$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADBA2/D6954412553B11E7AA0EDE2AC4F9AE02/qmMtxAKnAveanDaT6cxGxZge6Ow.mft File: qmMtxAKnAveanDaT6cxGxZge6Ow.mft (raw, json) Hash identifier: CiTqJYcy+uRteya3oBkH2Zst6mZSpKwG8ezMnop56+w= Subject key identifier: 8F:DE:C0:A6:CA:6F:09:0C:76:DC:AF:E4:F7:75:A8:C3:67:25:9E:FB Authority key identifier: AA:63:2D:C4:02:A7:02:F7:9A:9C:36:93:E9:CC:46:C5:98:1E:E8:EC Certificate issuer: /CN=A91ADBA2/serialNumber=AA632DC402A702F79A9C3693E9CC46C5981EE8EC Certificate serial: 19EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qmMtxAKnAveanDaT6cxGxZge6Ow.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ADBA2/D6954412553B11E7AA0EDE2AC4F9AE02/qmMtxAKnAveanDaT6cxGxZge6Ow.mft Manifest number: 19E3 Signing time: Mon 12 May 2025 16:20:02 +0000 Manifest this update: Mon 12 May 2025 16:20:01 +0000 Manifest next update: Mon 19 May 2025 16:20:01 +0000 Files and hashes: 1: qmMtxAKnAveanDaT6cxGxZge6Ow.crl (hash: bPZmmf4NuFz7Ueu4xY+3QWBzyCp1a9AGbTAWFeZUb78=) 2: 6C30EF68D9AD11EBA5CFBB17C4F9AE02.roa (hash: JD/t6QBbxRTutJyXKFJnddzibwxtjVqq1blAC5X3uC4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ADBA2/D6954412553B11E7AA0EDE2AC4F9AE02/qmMtxAKnAveanDaT6cxGxZge6Ow.crl rsync://rpki.apnic.net/member_repository/A91ADBA2/D6954412553B11E7AA0EDE2AC4F9AE02/qmMtxAKnAveanDaT6cxGxZge6Ow.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qmMtxAKnAveanDaT6cxGxZge6Ow.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 16:20:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6634 (0x19ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ADBA2, serialNumber=AA632DC402A702F79A9C3693E9CC46C5981EE8EC Validity Not Before: May 12 16:20:01 2025 GMT Not After : May 19 16:20:01 2025 GMT Subject: CN=68221fb1-cc3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:ec:99:b1:f0:0c:64:bd:11:cf:70:2e:f9:23: 37:90:2a:07:9e:83:78:2f:ea:2a:1c:44:93:e7:06: 6f:e3:c6:4a:b8:8f:78:39:a0:93:47:48:90:29:34: 52:4d:a9:09:9c:57:e8:18:86:14:b6:de:69:90:b8: aa:4b:ca:7f:85:b2:e5:37:7e:b5:d4:1b:fd:62:9b: 92:3c:91:54:eb:b8:e4:5d:ad:ea:4e:90:a6:5f:08: 62:1e:bf:cc:df:09:1e:12:2a:ac:a9:fe:5a:77:00: c1:18:9d:82:9d:0e:40:50:d8:67:aa:bb:97:9d:c5: cb:ad:4d:c3:2a:c4:cd:22:5b:35:0f:d2:01:23:cc: 3c:73:7e:62:7b:61:80:f3:50:7b:f6:19:eb:ec:7c: d2:65:05:e2:75:7f:94:39:08:f3:ad:28:2e:59:90: 8a:e8:50:f1:7c:5d:66:ff:76:b1:dd:96:9c:f2:54: d9:68:8e:5e:5a:8b:2c:32:db:3d:45:a4:92:4a:a7: c0:7d:46:70:0f:56:29:a8:7d:28:46:94:16:26:ea: 5b:a6:ec:bf:76:ed:ae:ad:3e:3b:3a:16:49:0b:82: ce:0a:4b:06:aa:61:ac:8a:1b:5f:41:c9:28:44:8b: 81:75:07:41:6e:a1:06:39:39:89:f7:5b:95:b8:27: c6:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:DE:C0:A6:CA:6F:09:0C:76:DC:AF:E4:F7:75:A8:C3:67:25:9E:FB X509v3 Authority Key Identifier: keyid:AA:63:2D:C4:02:A7:02:F7:9A:9C:36:93:E9:CC:46:C5:98:1E:E8:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ADBA2/D6954412553B11E7AA0EDE2AC4F9AE02/qmMtxAKnAveanDaT6cxGxZge6Ow.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qmMtxAKnAveanDaT6cxGxZge6Ow.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADBA2/D6954412553B11E7AA0EDE2AC4F9AE02/qmMtxAKnAveanDaT6cxGxZge6Ow.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:2f:10:e4:4d:97:3d:37:10:e3:da:81:10:31:68:6d:21:26: ab:e4:2b:a4:cc:fb:16:b0:29:3f:b5:f1:ef:d5:73:a2:9e:2c: 92:a3:1b:df:55:db:dc:e3:2d:2a:22:f6:75:9a:f6:29:c7:32: e3:92:fc:66:05:3a:c1:fe:7d:f0:0f:aa:bb:8e:09:85:b6:b2: fa:d9:7e:94:1e:b6:e4:71:e0:ff:6f:76:f5:6b:1a:08:e1:12: 11:6e:a8:12:89:97:a2:6f:a5:6e:87:7e:34:c3:f0:80:c9:d2: 4e:df:44:3a:aa:f3:0a:fa:bf:3b:7c:ce:d6:19:3b:d8:01:9e: bb:c3:f4:f3:bb:41:db:bf:75:d5:cc:cb:8e:ea:b3:e4:95:7a: 15:3f:b2:a9:de:0d:f2:35:c1:59:76:34:fb:80:e4:34:de:ed: 31:47:3c:c3:b9:02:00:41:8b:56:cb:21:c5:a2:4c:e1:80:4c: 29:b5:72:e8:1d:3c:ca:35:dd:63:14:c6:5f:f7:9d:00:c9:64: 7f:a4:7a:3a:30:6a:e6:91:8e:8b:8d:e6:38:68:96:09:35:ca: 90:b3:a2:ea:d6:62:34:27:4b:96:84:c5:46:77:48:c1:32:64: f5:ab:8e:50:af:19:ff:1b:4d:1b:45:1b:e8:3c:a8:a8:f3:a0: f8:0b:8e:1d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGeowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QURCQTIxMTAvBgNVBAUTKEFBNjMyREM0MDJBNzAyRjc5QTlDMzY5M0U5Q0M0NkM1 OTgxRUU4RUMwHhcNMjUwNTEyMTYyMDAxWhcNMjUwNTE5MTYyMDAxWjAYMRYwFAYD VQQDEw02ODIyMWZiMS1jYzNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4uyZsfAMZL0Rz3Au+SM3kCoHnoN4L+oqHEST5wZv48ZKuI94OaCTR0iQKTRS TakJnFfoGIYUtt5pkLiqS8p/hbLlN3611Bv9YpuSPJFU67jkXa3qTpCmXwhiHr/M 3wkeEiqsqf5adwDBGJ2CnQ5AUNhnqruXncXLrU3DKsTNIls1D9IBI8w8c35ie2GA 81B79hnr7HzSZQXidX+UOQjzrSguWZCK6FDxfF1m/3ax3Zac8lTZaI5eWossMts9 RaSSSqfAfUZwD1YpqH0oRpQWJupbpuy/du2urT47OhZJC4LOCksGqmGsihtfQcko RIuBdQdBbqEGOTmJ91uVuCfGgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI/ewKbK bwkMdtyv5Pd1qMNnJZ77MB8GA1UdIwQYMBaAFKpjLcQCpwL3mpw2k+nMRsWYHujs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBREJBMi9ENjk1NDQxMjU1 M0IxMUU3QUEwRURFMkFDNEY5QUUwMi9xbU10eEFLbkF2ZWFuRGFUNmN4R3haZ2U2 T3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FtTXR4QUtuQXZlYW5EYVQ2Y3hHeFpnZTZPdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB REJBMi9ENjk1NDQxMjU1M0IxMUU3QUEwRURFMkFDNEY5QUUwMi9xbU10eEFLbkF2 ZWFuRGFUNmN4R3haZ2U2T3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgLxDkTZc9NxDj2oEQMWhtISar5CukzPsWsCk/tfHv1XOiniySoxvf Vdvc4y0qIvZ1mvYpxzLjkvxmBTrB/n3wD6q7jgmFtrL62X6UHrbkceD/b3b1axoI 4RIRbqgSiZeib6Vuh340w/CAydJO30Q6qvMK+r87fM7WGTvYAZ67w/Tzu0Hbv3XV zMuO6rPklXoVP7Kp3g3yNcFZdjT7gOQ03u0xRzzDuQIAQYtWyyHFokzhgEwptXLo HTzKNd1jFMZf950AyWR/pHo6MGrmkY6LjeY4aJYJNcqQs6Lq1mI0J0uWhMVGd0jB MmT1q45Qrxn/G00bRRvoPKio86D4C44d -----END CERTIFICATE-----Generated at Wed May 14 04:46:35 2025 by rpki-client