$ rpki-client -vvf rpki.apnic.net/member_repository/A91B72D9/AA23FA96697111ECB625930CC4F9AE02/QeXcIVUGn_MX5e44x1t4icIhl-M.mft File: QeXcIVUGn_MX5e44x1t4icIhl-M.mft (raw, json) Hash identifier: 7NNfSKGyP+tLrtNAEzPYF3h+krZ/2Z1IlnLaEE2Npos= Subject key identifier: 4C:B1:C5:12:EB:72:27:73:79:1A:83:4A:33:EF:BB:5A:D8:1C:7E:73 Authority key identifier: 41:E5:DC:21:55:06:9F:F3:17:E5:EE:38:C7:5B:78:89:C2:21:97:E3 Certificate issuer: /CN=A91B72D9/serialNumber=41E5DC2155069FF317E5EE38C75B7889C22197E3 Certificate serial: 0437 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QeXcIVUGn_MX5e44x1t4icIhl-M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B72D9/AA23FA96697111ECB625930CC4F9AE02/QeXcIVUGn_MX5e44x1t4icIhl-M.mft Manifest number: 0423 Signing time: Tue 13 May 2025 00:13:50 +0000 Manifest this update: Tue 13 May 2025 00:13:50 +0000 Manifest next update: Tue 20 May 2025 00:13:50 +0000 Files and hashes: 1: QeXcIVUGn_MX5e44x1t4icIhl-M.crl (hash: rYhWijjd7hhvFA1veL95pY4MKCMnx2/hM8eu2clSdsg=) 2: 43E6BE1AF53411EF9DE3BD34C4F9AE02.roa (hash: d0073l1e/pxbjtRy8RJAwD/f1Qu4geicKXKAmauL91Y=) 3: 4FD9C050F53411EFBF7FCA34C4F9AE02.roa (hash: UdXjbAhF6oniMP9h+eQndIWcxlYyRMTp0LAX//sl/pw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B72D9/AA23FA96697111ECB625930CC4F9AE02/QeXcIVUGn_MX5e44x1t4icIhl-M.crl rsync://rpki.apnic.net/member_repository/A91B72D9/AA23FA96697111ECB625930CC4F9AE02/QeXcIVUGn_MX5e44x1t4icIhl-M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QeXcIVUGn_MX5e44x1t4icIhl-M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 00:13:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1079 (0x437) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B72D9, serialNumber=41E5DC2155069FF317E5EE38C75B7889C22197E3 Validity Not Before: May 13 00:13:50 2025 GMT Not After : May 20 00:13:50 2025 GMT Subject: CN=68228ebe-ff4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:dc:93:2c:b3:75:30:e6:3f:87:fe:b7:db:39: 49:0f:bf:fd:31:ae:8b:e2:01:e0:e9:33:65:2c:dd: ab:da:b4:28:28:50:e7:1b:8a:48:61:b1:a5:f4:44: b9:8c:f0:85:09:a1:e4:b6:0f:85:b1:4f:00:e7:b4: c4:58:a8:31:fe:9f:ea:47:d9:9e:2d:33:60:22:fc: ca:83:d6:27:c6:cc:d1:a1:63:83:34:f0:94:85:98: c9:7f:c6:13:f7:ae:a9:ee:7c:f1:71:af:40:3a:4d: 40:0f:af:34:f1:52:b3:9c:a7:27:48:91:0e:59:a3: b1:3a:36:40:e0:3f:b3:7f:9f:14:7f:5b:9a:24:a0: 5d:e0:17:d4:0e:67:4a:eb:3d:13:08:08:37:ed:a2: 19:8f:1d:82:ea:73:72:fc:b3:29:f5:ea:29:64:ca: 7f:fd:e7:21:e7:c3:ae:1e:8a:75:11:b5:80:bf:1c: ff:67:92:90:dc:ed:cc:a3:2c:e5:30:c1:18:3a:a1: 6d:6a:a2:f7:be:e8:a8:b6:78:cb:79:5c:39:08:80: 11:eb:86:87:c8:a9:59:05:b6:ba:12:96:69:82:67: c3:06:8b:b0:30:d4:cf:02:b6:a3:b2:14:bd:25:a0: 81:11:91:cd:49:61:dc:bb:f7:54:09:56:4e:b5:c7: d8:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:B1:C5:12:EB:72:27:73:79:1A:83:4A:33:EF:BB:5A:D8:1C:7E:73 X509v3 Authority Key Identifier: keyid:41:E5:DC:21:55:06:9F:F3:17:E5:EE:38:C7:5B:78:89:C2:21:97:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B72D9/AA23FA96697111ECB625930CC4F9AE02/QeXcIVUGn_MX5e44x1t4icIhl-M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QeXcIVUGn_MX5e44x1t4icIhl-M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B72D9/AA23FA96697111ECB625930CC4F9AE02/QeXcIVUGn_MX5e44x1t4icIhl-M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:ae:36:d1:ed:b0:3f:f5:f3:fb:3c:06:cd:46:b1:43:29:94: 35:2e:20:05:68:13:20:f1:b0:31:88:6e:b7:79:bf:0f:03:b4: 11:86:28:f4:8c:9b:48:80:0c:35:9d:42:68:37:30:74:f9:47: 63:e4:26:ad:f1:98:d7:39:f6:f4:20:e7:1d:29:ba:eb:5e:2a: b3:3d:de:06:59:15:35:f8:89:e6:c1:27:2e:24:39:56:0e:e4: 2d:56:90:2f:e8:7c:29:2b:0f:03:fa:84:26:68:40:48:95:d5: 62:86:84:3d:db:fc:92:95:7d:e5:a9:26:fe:bf:82:cf:6e:a8: ba:1f:35:ab:29:80:eb:62:a9:33:15:ab:03:4f:fd:fd:97:af: 50:1f:8b:a4:cb:03:b1:40:40:0c:19:da:29:00:74:c3:3b:6b: 0b:f2:77:d3:4b:d8:e2:46:fd:5e:8e:2d:0e:87:e5:0c:db:31: f8:bb:1c:4d:60:b4:74:6f:68:f1:0e:c0:08:16:4e:2f:d1:d2: c0:12:e0:91:36:46:19:6e:f1:99:61:d9:61:1d:df:a4:23:43: 12:64:5a:f4:6b:af:7d:14:d8:96:66:50:2e:06:f4:4f:42:99: 6a:15:a4:ba:ff:fd:df:87:b3:e0:f0:37:a6:71:40:8e:8d:3f: c5:d5:46:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBDcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjcyRDkxMTAvBgNVBAUTKDQxRTVEQzIxNTUwNjlGRjMxN0U1RUUzOEM3NUI3ODg5 QzIyMTk3RTMwHhcNMjUwNTEzMDAxMzUwWhcNMjUwNTIwMDAxMzUwWjAYMRYwFAYD VQQDEw02ODIyOGViZS1mZjRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1tyTLLN1MOY/h/632zlJD7/9Ma6L4gHg6TNlLN2r2rQoKFDnG4pIYbGl9ES5 jPCFCaHktg+FsU8A57TEWKgx/p/qR9meLTNgIvzKg9YnxszRoWODNPCUhZjJf8YT 966p7nzxca9AOk1AD6808VKznKcnSJEOWaOxOjZA4D+zf58Uf1uaJKBd4BfUDmdK 6z0TCAg37aIZjx2C6nNy/LMp9eopZMp//ech58OuHop1EbWAvxz/Z5KQ3O3Moyzl MMEYOqFtaqL3vuiotnjLeVw5CIAR64aHyKlZBba6EpZpgmfDBouwMNTPArajshS9 JaCBEZHNSWHcu/dUCVZOtcfYGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEyxxRLr cidzeRqDSjPvu1rYHH5zMB8GA1UdIwQYMBaAFEHl3CFVBp/zF+XuOMdbeInCIZfj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzJEOS9BQTIzRkE5NjY5 NzExMUVDQjYyNTkzMENDNEY5QUUwMi9RZVhjSVZVR25fTVg1ZTQ0eDF0NGljSWhs LU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FlWGNJVlVHbl9NWDVlNDR4MXQ0aWNJaGwtTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NzJEOS9BQTIzRkE5NjY5NzExMUVDQjYyNTkzMENDNEY5QUUwMi9RZVhjSVZVR25f TVg1ZTQ0eDF0NGljSWhsLU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYrjbR7bA/9fP7PAbNRrFDKZQ1LiAFaBMg8bAxiG63eb8PA7QRhij0 jJtIgAw1nUJoNzB0+Udj5Cat8ZjXOfb0IOcdKbrrXiqzPd4GWRU1+InmwScuJDlW DuQtVpAv6HwpKw8D+oQmaEBIldVihoQ92/ySlX3lqSb+v4LPbqi6HzWrKYDrYqkz FasDT/39l69QH4ukywOxQEAMGdopAHTDO2sL8nfTS9jiRv1eji0Oh+UM2zH4uxxN YLR0b2jxDsAIFk4v0dLAEuCRNkYZbvGZYdlhHd+kI0MSZFr0a699FNiWZlAuBvRP QplqFaS6//3fh7Pg8DemcUCOjT/F1UbC -----END CERTIFICATE-----Generated at Wed May 14 16:12:30 2025 by rpki-client