$ rpki-client -vvf rpki.apnic.net/member_repository/A91169FB/20AD4834BF3711EAA3E3A36FC4F9AE02/qfe5PpUk_E8WgaiSxHMiFVQisY4.mft File: qfe5PpUk_E8WgaiSxHMiFVQisY4.mft (raw, json) Hash identifier: LFG/TfXac5PUJQTzub+oa/hINjYb7Jr1QA8Be8AKS0s= Subject key identifier: 28:71:22:CC:30:90:7E:E0:98:6A:2D:5C:75:D6:BC:B8:C2:CF:CD:99 Authority key identifier: A9:F7:B9:3E:95:24:FC:4F:16:81:A8:92:C4:73:22:15:54:22:B1:8E Certificate issuer: /CN=A91169FB/serialNumber=A9F7B93E9524FC4F1681A892C47322155422B18E Certificate serial: 0899 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qfe5PpUk_E8WgaiSxHMiFVQisY4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91169FB/20AD4834BF3711EAA3E3A36FC4F9AE02/qfe5PpUk_E8WgaiSxHMiFVQisY4.mft Manifest number: 0881 Signing time: Sat 10 May 2025 20:19:26 +0000 Manifest this update: Sat 10 May 2025 20:19:26 +0000 Manifest next update: Sat 17 May 2025 20:19:26 +0000 Files and hashes: 1: qfe5PpUk_E8WgaiSxHMiFVQisY4.crl (hash: QxNmR7NRU2yRg/SOQS4t8h9VGRc8eyqm27LfdFbnLEI=) 2: 6FA4F9C44D8511EFA6073432C4F9AE02.roa (hash: gExqM4aUKrBllmPpMCtcVSZCHfPpzfLPu3nuxUT8Qqs=) 3: EF7E4B883FDE11EE8EC3E546C4F9AE02.roa (hash: dLzX51Se2cwYVIN8Vmr+uVPw3hseY/U8FombHRxTBaQ=) 4: EFE689283FDE11EE8EC3E546C4F9AE02.roa (hash: ggS/okJOXO20WJl9u64hoMFD/RxIwy0K1iG0hR/vSB4=) 5: 3ABCF052301511EDA401DB3CC4F9AE02.roa (hash: mKgGrrGBQwDLJBId/uOdKFjLBgmwhREF0Lpo0O+T3TQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91169FB/20AD4834BF3711EAA3E3A36FC4F9AE02/qfe5PpUk_E8WgaiSxHMiFVQisY4.crl rsync://rpki.apnic.net/member_repository/A91169FB/20AD4834BF3711EAA3E3A36FC4F9AE02/qfe5PpUk_E8WgaiSxHMiFVQisY4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qfe5PpUk_E8WgaiSxHMiFVQisY4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 20:19:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2201 (0x899) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91169FB, serialNumber=A9F7B93E9524FC4F1681A892C47322155422B18E Validity Not Before: May 10 20:19:26 2025 GMT Not After : May 17 20:19:26 2025 GMT Subject: CN=681fb4ce-cdcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:df:ff:0b:65:69:36:d6:34:98:74:e2:92:6c: c6:03:7f:99:a5:0e:26:80:a1:10:58:e5:5b:e1:da: da:1a:a4:b8:35:7e:42:23:ad:81:58:50:f9:93:43: 04:6f:4b:3e:c2:59:a7:b0:fd:c3:30:ff:34:af:7e: 37:b9:0d:3a:ad:b0:ed:11:32:30:f3:a1:2f:11:db: 0b:47:31:15:fb:99:f9:f6:0a:49:98:fe:e0:ba:9f: ca:e9:ad:f6:c1:5a:cb:fc:0c:49:b8:60:ce:0c:ad: 93:ae:6a:ec:a1:cf:2a:1d:63:c1:5a:14:66:f9:55: c0:15:1c:04:18:90:46:b4:d1:3d:3b:61:84:4b:38: 37:2b:8e:1d:fa:c7:f5:8b:41:35:14:3d:5b:bb:cd: 20:e1:a2:24:10:23:d8:29:c5:de:85:b9:72:ec:de: 3b:9c:7f:12:56:2b:00:4e:1f:38:e5:53:ca:c7:99: 48:04:3f:a1:12:af:42:b3:9a:9a:32:8a:7c:b7:21: a5:49:a0:8e:49:b4:60:b2:bc:1a:d1:d3:35:33:ac: 87:1d:6f:7b:65:f2:7f:af:07:c5:43:f6:39:1d:3f: f4:28:e6:af:71:11:90:e7:36:37:f5:7e:5b:86:d3: ec:7c:9b:81:60:80:b4:6f:01:8d:82:45:9c:72:dd: 3d:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:71:22:CC:30:90:7E:E0:98:6A:2D:5C:75:D6:BC:B8:C2:CF:CD:99 X509v3 Authority Key Identifier: keyid:A9:F7:B9:3E:95:24:FC:4F:16:81:A8:92:C4:73:22:15:54:22:B1:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91169FB/20AD4834BF3711EAA3E3A36FC4F9AE02/qfe5PpUk_E8WgaiSxHMiFVQisY4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qfe5PpUk_E8WgaiSxHMiFVQisY4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91169FB/20AD4834BF3711EAA3E3A36FC4F9AE02/qfe5PpUk_E8WgaiSxHMiFVQisY4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:81:e7:b8:81:51:56:59:e1:74:e6:a4:90:a0:af:bc:36:07: 54:bc:ee:88:ae:1c:a8:a6:03:7b:82:2f:e8:5b:47:56:a2:7d: f2:ce:aa:21:12:ac:e1:3c:06:52:de:bb:b4:fc:aa:d2:4f:6a: 83:f6:36:c0:de:94:96:d4:2c:80:b2:19:dc:d0:2f:d9:ce:20: 0e:58:ac:a8:b9:52:58:ce:05:50:34:16:c8:f0:77:f3:28:0d: 5d:49:e0:b6:b4:23:8b:5c:7c:ef:09:8e:7e:e3:c8:c2:9a:9b: 4a:1f:fd:d9:bd:c3:95:56:88:19:61:43:f6:13:11:97:a6:8e: 29:8e:a0:f2:4c:ec:e3:a4:9e:fa:2a:78:eb:04:be:ac:6a:d5: d8:32:54:9e:d5:69:3f:ca:8d:76:28:df:62:a4:e1:55:bf:35: 59:c9:26:5a:53:0e:fb:6b:40:60:d9:39:d7:31:21:e6:ad:ed: ce:01:6e:05:4c:19:b1:85:58:94:a9:89:0e:37:7d:0f:cf:70: 7b:d0:72:98:56:82:ab:c2:84:6f:18:45:a0:95:24:99:72:f1: c7:19:c9:18:c4:3e:f7:a9:74:9f:26:44:9e:b7:31:75:4a:b6: f9:25:4d:31:63:c2:c1:3b:0e:b3:53:ea:18:a5:fd:0f:ae:91: 1c:d7:6f:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCJkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTY5RkIxMTAvBgNVBAUTKEE5RjdCOTNFOTUyNEZDNEYxNjgxQTg5MkM0NzMyMjE1 NTQyMkIxOEUwHhcNMjUwNTEwMjAxOTI2WhcNMjUwNTE3MjAxOTI2WjAYMRYwFAYD VQQDEw02ODFmYjRjZS1jZGNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArt//C2VpNtY0mHTikmzGA3+ZpQ4mgKEQWOVb4draGqS4NX5CI62BWFD5k0ME b0s+wlmnsP3DMP80r343uQ06rbDtETIw86EvEdsLRzEV+5n59gpJmP7gup/K6a32 wVrL/AxJuGDODK2Trmrsoc8qHWPBWhRm+VXAFRwEGJBGtNE9O2GESzg3K44d+sf1 i0E1FD1bu80g4aIkECPYKcXehbly7N47nH8SVisATh845VPKx5lIBD+hEq9Cs5qa Mop8tyGlSaCOSbRgsrwa0dM1M6yHHW97ZfJ/rwfFQ/Y5HT/0KOavcRGQ5zY39X5b htPsfJuBYIC0bwGNgkWcct09xwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFChxIsww kH7gmGotXHXWvLjCz82ZMB8GA1UdIwQYMBaAFKn3uT6VJPxPFoGoksRzIhVUIrGO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjlGQi8yMEFENDgzNEJG MzcxMUVBQTNFM0EzNkZDNEY5QUUwMi9xZmU1UHBVa19FOFdnYWlTeEhNaUZWUWlz WTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FmZTVQcFVrX0U4V2dhaVN4SE1pRlZRaXNZNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjlGQi8yMEFENDgzNEJGMzcxMUVBQTNFM0EzNkZDNEY5QUUwMi9xZmU1UHBVa19F OFdnYWlTeEhNaUZWUWlzWTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJgee4gVFWWeF05qSQoK+8NgdUvO6IrhyopgN7gi/oW0dWon3yzqoh EqzhPAZS3ru0/KrST2qD9jbA3pSW1CyAshnc0C/ZziAOWKyouVJYzgVQNBbI8Hfz KA1dSeC2tCOLXHzvCY5+48jCmptKH/3ZvcOVVogZYUP2ExGXpo4pjqDyTOzjpJ76 KnjrBL6satXYMlSe1Wk/yo12KN9ipOFVvzVZySZaUw77a0Bg2TnXMSHmre3OAW4F TBmxhViUqYkON30Pz3B70HKYVoKrwoRvGEWglSSZcvHHGckYxD73qXSfJkSetzF1 Srb5JU0xY8LBOw6zU+oYpf0PrpEc12/C -----END CERTIFICATE-----Generated at Sun May 11 06:20:30 2025 by rpki-client