$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE89F/AFFD21706DCB11EF9B39B865C4F9AE02/QxsKSDX89paz7NM1klqOE2EM0Tc.mft File: QxsKSDX89paz7NM1klqOE2EM0Tc.mft (raw, json) Hash identifier: eDv7Dy9qFcEql6fVq2rLBl7+U/4ZiWFVw0jaHU/AAr0= Subject key identifier: B6:0C:54:C1:11:94:BC:61:21:A0:E7:16:9F:25:15:14:D3:EF:DB:13 Authority key identifier: 43:1B:0A:48:35:FC:F6:96:B3:EC:D3:35:92:5A:8E:13:61:0C:D1:37 Certificate issuer: /CN=A91BE89F/serialNumber=431B0A4835FCF696B3ECD335925A8E13610CD137 Certificate serial: 83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QxsKSDX89paz7NM1klqOE2EM0Tc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BE89F/AFFD21706DCB11EF9B39B865C4F9AE02/QxsKSDX89paz7NM1klqOE2EM0Tc.mft Manifest number: 81 Signing time: Sun 11 May 2025 05:25:16 +0000 Manifest this update: Sun 11 May 2025 05:25:15 +0000 Manifest next update: Sun 18 May 2025 05:25:15 +0000 Files and hashes: 1: QxsKSDX89paz7NM1klqOE2EM0Tc.crl (hash: V/RR+A60vMjKqENU4JOGNaaIxb3Wl46YBq4NHp+XSFg=) 2: 49ADB44C6DCC11EF8BE2A566C4F9AE02.roa (hash: mtRkpBofIEP/NFZvK+kr1cdx0dZa5TNObQf1xWdBFqI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BE89F/AFFD21706DCB11EF9B39B865C4F9AE02/QxsKSDX89paz7NM1klqOE2EM0Tc.crl rsync://rpki.apnic.net/member_repository/A91BE89F/AFFD21706DCB11EF9B39B865C4F9AE02/QxsKSDX89paz7NM1klqOE2EM0Tc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QxsKSDX89paz7NM1klqOE2EM0Tc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 05:25:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 131 (0x83) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BE89F, serialNumber=431B0A4835FCF696B3ECD335925A8E13610CD137 Validity Not Before: May 11 05:25:15 2025 GMT Not After : May 18 05:25:15 2025 GMT Subject: CN=682034bb-fe91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:4d:95:99:4c:e1:05:66:2b:21:7d:2c:c2:5d: 90:c4:e8:5a:34:86:42:ab:52:2d:ad:e0:16:e4:f8: d8:72:f8:79:96:b8:fc:64:33:ed:b0:be:77:0e:81: 01:25:b1:7a:6c:0f:30:bc:8a:08:9c:4b:1a:01:68: 38:a7:ca:f8:7e:3b:a2:d5:b5:32:e9:12:2c:61:cb: cb:14:db:64:7f:e7:51:75:a3:d8:07:22:f0:55:0a: e3:dd:63:14:de:2b:f1:d4:cc:45:cd:13:59:a7:6a: 09:9e:2f:88:33:c9:dc:2d:d8:1c:62:fa:27:72:1c: 64:0a:dd:63:76:95:87:88:43:f9:d8:d6:4c:23:b7: 4b:98:83:88:aa:6d:fe:ea:93:60:19:18:fe:61:1c: 63:fd:4d:bf:fb:f4:98:79:5b:7f:1e:08:40:e4:e3: c1:ce:8f:6d:c8:c0:1d:87:97:58:af:14:d3:e3:58: 36:6f:59:f5:92:56:bb:71:c4:96:7c:46:65:6e:83: 2a:3f:0d:b4:f2:3f:a9:41:ad:82:82:4a:09:5a:08: 52:25:90:1d:1f:79:bb:0f:ac:46:21:3d:ee:92:91: 9f:d8:74:02:e8:90:5d:cb:29:37:77:d1:6e:17:e9: 7b:42:14:65:b7:6b:35:aa:c9:81:ec:30:76:50:4a: cf:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:0C:54:C1:11:94:BC:61:21:A0:E7:16:9F:25:15:14:D3:EF:DB:13 X509v3 Authority Key Identifier: keyid:43:1B:0A:48:35:FC:F6:96:B3:EC:D3:35:92:5A:8E:13:61:0C:D1:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BE89F/AFFD21706DCB11EF9B39B865C4F9AE02/QxsKSDX89paz7NM1klqOE2EM0Tc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QxsKSDX89paz7NM1klqOE2EM0Tc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE89F/AFFD21706DCB11EF9B39B865C4F9AE02/QxsKSDX89paz7NM1klqOE2EM0Tc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:57:b0:f1:a7:f8:3b:0e:e5:20:a0:ec:a6:3c:c5:b2:94:92: fd:24:c3:87:fe:4d:b1:dc:49:28:24:ad:01:cf:0e:25:34:c6: 4f:98:42:16:87:0f:18:3d:97:79:a4:95:1e:84:d5:15:88:0c: 22:24:42:a0:36:22:9e:0c:7d:ec:38:f7:57:3d:f5:aa:a7:d5: 4a:40:d4:c1:cf:fc:cd:76:69:71:da:b8:a3:e8:00:50:6b:8c: a6:f3:73:5a:8c:aa:da:44:21:8f:c7:ce:9b:8f:e3:70:68:61: 6b:8e:67:ff:7f:40:ec:fa:70:f9:b8:dc:86:ff:18:56:f1:ab: c2:e3:c1:e2:dd:3e:83:9e:e3:a5:f4:f4:cf:77:9d:71:84:be: 6e:a5:e3:a6:ea:ce:22:ae:f3:67:57:0f:eb:41:80:2d:00:57: e0:b8:72:75:61:50:f2:c0:ba:f4:ab:5d:11:d9:cb:da:df:64: 19:cc:71:ee:06:97:aa:b0:36:21:fe:f2:c4:ef:58:41:a0:f0: 49:cb:8a:1b:38:e7:e4:f0:ed:ea:e8:7f:3e:d9:8f:c8:42:58: fb:12:ef:23:3f:3d:e7:35:8c:45:dd:45:d5:21:87:41:83:d8: b1:d4:63:18:32:4e:21:c6:4f:5d:d7:d8:9c:f4:6d:2c:b8:a8: 19:c9:f4:41 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkU4OUYxMTAvBgNVBAUTKDQzMUIwQTQ4MzVGQ0Y2OTZCM0VDRDMzNTkyNUE4RTEz NjEwQ0QxMzcwHhcNMjUwNTExMDUyNTE1WhcNMjUwNTE4MDUyNTE1WjAYMRYwFAYD VQQDEw02ODIwMzRiYi1mZTkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlU2VmUzhBWYrIX0swl2QxOhaNIZCq1ItreAW5PjYcvh5lrj8ZDPtsL53DoEB JbF6bA8wvIoInEsaAWg4p8r4fjui1bUy6RIsYcvLFNtkf+dRdaPYByLwVQrj3WMU 3ivx1MxFzRNZp2oJni+IM8ncLdgcYvonchxkCt1jdpWHiEP52NZMI7dLmIOIqm3+ 6pNgGRj+YRxj/U2/+/SYeVt/HghA5OPBzo9tyMAdh5dYrxTT41g2b1n1kla7ccSW fEZlboMqPw208j+pQa2CgkoJWghSJZAdH3m7D6xGIT3ukpGf2HQC6JBdyyk3d9Fu F+l7QhRlt2s1qsmB7DB2UErPJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLYMVMER lLxhIaDnFp8lFRTT79sTMB8GA1UdIwQYMBaAFEMbCkg1/PaWs+zTNZJajhNhDNE3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRTg5Ri9BRkZEMjE3MDZE Q0IxMUVGOUIzOUI4NjVDNEY5QUUwMi9ReHNLU0RYODlwYXo3Tk0xa2xxT0UyRU0w VGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1F4c0tTRFg4OXBhejdOTTFrbHFPRTJFTTBUYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RTg5Ri9BRkZEMjE3MDZEQ0IxMUVGOUIzOUI4NjVDNEY5QUUwMi9ReHNLU0RYODlw YXo3Tk0xa2xxT0UyRU0wVGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBpV7Dxp/g7DuUgoOymPMWylJL9JMOH/k2x3EkoJK0Bzw4lNMZPmEIW hw8YPZd5pJUehNUViAwiJEKgNiKeDH3sOPdXPfWqp9VKQNTBz/zNdmlx2rij6ABQ a4ym83NajKraRCGPx86bj+NwaGFrjmf/f0Ds+nD5uNyG/xhW8avC48Hi3T6DnuOl 9PTPd51xhL5upeOm6s4irvNnVw/rQYAtAFfguHJ1YVDywLr0q10R2cva32QZzHHu BpeqsDYh/vLE71hBoPBJy4obOOfk8O3q6H8+2Y/IQlj7Eu8jPz3nNYxF3UXVIYdB g9ix1GMYMk4hxk9d19ic9G0suKgZyfRB -----END CERTIFICATE-----Generated at Sun May 11 19:55:12 2025 by rpki-client