$ rpki-client -vvf rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.mft File: qE54NmnC-ZeE80T80yP8-ZHMQPs.mft (raw, json) Hash identifier: 4JZk1rh1d6xT78JDcM2jBOcgUl2AwobQnaYc1zSZSLg= Subject key identifier: 1C:C7:EB:5A:FB:8D:7E:F6:48:F9:C6:10:27:BF:68:55:51:C0:C7:58 Authority key identifier: A8:4E:78:36:69:C2:F9:97:84:F3:44:FC:D3:23:FC:F9:91:CC:40:FB Certificate issuer: /CN=A91604AC/serialNumber=A84E783669C2F99784F344FCD323FCF991CC40FB Certificate serial: 01F8 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/qE54NmnC-ZeE80T80yP8-ZHMQPs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.mft Manifest number: 01EF Signing time: Mon 12 May 2025 22:15:24 +0000 Manifest this update: Mon 12 May 2025 22:15:23 +0000 Manifest next update: Mon 19 May 2025 22:15:23 +0000 Files and hashes: 1: qE54NmnC-ZeE80T80yP8-ZHMQPs.crl (hash: Ev3pRAWRZh45eA21qbXwFWtROU4bDYVVKUJ+8hO18Qo=) 2: 348854286B8F11ED9B07DD15C4F9AE02.roa (hash: xsRGj9an13o+ozRk8T0R12ysRESN2vJXv8XQcYafKCU=) 3: 11DD43BA80E411ED993FD824C4F9AE02.roa (hash: 0ZDkLkZaaQfnmuzBjz0ljr58b+EeHu6qJ0K1k0tRYzo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.crl rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/qE54NmnC-ZeE80T80yP8-ZHMQPs.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 22:15:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 504 (0x1f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91604AC, serialNumber=A84E783669C2F99784F344FCD323FCF991CC40FB Validity Not Before: May 12 22:15:23 2025 GMT Not After : May 19 22:15:23 2025 GMT Subject: CN=682272fc-26ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:6e:30:78:d5:df:cc:f7:5f:26:4c:e8:b1:74: 29:e8:af:9e:9d:98:b6:3b:15:2e:db:c8:e3:ec:b0: 75:7b:67:d4:9a:e5:26:9d:88:24:2b:a4:4a:22:d7: 23:7a:d6:a9:52:cc:76:ac:e3:fd:cf:bb:28:52:d1: 92:f0:26:75:c5:07:8f:95:57:d6:d9:dc:63:f8:20: 20:41:46:68:46:5c:77:cc:c6:be:0e:a5:1b:58:87: 0b:ab:fd:2b:e2:2b:a5:fb:ad:19:25:0f:c2:81:79: cd:be:4a:79:93:8d:55:bb:39:2f:b2:75:e5:ed:b8: c4:2d:16:4b:4e:7c:44:10:62:c6:85:1c:ec:5c:fc: 02:19:72:40:4d:93:cb:b6:14:5d:6c:cd:b8:d8:dd: c0:15:a2:90:46:c8:f9:04:2a:06:f7:c6:b2:2c:5b: e0:07:85:d6:84:26:8a:06:91:fb:3e:ac:2d:7a:e8: 82:a5:58:ca:12:cf:aa:35:42:6d:ba:8a:b3:f5:ee: 7b:ba:82:1a:c6:1b:d7:fc:02:29:de:58:69:6d:34: 19:50:ef:78:da:d1:60:2b:6b:53:b8:33:3a:61:1a: e4:a3:19:11:0f:09:88:c6:56:a6:e1:98:ca:32:3c: 37:4a:42:7c:41:f3:f5:29:95:d5:33:c2:c6:53:6a: 06:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:C7:EB:5A:FB:8D:7E:F6:48:F9:C6:10:27:BF:68:55:51:C0:C7:58 X509v3 Authority Key Identifier: keyid:A8:4E:78:36:69:C2:F9:97:84:F3:44:FC:D3:23:FC:F9:91:CC:40:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/qE54NmnC-ZeE80T80yP8-ZHMQPs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:cf:67:81:03:0e:48:ac:03:02:4c:7e:3b:13:1e:37:cf:1b: bd:3d:75:f5:c4:bf:41:36:c4:bb:1f:16:ea:18:1d:e3:bc:22: 73:49:5d:5f:3f:67:47:b2:51:9a:35:32:d0:7c:39:2f:6d:9f: c4:87:72:2c:6c:cb:2a:b2:d0:0b:50:6b:c2:8e:db:f7:56:aa: 7a:d5:e5:32:72:29:66:45:ea:23:46:54:e2:0e:15:17:8c:92: 33:ff:29:cc:f2:e4:6e:65:e7:6b:49:4c:32:e7:58:e5:44:5d: 5e:5f:05:25:c8:4f:a6:d5:70:85:d2:99:90:e3:c6:90:8c:33: 7a:f6:a0:0e:75:9c:b1:6c:c1:1a:a0:34:b6:47:93:99:c4:61: 87:ed:10:37:18:41:93:28:b0:d7:b1:7e:02:2e:c7:d3:cb:82: ab:c8:85:42:55:d7:6f:c1:ab:ee:ce:29:91:40:7a:c8:f5:4c: 74:7c:01:fa:92:8e:60:c5:c3:8a:e6:d7:b4:76:b6:eb:ce:d2: 0e:b9:40:fd:59:01:25:8a:64:a6:24:12:bd:63:93:02:a8:6f: d2:4e:9f:54:20:8e:2e:9c:85:5b:96:0f:86:c8:18:d1:95:c0: 7a:df:3a:33:e9:06:37:a3:c7:47:20:4b:0e:df:52:ea:5b:30: c9:42:25:ea -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjA0QUMxMTAvBgNVBAUTKEE4NEU3ODM2NjlDMkY5OTc4NEYzNDRGQ0QzMjNGQ0Y5 OTFDQzQwRkIwHhcNMjUwNTEyMjIxNTIzWhcNMjUwNTE5MjIxNTIzWjAYMRYwFAYD VQQDEw02ODIyNzJmYy0yNmVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAym4weNXfzPdfJkzosXQp6K+enZi2OxUu28jj7LB1e2fUmuUmnYgkK6RKItcj etapUsx2rOP9z7soUtGS8CZ1xQePlVfW2dxj+CAgQUZoRlx3zMa+DqUbWIcLq/0r 4iul+60ZJQ/CgXnNvkp5k41VuzkvsnXl7bjELRZLTnxEEGLGhRzsXPwCGXJATZPL thRdbM242N3AFaKQRsj5BCoG98ayLFvgB4XWhCaKBpH7PqwteuiCpVjKEs+qNUJt uoqz9e57uoIaxhvX/AIp3lhpbTQZUO942tFgK2tTuDM6YRrkoxkRDwmIxlam4ZjK Mjw3SkJ8QfP1KZXVM8LGU2oGbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBzH61r7 jX72SPnGECe/aFVRwMdYMB8GA1UdIwQYMBaAFKhOeDZpwvmXhPNE/NMj/PmRzED7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDRBQy8zNEJFQzVGNDQ0 NEMxMUVEQkRBOTEyN0NDNEY5QUUwMi9xRTU0Tm1uQy1aZUU4MFQ4MHlQOC1aSE1R UHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL3FFNTRObW5DLVplRTgwVDgweVA4LVpITVFQcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MDRBQy8zNEJFQzVGNDQ0NEMxMUVEQkRBOTEyN0NDNEY5QUUwMi9xRTU0Tm1uQy1a ZUU4MFQ4MHlQOC1aSE1RUHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5z2eBAw5IrAMCTH47Ex43zxu9PXX1xL9BNsS7HxbqGB3jvCJzSV1f P2dHslGaNTLQfDkvbZ/Eh3IsbMsqstALUGvCjtv3Vqp61eUycilmReojRlTiDhUX jJIz/ynM8uRuZedrSUwy51jlRF1eXwUlyE+m1XCF0pmQ48aQjDN69qAOdZyxbMEa oDS2R5OZxGGH7RA3GEGTKLDXsX4CLsfTy4KryIVCVddvwavuzimRQHrI9Ux0fAH6 ko5gxcOK5te0drbrztIOuUD9WQElimSmJBK9Y5MCqG/STp9UII4unIVblg+GyBjR lcB63zoz6QY3o8dHIEsO31LqWzDJQiXq -----END CERTIFICATE-----Generated at Tue May 13 20:22:07 2025 by rpki-client