$ rpki-client -vvf rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.mft File: rQWVkiI-gWrFPEM7llhG950wUjQ.mft (raw, json) Hash identifier: MgffesiDJ7sHil2EUpGXqXEikcNb29To0JeDkNSPDHg= Subject key identifier: 55:4F:25:BA:14:47:8C:9A:E9:A3:46:24:D8:CA:17:E5:F7:F6:0B:B2 Authority key identifier: AD:05:95:92:22:3E:81:6A:C5:3C:43:3B:96:58:46:F7:9D:30:52:34 Certificate issuer: /CN=A91BAEDC/serialNumber=AD059592223E816AC53C433B965846F79D305234 Certificate serial: 1B8A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQWVkiI-gWrFPEM7llhG950wUjQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.mft Manifest number: 1B73 Signing time: Thu 08 May 2025 16:20:14 +0000 Manifest this update: Thu 08 May 2025 16:20:13 +0000 Manifest next update: Thu 15 May 2025 16:20:13 +0000 Files and hashes: 1: rQWVkiI-gWrFPEM7llhG950wUjQ.crl (hash: Vi7Kn14+wGGzBgYVA8gX2QE6sRrKzAg990LKPpQrNGM=) 2: C85D0F7E477711EBB4044E31C4F9AE02.roa (hash: d9C+rmMNQQZELmuy5aIPVlKeATtzTC5JJ8WoYiMXlHI=) 3: C98708BE477711EBB4044E31C4F9AE02.roa (hash: V0J+K3DJnN+osBZ9dwTDUPh/HvfjgBzZSWLUoCMaCuE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.crl rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQWVkiI-gWrFPEM7llhG950wUjQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 May 2025 16:20:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7050 (0x1b8a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BAEDC, serialNumber=AD059592223E816AC53C433B965846F79D305234 Validity Not Before: May 8 16:20:13 2025 GMT Not After : May 15 16:20:13 2025 GMT Subject: CN=681cd9bd-b449 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:59:fd:e9:83:49:b2:da:cb:05:82:e3:a9:31: d5:d4:c8:0c:bc:54:c7:3e:a5:f8:33:42:42:53:01: b3:02:f3:51:d0:e0:cc:6f:a0:10:e0:51:ff:e3:2f: 3f:63:86:27:a0:c5:58:66:1a:4c:2c:9e:78:fc:1c: b0:4d:f1:a9:98:7c:7e:2e:95:f3:2b:c2:38:d6:0e: a8:9e:2e:ce:1d:2e:ed:80:65:0e:17:20:53:aa:07: 03:ce:22:b5:3e:fd:5b:6c:73:fe:3a:ac:a5:b8:db: aa:0f:31:8e:22:a6:f0:54:b7:40:ca:57:f5:8d:ec: 2e:9d:f0:cf:ab:49:64:1a:f7:3c:76:57:31:fc:22: c7:60:39:88:c2:33:a1:72:21:ed:be:d2:5d:c4:b1: 9f:bc:4b:63:33:c3:b1:29:87:b7:6a:5f:95:d6:c1: 32:b6:f1:25:5c:d3:12:f5:63:30:ba:58:47:99:d6: 36:1d:4a:20:4d:4c:9d:7f:48:7c:81:da:4e:14:92: 74:a5:11:c8:fe:c7:db:8e:b5:c2:21:c4:53:68:a4: 83:c0:c3:ed:81:47:7f:c2:ca:c1:f9:db:e2:34:6f: 31:d0:a3:f2:04:21:a7:1e:28:a2:74:13:91:d3:56: 62:be:90:9a:71:46:2d:db:fe:d8:0b:dd:04:a1:e4: 35:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:4F:25:BA:14:47:8C:9A:E9:A3:46:24:D8:CA:17:E5:F7:F6:0B:B2 X509v3 Authority Key Identifier: keyid:AD:05:95:92:22:3E:81:6A:C5:3C:43:3B:96:58:46:F7:9D:30:52:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQWVkiI-gWrFPEM7llhG950wUjQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:53:fa:50:39:8c:30:2f:e3:d3:6e:b5:d9:6a:47:e0:1f:61: 99:4d:a9:9b:6a:5f:fc:75:6d:51:1f:f4:79:97:7a:b1:00:7f: f0:fb:f8:f5:08:55:f7:33:a0:f0:d4:6c:5d:01:d4:7e:19:4f: 99:b0:8a:e2:3d:bc:8b:ca:97:86:19:f9:a8:7b:9b:d1:22:90: a5:c6:50:bd:b3:db:c4:12:53:fc:fa:06:75:ee:9f:1f:ad:97: 87:85:51:62:35:08:1e:19:2d:2e:99:ec:f7:3b:59:a8:a8:f4: 4a:00:46:d4:f0:50:9e:73:23:6c:e7:a5:a5:cf:1c:21:ea:f5: cd:2f:6f:61:41:95:74:23:81:48:b6:f1:77:1c:0a:50:f9:00: d6:66:83:84:15:04:a3:8b:c6:d7:d7:4d:40:29:9c:a3:d0:b6: ed:76:4b:68:41:b7:98:27:73:7e:19:bb:c4:5b:09:29:ff:f7: 01:3b:64:19:28:f8:f5:b5:3e:9b:70:c7:46:4d:49:d9:e3:61: ad:59:bb:28:98:72:6b:dc:a6:9b:0c:f7:f0:c2:8f:40:88:ab: 89:e8:99:de:be:0d:05:46:2d:89:73:b7:1f:aa:c6:ae:d6:db: 9b:3e:68:5e:98:ff:b8:9e:8a:8a:8f:86:6c:f6:bb:3b:49:98: 7c:10:fc:ed -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICG4owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkFFREMxMTAvBgNVBAUTKEFEMDU5NTkyMjIzRTgxNkFDNTNDNDMzQjk2NTg0NkY3 OUQzMDUyMzQwHhcNMjUwNTA4MTYyMDEzWhcNMjUwNTE1MTYyMDEzWjAYMRYwFAYD VQQDEw02ODFjZDliZC1iNDQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxFn96YNJstrLBYLjqTHV1MgMvFTHPqX4M0JCUwGzAvNR0ODMb6AQ4FH/4y8/ Y4YnoMVYZhpMLJ54/BywTfGpmHx+LpXzK8I41g6oni7OHS7tgGUOFyBTqgcDziK1 Pv1bbHP+OqyluNuqDzGOIqbwVLdAylf1jewunfDPq0lkGvc8dlcx/CLHYDmIwjOh ciHtvtJdxLGfvEtjM8OxKYe3al+V1sEytvElXNMS9WMwulhHmdY2HUogTUydf0h8 gdpOFJJ0pRHI/sfbjrXCIcRTaKSDwMPtgUd/wsrB+dviNG8x0KPyBCGnHiiidBOR 01ZivpCacUYt2/7YC90EoeQ1HQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFVPJboU R4ya6aNGJNjKF+X39guyMB8GA1UdIwQYMBaAFK0FlZIiPoFqxTxDO5ZYRvedMFI0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQUVEQy8yREMxQkFGMjA5 ODUxMUU3QjFGRkMyM0ZDNEY5QUUwMi9yUVdWa2lJLWdXckZQRU03bGxoRzk1MHdV alEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JRV1ZraUktZ1dyRlBFTTdsbGhHOTUwd1VqUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QUVEQy8yREMxQkFGMjA5ODUxMUU3QjFGRkMyM0ZDNEY5QUUwMi9yUVdWa2lJLWdX ckZQRU03bGxoRzk1MHdValEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYU/pQOYwwL+PTbrXZakfgH2GZTambal/8dW1RH/R5l3qxAH/w+/j1 CFX3M6Dw1GxdAdR+GU+ZsIriPbyLypeGGfmoe5vRIpClxlC9s9vEElP8+gZ17p8f rZeHhVFiNQgeGS0umez3O1moqPRKAEbU8FCecyNs56Wlzxwh6vXNL29hQZV0I4FI tvF3HApQ+QDWZoOEFQSji8bX101AKZyj0LbtdktoQbeYJ3N+GbvEWwkp//cBO2QZ KPj1tT6bcMdGTUnZ42GtWbsomHJr3KabDPfwwo9AiKuJ6Jnevg0FRi2Jc7cfqsau 1tubPmhemP+4noqKj4Zs9rs7SZh8EPzt -----END CERTIFICATE-----Generated at Sat May 10 09:47:24 2025 by rpki-client