$ rpki-client -vvf rpki.apnic.net/member_repository/A91D23D1/1F338AC490CC11EBB1BE102DC4F9AE02/SQP-uXRPViXit-FaT4CyXtPdCfM.mft File: SQP-uXRPViXit-FaT4CyXtPdCfM.mft (raw, json) Hash identifier: nS+OL3qBUChTiqonJgYNBeqfY9ixjxJeYTEh/ktIChU= Subject key identifier: 93:BE:E8:24:59:F9:83:BC:0B:B0:13:36:64:84:D0:90:C0:FC:06:E4 Authority key identifier: 49:03:FE:B9:74:4F:56:25:E2:B7:E1:5A:4F:80:B2:5E:D3:DD:09:F3 Certificate issuer: /CN=A91D23D1/serialNumber=4903FEB9744F5625E2B7E15A4F80B25ED3DD09F3 Certificate serial: 0637 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SQP-uXRPViXit-FaT4CyXtPdCfM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D23D1/1F338AC490CC11EBB1BE102DC4F9AE02/SQP-uXRPViXit-FaT4CyXtPdCfM.mft Manifest number: 0632 Signing time: Thu 08 May 2025 22:28:22 +0000 Manifest this update: Thu 08 May 2025 22:28:22 +0000 Manifest next update: Thu 15 May 2025 22:28:22 +0000 Files and hashes: 1: SQP-uXRPViXit-FaT4CyXtPdCfM.crl (hash: fyjMM6wjyZJXTnwr5uQdj5EI+Sn2FU4JVyqgYgRv8cE=) 2: 32BA4EE0913311EB96A8E810C4F9AE02.roa (hash: sQNOj4qancKoB72U0bVcoarcyKvmrTavihgBPexyxuM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D23D1/1F338AC490CC11EBB1BE102DC4F9AE02/SQP-uXRPViXit-FaT4CyXtPdCfM.crl rsync://rpki.apnic.net/member_repository/A91D23D1/1F338AC490CC11EBB1BE102DC4F9AE02/SQP-uXRPViXit-FaT4CyXtPdCfM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SQP-uXRPViXit-FaT4CyXtPdCfM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 May 2025 22:28:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1591 (0x637) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D23D1, serialNumber=4903FEB9744F5625E2B7E15A4F80B25ED3DD09F3 Validity Not Before: May 8 22:28:22 2025 GMT Not After : May 15 22:28:22 2025 GMT Subject: CN=681d3006-fa32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:74:83:e3:9f:53:03:8e:67:4b:a6:7c:f9:b8: 02:37:0b:51:eb:7c:45:29:56:60:b3:c8:77:05:a6: b4:36:21:b4:76:e5:6a:5d:78:fd:9c:2e:36:40:b1: 7d:a3:06:db:3b:c3:2d:3c:83:c7:42:73:be:fa:ae: 1d:09:7c:26:46:00:39:12:8c:7f:7e:bd:c5:3b:e7: 74:fc:fd:f6:99:24:78:21:8f:81:14:c1:0c:3e:2e: 95:c4:dc:f0:0f:48:d0:11:58:8f:e3:9f:fb:a5:9d: f7:7a:3d:b0:6c:fb:41:82:67:7d:b9:c9:4c:35:f7: b4:c8:ba:06:ff:4f:fa:c6:55:80:ec:39:cf:d8:f4: e1:f7:08:27:7b:11:e6:18:8d:ab:d0:c5:37:84:7b: 89:6c:a8:d4:64:62:e3:79:d4:02:f2:8c:ac:c1:fb: f3:74:58:e5:6e:38:8d:18:1d:22:6f:c9:35:0d:09: fa:4f:c0:5a:83:3c:16:ad:2f:b8:af:cc:63:0e:b3: 89:be:36:03:5e:75:b6:20:89:e8:41:6a:ba:c8:ee: 9b:68:de:16:85:97:41:28:c0:52:41:3a:9e:4e:73: 15:0d:93:6c:eb:29:a8:0a:dc:73:87:63:66:52:b2: 5f:06:91:a0:b2:17:d8:a0:32:3f:24:b5:52:02:37: 51:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:BE:E8:24:59:F9:83:BC:0B:B0:13:36:64:84:D0:90:C0:FC:06:E4 X509v3 Authority Key Identifier: keyid:49:03:FE:B9:74:4F:56:25:E2:B7:E1:5A:4F:80:B2:5E:D3:DD:09:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D23D1/1F338AC490CC11EBB1BE102DC4F9AE02/SQP-uXRPViXit-FaT4CyXtPdCfM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SQP-uXRPViXit-FaT4CyXtPdCfM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D23D1/1F338AC490CC11EBB1BE102DC4F9AE02/SQP-uXRPViXit-FaT4CyXtPdCfM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:ef:05:89:e6:31:dc:95:e6:79:70:e0:51:a9:08:c1:82:a8: 41:63:43:22:13:da:f8:3b:df:95:5f:eb:85:5e:7f:ac:07:0f: 95:5f:ad:12:a2:35:4d:30:49:07:fd:78:0e:27:88:d1:25:69: 16:82:69:cc:33:68:b2:dd:e3:1f:52:8e:69:09:60:b5:68:77: 34:3d:30:2c:18:80:64:d8:0f:e0:04:22:27:44:72:8f:b3:bc: f3:21:b3:dd:c4:9f:19:51:1c:f2:70:5c:3f:f1:a2:03:49:08: b2:a4:f2:e6:4b:3c:7b:7f:3b:10:44:de:ad:05:3b:a1:0d:5a: cb:5e:14:90:53:fb:ff:fb:fd:eb:9f:0d:3b:49:e6:e3:b3:c6: 5f:86:1d:cb:ad:23:5d:d1:58:c0:cc:5a:7a:ee:5e:6e:e9:c9: 05:ec:cc:90:f9:99:cd:fc:cb:a1:25:fd:f4:f5:a3:83:be:af: 29:c2:25:33:a6:dc:3b:bc:34:14:b1:d3:a9:98:c2:83:fa:bf: e4:95:54:18:72:e1:06:52:a1:fd:b5:b5:52:99:ff:56:c7:5c: d1:62:df:bb:81:9b:da:1c:75:a2:01:41:87:c6:71:f3:ad:b0: 05:94:bf:03:d3:3e:63:c3:5f:5e:48:f9:da:25:02:67:29:fb: 1d:7f:c3:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBjcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDIzRDExMTAvBgNVBAUTKDQ5MDNGRUI5NzQ0RjU2MjVFMkI3RTE1QTRGODBCMjVF RDNERDA5RjMwHhcNMjUwNTA4MjIyODIyWhcNMjUwNTE1MjIyODIyWjAYMRYwFAYD VQQDEw02ODFkMzAwNi1mYTMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApHSD459TA45nS6Z8+bgCNwtR63xFKVZgs8h3Baa0NiG0duVqXXj9nC42QLF9 owbbO8MtPIPHQnO++q4dCXwmRgA5Eox/fr3FO+d0/P32mSR4IY+BFMEMPi6VxNzw D0jQEViP45/7pZ33ej2wbPtBgmd9uclMNfe0yLoG/0/6xlWA7DnP2PTh9wgnexHm GI2r0MU3hHuJbKjUZGLjedQC8oyswfvzdFjlbjiNGB0ib8k1DQn6T8BagzwWrS+4 r8xjDrOJvjYDXnW2IInoQWq6yO6baN4WhZdBKMBSQTqeTnMVDZNs6ymoCtxzh2Nm UrJfBpGgshfYoDI/JLVSAjdRMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJO+6CRZ +YO8C7ATNmSE0JDA/AbkMB8GA1UdIwQYMBaAFEkD/rl0T1Yl4rfhWk+Asl7T3Qnz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjNEMS8xRjMzOEFDNDkw Q0MxMUVCQjFCRTEwMkRDNEY5QUUwMi9TUVAtdVhSUFZpWGl0LUZhVDRDeVh0UGRD Zk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NRUC11WFJQVmlYaXQtRmFUNEN5WHRQZENmTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MjNEMS8xRjMzOEFDNDkwQ0MxMUVCQjFCRTEwMkRDNEY5QUUwMi9TUVAtdVhSUFZp WGl0LUZhVDRDeVh0UGRDZk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAX7wWJ5jHcleZ5cOBRqQjBgqhBY0MiE9r4O9+VX+uFXn+sBw+VX60S ojVNMEkH/XgOJ4jRJWkWgmnMM2iy3eMfUo5pCWC1aHc0PTAsGIBk2A/gBCInRHKP s7zzIbPdxJ8ZURzycFw/8aIDSQiypPLmSzx7fzsQRN6tBTuhDVrLXhSQU/v/+/3r nw07Sebjs8Zfhh3LrSNd0VjAzFp67l5u6ckF7MyQ+ZnN/MuhJf309aODvq8pwiUz ptw7vDQUsdOpmMKD+r/klVQYcuEGUqH9tbVSmf9Wx1zRYt+7gZvaHHWiAUGHxnHz rbAFlL8D0z5jw19eSPnaJQJnKfsdf8PB -----END CERTIFICATE-----Generated at Sat May 10 16:50:30 2025 by rpki-client