLLUfSgMnadzRkJ/u14= -----END CERTIFICATE-----Generated at Sat Apr 26 16:54:34 2025 by rpki-client