$ rpki-client -vvf rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/qB0NYfe3MN23QsxIrdiKBNRv0CQ.mft File: qB0NYfe3MN23QsxIrdiKBNRv0CQ.mft (raw, json) Hash identifier: F9NLB1eamuxa2wtbTnv/4/NobCgxdrmfKiCwjrzX7x4= Subject key identifier: 14:11:49:F8:A5:7F:39:B9:35:2B:2E:AC:CC:8A:01:16:14:3D:D5:27 Authority key identifier: A8:1D:0D:61:F7:B7:30:DD:B7:42:CC:48:AD:D8:8A:04:D4:6F:D0:24 Certificate issuer: /CN=A91A192D/serialNumber=A81D0D61F7B730DDB742CC48ADD88A04D46FD024 Certificate serial: 0148 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qB0NYfe3MN23QsxIrdiKBNRv0CQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/qB0NYfe3MN23QsxIrdiKBNRv0CQ.mft Manifest number: 012A Signing time: Tue 13 May 2025 04:16:06 +0000 Manifest this update: Tue 13 May 2025 04:16:06 +0000 Manifest next update: Tue 20 May 2025 04:16:05 +0000 Files and hashes: 1: qB0NYfe3MN23QsxIrdiKBNRv0CQ.crl (hash: 9NRMy5FLPiY9IgUFNndDZdNqu80NdN9b8jFxxN3GpVU=) 2: C352565AC6E011EF87D90241C4F9AE02.roa (hash: mUqqXY0c6pz96Csa4vpgVVN0TcEzh2ALUeu6fy0AUoM=) 3: 4B3A3F3CC6DD11EFA7A63533C4F9AE02.roa (hash: uACmpnSBSy2IF2u/5ZZ5RmpW3FYah3J395Q52mX87Ds=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/qB0NYfe3MN23QsxIrdiKBNRv0CQ.crl rsync://rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/qB0NYfe3MN23QsxIrdiKBNRv0CQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qB0NYfe3MN23QsxIrdiKBNRv0CQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 04:16:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 328 (0x148) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A192D, serialNumber=A81D0D61F7B730DDB742CC48ADD88A04D46FD024 Validity Not Before: May 13 04:16:06 2025 GMT Not After : May 20 04:16:05 2025 GMT Subject: CN=6822c786-3a64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:1f:f0:0f:91:24:e7:53:85:c3:1c:3a:25:d8: fd:7b:09:1b:6f:40:43:b2:84:8b:f0:aa:e1:88:24: fd:42:33:04:50:bf:9f:ba:a4:16:cb:c4:4f:a2:75: 4d:c3:11:76:3a:eb:48:94:0f:be:c5:6a:af:ed:8e: 5a:c8:8b:4e:db:4c:8d:c7:a1:4f:3b:a1:70:b6:30: 8b:12:c3:68:bd:3f:03:c6:8b:23:07:6a:c4:ee:05: 7e:b4:34:29:21:b7:09:59:4b:85:83:e4:04:a2:7d: 2b:d6:14:22:4b:1f:d3:03:d4:db:65:34:13:3b:20: 5e:67:a2:82:38:2c:75:55:9e:e5:65:df:0e:ed:28: fc:f6:2c:05:31:69:36:8c:b8:90:09:db:25:7a:30: 13:1d:d7:56:c5:0d:27:92:77:62:9c:5b:53:c4:3a: 97:21:53:a6:2f:09:ef:fa:59:52:6d:77:19:d8:29: fc:53:bb:5b:b9:e3:0e:a0:ea:8b:a8:10:bb:3b:49: 60:f1:f6:9e:16:48:15:c4:9c:9d:ff:b2:93:b2:e0: 76:22:20:6f:7a:95:08:c5:91:b9:34:61:b1:56:3d: 4b:ad:6f:c4:98:27:82:21:39:6e:76:b5:ac:b5:39: 0f:18:f8:7f:00:8b:2d:7a:d5:d6:fb:09:07:46:2f: be:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:11:49:F8:A5:7F:39:B9:35:2B:2E:AC:CC:8A:01:16:14:3D:D5:27 X509v3 Authority Key Identifier: keyid:A8:1D:0D:61:F7:B7:30:DD:B7:42:CC:48:AD:D8:8A:04:D4:6F:D0:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/qB0NYfe3MN23QsxIrdiKBNRv0CQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qB0NYfe3MN23QsxIrdiKBNRv0CQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/qB0NYfe3MN23QsxIrdiKBNRv0CQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:64:24:a1:f1:6f:d6:24:4e:db:ec:97:63:1e:00:9e:33:6a: 58:da:80:9c:6c:cb:ed:97:eb:32:8c:10:85:1a:69:20:9c:33: 6c:fe:e7:91:df:7f:14:91:69:17:8c:a1:83:2b:97:44:12:b8: 61:5e:99:55:73:7d:1e:77:42:f7:fe:71:b4:24:19:36:64:9c: d7:92:45:e7:a2:a3:45:c2:96:53:0f:39:3d:9e:33:cf:d7:7a: 26:79:14:7d:98:8c:9f:73:7e:11:20:66:f4:d1:07:a7:21:b7: 46:6f:af:74:34:52:bd:ec:d2:04:81:ba:72:09:6f:96:cc:0d: 30:fb:31:25:45:d9:bd:58:f2:83:57:0d:df:39:40:c9:29:cb: ec:cd:44:5d:fe:19:b8:e5:af:7a:40:8d:15:28:4a:1e:77:4a: 64:1a:89:9c:84:7f:d5:42:e2:ec:e1:1d:95:e1:3d:42:99:95: 78:b0:00:5a:21:e8:eb:ef:e1:08:27:92:8a:38:87:c4:9f:fc: 69:cf:6c:81:37:3d:3e:db:50:a5:7f:0b:f5:1c:de:eb:c1:46: fa:bc:dc:ba:d5:8e:a1:92:0c:b0:05:82:d1:c1:42:a2:87:8a: b6:9c:30:89:c0:42:b8:23:53:b2:51:bb:9b:3c:48:9a:f6:62: e4:a0:36:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTE5MkQxMTAvBgNVBAUTKEE4MUQwRDYxRjdCNzMwRERCNzQyQ0M0OEFERDg4QTA0 RDQ2RkQwMjQwHhcNMjUwNTEzMDQxNjA2WhcNMjUwNTIwMDQxNjA1WjAYMRYwFAYD VQQDEw02ODIyYzc4Ni0zYTY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyR/wD5Ek51OFwxw6Jdj9ewkbb0BDsoSL8KrhiCT9QjMEUL+fuqQWy8RPonVN wxF2OutIlA++xWqv7Y5ayItO20yNx6FPO6FwtjCLEsNovT8DxosjB2rE7gV+tDQp IbcJWUuFg+QEon0r1hQiSx/TA9TbZTQTOyBeZ6KCOCx1VZ7lZd8O7Sj89iwFMWk2 jLiQCdslejATHddWxQ0nkndinFtTxDqXIVOmLwnv+llSbXcZ2Cn8U7tbueMOoOqL qBC7O0lg8faeFkgVxJyd/7KTsuB2IiBvepUIxZG5NGGxVj1LrW/EmCeCITludrWs tTkPGPh/AIstetXW+wkHRi++FQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBQRSfil fzm5NSsurMyKARYUPdUnMB8GA1UdIwQYMBaAFKgdDWH3tzDdt0LMSK3YigTUb9Ak MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMTkyRC9DQzY3RDI1MkE0 QkMxMUVFOUU1QTVENzJDNEY5QUUwMi9xQjBOWWZlM01OMjNRc3hJcmRpS0JOUnYw Q1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FCME5ZZmUzTU4yM1FzeElyZGlLQk5SdjBDUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MTkyRC9DQzY3RDI1MkE0QkMxMUVFOUU1QTVENzJDNEY5QUUwMi9xQjBOWWZlM01O MjNRc3hJcmRpS0JOUnYwQ1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGZCSh8W/WJE7b7JdjHgCeM2pY2oCcbMvtl+syjBCFGmkgnDNs/ueR 338UkWkXjKGDK5dEErhhXplVc30ed0L3/nG0JBk2ZJzXkkXnoqNFwpZTDzk9njPP 13omeRR9mIyfc34RIGb00QenIbdGb690NFK97NIEgbpyCW+WzA0w+zElRdm9WPKD Vw3fOUDJKcvszURd/hm45a96QI0VKEoed0pkGomchH/VQuLs4R2V4T1CmZV4sABa Iejr7+EIJ5KKOIfEn/xpz2yBNz0+21Clfwv1HN7rwUb6vNy61Y6hkgywBYLRwUKi h4q2nDCJwEK4I1OyUbubPEia9mLkoDYB -----END CERTIFICATE-----Generated at Tue May 13 23:07:53 2025 by rpki-client