$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB04D/E958AFE6019C11EC91644B7BC4F9AE02/qhOo9ipv0n6bme44axRRnm_MhjI.mft File: qhOo9ipv0n6bme44axRRnm_MhjI.mft (raw, json) Hash identifier: V4gccDx9uur25sFPpUMmOyAorHaz7qxdjyT5F6kbLgc= Subject key identifier: E5:2C:E4:F7:F7:D0:7E:92:B5:3B:7E:EE:E5:29:61:EB:7F:4B:F6:59 Authority key identifier: AA:13:A8:F6:2A:6F:D2:7E:9B:99:EE:38:6B:14:51:9E:6F:CC:86:32 Certificate issuer: /CN=A91DB04D/serialNumber=AA13A8F62A6FD27E9B99EE386B14519E6FCC8632 Certificate serial: 0520 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qhOo9ipv0n6bme44axRRnm_MhjI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB04D/E958AFE6019C11EC91644B7BC4F9AE02/qhOo9ipv0n6bme44axRRnm_MhjI.mft Manifest number: 051A Signing time: Mon 12 May 2025 23:24:13 +0000 Manifest this update: Mon 12 May 2025 23:24:12 +0000 Manifest next update: Mon 19 May 2025 23:24:12 +0000 Files and hashes: 1: qhOo9ipv0n6bme44axRRnm_MhjI.crl (hash: 2wpHtRex1orZVJeFQvuul9ovCVLX7lPjLvnc+9QHWNM=) 2: 5913DBAA01A011ECBFF72849C4F9AE02.roa (hash: L2t/K4jYZMjKtZ2tLHjje+iSEvp8dgbz2aouwvg2y60=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB04D/E958AFE6019C11EC91644B7BC4F9AE02/qhOo9ipv0n6bme44axRRnm_MhjI.crl rsync://rpki.apnic.net/member_repository/A91DB04D/E958AFE6019C11EC91644B7BC4F9AE02/qhOo9ipv0n6bme44axRRnm_MhjI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qhOo9ipv0n6bme44axRRnm_MhjI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 23:24:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1312 (0x520) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB04D, serialNumber=AA13A8F62A6FD27E9B99EE386B14519E6FCC8632 Validity Not Before: May 12 23:24:12 2025 GMT Not After : May 19 23:24:12 2025 GMT Subject: CN=6822831d-22bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:88:7a:7e:9d:9d:1c:41:c5:d3:a8:83:11:2a: 32:1f:6b:64:33:a5:ef:07:ed:4d:00:7b:17:4e:35: af:ad:e4:a1:bf:92:39:55:ee:fc:82:a5:20:e9:60: 8d:b5:77:e0:82:d8:60:3e:eb:14:68:e9:ff:3d:cd: 6f:98:99:65:5d:88:65:a9:20:fe:57:d3:14:91:9f: e6:ca:26:eb:72:a3:cd:6a:46:ec:0e:b1:22:3f:17: 39:a2:17:07:b1:50:72:e9:e7:62:e2:cb:d4:36:9f: 16:be:d4:76:86:a7:d2:3c:3e:32:3d:1f:e6:ed:09: 1e:55:1d:0f:bb:0d:78:d8:db:bd:24:d8:7f:80:c5: 32:0f:26:b9:93:20:20:7c:dd:e1:88:2c:f7:f4:f6: 3d:7a:4c:b6:2d:13:54:61:07:49:d8:cd:5a:88:d4: b4:0f:13:7e:3e:e7:21:b2:29:87:79:cc:88:af:a6: 4f:65:04:ee:13:c1:96:e8:6f:5f:2d:25:39:4a:07: 54:a5:a2:c6:b7:15:08:a1:e1:c6:f3:aa:98:8a:f3: ea:dd:63:ed:3a:50:5b:7d:5d:06:f2:e1:0a:7d:12: c5:d9:ed:82:3c:1a:9a:2e:3a:d8:19:e0:49:bb:aa: f0:e2:7d:36:8f:1e:ce:5b:1d:56:f5:19:91:1a:7a: db:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:2C:E4:F7:F7:D0:7E:92:B5:3B:7E:EE:E5:29:61:EB:7F:4B:F6:59 X509v3 Authority Key Identifier: keyid:AA:13:A8:F6:2A:6F:D2:7E:9B:99:EE:38:6B:14:51:9E:6F:CC:86:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB04D/E958AFE6019C11EC91644B7BC4F9AE02/qhOo9ipv0n6bme44axRRnm_MhjI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qhOo9ipv0n6bme44axRRnm_MhjI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB04D/E958AFE6019C11EC91644B7BC4F9AE02/qhOo9ipv0n6bme44axRRnm_MhjI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cb:72:8f:03:b3:72:d5:71:de:79:cb:ef:53:3f:6a:dc:d4:49: 9d:f6:76:79:4e:b2:10:9b:54:d8:93:4a:8b:4f:68:d8:86:17: da:03:83:ea:7a:c7:d1:b9:1a:f4:d2:4f:63:62:f1:44:54:d0: a8:4c:f5:fe:a6:ac:3d:4e:ec:a0:39:75:54:e1:c0:1c:40:42: 55:73:d9:9a:18:d4:20:67:ea:3b:33:51:e8:0a:77:36:d9:e9: 74:2b:cb:11:1f:60:b5:7e:1b:4e:43:fc:ec:c3:d7:52:6f:99: 10:11:83:08:70:0a:63:53:18:cf:19:75:1f:e5:1f:1e:a1:8c: 30:45:72:8e:55:b5:0e:29:08:d2:9e:c8:c6:6c:66:f5:3d:37: 1e:97:ed:86:c6:a5:68:f7:2b:5a:75:32:60:13:16:48:b0:d4: 6c:8b:de:fe:c3:3e:e8:fd:6c:9a:96:2a:3e:c9:21:42:a6:58: 55:3f:20:34:85:6c:0e:77:9c:fa:c4:4e:82:d7:94:6d:9e:a8: 4a:eb:ef:21:2b:2e:95:66:8f:94:4e:9c:4a:55:65:41:df:9c: ff:13:52:ef:1b:0a:67:da:5f:f2:4a:2e:cf:b9:89:9e:16:ff: 2c:0c:f0:13:ac:61:ec:8e:ad:45:a2:5c:b2:a1:d6:0f:60:be: a8:62:6c:f9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBSAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REIwNEQxMTAvBgNVBAUTKEFBMTNBOEY2MkE2RkQyN0U5Qjk5RUUzODZCMTQ1MTlF NkZDQzg2MzIwHhcNMjUwNTEyMjMyNDEyWhcNMjUwNTE5MjMyNDEyWjAYMRYwFAYD VQQDEw02ODIyODMxZC0yMmJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuYh6fp2dHEHF06iDESoyH2tkM6XvB+1NAHsXTjWvreShv5I5Ve78gqUg6WCN tXfggthgPusUaOn/Pc1vmJllXYhlqSD+V9MUkZ/myibrcqPNakbsDrEiPxc5ohcH sVBy6edi4svUNp8WvtR2hqfSPD4yPR/m7QkeVR0Puw142Nu9JNh/gMUyDya5kyAg fN3hiCz39PY9eky2LRNUYQdJ2M1aiNS0DxN+PuchsimHecyIr6ZPZQTuE8GW6G9f LSU5SgdUpaLGtxUIoeHG86qYivPq3WPtOlBbfV0G8uEKfRLF2e2CPBqaLjrYGeBJ u6rw4n02jx7OWx1W9RmRGnrbnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOUs5Pf3 0H6StTt+7uUpYet/S/ZZMB8GA1UdIwQYMBaAFKoTqPYqb9J+m5nuOGsUUZ5vzIYy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjA0RC9FOTU4QUZFNjAx OUMxMUVDOTE2NDRCN0JDNEY5QUUwMi9xaE9vOWlwdjBuNmJtZTQ0YXhSUm5tX01o akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FoT285aXB2MG42Ym1lNDRheFJSbm1fTWhqSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjA0RC9FOTU4QUZFNjAxOUMxMUVDOTE2NDRCN0JDNEY5QUUwMi9xaE9vOWlwdjBu NmJtZTQ0YXhSUm5tX01oakkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDLco8Ds3LVcd55y+9TP2rc1Emd9nZ5TrIQm1TYk0qLT2jYhhfaA4Pq esfRuRr00k9jYvFEVNCoTPX+pqw9TuygOXVU4cAcQEJVc9maGNQgZ+o7M1HoCnc2 2el0K8sRH2C1fhtOQ/zsw9dSb5kQEYMIcApjUxjPGXUf5R8eoYwwRXKOVbUOKQjS nsjGbGb1PTcel+2GxqVo9ytadTJgExZIsNRsi97+wz7o/Wyalio+ySFCplhVPyA0 hWwOd5z6xE6C15RtnqhK6+8hKy6VZo+UTpxKVWVB35z/E1LvGwpn2l/ySi7PuYme Fv8sDPATrGHsjq1FolyyodYPYL6oYmz5 -----END CERTIFICATE-----Generated at Wed May 14 09:17:39 2025 by rpki-client