$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/qVBr_Nym0SxcNyUDFHD30eBncFI.mft File: qVBr_Nym0SxcNyUDFHD30eBncFI.mft (raw, json) Hash identifier: 396/j4CcTgQTJSQ7xvS716cHtqWlNxlcTzl3CRAqWTw= Subject key identifier: 8A:DA:07:C0:23:D5:4E:75:F2:53:87:31:AC:78:8B:36:6E:01:F7:B2 Authority key identifier: A9:50:6B:FC:DC:A6:D1:2C:5C:37:25:03:14:70:F7:D1:E0:67:70:52 Certificate issuer: /CN=A91C5ED0/serialNumber=A9506BFCDCA6D12C5C3725031470F7D1E0677052 Certificate serial: 1375 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qVBr_Nym0SxcNyUDFHD30eBncFI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/qVBr_Nym0SxcNyUDFHD30eBncFI.mft Manifest number: 2992 Signing time: Mon 12 May 2025 16:54:18 +0000 Manifest this update: Mon 12 May 2025 16:54:17 +0000 Manifest next update: Mon 19 May 2025 16:54:17 +0000 Files and hashes: 1: qVBr_Nym0SxcNyUDFHD30eBncFI.crl (hash: aATUHJCUMuZmQqLwa3lff8iG2YO/a0KU9jN/qHXHf/g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/qVBr_Nym0SxcNyUDFHD30eBncFI.crl rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/qVBr_Nym0SxcNyUDFHD30eBncFI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qVBr_Nym0SxcNyUDFHD30eBncFI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 16:54:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4981 (0x1375) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5ED0, serialNumber=A9506BFCDCA6D12C5C3725031470F7D1E0677052 Validity Not Before: May 12 16:54:17 2025 GMT Not After : May 19 16:54:17 2025 GMT Subject: CN=682227b9-6c58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:75:2d:8a:32:87:a9:36:4d:f2:67:fb:1d:2a: 41:7d:76:dc:06:11:6b:de:74:74:7b:b5:ad:6f:8d: d5:6f:4d:b5:28:c4:46:bd:f4:86:79:24:0f:85:1c: 1c:24:d7:75:db:30:88:6b:c5:a4:7b:65:21:63:7c: 49:56:b8:5b:52:8a:72:48:20:c2:f4:b1:30:06:95: db:26:e7:73:b8:4c:f6:72:e7:ad:e9:05:77:ff:0c: e0:10:1b:b7:db:8f:1e:3c:21:70:0b:76:b1:32:a9: 94:26:4c:6a:0e:0b:1b:d8:40:7d:8a:7f:6b:bb:7b: 18:b7:9e:ff:cf:56:8e:85:10:4c:47:18:f7:49:b8: b0:f1:f1:65:4d:a4:df:36:7e:40:00:48:9e:d7:da: dd:49:21:56:39:2e:4a:88:02:13:a1:5f:8f:cf:e9: 59:e7:74:f6:85:ec:98:dc:20:67:90:7d:ab:e2:46: b7:5a:39:ea:b5:ec:0c:a9:9b:b1:51:3f:51:a3:fe: e1:20:51:42:67:35:b5:ff:71:30:ca:49:6b:14:64: 5c:7a:f0:d4:53:bd:87:42:c4:de:f5:5a:84:28:55: 6f:57:48:0d:41:55:4c:25:c0:f7:ea:fc:27:e1:80: 1f:b7:79:b3:ac:03:5c:f8:3e:d2:78:71:fd:01:fb: 9e:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:DA:07:C0:23:D5:4E:75:F2:53:87:31:AC:78:8B:36:6E:01:F7:B2 X509v3 Authority Key Identifier: keyid:A9:50:6B:FC:DC:A6:D1:2C:5C:37:25:03:14:70:F7:D1:E0:67:70:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/qVBr_Nym0SxcNyUDFHD30eBncFI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qVBr_Nym0SxcNyUDFHD30eBncFI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/qVBr_Nym0SxcNyUDFHD30eBncFI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:c6:ea:87:4b:14:74:11:36:a7:1b:52:6c:84:c1:51:79:70: 93:21:c8:ae:d8:de:a1:0c:87:a8:9b:2e:54:7a:07:39:9c:c1: 87:c3:89:9b:47:16:28:3e:00:ae:45:a4:d8:c2:9d:4e:84:a8: 16:54:6a:23:82:23:16:24:61:ef:13:27:a8:dc:b9:d9:f6:a5: 23:77:f2:6c:28:78:08:ea:b0:9d:97:a1:16:4f:cf:d4:6d:9b: 89:05:4e:f6:a7:ce:05:41:e9:64:4b:3c:aa:5f:6b:4a:f1:63: 7f:2e:62:c4:d6:35:17:0f:48:c0:a5:50:27:1f:99:48:c0:52: 7b:6e:c8:3b:bc:7e:d3:9f:14:d3:42:57:0c:de:01:ce:fc:76: 41:e2:a1:b7:b3:d7:07:ea:19:b8:b6:e3:21:03:ba:0d:60:d7: f1:9f:1d:1d:9f:44:52:46:10:cc:de:ba:12:4f:e9:ac:82:0a: e0:10:bb:c8:b1:25:9d:05:24:0e:c3:03:b6:1a:c4:e7:ae:ef: c7:6b:01:37:44:a5:7c:3a:26:48:ef:45:5b:9c:89:cc:52:c2: 3b:8b:8e:d9:35:34:e0:2e:3e:66:4a:ad:9d:65:75:fc:e0:90: fc:cf:34:09:59:66:e0:30:9d:d9:4d:51:c4:e9:54:c3:ab:dc: d0:46:ac:df -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE3UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzVFRDAxMTAvBgNVBAUTKEE5NTA2QkZDRENBNkQxMkM1QzM3MjUwMzE0NzBGN0Qx RTA2NzcwNTIwHhcNMjUwNTEyMTY1NDE3WhcNMjUwNTE5MTY1NDE3WjAYMRYwFAYD VQQDEw02ODIyMjdiOS02YzU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvHUtijKHqTZN8mf7HSpBfXbcBhFr3nR0e7Wtb43Vb021KMRGvfSGeSQPhRwc JNd12zCIa8Wke2UhY3xJVrhbUopySCDC9LEwBpXbJudzuEz2cuet6QV3/wzgEBu3 248ePCFwC3axMqmUJkxqDgsb2EB9in9ru3sYt57/z1aOhRBMRxj3Sbiw8fFlTaTf Nn5AAEie19rdSSFWOS5KiAIToV+Pz+lZ53T2heyY3CBnkH2r4ka3WjnqtewMqZux UT9Ro/7hIFFCZzW1/3EwyklrFGRcevDUU72HQsTe9VqEKFVvV0gNQVVMJcD36vwn 4YAft3mzrANc+D7SeHH9AfueGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIraB8Aj 1U518lOHMax4izZuAfeyMB8GA1UdIwQYMBaAFKlQa/zcptEsXDclAxRw99HgZ3BS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNUVEMC8xNTNBNTUwQTk5 NzMxMUU4ODY2RjAwNjBDNEY5QUUwMi9xVkJyX055bTBTeGNOeVVERkhEMzBlQm5j RkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FWQnJfTnltMFN4Y055VURGSEQzMGVCbmNGSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NUVEMC8xNTNBNTUwQTk5NzMxMUU4ODY2RjAwNjBDNEY5QUUwMi9xVkJyX055bTBT eGNOeVVERkhEMzBlQm5jRkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8xuqHSxR0ETanG1JshMFReXCTIciu2N6hDIeomy5Uegc5nMGHw4mb RxYoPgCuRaTYwp1OhKgWVGojgiMWJGHvEyeo3LnZ9qUjd/JsKHgI6rCdl6EWT8/U bZuJBU72p84FQelkSzyqX2tK8WN/LmLE1jUXD0jApVAnH5lIwFJ7bsg7vH7TnxTT QlcM3gHO/HZB4qG3s9cH6hm4tuMhA7oNYNfxnx0dn0RSRhDM3roST+msggrgELvI sSWdBSQOwwO2GsTnru/HawE3RKV8OiZI70VbnInMUsI7i47ZNTTgLj5mSq2dZXX8 4JD8zzQJWWbgMJ3ZTVHE6VTDq9zQRqzf -----END CERTIFICATE-----Generated at Mon May 12 19:08:29 2025 by rpki-client