$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.mft File: Q-o6LcCMXh8s1oQRZEoFwHbojAg.mft (raw, json) Hash identifier: hEH2LJ8o3PNHMxq0z+zO9wsm6Ykx3AGz3DtZuZLyhF4= Subject key identifier: 6E:10:01:52:7E:53:45:79:D2:3F:62:A4:5E:E9:ED:9A:9D:AF:6F:B0 Authority key identifier: 43:EA:3A:2D:C0:8C:5E:1F:2C:D6:84:11:64:4A:05:C0:76:E8:8C:08 Certificate issuer: /CN=A91BE146/serialNumber=43EA3A2DC08C5E1F2CD68411644A05C076E88C08 Certificate serial: 05E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-o6LcCMXh8s1oQRZEoFwHbojAg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.mft Manifest number: 05D3 Signing time: Wed 14 May 2025 23:07:23 +0000 Manifest this update: Wed 14 May 2025 23:07:23 +0000 Manifest next update: Wed 21 May 2025 23:07:23 +0000 Files and hashes: 1: Q-o6LcCMXh8s1oQRZEoFwHbojAg.crl (hash: 4yNu2EClfucKcBYgB13avYhXflwqK0O1WI2KThdLXbg=) 2: 87BF5BF6BD3411EB99D25F26C4F9AE02.roa (hash: sbTShmIKKL0T6wr1tqxxOL+QE1luTX7NDd7NnR8wp7g=) 3: 49FAAD72591211EDA743880DC4F9AE02.roa (hash: krevIMI6IUNw/+chMIBio+O1qxsYHBvCeuqJ7cXD7Gc=) 4: 0E0DBEA4327411ED80554E32C4F9AE02.roa (hash: WXJDLjhJd3w6bj++/nA2IppIGCY5Tdg8yehmeKyxNgI=) 5: DD46BB92EDAB11EDBE91BB82C4F9AE02.roa (hash: 1NiFRWSUDBEKjygUm/VPv7UX405Nm7i1bZRm8rES/iU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.crl rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-o6LcCMXh8s1oQRZEoFwHbojAg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 23:07:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1512 (0x5e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BE146, serialNumber=43EA3A2DC08C5E1F2CD68411644A05C076E88C08 Validity Not Before: May 14 23:07:23 2025 GMT Not After : May 21 23:07:23 2025 GMT Subject: CN=6825222b-c3e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:8c:6e:1c:05:2d:fc:c5:1d:cd:28:b5:ee:b1: 7c:d9:3f:f3:bc:f9:a6:cc:ce:41:f9:d4:8f:d8:00: cd:46:45:be:f7:e1:ae:15:c4:b3:32:4f:ed:d4:da: 0f:93:7b:7b:56:23:36:2f:2c:02:15:4b:a1:bc:98: f2:5e:59:c6:bd:07:01:a3:22:f1:15:33:2f:36:3e: 7f:59:e9:56:e8:57:ae:a3:65:bc:0d:90:a5:5b:a8: 04:2e:92:a6:c9:01:98:2d:5e:96:8d:91:06:91:77: 6e:2f:f3:73:07:e2:b1:5e:50:37:f0:fe:8d:64:41: ee:b3:24:ed:f0:6a:3c:4f:7b:bf:b1:dd:de:90:d5: 75:6b:21:42:b4:a8:52:69:65:3b:ca:7d:dc:a7:c9: 0f:19:4a:1c:f4:fb:fe:98:38:35:59:bf:16:07:e6: a3:ac:4e:36:78:0e:e0:04:c4:74:b0:ef:f3:cf:62: 19:4b:33:28:a8:ec:2f:5c:ac:97:81:29:29:ab:48: 15:11:18:7a:39:02:69:f5:d7:4d:2d:d8:d5:79:e1: f3:79:95:4a:be:82:1e:f8:ec:f7:90:38:b9:af:a2: 55:3e:89:ba:e0:bf:05:64:9b:f0:17:f3:52:91:09: a2:a7:02:74:16:2f:87:c4:54:89:79:a7:74:e4:13: 2a:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:10:01:52:7E:53:45:79:D2:3F:62:A4:5E:E9:ED:9A:9D:AF:6F:B0 X509v3 Authority Key Identifier: keyid:43:EA:3A:2D:C0:8C:5E:1F:2C:D6:84:11:64:4A:05:C0:76:E8:8C:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-o6LcCMXh8s1oQRZEoFwHbojAg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:80:2d:2d:b1:72:1c:19:00:2d:d4:ed:f0:bc:dd:7e:42:ad: 10:55:1d:a5:bd:62:00:a4:5a:78:d7:a3:7d:28:4b:26:5a:74: 6d:09:db:74:a0:cb:f1:c9:9f:cd:11:a5:0a:ec:e1:dc:fb:04: d3:8c:65:87:1b:2f:70:e4:65:38:5f:c8:a2:91:d0:a2:b5:67: 1e:92:bd:81:0f:d0:f8:43:e3:2c:f6:99:b8:d5:22:18:5e:df: b2:ab:45:62:a7:46:75:26:d0:be:33:3f:08:88:5d:f8:db:74: ab:58:c1:96:26:f7:04:89:ce:43:df:d6:db:5d:50:1a:2f:46: d3:5b:72:1d:91:ae:9f:d6:ce:6b:10:9b:96:72:b2:39:a3:49: 58:1a:83:a4:71:71:5f:e5:7c:67:0f:ab:23:09:b9:67:02:dd: b3:0f:a2:d4:8f:c0:4f:57:17:b8:dc:f5:40:52:dc:7e:8a:4c: 50:70:15:ca:a8:37:74:6e:47:e8:c0:3b:c2:c5:73:8b:55:9f: 9e:91:90:7c:eb:93:bf:93:94:79:9d:47:97:45:69:71:67:f7: 47:b9:26:ca:39:d3:13:b0:b4:5f:94:95:19:74:39:39:b8:fc: ce:06:46:1f:47:42:d0:5d:30:15:8b:1e:0c:01:d8:f5:dd:c7: 60:96:c7:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBegwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkUxNDYxMTAvBgNVBAUTKDQzRUEzQTJEQzA4QzVFMUYyQ0Q2ODQxMTY0NEEwNUMw NzZFODhDMDgwHhcNMjUwNTE0MjMwNzIzWhcNMjUwNTIxMjMwNzIzWjAYMRYwFAYD VQQDEw02ODI1MjIyYi1jM2UxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqoxuHAUt/MUdzSi17rF82T/zvPmmzM5B+dSP2ADNRkW+9+GuFcSzMk/t1NoP k3t7ViM2LywCFUuhvJjyXlnGvQcBoyLxFTMvNj5/WelW6Feuo2W8DZClW6gELpKm yQGYLV6WjZEGkXduL/NzB+KxXlA38P6NZEHusyTt8Go8T3u/sd3ekNV1ayFCtKhS aWU7yn3cp8kPGUoc9Pv+mDg1Wb8WB+ajrE42eA7gBMR0sO/zz2IZSzMoqOwvXKyX gSkpq0gVERh6OQJp9ddNLdjVeeHzeZVKvoIe+Oz3kDi5r6JVPom64L8FZJvwF/NS kQmipwJ0Fi+HxFSJead05BMqIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG4QAVJ+ U0V50j9ipF7p7Zqdr2+wMB8GA1UdIwQYMBaAFEPqOi3AjF4fLNaEEWRKBcB26IwI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRTE0Ni9FNDFBQjQyQUJE MzExMUVCQkZDM0Y5MjFDNEY5QUUwMi9RLW82TGNDTVhoOHMxb1FSWkVvRndIYm9q QWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1EtbzZMY0NNWGg4czFvUVJaRW9Gd0hib2pBZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RTE0Ni9FNDFBQjQyQUJEMzExMUVCQkZDM0Y5MjFDNEY5QUUwMi9RLW82TGNDTVho OHMxb1FSWkVvRndIYm9qQWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDgC0tsXIcGQAt1O3wvN1+Qq0QVR2lvWIApFp416N9KEsmWnRtCdt0 oMvxyZ/NEaUK7OHc+wTTjGWHGy9w5GU4X8iikdCitWcekr2BD9D4Q+Ms9pm41SIY Xt+yq0Vip0Z1JtC+Mz8IiF3423SrWMGWJvcEic5D39bbXVAaL0bTW3Idka6f1s5r EJuWcrI5o0lYGoOkcXFf5XxnD6sjCblnAt2zD6LUj8BPVxe43PVAUtx+ikxQcBXK qDd0bkfowDvCxXOLVZ+ekZB865O/k5R5nUeXRWlxZ/dHuSbKOdMTsLRflJUZdDk5 uPzOBkYfR0LQXTAVix4MAdj13cdglsdZ -----END CERTIFICATE-----Generated at Fri May 16 00:06:28 2025 by rpki-client