$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2C38/04BAA614A98C11EF9350FB63C4F9AE02/qjXi-Xe1XnL5FjW_fVO861NHmDs.mft File: qjXi-Xe1XnL5FjW_fVO861NHmDs.mft (raw, json) Hash identifier: wXW5Z72u+fCtjpwnrOCJhVog/B0Ador+jNkbvMkSA1M= Subject key identifier: 97:0C:40:48:A4:64:17:90:52:E5:40:A2:DD:D4:D5:61:1A:B7:26:DB Authority key identifier: AA:35:E2:F9:77:B5:5E:72:F9:16:35:BF:7D:53:BC:EB:53:47:98:3B Certificate issuer: /CN=A91D2C38/serialNumber=AA35E2F977B55E72F91635BF7D53BCEB5347983B Certificate serial: 5B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qjXi-Xe1XnL5FjW_fVO861NHmDs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D2C38/04BAA614A98C11EF9350FB63C4F9AE02/qjXi-Xe1XnL5FjW_fVO861NHmDs.mft Manifest number: 5A Signing time: Thu 15 May 2025 06:26:08 +0000 Manifest this update: Thu 15 May 2025 06:26:07 +0000 Manifest next update: Thu 22 May 2025 06:26:07 +0000 Files and hashes: 1: qjXi-Xe1XnL5FjW_fVO861NHmDs.crl (hash: 7xmYbe8BSE0Y831o7AgHlfBXrRBxCzwd4R64NJhwj5I=) 2: 8D6B6D86A98C11EFAAC0F364C4F9AE02.roa (hash: P1YxJ4+gjHWBzmSpF7hBMmYmiKS5/7YJlO0/1zxJNmc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D2C38/04BAA614A98C11EF9350FB63C4F9AE02/qjXi-Xe1XnL5FjW_fVO861NHmDs.crl rsync://rpki.apnic.net/member_repository/A91D2C38/04BAA614A98C11EF9350FB63C4F9AE02/qjXi-Xe1XnL5FjW_fVO861NHmDs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qjXi-Xe1XnL5FjW_fVO861NHmDs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 06:26:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 91 (0x5b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D2C38, serialNumber=AA35E2F977B55E72F91635BF7D53BCEB5347983B Validity Not Before: May 15 06:26:07 2025 GMT Not After : May 22 06:26:07 2025 GMT Subject: CN=68258900-3cab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:bf:50:91:5a:a0:14:cd:ed:27:4c:79:7f:df: 5b:66:0d:4d:0c:54:fd:e9:0e:31:e8:e4:43:78:5f: bd:ff:00:90:b2:08:5f:07:a6:2b:aa:ca:ca:82:d3: 27:11:cb:28:00:e9:72:fe:b8:02:47:8e:75:ec:0e: 27:2e:f1:d8:cc:11:27:57:e8:c9:c2:ee:d6:fc:cf: 44:6f:e2:c9:f9:99:58:a6:4e:ad:f1:a7:2e:6f:9f: 6d:95:35:db:9f:32:83:54:df:90:e1:fa:c9:2e:b7: a8:a0:02:f8:a1:cc:d6:98:d8:01:60:a1:f5:98:81: 4e:09:06:e7:d9:a2:4f:b6:c5:57:8c:ce:91:20:c2: 6d:2d:77:33:02:8e:d9:32:64:21:ce:a4:cb:36:4b: fa:99:95:b2:f5:c3:94:2e:19:88:5a:59:5b:73:88: b8:7e:de:55:ad:33:7c:99:28:3a:46:05:f4:be:fd: fe:6f:aa:3b:cb:4a:5c:de:de:c6:30:8f:86:33:74: a6:10:dc:ab:9b:23:2a:d4:d5:c0:a0:33:8e:1a:37: 74:45:30:15:70:fa:3e:66:91:97:91:55:05:ff:8f: 58:fd:74:78:86:40:d0:83:be:7d:48:77:8d:53:91: d8:4f:18:11:2b:68:be:72:cf:bc:88:8d:5d:1b:d1: 40:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:0C:40:48:A4:64:17:90:52:E5:40:A2:DD:D4:D5:61:1A:B7:26:DB X509v3 Authority Key Identifier: keyid:AA:35:E2:F9:77:B5:5E:72:F9:16:35:BF:7D:53:BC:EB:53:47:98:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D2C38/04BAA614A98C11EF9350FB63C4F9AE02/qjXi-Xe1XnL5FjW_fVO861NHmDs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qjXi-Xe1XnL5FjW_fVO861NHmDs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2C38/04BAA614A98C11EF9350FB63C4F9AE02/qjXi-Xe1XnL5FjW_fVO861NHmDs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:88:09:cb:ac:ac:d3:8c:fa:04:51:4c:a4:6b:81:78:b7:e9: e4:57:06:13:98:96:5c:61:bc:ae:a0:ab:b7:82:f6:dc:09:c0: 6c:79:d2:ff:21:13:77:bc:d2:e6:58:d1:7b:2f:5d:80:8a:4e: bd:50:5d:b4:4f:90:3e:f9:2f:0c:d0:37:b3:b4:13:eb:dd:e9: c7:15:e9:88:4a:37:51:3b:71:2c:9d:2f:3f:e0:93:e9:8a:7d: d8:a2:ce:02:2c:d3:41:8b:12:7d:99:d4:54:3d:d3:e9:7b:c5: 0d:a7:0a:ae:f4:91:38:ef:7c:3e:92:b5:0e:c6:08:21:f3:7a: 9d:f6:73:67:69:01:fe:14:e5:57:0c:b0:5e:ac:02:24:cd:11: aa:5f:ad:a1:42:ff:8f:88:15:db:c2:c3:63:03:1f:3e:a0:7c: c5:1d:71:f4:c9:84:a2:01:9b:c2:43:83:ab:cc:b5:79:1d:3e: 27:14:eb:e8:6f:83:6e:99:fb:19:64:74:6e:30:6f:7d:85:4f: 16:3f:1f:82:ff:c2:7a:ae:00:03:10:c3:0a:df:18:8d:a7:f9: 3e:f2:36:03:e5:1a:c6:89:8c:72:09:c6:d9:7a:f0:ed:4d:0c: e6:7f:6d:cb:36:73:fe:c9:fa:f5:2c:b7:48:4b:1d:99:a8:26: 3f:e7:47:d9 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE MkMzODExMC8GA1UEBRMoQUEzNUUyRjk3N0I1NUU3MkY5MTYzNUJGN0Q1M0JDRUI1 MzQ3OTgzQjAeFw0yNTA1MTUwNjI2MDdaFw0yNTA1MjIwNjI2MDdaMBgxFjAUBgNV BAMTDTY4MjU4OTAwLTNjYWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCxv1CRWqAUze0nTHl/31tmDU0MVP3pDjHo5EN4X73/AJCyCF8HpiuqysqC0ycR yygA6XL+uAJHjnXsDicu8djMESdX6MnC7tb8z0Rv4sn5mVimTq3xpy5vn22VNduf MoNU35Dh+skut6igAvihzNaY2AFgofWYgU4JBufZok+2xVeMzpEgwm0tdzMCjtky ZCHOpMs2S/qZlbL1w5QuGYhaWVtziLh+3lWtM3yZKDpGBfS+/f5vqjvLSlze3sYw j4YzdKYQ3KubIyrU1cCgM44aN3RFMBVw+j5mkZeRVQX/j1j9dHiGQNCDvn1Id41T kdhPGBEraL5yz7yIjV0b0UCVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUlwxASKRk F5BS5UCi3dTVYRq3JtswHwYDVR0jBBgwFoAUqjXi+Xe1XnL5FjW/fVO861NHmDsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQyQzM4LzA0QkFBNjE0QTk4 QzExRUY5MzUwRkI2M0M0RjlBRTAyL3FqWGktWGUxWG5MNUZqV19mVk84NjFOSG1E cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvcWpYaS1YZTFYbkw1RmpXX2ZWTzg2MU5IbURzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQy QzM4LzA0QkFBNjE0QTk4QzExRUY5MzUwRkI2M0M0RjlBRTAyL3FqWGktWGUxWG5M NUZqV19mVk84NjFOSG1Ecy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFKICcusrNOM+gRRTKRrgXi36eRXBhOYllxhvK6gq7eC9twJwGx50v8h E3e80uZY0XsvXYCKTr1QXbRPkD75LwzQN7O0E+vd6ccV6YhKN1E7cSydLz/gk+mK fdiizgIs00GLEn2Z1FQ90+l7xQ2nCq70kTjvfD6StQ7GCCHzep32c2dpAf4U5VcM sF6sAiTNEapfraFC/4+IFdvCw2MDHz6gfMUdcfTJhKIBm8JDg6vMtXkdPicU6+hv g26Z+xlkdG4wb32FTxY/H4L/wnquAAMQwwrfGI2n+T7yNgPlGsaJjHIJxtl68O1N DOZ/bcs2c/7J+vUst0hLHZmoJj/nR9k= -----END CERTIFICATE-----Generated at Thu May 15 23:21:36 2025 by rpki-client