$ rpki-client -vvf rpki.apnic.net/member_repository/A91BEE0F/5E11148E9BA911EDA33EEC6BC4F9AE02/QRzJhRGOMuB6FVTV6boLTNKKSu8.mft File: QRzJhRGOMuB6FVTV6boLTNKKSu8.mft (raw, json) Hash identifier: JRbTMkVtre2BeWY6Gj9NhUVMuQoYJj7U3zBhAlKYUTQ= Subject key identifier: 81:FE:6F:90:7B:76:06:2C:31:B5:7F:47:C1:EA:B7:8D:40:08:B4:E5 Authority key identifier: 41:1C:C9:85:11:8E:32:E0:7A:15:54:D5:E9:BA:0B:4C:D2:8A:4A:EF Certificate issuer: /CN=A91BEE0F/serialNumber=411CC985118E32E07A1554D5E9BA0B4CD28A4AEF Certificate serial: 01AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRzJhRGOMuB6FVTV6boLTNKKSu8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BEE0F/5E11148E9BA911EDA33EEC6BC4F9AE02/QRzJhRGOMuB6FVTV6boLTNKKSu8.mft Manifest number: 01AB Signing time: Sun 11 May 2025 02:10:36 +0000 Manifest this update: Sun 11 May 2025 02:10:36 +0000 Manifest next update: Sun 18 May 2025 02:10:36 +0000 Files and hashes: 1: QRzJhRGOMuB6FVTV6boLTNKKSu8.crl (hash: Pw4jee2F79wTej3zxliGUdjeCc/3NMW2H+ZGl+E0ke8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BEE0F/5E11148E9BA911EDA33EEC6BC4F9AE02/QRzJhRGOMuB6FVTV6boLTNKKSu8.crl rsync://rpki.apnic.net/member_repository/A91BEE0F/5E11148E9BA911EDA33EEC6BC4F9AE02/QRzJhRGOMuB6FVTV6boLTNKKSu8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRzJhRGOMuB6FVTV6boLTNKKSu8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 18:24:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 427 (0x1ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BEE0F, serialNumber=411CC985118E32E07A1554D5E9BA0B4CD28A4AEF Validity Not Before: May 11 02:10:36 2025 GMT Not After : May 18 02:10:36 2025 GMT Subject: CN=6820071c-1ed7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:8b:9f:aa:b8:1f:a4:78:48:fb:14:0b:4d:d7: 28:28:54:de:32:f7:a0:ce:3e:a4:1c:c4:a4:d4:34: 58:6e:4f:f8:bc:96:71:cc:68:e3:44:c4:35:1a:2a: 0d:19:84:76:db:19:cc:fa:c5:64:8d:e7:7d:89:74: c0:60:cd:97:db:27:c2:fd:dd:90:c6:b6:fa:ee:e8: 14:12:af:ce:20:c8:cb:d4:62:8a:ba:4b:75:6a:f7: a8:66:fd:74:64:a0:76:e3:d5:f0:f7:93:12:1f:87: ba:65:d0:b8:a0:70:95:41:ad:5a:c8:6c:31:81:a8: 60:f8:a1:3d:ac:b5:75:a0:d7:a0:67:99:ec:0d:10: 50:4d:07:50:6a:9b:26:11:88:2d:b6:72:f3:7c:bc: 7b:06:0d:e0:d0:17:f9:91:d3:4a:40:e8:f0:2f:52: 25:27:8d:a0:4d:47:79:73:4d:55:5a:d3:ec:cf:9b: bc:79:20:e9:95:29:18:52:2d:00:50:37:f7:bd:b2: 24:4a:bc:3a:ef:f1:0d:97:13:7d:8b:56:3a:30:29: 1f:33:4a:f8:01:1c:7f:e9:a5:88:be:04:2f:f5:fe: 67:f5:fa:1e:47:0d:e0:89:b1:07:e0:1f:a2:8d:e8: 42:c7:24:e5:44:00:a3:fb:13:af:89:ac:84:bb:cc: f3:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:FE:6F:90:7B:76:06:2C:31:B5:7F:47:C1:EA:B7:8D:40:08:B4:E5 X509v3 Authority Key Identifier: keyid:41:1C:C9:85:11:8E:32:E0:7A:15:54:D5:E9:BA:0B:4C:D2:8A:4A:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BEE0F/5E11148E9BA911EDA33EEC6BC4F9AE02/QRzJhRGOMuB6FVTV6boLTNKKSu8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRzJhRGOMuB6FVTV6boLTNKKSu8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEE0F/5E11148E9BA911EDA33EEC6BC4F9AE02/QRzJhRGOMuB6FVTV6boLTNKKSu8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:03:37:f0:1d:82:f9:85:78:9a:63:ac:eb:74:41:29:7c:4b: ae:bc:27:55:11:bb:3f:62:85:11:5b:f2:17:ad:dc:29:a4:55: fa:08:5a:be:04:33:71:2a:13:c3:df:a2:d9:a1:60:aa:1e:9b: 08:24:2f:26:1e:46:f7:a5:e6:2d:3c:3b:ee:1e:3b:a1:09:9b: 61:8c:d5:0d:7b:4b:5e:a1:19:d3:8f:f1:32:37:21:be:be:ff: d6:c3:b3:6d:98:d9:58:55:55:af:ca:c8:44:bd:d2:b3:63:65: 83:8a:58:30:0c:09:27:2b:68:0d:09:87:8a:fe:d1:6b:ad:58: 38:0d:c6:5b:f5:64:a5:03:b5:ad:04:97:a8:f4:83:53:d9:89: 66:4d:8e:0f:fc:f0:01:be:9c:ad:a2:cc:5e:f8:1f:24:66:cd: 53:f2:c9:ce:ab:db:c1:2b:ec:2f:bb:2e:4a:04:37:60:15:be: ed:ea:21:6f:2e:3c:90:95:3b:24:7c:30:48:4f:c7:d9:52:0e: f6:14:42:fa:b7:59:92:cb:d6:5d:21:97:00:cf:d7:7d:8a:11: 66:e8:2d:cc:68:03:bc:41:60:f0:18:da:93:7f:2f:bd:ab:10: ed:96:fd:26:ef:54:ad:9f:b1:f9:38:57:8e:cc:b9:ae:db:f3: ff:b1:c2:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkVFMEYxMTAvBgNVBAUTKDQxMUNDOTg1MTE4RTMyRTA3QTE1NTRENUU5QkEwQjRD RDI4QTRBRUYwHhcNMjUwNTExMDIxMDM2WhcNMjUwNTE4MDIxMDM2WjAYMRYwFAYD VQQDEw02ODIwMDcxYy0xZWQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz4ufqrgfpHhI+xQLTdcoKFTeMvegzj6kHMSk1DRYbk/4vJZxzGjjRMQ1GioN GYR22xnM+sVkjed9iXTAYM2X2yfC/d2Qxrb67ugUEq/OIMjL1GKKukt1aveoZv10 ZKB249Xw95MSH4e6ZdC4oHCVQa1ayGwxgahg+KE9rLV1oNegZ5nsDRBQTQdQapsm EYgttnLzfLx7Bg3g0Bf5kdNKQOjwL1IlJ42gTUd5c01VWtPsz5u8eSDplSkYUi0A UDf3vbIkSrw67/ENlxN9i1Y6MCkfM0r4ARx/6aWIvgQv9f5n9foeRw3gibEH4B+i jehCxyTlRACj+xOviayEu8zziwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIH+b5B7 dgYsMbV/R8Hqt41ACLTlMB8GA1UdIwQYMBaAFEEcyYURjjLgehVU1em6C0zSikrv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRUUwRi81RTExMTQ4RTlC QTkxMUVEQTMzRUVDNkJDNEY5QUUwMi9RUnpKaFJHT011QjZGVlRWNmJvTFROS0tT dTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FSekpoUkdPTXVCNkZWVFY2Ym9MVE5LS1N1OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RUUwRi81RTExMTQ4RTlCQTkxMUVEQTMzRUVDNkJDNEY5QUUwMi9RUnpKaFJHT011 QjZGVlRWNmJvTFROS0tTdTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGAzfwHYL5hXiaY6zrdEEpfEuuvCdVEbs/YoURW/IXrdwppFX6CFq+ BDNxKhPD36LZoWCqHpsIJC8mHkb3peYtPDvuHjuhCZthjNUNe0teoRnTj/EyNyG+ vv/Ww7NtmNlYVVWvyshEvdKzY2WDilgwDAknK2gNCYeK/tFrrVg4DcZb9WSlA7Wt BJeo9INT2YlmTY4P/PABvpytosxe+B8kZs1T8snOq9vBK+wvuy5KBDdgFb7t6iFv LjyQlTskfDBIT8fZUg72FEL6t1mSy9ZdIZcAz9d9ihFm6C3MaAO8QWDwGNqTfy+9 qxDtlv0m71Stn7H5OFeOzLmu2/P/scJL -----END CERTIFICATE-----Generated at Sun May 11 04:24:24 2025 by rpki-client