$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC966/A1952BA21C1111EAB6C3C76DC4F9AE02/sqJd3hqeyRtZmGpTL3iDVDYYMkg.mft File: sqJd3hqeyRtZmGpTL3iDVDYYMkg.mft (raw, json) Hash identifier: YrXaJC556Q/UavxMWuItPrdmWKr9cYgIQLtaeUS5Q8o= Subject key identifier: 7E:70:E6:A1:F5:ED:79:19:1F:5E:40:74:82:27:5F:F2:A4:A8:2F:9A Authority key identifier: B2:A2:5D:DE:1A:9E:C9:1B:59:98:6A:53:2F:78:83:54:36:18:32:48 Certificate issuer: /CN=A91BC966/serialNumber=B2A25DDE1A9EC91B59986A532F78835436183248 Certificate serial: 0C0F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqJd3hqeyRtZmGpTL3iDVDYYMkg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC966/A1952BA21C1111EAB6C3C76DC4F9AE02/sqJd3hqeyRtZmGpTL3iDVDYYMkg.mft Manifest number: 0BE7 Signing time: Mon 12 May 2025 18:43:37 +0000 Manifest this update: Mon 12 May 2025 18:43:37 +0000 Manifest next update: Mon 19 May 2025 18:43:37 +0000 Files and hashes: 1: sqJd3hqeyRtZmGpTL3iDVDYYMkg.crl (hash: UuPnqYq6pz5pF+t0NTygkQuKvhn6S0O/84RnT7b+/y4=) 2: A6A53FA2D67E11EEAA2CA218C4F9AE02.roa (hash: HeeBDJcwhy8+V+2Cg9KYbQ3U6GO/s9+NiHEgSW8cWgU=) 3: 5DA849821C1211EA819EA46EC4F9AE02.roa (hash: uC/ySBud8URGaJBRTy6y4ruA2gtaltNx8FUR5phArUQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC966/A1952BA21C1111EAB6C3C76DC4F9AE02/sqJd3hqeyRtZmGpTL3iDVDYYMkg.crl rsync://rpki.apnic.net/member_repository/A91BC966/A1952BA21C1111EAB6C3C76DC4F9AE02/sqJd3hqeyRtZmGpTL3iDVDYYMkg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqJd3hqeyRtZmGpTL3iDVDYYMkg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 18:43:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3087 (0xc0f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC966, serialNumber=B2A25DDE1A9EC91B59986A532F78835436183248 Validity Not Before: May 12 18:43:37 2025 GMT Not After : May 19 18:43:37 2025 GMT Subject: CN=68224159-f4d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:08:0b:27:d6:95:cc:a7:8f:d0:72:d1:fb:84: b5:28:d0:fb:34:f1:08:55:e2:90:bc:8f:ae:1e:7a: 07:6e:0c:b0:3e:34:14:1d:0b:c3:55:3f:99:4a:f4: 61:03:3a:63:8b:2d:ec:62:28:73:cf:9e:08:08:03: 8f:cd:33:a0:28:82:20:94:34:a9:42:0f:9e:c1:d8: 02:d7:81:bd:57:e7:0d:34:4c:21:3a:ce:fb:02:65: c2:c0:e6:e0:32:0e:87:35:b6:8f:c6:9e:98:ef:4a: 51:5e:a3:02:2a:4b:25:0b:0f:ab:96:70:d8:a2:03: f9:b4:71:d3:63:9e:b0:57:d9:96:ac:93:5d:31:2a: f1:7f:19:c5:80:d5:a0:70:f8:1e:a8:b7:96:b2:c1: 5c:55:a5:be:76:e3:69:ba:79:73:2e:40:80:47:bf: 66:27:39:45:a1:63:a6:e6:b9:30:e2:7c:ab:20:24: 16:40:b9:32:de:1f:c4:4e:49:93:6b:c6:7a:93:09: e4:15:92:05:06:c5:4b:74:56:2d:6f:1d:e6:0c:ae: 0e:88:34:48:78:01:d9:05:d2:93:26:ef:ea:8f:12: 51:0d:85:44:a3:b4:f5:48:ab:4c:d3:6d:8f:12:2f: 0d:09:a4:3b:23:a6:6f:a1:e3:b5:25:ef:4c:fe:40: 1e:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:70:E6:A1:F5:ED:79:19:1F:5E:40:74:82:27:5F:F2:A4:A8:2F:9A X509v3 Authority Key Identifier: keyid:B2:A2:5D:DE:1A:9E:C9:1B:59:98:6A:53:2F:78:83:54:36:18:32:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC966/A1952BA21C1111EAB6C3C76DC4F9AE02/sqJd3hqeyRtZmGpTL3iDVDYYMkg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqJd3hqeyRtZmGpTL3iDVDYYMkg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC966/A1952BA21C1111EAB6C3C76DC4F9AE02/sqJd3hqeyRtZmGpTL3iDVDYYMkg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:f8:1e:f5:0e:b5:04:5e:ca:29:1f:75:c2:a4:67:7a:ed:51: de:fd:9c:fc:11:bf:8b:2d:42:ef:1f:f7:3b:0a:e1:89:8a:24: e7:a3:60:11:df:60:47:0e:12:ce:3a:58:a6:70:04:02:d7:ea: 05:a2:75:d4:79:d5:fb:ef:f0:ed:ab:a4:88:d4:93:b5:e0:5e: 23:4b:a7:2c:09:05:80:f1:a0:60:dc:e9:28:04:a1:85:16:73: b7:38:92:96:b9:65:72:28:c3:63:29:b1:61:c8:0c:9d:54:5f: 51:1e:17:b8:69:7b:67:e3:79:2c:b9:a8:92:48:4a:c2:1b:05: 8d:02:57:45:25:09:47:45:dc:fc:f7:ae:d2:5e:97:8f:88:3d: 3c:04:de:51:97:39:04:4c:06:b4:27:95:61:38:e2:90:87:00: 3e:7d:17:a2:15:dc:69:6d:36:32:69:e7:bd:e9:1b:2d:7b:4a: 52:be:20:70:3d:45:c6:fa:e0:4f:cf:3f:b5:0a:59:94:87:cd: 87:8c:35:c1:c1:5a:97:f6:34:12:77:4b:a7:e2:01:f6:0d:cc: 70:38:63:4b:79:22:b0:12:c8:82:26:8f:b7:8d:d5:bb:95:2d: be:e1:16:4e:2c:a4:b9:05:be:53:c7:5b:85:3d:c3:4a:aa:70: ec:0c:fb:97 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDA8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkM5NjYxMTAvBgNVBAUTKEIyQTI1RERFMUE5RUM5MUI1OTk4NkE1MzJGNzg4MzU0 MzYxODMyNDgwHhcNMjUwNTEyMTg0MzM3WhcNMjUwNTE5MTg0MzM3WjAYMRYwFAYD VQQDEw02ODIyNDE1OS1mNGQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuwgLJ9aVzKeP0HLR+4S1KND7NPEIVeKQvI+uHnoHbgywPjQUHQvDVT+ZSvRh Azpjiy3sYihzz54ICAOPzTOgKIIglDSpQg+ewdgC14G9V+cNNEwhOs77AmXCwObg Mg6HNbaPxp6Y70pRXqMCKkslCw+rlnDYogP5tHHTY56wV9mWrJNdMSrxfxnFgNWg cPgeqLeWssFcVaW+duNpunlzLkCAR79mJzlFoWOm5rkw4nyrICQWQLky3h/ETkmT a8Z6kwnkFZIFBsVLdFYtbx3mDK4OiDRIeAHZBdKTJu/qjxJRDYVEo7T1SKtM022P Ei8NCaQ7I6ZvoeO1Je9M/kAe8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH5w5qH1 7XkZH15AdIInX/KkqC+aMB8GA1UdIwQYMBaAFLKiXd4anskbWZhqUy94g1Q2GDJI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzk2Ni9BMTk1MkJBMjFD MTExMUVBQjZDM0M3NkRDNEY5QUUwMi9zcUpkM2hxZXlSdFptR3BUTDNpRFZEWVlN a2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NxSmQzaHFleVJ0Wm1HcFRMM2lEVkRZWU1rZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Qzk2Ni9BMTk1MkJBMjFDMTExMUVBQjZDM0M3NkRDNEY5QUUwMi9zcUpkM2hxZXlS dFptR3BUTDNpRFZEWVlNa2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBV+B71DrUEXsopH3XCpGd67VHe/Zz8Eb+LLULvH/c7CuGJiiTno2AR 32BHDhLOOlimcAQC1+oFonXUedX77/Dtq6SI1JO14F4jS6csCQWA8aBg3OkoBKGF FnO3OJKWuWVyKMNjKbFhyAydVF9RHhe4aXtn43ksuaiSSErCGwWNAldFJQlHRdz8 967SXpePiD08BN5RlzkETAa0J5VhOOKQhwA+fReiFdxpbTYyaee96Rste0pSviBw PUXG+uBPzz+1ClmUh82HjDXBwVqX9jQSd0un4gH2DcxwOGNLeSKwEsiCJo+3jdW7 lS2+4RZOLKS5Bb5Tx1uFPcNKqnDsDPuX -----END CERTIFICATE-----Generated at Tue May 13 12:47:32 2025 by rpki-client