$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA2AB/111E55E0097E11EEAE7F351FC4F9AE02/QOlPucJEwgzdpE57Dop6cZqXdA8.mft File: QOlPucJEwgzdpE57Dop6cZqXdA8.mft (raw, json) Hash identifier: u1cgzMCjxA3kNkuNmzBooLMYmA2sb31bO3d+1oRGxxE= Subject key identifier: 6C:09:0F:17:02:E6:95:F5:77:2F:38:25:BC:35:0C:22:EB:6E:0C:9B Authority key identifier: 40:E9:4F:B9:C2:44:C2:0C:DD:A4:4E:7B:0E:8A:7A:71:9A:97:74:0F Certificate issuer: /CN=A91BA2AB/serialNumber=40E94FB9C244C20CDDA44E7B0E8A7A719A97740F Certificate serial: 0168 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOlPucJEwgzdpE57Dop6cZqXdA8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA2AB/111E55E0097E11EEAE7F351FC4F9AE02/QOlPucJEwgzdpE57Dop6cZqXdA8.mft Manifest number: 0166 Signing time: Sun 11 May 2025 02:49:26 +0000 Manifest this update: Sun 11 May 2025 02:49:26 +0000 Manifest next update: Sun 18 May 2025 02:49:26 +0000 Files and hashes: 1: QOlPucJEwgzdpE57Dop6cZqXdA8.crl (hash: 0fjT4FwP8DXzCu7f+QtgSKR6A1m2HRpdfEtV6WlC1Vg=) 2: 7A8706087CA011EF8491607DC4F9AE02.roa (hash: EAsHcyPYziRKahL54/4beVq18nLBLDrzExkB1EWt7iQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA2AB/111E55E0097E11EEAE7F351FC4F9AE02/QOlPucJEwgzdpE57Dop6cZqXdA8.crl rsync://rpki.apnic.net/member_repository/A91BA2AB/111E55E0097E11EEAE7F351FC4F9AE02/QOlPucJEwgzdpE57Dop6cZqXdA8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOlPucJEwgzdpE57Dop6cZqXdA8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 02:49:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 360 (0x168) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA2AB, serialNumber=40E94FB9C244C20CDDA44E7B0E8A7A719A97740F Validity Not Before: May 11 02:49:26 2025 GMT Not After : May 18 02:49:26 2025 GMT Subject: CN=68201036-97e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:1f:1e:5e:84:fb:95:00:3d:41:83:36:7b:da: da:4b:31:1b:4c:0f:9c:53:5d:0e:d6:f5:a1:14:67: 7f:03:9f:e6:76:71:00:3c:65:81:f4:48:0d:ad:5e: fb:92:f2:29:00:5f:0e:f2:46:3b:58:ec:7b:63:53: ef:10:36:6c:51:72:fd:fe:c7:cc:2d:2e:dc:0f:5f: 38:b6:0f:35:36:96:8b:04:c5:ae:56:94:9a:dd:74: 7c:a3:d4:db:fd:bc:a1:de:51:da:90:01:30:52:32: 76:98:a0:91:25:39:76:eb:8e:d3:ed:2c:74:76:00: 39:11:26:8f:34:bf:87:ea:38:1f:31:98:8a:5d:6c: a7:50:fb:db:f8:90:70:60:0d:46:05:32:1d:ac:4c: c6:95:f9:b4:bd:36:76:cf:ef:0d:e1:fc:0e:05:30: 42:2e:56:ea:6c:86:88:fe:2e:b5:54:35:71:6b:30: c4:11:0f:c9:5e:1d:74:5a:6f:a8:ed:45:a8:aa:42: bb:3a:60:69:4b:fd:68:34:26:0c:1c:c4:ad:20:67: 05:44:b1:29:17:02:47:a2:f6:4c:f9:51:09:4c:ac: 6a:d2:60:f2:ea:62:26:de:cd:c7:87:4f:9c:86:45: 7d:7c:44:26:05:9c:b4:64:1d:63:62:b7:13:0d:81: 73:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:09:0F:17:02:E6:95:F5:77:2F:38:25:BC:35:0C:22:EB:6E:0C:9B X509v3 Authority Key Identifier: keyid:40:E9:4F:B9:C2:44:C2:0C:DD:A4:4E:7B:0E:8A:7A:71:9A:97:74:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA2AB/111E55E0097E11EEAE7F351FC4F9AE02/QOlPucJEwgzdpE57Dop6cZqXdA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOlPucJEwgzdpE57Dop6cZqXdA8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA2AB/111E55E0097E11EEAE7F351FC4F9AE02/QOlPucJEwgzdpE57Dop6cZqXdA8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:0b:a9:3a:14:8f:b6:fc:50:bb:86:9e:c4:b7:af:98:a2:eb: 11:46:13:93:39:9b:89:65:13:d1:af:be:63:40:af:76:56:8a: af:b4:69:db:af:0b:3c:e1:f2:3d:c1:65:fe:29:3e:6d:6f:fa: ea:74:76:e5:c7:4d:44:00:78:99:6b:30:8a:a6:3d:63:7a:06: 0b:cc:7a:aa:bc:80:ac:b0:b7:b3:74:fd:d2:25:be:81:33:f3: 1c:c0:39:31:53:56:ec:01:9c:77:65:14:40:2a:fc:64:32:39: b4:d6:da:13:a3:b6:fc:62:7d:3b:a6:f6:1e:ba:fa:ed:a9:de: 9e:4e:e8:20:51:1a:9c:81:96:1a:64:4d:12:d7:11:81:77:12: f8:00:77:5e:f4:0b:18:27:d4:fd:d6:fc:f6:1e:67:28:80:c9: b9:5b:a8:41:9e:d9:ba:8a:11:84:73:ba:1a:17:55:63:cd:c6: 59:dd:b6:bb:53:19:c9:50:84:7b:48:72:c3:94:3d:4c:cb:d3: 3f:6d:50:0b:d0:04:c2:93:94:03:ea:d4:9b:be:e0:0e:4f:4e: 11:da:b9:fe:4d:0d:22:8d:d6:5a:37:5e:82:15:89:4d:35:1d: c4:41:62:5a:b1:52:2a:98:45:24:30:36:ae:0a:5c:e7:67:42: cc:bb:22:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkEyQUIxMTAvBgNVBAUTKDQwRTk0RkI5QzI0NEMyMENEREE0NEU3QjBFOEE3QTcx OUE5Nzc0MEYwHhcNMjUwNTExMDI0OTI2WhcNMjUwNTE4MDI0OTI2WjAYMRYwFAYD VQQDEw02ODIwMTAzNi05N2U4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvR8eXoT7lQA9QYM2e9raSzEbTA+cU10O1vWhFGd/A5/mdnEAPGWB9EgNrV77 kvIpAF8O8kY7WOx7Y1PvEDZsUXL9/sfMLS7cD184tg81NpaLBMWuVpSa3XR8o9Tb /byh3lHakAEwUjJ2mKCRJTl2647T7Sx0dgA5ESaPNL+H6jgfMZiKXWynUPvb+JBw YA1GBTIdrEzGlfm0vTZ2z+8N4fwOBTBCLlbqbIaI/i61VDVxazDEEQ/JXh10Wm+o 7UWoqkK7OmBpS/1oNCYMHMStIGcFRLEpFwJHovZM+VEJTKxq0mDy6mIm3s3Hh0+c hkV9fEQmBZy0ZB1jYrcTDYFzGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGwJDxcC 5pX1dy84Jbw1DCLrbgybMB8GA1UdIwQYMBaAFEDpT7nCRMIM3aROew6KenGal3QP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTJBQi8xMTFFNTVFMDA5 N0UxMUVFQUU3RjM1MUZDNEY5QUUwMi9RT2xQdWNKRXdnemRwRTU3RG9wNmNacVhk QTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FPbFB1Y0pFd2d6ZHBFNTdEb3A2Y1pxWGRBOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTJBQi8xMTFFNTVFMDA5N0UxMUVFQUU3RjM1MUZDNEY5QUUwMi9RT2xQdWNKRXdn emRwRTU3RG9wNmNacVhkQTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1C6k6FI+2/FC7hp7Et6+YousRRhOTOZuJZRPRr75jQK92VoqvtGnb rws84fI9wWX+KT5tb/rqdHblx01EAHiZazCKpj1jegYLzHqqvICssLezdP3SJb6B M/McwDkxU1bsAZx3ZRRAKvxkMjm01toTo7b8Yn07pvYeuvrtqd6eTuggURqcgZYa ZE0S1xGBdxL4AHde9AsYJ9T91vz2HmcogMm5W6hBntm6ihGEc7oaF1VjzcZZ3ba7 UxnJUIR7SHLDlD1My9M/bVAL0ATCk5QD6tSbvuAOT04R2rn+TQ0ijdZaN16CFYlN NR3EQWJasVIqmEUkMDauClznZ0LMuyKs -----END CERTIFICATE-----Generated at Mon May 12 05:18:17 2025 by rpki-client