$ rpki-client -vvf rpki.apnic.net/member_repository/A91C31B7/FCC334CC1E6B11EFAC0E914EC4F9AE02/qB0VXKQErkFFeBrwXrU6Ehni4GU.mft File: qB0VXKQErkFFeBrwXrU6Ehni4GU.mft (raw, json) Hash identifier: pxsHK/eWMeB68gHfOEM9Ap7BMPQponQkIvs9mXkqy/k= Subject key identifier: B8:91:38:E8:28:DA:6E:1E:CF:D8:13:64:4C:89:DD:0C:C4:07:02:12 Authority key identifier: A8:1D:15:5C:A4:04:AE:41:45:78:1A:F0:5E:B5:3A:12:19:E2:E0:65 Certificate issuer: /CN=A91C31B7/serialNumber=A81D155CA404AE4145781AF05EB53A1219E2E065 Certificate serial: B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qB0VXKQErkFFeBrwXrU6Ehni4GU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C31B7/FCC334CC1E6B11EFAC0E914EC4F9AE02/qB0VXKQErkFFeBrwXrU6Ehni4GU.mft Manifest number: B3 Signing time: Sun 11 May 2025 04:46:57 +0000 Manifest this update: Sun 11 May 2025 04:46:57 +0000 Manifest next update: Sun 18 May 2025 04:46:57 +0000 Files and hashes: 1: qB0VXKQErkFFeBrwXrU6Ehni4GU.crl (hash: 5oVQ4ywmCIxwlCRINYyy8Uqwj3OEKU3OG7wYcPWFQ5w=) 2: 42C6F6041E6F11EF898C1E38C4F9AE02.roa (hash: Nwxndbe8HVB4N9vkz2u0yYwDfuyP9L4g9kHPKAHCIos=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C31B7/FCC334CC1E6B11EFAC0E914EC4F9AE02/qB0VXKQErkFFeBrwXrU6Ehni4GU.crl rsync://rpki.apnic.net/member_repository/A91C31B7/FCC334CC1E6B11EFAC0E914EC4F9AE02/qB0VXKQErkFFeBrwXrU6Ehni4GU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qB0VXKQErkFFeBrwXrU6Ehni4GU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 04:46:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 180 (0xb4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C31B7, serialNumber=A81D155CA404AE4145781AF05EB53A1219E2E065 Validity Not Before: May 11 04:46:57 2025 GMT Not After : May 18 04:46:57 2025 GMT Subject: CN=68202bc1-6544 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:35:80:cd:45:be:f0:03:73:6c:aa:b8:d4:09: 7e:f1:7f:df:da:40:0e:7a:49:a0:fa:c4:95:be:a7: 8a:9a:c5:fb:f6:82:55:cd:34:ef:9f:d5:a7:06:7c: 7d:48:57:e5:05:e7:a9:31:ed:14:fb:99:70:5a:97: 36:d8:43:c0:dd:20:18:1f:9c:b9:0f:cd:85:d1:ee: 4e:ce:26:83:d1:fb:ef:b0:51:00:da:37:6a:84:27: 7f:dd:f0:c8:f8:b1:e7:fa:12:5a:27:c4:52:be:71: 73:ed:96:21:dc:dc:8d:75:b7:df:54:9c:74:52:bc: 89:9e:66:a1:3c:d2:03:27:1f:66:bb:23:13:fa:75: 0d:b7:4f:9c:6c:43:ab:e5:e4:3d:73:3c:7d:0c:b2: 50:74:ed:e4:d8:90:05:91:85:0a:91:37:a7:01:b2: bb:8d:a6:3f:9b:72:3b:0b:32:0a:07:78:31:df:58: 4e:fb:ff:53:0a:56:73:4f:37:cd:a2:fb:de:39:4a: b8:db:b3:f8:8d:b0:d1:1a:92:18:9e:9f:5d:df:2d: 43:da:78:64:2a:c6:b1:a8:ba:c4:40:13:75:68:4b: 33:c3:bf:ef:48:e3:24:1b:6a:8e:ef:21:87:10:67: 2d:db:4d:25:6e:78:68:88:1f:eb:c7:fe:9b:99:e6: 75:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:91:38:E8:28:DA:6E:1E:CF:D8:13:64:4C:89:DD:0C:C4:07:02:12 X509v3 Authority Key Identifier: keyid:A8:1D:15:5C:A4:04:AE:41:45:78:1A:F0:5E:B5:3A:12:19:E2:E0:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C31B7/FCC334CC1E6B11EFAC0E914EC4F9AE02/qB0VXKQErkFFeBrwXrU6Ehni4GU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qB0VXKQErkFFeBrwXrU6Ehni4GU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C31B7/FCC334CC1E6B11EFAC0E914EC4F9AE02/qB0VXKQErkFFeBrwXrU6Ehni4GU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:22:83:24:72:9c:34:04:90:16:74:43:e7:54:ed:2a:a8:68: 6c:2d:40:d2:63:5a:0c:bf:36:09:77:a0:20:8f:b3:30:9c:11: 5c:e7:c0:70:4c:a3:46:dd:5c:69:c2:85:cb:68:dc:4b:e3:19: 9a:b1:c3:8d:71:c9:10:5d:fb:81:2d:5f:c9:b5:91:94:fe:6f: cb:a2:1c:c0:2c:3e:44:56:14:f1:e0:25:36:03:57:cb:00:b3: 92:65:5e:85:2a:03:ba:41:43:52:97:33:b0:01:32:22:14:1f: 71:4e:e8:ef:d1:1b:53:f9:da:50:f8:84:0e:34:88:3a:0b:f3: 61:9e:68:d7:6a:79:e0:57:ab:ff:08:f7:27:72:e1:54:a7:e0: bb:85:ac:17:ad:bb:91:a4:3d:52:73:a2:51:a1:c0:d9:8c:df: 5a:97:79:52:ba:67:9b:e2:85:2f:47:4f:30:39:3b:85:9f:5f: 98:cc:eb:9f:56:1e:c8:31:6a:e8:5b:e3:fd:69:99:45:f6:d6: 4e:86:33:d7:8a:7b:4a:19:9d:ba:67:0f:18:05:71:a8:c6:88: 46:cf:e0:52:03:92:7f:dc:e8:f0:72:b9:0f:da:f3:42:d9:cc: 20:ea:1c:f6:fd:d8:11:9f:00:b8:2b:80:72:86:45:b0:84:33: 3c:1d:59:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzMxQjcxMTAvBgNVBAUTKEE4MUQxNTVDQTQwNEFFNDE0NTc4MUFGMDVFQjUzQTEy MTlFMkUwNjUwHhcNMjUwNTExMDQ0NjU3WhcNMjUwNTE4MDQ0NjU3WjAYMRYwFAYD VQQDEw02ODIwMmJjMS02NTQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtzWAzUW+8ANzbKq41Al+8X/f2kAOekmg+sSVvqeKmsX79oJVzTTvn9WnBnx9 SFflBeepMe0U+5lwWpc22EPA3SAYH5y5D82F0e5OziaD0fvvsFEA2jdqhCd/3fDI +LHn+hJaJ8RSvnFz7ZYh3NyNdbffVJx0UryJnmahPNIDJx9muyMT+nUNt0+cbEOr 5eQ9czx9DLJQdO3k2JAFkYUKkTenAbK7jaY/m3I7CzIKB3gx31hO+/9TClZzTzfN ovveOUq427P4jbDRGpIYnp9d3y1D2nhkKsaxqLrEQBN1aEszw7/vSOMkG2qO7yGH EGct200lbnhoiB/rx/6bmeZ1WwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLiROOgo 2m4ez9gTZEyJ3QzEBwISMB8GA1UdIwQYMBaAFKgdFVykBK5BRXga8F61OhIZ4uBl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzFCNy9GQ0MzMzRDQzFF NkIxMUVGQUMwRTkxNEVDNEY5QUUwMi9xQjBWWEtRRXJrRkZlQnJ3WHJVNkVobmk0 R1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FCMFZYS1FFcmtGRmVCcndYclU2RWhuaTRHVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MzFCNy9GQ0MzMzRDQzFFNkIxMUVGQUMwRTkxNEVDNEY5QUUwMi9xQjBWWEtRRXJr RkZlQnJ3WHJVNkVobmk0R1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxIoMkcpw0BJAWdEPnVO0qqGhsLUDSY1oMvzYJd6Agj7MwnBFc58Bw TKNG3VxpwoXLaNxL4xmascONcckQXfuBLV/JtZGU/m/LohzALD5EVhTx4CU2A1fL ALOSZV6FKgO6QUNSlzOwATIiFB9xTujv0RtT+dpQ+IQONIg6C/NhnmjXanngV6v/ CPcncuFUp+C7hawXrbuRpD1Sc6JRocDZjN9al3lSumeb4oUvR08wOTuFn1+YzOuf Vh7IMWroW+P9aZlF9tZOhjPXintKGZ26Zw8YBXGoxohGz+BSA5J/3OjwcrkP2vNC 2cwg6hz2/dgRnwC4K4ByhkWwhDM8HVnc -----END CERTIFICATE-----Generated at Sun May 11 16:59:58 2025 by rpki-client