$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC017/105AC8FC90C311EDBA1DCC23C4F9AE02/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.mft File: CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.mft (raw, json) Hash identifier: D9/SnBdxuvTlHU6tAdCJcbVYRTvZDdZ0MMyHwM5ErXY= Subject key identifier: AA:68:DC:5A:47:D3:7C:F2:04:A1:4A:54:DF:DF:71:F1:30:45:F3:9F Authority key identifier: 0A:A5:DE:29:26:5A:08:E2:7A:58:1D:89:44:65:BD:CD:B7:37:09:BB Certificate issuer: /CN=A91DC017/serialNumber=0AA5DE29265A08E27A581D894465BDCDB73709BB Certificate serial: 01D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC017/105AC8FC90C311EDBA1DCC23C4F9AE02/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.mft Manifest number: 01C1 Signing time: Fri 09 May 2025 02:20:40 +0000 Manifest this update: Fri 09 May 2025 02:20:40 +0000 Manifest next update: Fri 16 May 2025 02:20:40 +0000 Files and hashes: 1: CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.crl (hash: wB1my8ESuCB9RtxT27ixSW0jsOjh2GI8k1gyvDgZikc=) 2: C0C268B8441C11EF9E110F1EC4F9AE02.roa (hash: m6rZeuVTK1YDhuaaIVhiTv3yauwN9+tcZ5dIfBdhpRQ=) 3: 1B8DE01C641911EF83FFBF3CC4F9AE02.roa (hash: mAZNBvYiKFXdkzpTN4tNBsnyhqKr4h/2Tyrx/kSmdy8=) 4: 08A1C0B8DC5011EF9C212C5CC4F9AE02.roa (hash: Vaf4WstL1N3DSV5lZGZocpmDqTwW1A3D3RH6q2VNIFc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC017/105AC8FC90C311EDBA1DCC23C4F9AE02/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.crl rsync://rpki.apnic.net/member_repository/A91DC017/105AC8FC90C311EDBA1DCC23C4F9AE02/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 May 2025 02:20:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 465 (0x1d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC017, serialNumber=0AA5DE29265A08E27A581D894465BDCDB73709BB Validity Not Before: May 9 02:20:40 2025 GMT Not After : May 16 02:20:40 2025 GMT Subject: CN=681d6678-9530 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:95:f2:e6:15:c2:0c:ea:13:59:d8:80:ec:7f: 67:1c:1d:34:3d:4b:29:6d:d7:45:9d:d9:45:18:51: b9:e7:1d:35:bc:d7:4a:9d:16:56:9b:1d:32:20:84: d7:e7:13:95:cf:1d:96:ef:6e:3d:6e:f9:f8:8f:f9: 31:2a:1d:a8:9c:28:70:86:c2:91:13:7d:0d:98:cb: 9a:d7:da:5a:d2:84:48:da:6d:1f:19:98:8c:c8:92: c6:fd:99:0f:67:7e:b2:f9:5d:ed:25:3a:65:bd:41: f3:d7:b9:1d:ec:ea:75:c4:72:27:0a:c3:09:f9:68: af:1f:b8:8d:85:7c:8d:32:e8:21:16:1b:fe:f2:bf: 4f:e7:70:09:ce:e7:27:1b:16:7b:ba:88:47:dd:1d: 00:68:67:f9:27:9e:1c:9d:72:d1:dc:d3:56:ab:c0: 3e:a9:74:45:e6:87:2d:e4:ab:a2:bc:21:62:18:cc: 2e:82:20:06:9f:31:e9:32:7a:3b:e5:44:4e:b2:7f: 8a:95:58:e9:2f:0c:ef:d4:54:d2:e7:b3:fe:c3:0b: b4:b0:d2:a4:3b:54:20:b4:65:ac:66:42:b0:87:ee: 8e:bc:57:a2:a8:f0:08:91:20:d1:3b:3b:9f:33:f2: f1:d1:77:f6:41:b1:3c:0c:2b:b6:7d:14:eb:ea:f8: 29:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:68:DC:5A:47:D3:7C:F2:04:A1:4A:54:DF:DF:71:F1:30:45:F3:9F X509v3 Authority Key Identifier: keyid:0A:A5:DE:29:26:5A:08:E2:7A:58:1D:89:44:65:BD:CD:B7:37:09:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC017/105AC8FC90C311EDBA1DCC23C4F9AE02/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC017/105AC8FC90C311EDBA1DCC23C4F9AE02/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c5:b9:73:8b:56:c4:95:46:dd:53:1b:56:ca:16:e8:23:ea:3d: 98:c2:e7:7d:97:9b:4f:d4:23:f0:ad:7d:48:14:99:d3:9a:d0: e2:91:52:c9:ef:f0:ac:9d:ad:83:6d:dc:86:f1:45:05:b0:f9: e7:da:9e:f8:6c:84:68:d9:66:2d:0c:6f:ef:50:f1:62:1e:fd: a7:64:f3:f7:60:e6:27:12:8a:7c:c5:f4:e8:bc:50:47:bf:e1: 14:8d:4c:ae:6b:ad:66:de:df:4f:81:c3:00:ac:83:90:44:37: d1:8f:01:dd:c6:9c:f9:ea:62:bb:61:2b:2c:dc:23:98:17:0b: 70:0b:7c:98:be:10:1a:dc:ae:34:c0:99:2b:b2:e4:2f:bc:b4: 43:47:5d:81:ba:4a:01:09:39:99:5a:ad:5e:23:2f:54:6d:61: df:4d:d5:f0:8b:cb:6c:9f:a9:e1:98:10:48:06:1d:75:03:08: 9a:ae:cc:2d:6a:d0:e9:bd:33:24:f6:1e:7f:59:9a:f2:7b:59: 05:b2:9f:08:33:8e:fb:a9:b4:2d:44:ab:6f:29:8e:39:e0:d2: ef:26:b6:38:c7:b1:d6:ed:25:d5:5e:96:b2:78:24:5b:8d:90: b4:6f:c0:98:04:7d:db:43:83:34:e8:e1:a7:dd:b3:8f:50:4a: d5:5f:cd:43 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REMwMTcxMTAvBgNVBAUTKDBBQTVERTI5MjY1QTA4RTI3QTU4MUQ4OTQ0NjVCRENE QjczNzA5QkIwHhcNMjUwNTA5MDIyMDQwWhcNMjUwNTE2MDIyMDQwWjAYMRYwFAYD VQQDEw02ODFkNjY3OC05NTMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2ZXy5hXCDOoTWdiA7H9nHB00PUspbddFndlFGFG55x01vNdKnRZWmx0yIITX 5xOVzx2W7249bvn4j/kxKh2onChwhsKRE30NmMua19pa0oRI2m0fGZiMyJLG/ZkP Z36y+V3tJTplvUHz17kd7Op1xHInCsMJ+WivH7iNhXyNMughFhv+8r9P53AJzucn GxZ7uohH3R0AaGf5J54cnXLR3NNWq8A+qXRF5oct5KuivCFiGMwugiAGnzHpMno7 5UROsn+KlVjpLwzv1FTS57P+wwu0sNKkO1QgtGWsZkKwh+6OvFeiqPAIkSDROzuf M/Lx0Xf2QbE8DCu2fRTr6vgpGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKpo3FpH 03zyBKFKVN/fcfEwRfOfMB8GA1UdIwQYMBaAFAql3ikmWgjielgdiURlvc23Nwm7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzAxNy8xMDVBQzhGQzkw QzMxMUVEQkExRENDMjNDNEY5QUUwMi9DcVhlS1NaYUNPSjZXQjJKUkdXOXpiYzND YnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NxWGVLU1phQ09KNldCMkpSR1c5emJjM0Nicy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzAxNy8xMDVBQzhGQzkwQzMxMUVEQkExRENDMjNDNEY5QUUwMi9DcVhlS1NaYUNP SjZXQjJKUkdXOXpiYzNDYnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDFuXOLVsSVRt1TG1bKFugj6j2Ywud9l5tP1CPwrX1IFJnTmtDikVLJ 7/Csna2DbdyG8UUFsPnn2p74bIRo2WYtDG/vUPFiHv2nZPP3YOYnEop8xfTovFBH v+EUjUyua61m3t9PgcMArIOQRDfRjwHdxpz56mK7YSss3COYFwtwC3yYvhAa3K40 wJkrsuQvvLRDR12BukoBCTmZWq1eIy9UbWHfTdXwi8tsn6nhmBBIBh11Awiarswt atDpvTMk9h5/WZrye1kFsp8IM477qbQtRKtvKY454NLvJrY4x7HW7SXVXpayeCRb jZC0b8CYBH3bQ4M06OGn3bOPUErVX81D -----END CERTIFICATE-----Generated at Sat May 10 22:30:19 2025 by rpki-client