$ rpki-client -vvf rpki.apnic.net/member_repository/A91971CB/7A750A0A2DD811EA9C35205DC4F9AE02/fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.mft File: fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.mft (raw, json) Hash identifier: Zui4wX0K6ws+OVmLFg7I/VBVlzoZnmhO6Pdde3Gp+yM= Subject key identifier: 47:76:E0:48:73:CE:7C:FA:BA:22:DE:05:0B:73:14:F4:16:9A:6F:C7 Authority key identifier: 7D:04:51:65:B2:9A:68:AF:CB:8B:A8:15:99:CE:30:67:45:44:FD:8F Certificate issuer: /CN=A91971CB/serialNumber=7D045165B29A68AFCB8BA81599CE30674544FD8F Certificate serial: 0B76 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91971CB/7A750A0A2DD811EA9C35205DC4F9AE02/fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.mft Manifest number: 0B6F Signing time: Mon 12 May 2025 15:11:09 +0000 Manifest this update: Mon 12 May 2025 15:11:08 +0000 Manifest next update: Mon 19 May 2025 15:11:08 +0000 Files and hashes: 1: fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.crl (hash: krTHPc2xkkcCSWrU/MT79AWQL8g2GCEmkv7vfxvjf7Y=) 2: 99D18D463C0211EAA729693AC4F9AE02.roa (hash: /8fEEtPdMyUdjQ1z+LPnGcbnmSc1TogzrljlPk/+Zoo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91971CB/7A750A0A2DD811EA9C35205DC4F9AE02/fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.crl rsync://rpki.apnic.net/member_repository/A91971CB/7A750A0A2DD811EA9C35205DC4F9AE02/fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 15:11:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2934 (0xb76) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91971CB, serialNumber=7D045165B29A68AFCB8BA81599CE30674544FD8F Validity Not Before: May 12 15:11:08 2025 GMT Not After : May 19 15:11:08 2025 GMT Subject: CN=68220f8d-f5ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:14:e0:95:cc:51:5a:a8:b5:36:d5:7a:54:84: b0:bb:72:42:2b:cd:0a:42:bb:9f:0d:90:9f:79:5c: 00:dc:24:80:ec:cc:e1:03:c5:10:f3:51:0e:e6:02: 54:c5:df:cf:ec:44:70:b2:3f:36:3f:72:3d:5f:6d: 96:a7:e0:97:ce:e4:49:b4:09:b8:cb:60:8c:8a:2e: 71:b2:fe:3d:f9:85:d5:4e:11:8f:98:e3:7f:36:59: cf:a0:29:d3:2c:ec:15:d3:10:96:f0:d3:3d:e6:18: 04:d5:4c:7f:71:ce:9a:e5:4e:2d:a8:69:84:d8:c6: 7f:44:c0:0f:13:cf:88:32:11:3f:88:37:19:14:11: 7a:f8:a3:fd:73:27:98:87:40:20:59:b1:4c:86:c7: 73:ec:b5:ea:f7:c9:f1:f8:50:8a:b8:b7:bb:50:06: ff:c4:40:44:81:ad:c0:56:f9:d8:00:9b:bb:cd:84: 4d:04:0d:b6:d8:41:3f:d8:e8:56:ac:37:13:ef:a6: 9d:55:e6:0b:df:b2:4a:52:f8:60:a2:a0:14:49:05: 40:0b:7d:93:41:df:cf:ed:ff:7a:ba:8d:91:7a:8c: 23:4a:b4:87:44:cc:df:c2:2a:8a:1f:3f:2f:35:f7: bc:6a:79:54:83:6f:fd:c0:87:82:72:d7:a5:f1:78: 25:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:76:E0:48:73:CE:7C:FA:BA:22:DE:05:0B:73:14:F4:16:9A:6F:C7 X509v3 Authority Key Identifier: keyid:7D:04:51:65:B2:9A:68:AF:CB:8B:A8:15:99:CE:30:67:45:44:FD:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91971CB/7A750A0A2DD811EA9C35205DC4F9AE02/fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91971CB/7A750A0A2DD811EA9C35205DC4F9AE02/fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:60:f3:5e:e1:0a:cc:d4:d4:f0:36:82:c9:7c:31:34:b8:f1: 77:08:63:e9:03:94:bd:a7:2c:f6:49:d9:f3:ac:9e:c9:8e:64: 71:0f:9c:ec:63:aa:2a:39:83:2f:ab:a2:61:a2:70:8e:0e:dc: 6a:df:7b:41:65:64:92:60:a1:0b:cd:28:f9:92:29:db:1e:f5: dc:dc:ec:ca:9b:67:b1:7f:f8:3c:bb:e6:e2:ff:58:ef:5e:c6: 21:3c:86:f5:16:68:c6:86:4a:d5:a9:8a:4f:79:da:13:97:cc: 80:92:d0:a4:ce:9b:fe:d9:36:65:be:f6:1b:d8:93:51:9c:dd: 59:a5:e0:f8:a2:82:0e:df:49:a2:02:53:ee:d6:df:45:9b:35: d6:e1:bb:e2:cb:df:d8:ab:3b:c0:3c:fa:2c:7a:b0:a3:bc:a2: 2a:da:ec:18:f7:ec:70:5b:a9:8c:04:8e:2a:82:df:69:10:e7: b3:cb:7a:78:14:4a:9c:18:ee:44:b9:a1:b1:5c:bc:d5:96:87: 11:9b:e5:2d:44:d2:62:f5:e3:30:a3:ac:71:ee:3c:2c:2e:d9: be:66:0e:28:15:b5:f8:ca:26:bf:6a:8b:84:1d:22:52:fe:d6: ff:9e:db:53:5b:fd:67:b7:ae:a5:3d:a5:b7:37:2f:70:a9:b1: 9a:f1:3d:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC3YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTcxQ0IxMTAvBgNVBAUTKDdEMDQ1MTY1QjI5QTY4QUZDQjhCQTgxNTk5Q0UzMDY3 NDU0NEZEOEYwHhcNMjUwNTEyMTUxMTA4WhcNMjUwNTE5MTUxMTA4WjAYMRYwFAYD VQQDEw02ODIyMGY4ZC1mNWVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvBTglcxRWqi1NtV6VISwu3JCK80KQrufDZCfeVwA3CSA7MzhA8UQ81EO5gJU xd/P7ERwsj82P3I9X22Wp+CXzuRJtAm4y2CMii5xsv49+YXVThGPmON/NlnPoCnT LOwV0xCW8NM95hgE1Ux/cc6a5U4tqGmE2MZ/RMAPE8+IMhE/iDcZFBF6+KP9cyeY h0AgWbFMhsdz7LXq98nx+FCKuLe7UAb/xEBEga3AVvnYAJu7zYRNBA222EE/2OhW rDcT76adVeYL37JKUvhgoqAUSQVAC32TQd/P7f96uo2ReowjSrSHRMzfwiqKHz8v Nfe8anlUg2/9wIeCctel8XglLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEd24Ehz znz6uiLeBQtzFPQWmm/HMB8GA1UdIwQYMBaAFH0EUWWymmivy4uoFZnOMGdFRP2P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzFDQi83QTc1MEEwQTJE RDgxMUVBOUMzNTIwNURDNEY5QUUwMi9mUVJSWmJLYWFLX0xpNmdWbWM0d1owVkVf WTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2ZRUlJaYkthYUtfTGk2Z1ZtYzR3WjBWRV9ZOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzFDQi83QTc1MEEwQTJERDgxMUVBOUMzNTIwNURDNEY5QUUwMi9mUVJSWmJLYWFL X0xpNmdWbWM0d1owVkVfWTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3YPNe4QrM1NTwNoLJfDE0uPF3CGPpA5S9pyz2SdnzrJ7JjmRxD5zs Y6oqOYMvq6JhonCODtxq33tBZWSSYKELzSj5kinbHvXc3OzKm2exf/g8u+bi/1jv XsYhPIb1FmjGhkrVqYpPedoTl8yAktCkzpv+2TZlvvYb2JNRnN1ZpeD4ooIO30mi AlPu1t9FmzXW4bviy9/YqzvAPPoserCjvKIq2uwY9+xwW6mMBI4qgt9pEOezy3p4 FEqcGO5EuaGxXLzVlocRm+UtRNJi9eMwo6xx7jwsLtm+Zg4oFbX4yia/aouEHSJS /tb/nttTW/1nt66lPaW3Ny9wqbGa8T1y -----END CERTIFICATE-----Generated at Tue May 13 12:38:10 2025 by rpki-client