$ rpki-client -vvf rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/qeq8JGURbtEdbIza4gESN88fWd8.mft File: qeq8JGURbtEdbIza4gESN88fWd8.mft (raw, json) Hash identifier: N6drlcbKnkXrF+xDySkyz3XkOqNM4Hn0hkvC8cl6xH4= Subject key identifier: 6E:C2:A3:89:9F:CF:DD:1A:A6:83:FB:EC:FE:5B:B2:34:C1:BC:E9:A6 Authority key identifier: A9:EA:BC:24:65:11:6E:D1:1D:6C:8C:DA:E2:01:12:37:CF:1F:59:DF Certificate issuer: /CN=A91871C2/serialNumber=A9EABC2465116ED11D6C8CDAE2011237CF1F59DF Certificate serial: 074D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qeq8JGURbtEdbIza4gESN88fWd8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/qeq8JGURbtEdbIza4gESN88fWd8.mft Manifest number: 071A Signing time: Mon 12 May 2025 21:51:55 +0000 Manifest this update: Mon 12 May 2025 21:51:55 +0000 Manifest next update: Mon 19 May 2025 21:51:55 +0000 Files and hashes: 1: qeq8JGURbtEdbIza4gESN88fWd8.crl (hash: 1GJZUQG+LtdjD1fWf93sV5ZjanTuRmQGoz6X5VG9/ho=) 2: 3BCBA04AE97211ECB2067F31C4F9AE02.roa (hash: S20AgwmMD32xuDu5IGHvW4IWHrtUSQ1t37c8fQjNokk=) 3: B43753D005AC11ECB86F694EC4F9AE02.roa (hash: 4k+rKheNnbTveN1MujuQeZF7WX147LGgGeCmhBGihc4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/qeq8JGURbtEdbIza4gESN88fWd8.crl rsync://rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/qeq8JGURbtEdbIza4gESN88fWd8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qeq8JGURbtEdbIza4gESN88fWd8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 21:51:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1869 (0x74d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91871C2, serialNumber=A9EABC2465116ED11D6C8CDAE2011237CF1F59DF Validity Not Before: May 12 21:51:55 2025 GMT Not After : May 19 21:51:55 2025 GMT Subject: CN=68226d7b-e253 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:65:db:bc:43:a1:37:66:44:c6:4a:0b:18:6c: e3:6c:bc:04:15:24:db:54:e9:4e:94:58:c3:a8:d4: ad:7b:3f:a8:b5:4c:19:2c:47:04:5b:4f:44:d3:c8: 0e:94:bf:af:61:86:59:e5:ab:84:00:a1:42:72:b2: 1c:c1:e2:0c:25:7b:50:ce:4c:54:a3:00:c4:92:02: 16:7d:6b:df:c6:ef:60:84:d0:a1:e8:b7:fa:8f:9f: e2:24:2b:e2:d7:75:59:a3:30:c7:0f:b4:f9:24:a5: 25:68:a0:cf:53:33:15:89:7e:eb:d8:5a:1d:46:00: ca:fd:7c:36:91:9b:f7:78:5e:19:69:af:d9:08:65: 0e:ed:59:e3:41:d4:98:2e:51:99:fb:e3:d8:4c:e2: 77:66:1b:cb:ae:31:cf:08:80:8b:ac:c1:a2:3b:3a: 46:78:09:2c:f2:95:61:05:cc:35:4f:94:97:9d:4c: b8:25:65:65:b0:3f:9b:21:f1:14:3b:74:3b:70:41: 0f:e5:84:43:15:5b:0c:db:e7:f7:6e:93:8e:af:25: 0d:00:09:57:03:ea:5c:a0:6f:b8:b7:dd:c6:36:f9: 68:84:aa:cb:4c:7c:5b:1d:90:4b:aa:30:a6:ce:de: 71:34:d3:0d:39:32:fa:df:d2:e8:37:fd:51:a8:14: b5:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:C2:A3:89:9F:CF:DD:1A:A6:83:FB:EC:FE:5B:B2:34:C1:BC:E9:A6 X509v3 Authority Key Identifier: keyid:A9:EA:BC:24:65:11:6E:D1:1D:6C:8C:DA:E2:01:12:37:CF:1F:59:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/qeq8JGURbtEdbIza4gESN88fWd8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qeq8JGURbtEdbIza4gESN88fWd8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/qeq8JGURbtEdbIza4gESN88fWd8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:0b:9b:96:43:06:52:03:eb:ae:b5:4f:ed:92:32:1e:8f:51: 61:ab:57:1a:4c:f1:63:58:2b:b6:05:a4:9c:21:c9:23:b5:c2: 2f:f6:f8:02:83:00:a4:c1:f1:30:e1:4b:be:04:8b:27:cd:2d: 69:35:25:88:02:c2:98:4b:71:4e:50:26:4d:68:57:f6:89:7d: 10:09:6c:d6:9d:20:07:b3:b3:d8:4d:5a:65:73:c5:36:7e:d2: 0c:87:68:79:1a:d2:01:4b:4f:fe:21:ee:e8:db:35:58:d5:ec: f7:6a:58:fe:8a:80:61:41:21:6f:0c:7f:a8:17:0b:37:b2:11: 45:3c:5f:7a:17:21:c0:78:03:2c:c9:27:31:7c:a9:76:ea:73: 7b:6e:ac:0e:2c:22:b7:f4:c0:1f:1f:85:42:51:a0:cc:7e:fe: 12:55:d5:d9:36:a1:9b:37:12:fc:ae:9e:4d:f9:37:93:04:ad: eb:1e:8a:1c:bf:38:ce:ac:ba:d2:07:85:2f:e1:cf:87:c8:c0: 22:7e:6a:02:98:f2:a8:5f:a2:c9:20:a7:b8:f1:51:a6:08:64: 9f:1b:c9:e5:c5:54:89:d5:86:12:92:2c:c1:8c:e7:0b:7d:7c: 45:68:01:cb:24:e4:06:3c:37:15:55:c5:4a:a8:2c:97:40:6f: fa:1e:4d:ec -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB00wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODcxQzIxMTAvBgNVBAUTKEE5RUFCQzI0NjUxMTZFRDExRDZDOENEQUUyMDExMjM3 Q0YxRjU5REYwHhcNMjUwNTEyMjE1MTU1WhcNMjUwNTE5MjE1MTU1WjAYMRYwFAYD VQQDEw02ODIyNmQ3Yi1lMjUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6WXbvEOhN2ZExkoLGGzjbLwEFSTbVOlOlFjDqNStez+otUwZLEcEW09E08gO lL+vYYZZ5auEAKFCcrIcweIMJXtQzkxUowDEkgIWfWvfxu9ghNCh6Lf6j5/iJCvi 13VZozDHD7T5JKUlaKDPUzMViX7r2FodRgDK/Xw2kZv3eF4Zaa/ZCGUO7VnjQdSY LlGZ++PYTOJ3ZhvLrjHPCICLrMGiOzpGeAks8pVhBcw1T5SXnUy4JWVlsD+bIfEU O3Q7cEEP5YRDFVsM2+f3bpOOryUNAAlXA+pcoG+4t93GNvlohKrLTHxbHZBLqjCm zt5xNNMNOTL639LoN/1RqBS1fQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG7Co4mf z90apoP77P5bsjTBvOmmMB8GA1UdIwQYMBaAFKnqvCRlEW7RHWyM2uIBEjfPH1nf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzFDMi9ERTYxNjY2ODU1 QTkxMUVCOTlBRkRBNURDNEY5QUUwMi9xZXE4SkdVUmJ0RWRiSXphNGdFU044OGZX ZDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FlcThKR1VSYnRFZGJJemE0Z0VTTjg4ZldkOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzFDMi9ERTYxNjY2ODU1QTkxMUVCOTlBRkRBNURDNEY5QUUwMi9xZXE4SkdVUmJ0 RWRiSXphNGdFU044OGZXZDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzC5uWQwZSA+uutU/tkjIej1Fhq1caTPFjWCu2BaScIckjtcIv9vgC gwCkwfEw4Uu+BIsnzS1pNSWIAsKYS3FOUCZNaFf2iX0QCWzWnSAHs7PYTVplc8U2 ftIMh2h5GtIBS0/+Ie7o2zVY1ez3alj+ioBhQSFvDH+oFws3shFFPF96FyHAeAMs yScxfKl26nN7bqwOLCK39MAfH4VCUaDMfv4SVdXZNqGbNxL8rp5N+TeTBK3rHooc vzjOrLrSB4Uv4c+HyMAifmoCmPKoX6LJIKe48VGmCGSfG8nlxVSJ1YYSkizBjOcL fXxFaAHLJOQGPDcVVcVKqCyXQG/6Hk3s -----END CERTIFICATE-----Generated at Wed May 14 14:57:09 2025 by rpki-client