$ rpki-client -vvf rpki.apnic.net/member_repository/A91139AB/158D4906255B11EBA9F5601AC4F9AE02/0Quveqjbc0uVLQNgh3g8ZDeEPI8.mft File: 0Quveqjbc0uVLQNgh3g8ZDeEPI8.mft (raw, json) Hash identifier: zYs7ly4JJtKABnn6aGeIDJNhs2HD7IJJWIh348MjSW4= Subject key identifier: 00:01:78:B8:D4:9A:41:99:89:A9:AE:0A:56:88:33:58:AB:C6:F6:C9 Authority key identifier: D1:0B:AF:7A:A8:DB:73:4B:95:2D:03:60:87:78:3C:64:37:84:3C:8F Certificate issuer: /CN=A91139AB/serialNumber=D10BAF7AA8DB734B952D036087783C6437843C8F Certificate serial: 012B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Quveqjbc0uVLQNgh3g8ZDeEPI8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91139AB/158D4906255B11EBA9F5601AC4F9AE02/0Quveqjbc0uVLQNgh3g8ZDeEPI8.mft Manifest number: 0868 Signing time: Wed 14 May 2025 21:44:38 +0000 Manifest this update: Wed 14 May 2025 21:44:38 +0000 Manifest next update: Wed 21 May 2025 21:44:38 +0000 Files and hashes: 1: 0Quveqjbc0uVLQNgh3g8ZDeEPI8.crl (hash: MyMyXhkWKCFHeQDcBiwI5VRJMQ8fwZMzH65f5TkXJ2Y=) 2: 5428E56AF53911EEB8A4592AC4F9AE02.roa (hash: V0jvv16GxWWSgYF6je4xv4QElPKOl/7nA+3XTVSMXTs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91139AB/158D4906255B11EBA9F5601AC4F9AE02/0Quveqjbc0uVLQNgh3g8ZDeEPI8.crl rsync://rpki.apnic.net/member_repository/A91139AB/158D4906255B11EBA9F5601AC4F9AE02/0Quveqjbc0uVLQNgh3g8ZDeEPI8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Quveqjbc0uVLQNgh3g8ZDeEPI8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 21:44:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 299 (0x12b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91139AB, serialNumber=D10BAF7AA8DB734B952D036087783C6437843C8F Validity Not Before: May 14 21:44:38 2025 GMT Not After : May 21 21:44:38 2025 GMT Subject: CN=68250ec6-b6bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:f2:d7:30:63:29:f4:c2:c1:f7:7c:4a:b8:30: 9d:25:c1:ab:8c:ba:e9:d1:24:29:48:e2:af:68:94: a2:c7:6a:77:03:c6:2d:8e:fd:dd:e3:40:62:56:78: 75:a2:42:bc:b6:ca:2d:ff:88:f5:ef:dc:33:e0:a3: cd:99:05:63:74:1a:2c:c8:ef:be:2d:1d:fa:13:d5: 5e:93:40:e7:bc:b4:8c:86:f4:0b:31:e5:95:f3:20: 93:f9:b7:79:88:cd:15:7d:c7:72:46:d0:cd:a0:9d: 33:0e:d7:ff:bd:48:be:70:7c:b5:f9:e8:20:9c:54: d2:6c:f5:0c:6e:12:21:47:66:9d:4e:d5:af:2d:ee: 2c:e5:9a:6f:3d:06:aa:7b:a8:09:c6:b7:59:b0:3b: 3a:68:3a:00:a2:45:a3:0b:6d:74:91:9d:22:5b:2b: 5e:bb:dc:cc:97:c0:34:33:ca:8f:77:96:6e:31:9e: 45:8e:b1:6c:68:41:e1:c3:af:61:6a:69:6a:64:ba: 90:b1:de:fb:ba:93:8e:a6:bd:d2:07:33:f1:dd:6f: 93:cf:76:86:9b:e1:94:aa:ed:fe:fd:21:60:49:2a: f9:43:b3:28:d8:da:09:f9:ec:44:81:e6:79:e1:44: 8a:89:a1:ad:e1:d7:5b:be:bf:84:f6:69:c6:c7:f0: 72:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:01:78:B8:D4:9A:41:99:89:A9:AE:0A:56:88:33:58:AB:C6:F6:C9 X509v3 Authority Key Identifier: keyid:D1:0B:AF:7A:A8:DB:73:4B:95:2D:03:60:87:78:3C:64:37:84:3C:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91139AB/158D4906255B11EBA9F5601AC4F9AE02/0Quveqjbc0uVLQNgh3g8ZDeEPI8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Quveqjbc0uVLQNgh3g8ZDeEPI8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91139AB/158D4906255B11EBA9F5601AC4F9AE02/0Quveqjbc0uVLQNgh3g8ZDeEPI8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:f2:b8:1c:da:2d:09:19:d1:43:99:cf:94:cf:22:b8:35:ce: 29:e0:41:fa:84:0e:e5:b8:1e:24:79:22:aa:e0:ad:43:a1:ba: b2:bd:ff:f3:0b:2a:69:67:e7:79:1c:c7:6c:31:38:99:9f:35: 74:bf:35:d0:c0:c8:32:5f:20:6a:65:9d:25:d0:ed:d7:c8:f8: e4:00:b8:49:15:af:e9:c1:bc:56:84:55:a0:75:be:74:a2:57: 9a:ca:aa:e1:f7:35:ed:98:f1:2e:d7:84:1a:ab:ef:f1:ff:f9: b1:dd:1c:b0:06:ad:bc:eb:1a:3a:99:06:13:71:ec:02:80:80: 36:c9:7f:7b:49:f1:6c:a6:18:53:33:ec:ea:e7:f0:a0:93:b1: 0c:4d:53:10:24:78:a7:78:b6:73:f2:f5:d8:34:71:e5:05:21: dd:f9:f3:d2:bf:1a:0f:8d:ee:9d:cb:42:9a:16:97:9e:d5:d3: a4:bf:51:79:d8:a6:22:2e:9b:07:c0:6d:c7:b4:85:d0:fc:f6: d7:bb:81:29:79:db:02:5b:57:51:ed:78:db:ea:a7:b8:51:d0: 60:18:bd:94:c0:9d:fb:98:ed:88:e0:ea:c8:a0:11:41:8d:3f: 01:59:34:d2:b1:ca:9b:83:ea:c8:80:80:99:7b:f6:2b:83:18: e0:c6:e2:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTM5QUIxMTAvBgNVBAUTKEQxMEJBRjdBQThEQjczNEI5NTJEMDM2MDg3NzgzQzY0 Mzc4NDNDOEYwHhcNMjUwNTE0MjE0NDM4WhcNMjUwNTIxMjE0NDM4WjAYMRYwFAYD VQQDEw02ODI1MGVjNi1iNmJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyfLXMGMp9MLB93xKuDCdJcGrjLrp0SQpSOKvaJSix2p3A8Ytjv3d40BiVnh1 okK8tsot/4j179wz4KPNmQVjdBosyO++LR36E9Vek0DnvLSMhvQLMeWV8yCT+bd5 iM0VfcdyRtDNoJ0zDtf/vUi+cHy1+eggnFTSbPUMbhIhR2adTtWvLe4s5ZpvPQaq e6gJxrdZsDs6aDoAokWjC210kZ0iWyteu9zMl8A0M8qPd5ZuMZ5FjrFsaEHhw69h amlqZLqQsd77upOOpr3SBzPx3W+Tz3aGm+GUqu3+/SFgSSr5Q7Mo2NoJ+exEgeZ5 4USKiaGt4ddbvr+E9mnGx/BypwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAABeLjU mkGZiamuClaIM1irxvbJMB8GA1UdIwQYMBaAFNELr3qo23NLlS0DYId4PGQ3hDyP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMzlBQi8xNThENDkwNjI1 NUIxMUVCQTlGNTYwMUFDNEY5QUUwMi8wUXV2ZXFqYmMwdVZMUU5naDNnOFpEZUVQ STguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBRdXZlcWpiYzB1VkxRTmdoM2c4WkRlRVBJOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MzlBQi8xNThENDkwNjI1NUIxMUVCQTlGNTYwMUFDNEY5QUUwMi8wUXV2ZXFqYmMw dVZMUU5naDNnOFpEZUVQSTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAN8rgc2i0JGdFDmc+UzyK4Nc4p4EH6hA7luB4keSKq4K1Dobqyvf/z CyppZ+d5HMdsMTiZnzV0vzXQwMgyXyBqZZ0l0O3XyPjkALhJFa/pwbxWhFWgdb50 oleayqrh9zXtmPEu14Qaq+/x//mx3RywBq286xo6mQYTcewCgIA2yX97SfFsphhT M+zq5/Cgk7EMTVMQJHineLZz8vXYNHHlBSHd+fPSvxoPje6dy0KaFpee1dOkv1F5 2KYiLpsHwG3HtIXQ/PbXu4EpedsCW1dR7Xjb6qe4UdBgGL2UwJ37mO2I4OrIoBFB jT8BWTTSscqbg+rIgICZe/YrgxjgxuKF -----END CERTIFICATE-----Generated at Fri May 16 17:07:12 2025 by rpki-client