$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/q2foL8hqrKgqz_jcNkXNcWEBP3Y.mft File: q2foL8hqrKgqz_jcNkXNcWEBP3Y.mft (raw, json) Hash identifier: qyddOe8R1K7lDEFrAI6kW/GxIHhFvvCGwjYdPljsxDk= Subject key identifier: B3:08:29:D8:FC:C5:F3:9A:01:1E:E9:3D:61:48:C3:29:63:4D:D1:A8 Authority key identifier: AB:67:E8:2F:C8:6A:AC:A8:2A:CF:F8:DC:36:45:CD:71:61:01:3F:76 Certificate issuer: /CN=A91D1E4C/serialNumber=AB67E82FC86AACA82ACFF8DC3645CD7161013F76 Certificate serial: 02E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2foL8hqrKgqz_jcNkXNcWEBP3Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/q2foL8hqrKgqz_jcNkXNcWEBP3Y.mft Manifest number: 0ADD Signing time: Sun 04 May 2025 20:36:23 +0000 Manifest this update: Sun 04 May 2025 20:36:23 +0000 Manifest next update: Sun 11 May 2025 20:36:23 +0000 Files and hashes: 1: q2foL8hqrKgqz_jcNkXNcWEBP3Y.crl (hash: RzfLgSa5/aS5RSV/EqkK18+ek77lRw3X5s9AXyxOwx8=) 2: 743B3188E57211ECBC81A87EC4F9AE02.roa (hash: ukecD2pxHGlgKyIFMtJzbdcdaqfvaNOkIkVTe1ei8KE=) 3: FC358296CFA011EDA4AC5B18C4F9AE02.roa (hash: Kfs6t0RkTXatIBLPnXrK64Ffg/DQYtGVawG99/fXQls=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/q2foL8hqrKgqz_jcNkXNcWEBP3Y.crl rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/q2foL8hqrKgqz_jcNkXNcWEBP3Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2foL8hqrKgqz_jcNkXNcWEBP3Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 20:36:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 742 (0x2e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1E4C, serialNumber=AB67E82FC86AACA82ACFF8DC3645CD7161013F76 Validity Not Before: May 4 20:36:23 2025 GMT Not After : May 11 20:36:23 2025 GMT Subject: CN=6817cfc7-641d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:63:4d:af:18:63:cb:c5:49:dd:c4:84:b4:54: 9e:3b:1c:9d:68:3c:d9:c7:76:57:c8:16:9c:1c:94: e8:27:24:2d:45:76:29:35:14:99:c5:bc:79:11:86: 8a:0d:b9:47:1d:2e:a5:21:69:39:c8:53:9d:7e:39: 84:a3:08:83:c3:30:8f:73:dc:e0:aa:fb:58:21:41: 07:9b:ba:b2:c2:41:e8:a3:75:14:a4:f9:26:d2:d9: b6:b7:79:16:4e:65:f0:f2:01:01:67:e8:fe:c6:31: 1d:67:a7:f9:2c:00:5a:f4:fd:e0:3e:08:cf:69:49: fe:23:7c:53:5d:af:85:52:aa:9d:a7:fc:59:a3:8e: 3a:7e:4d:3e:af:3c:01:c2:b1:7e:00:d1:e4:e4:53: 98:93:39:5f:4f:b0:2b:37:fd:75:8d:50:4c:18:69: 9f:ec:59:22:47:ab:58:c7:a2:45:a9:0b:60:61:12: 56:96:cf:92:d7:9b:d7:9f:f7:49:80:6b:f4:04:7b: 36:34:0e:fa:2d:4c:a2:05:14:83:1e:76:1e:f3:15: d8:70:69:66:bd:45:04:1c:25:92:90:2a:33:af:49: 51:33:68:6a:39:23:b2:ab:da:77:ef:cf:2c:46:ca: f8:15:73:a3:d7:e2:8f:ff:d6:c5:5d:ab:3b:30:3f: 02:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:08:29:D8:FC:C5:F3:9A:01:1E:E9:3D:61:48:C3:29:63:4D:D1:A8 X509v3 Authority Key Identifier: keyid:AB:67:E8:2F:C8:6A:AC:A8:2A:CF:F8:DC:36:45:CD:71:61:01:3F:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/q2foL8hqrKgqz_jcNkXNcWEBP3Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2foL8hqrKgqz_jcNkXNcWEBP3Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/q2foL8hqrKgqz_jcNkXNcWEBP3Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:17:7f:b8:fc:9a:03:42:22:36:3f:26:82:3a:b9:a8:bd:d1: bc:70:72:6c:c3:b9:ad:78:e8:35:16:bd:09:d5:a4:9f:e5:0f: 4a:f2:36:69:df:4f:2e:b7:27:84:cd:1e:93:93:bf:20:92:47: 7a:22:99:ea:66:ea:57:6d:ac:1f:a4:52:70:56:42:04:d7:be: 76:36:56:1c:da:d1:3f:d5:bd:f5:54:fd:5f:3e:5b:c8:21:3f: bc:e5:a0:88:c7:9c:d1:c3:a9:a0:d2:47:c5:0a:b3:f8:ab:f8: ea:7f:f3:f4:f5:d2:9e:16:e4:28:d5:2c:0f:5c:cf:93:7e:5c: 6d:34:b8:e6:10:08:f2:9a:fb:c4:9a:36:e4:c2:87:48:73:b6: 4d:d5:d1:81:a6:41:f5:8b:59:6c:1b:83:64:5d:fb:d2:3b:5b: ed:8f:c7:12:24:de:21:fe:52:6d:b3:45:c0:88:45:77:cc:dd: ec:4b:82:e0:a8:1e:86:0e:60:4a:5a:f5:04:65:75:73:a0:99: 7c:63:de:8c:a2:fd:3e:d3:34:f8:d2:65:f9:c8:45:24:fc:c0: 50:aa:e7:99:26:78:bf:b1:ec:67:12:e0:fc:6f:6f:bc:7d:da: 90:4e:8c:b1:76:cd:13:9b:58:28:90:b1:3d:84:be:c6:30:44: fc:8e:de:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAuYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDFFNEMxMTAvBgNVBAUTKEFCNjdFODJGQzg2QUFDQTgyQUNGRjhEQzM2NDVDRDcx NjEwMTNGNzYwHhcNMjUwNTA0MjAzNjIzWhcNMjUwNTExMjAzNjIzWjAYMRYwFAYD VQQDEw02ODE3Y2ZjNy02NDFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5GNNrxhjy8VJ3cSEtFSeOxydaDzZx3ZXyBacHJToJyQtRXYpNRSZxbx5EYaK DblHHS6lIWk5yFOdfjmEowiDwzCPc9zgqvtYIUEHm7qywkHoo3UUpPkm0tm2t3kW TmXw8gEBZ+j+xjEdZ6f5LABa9P3gPgjPaUn+I3xTXa+FUqqdp/xZo446fk0+rzwB wrF+ANHk5FOYkzlfT7ArN/11jVBMGGmf7FkiR6tYx6JFqQtgYRJWls+S15vXn/dJ gGv0BHs2NA76LUyiBRSDHnYe8xXYcGlmvUUEHCWSkCozr0lRM2hqOSOyq9p3788s Rsr4FXOj1+KP/9bFXas7MD8CBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLMIKdj8 xfOaAR7pPWFIwyljTdGoMB8GA1UdIwQYMBaAFKtn6C/IaqyoKs/43DZFzXFhAT92 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMUU0Qy83REFEQTU2Q0Q5 NEQxMUVBQTYwNEFDNTNDNEY5QUUwMi9xMmZvTDhocXJLZ3F6X2pjTmtYTmNXRUJQ M1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3EyZm9MOGhxcktncXpfamNOa1hOY1dFQlAzWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MUU0Qy83REFEQTU2Q0Q5NEQxMUVBQTYwNEFDNTNDNEY5QUUwMi9xMmZvTDhocXJL Z3F6X2pjTmtYTmNXRUJQM1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCpF3+4/JoDQiI2PyaCOrmovdG8cHJsw7mteOg1Fr0J1aSf5Q9K8jZp 308utyeEzR6Tk78gkkd6IpnqZupXbawfpFJwVkIE1752NlYc2tE/1b31VP1fPlvI IT+85aCIx5zRw6mg0kfFCrP4q/jqf/P09dKeFuQo1SwPXM+TflxtNLjmEAjymvvE mjbkwodIc7ZN1dGBpkH1i1lsG4NkXfvSO1vtj8cSJN4h/lJts0XAiEV3zN3sS4Lg qB6GDmBKWvUEZXVzoJl8Y96Mov0+0zT40mX5yEUk/MBQqueZJni/sexnEuD8b2+8 fdqQToyxds0Tm1gokLE9hL7GMET8jt4U -----END CERTIFICATE-----Generated at Mon May 5 20:48:49 2025 by rpki-client