$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.mft File: qrDiti9jQ4lXMMBUiOf8TibFGmw.mft (raw, json) Hash identifier: BECWUAlwRDc1QHoFWKTZ2GxjzID7TRp0Sv/e9xjoDZo= Subject key identifier: A9:0C:72:5F:2F:A2:CB:B5:CE:B4:56:B8:69:09:01:E1:66:9E:17:4E Authority key identifier: AA:B0:E2:B6:2F:63:43:89:57:30:C0:54:88:E7:FC:4E:26:C5:1A:6C Certificate issuer: /CN=A91DCAE8/serialNumber=AAB0E2B62F6343895730C05488E7FC4E26C51A6C Certificate serial: 34CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrDiti9jQ4lXMMBUiOf8TibFGmw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.mft Manifest number: 34A7 Signing time: Thu 08 May 2025 14:46:59 +0000 Manifest this update: Thu 08 May 2025 14:46:58 +0000 Manifest next update: Thu 15 May 2025 14:46:58 +0000 Files and hashes: 1: qrDiti9jQ4lXMMBUiOf8TibFGmw.crl (hash: Za6i8jFoI/cUp+2ZkygpqNUMi/yFatXeHXj+P7O4q3c=) 2: 006CE5442FBA11ECA05BB46EC4F9AE02.roa (hash: apmElx5HYADo3Em3FsRyatuvuOLQ9ijUTXsLu3KjKZY=) 3: 56F533B4A63011EEA6054D52C4F9AE02.roa (hash: 6oWZaqd4YEA2LX4UVdAVOpmAruJNhp7dksiMD1n7i0s=) 4: 2D89110A9A5311EE9CB13140C4F9AE02.roa (hash: 51Xns0oB8DIUPAAqRrljxkibyJY0Qjy6OKFbsk2hMYw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.crl rsync://rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrDiti9jQ4lXMMBUiOf8TibFGmw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 May 2025 14:46:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13516 (0x34cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DCAE8, serialNumber=AAB0E2B62F6343895730C05488E7FC4E26C51A6C Validity Not Before: May 8 14:46:58 2025 GMT Not After : May 15 14:46:58 2025 GMT Subject: CN=681cc3e2-023d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:9b:7a:9c:54:07:92:0b:fd:83:43:95:a3:16: 2e:6a:3b:f6:c9:ce:77:42:61:55:6d:49:56:74:81: d6:8e:15:0f:74:ff:06:1c:f4:6f:12:c9:e0:ed:39: 1b:06:4c:39:19:74:8c:c1:93:93:a1:7c:de:67:17: d3:e5:ac:56:83:38:cc:be:71:cf:6f:83:c7:87:bc: 2e:9d:d0:76:8a:13:78:31:52:7c:a0:27:eb:70:5d: 1f:b1:22:eb:85:d6:52:fc:20:d6:49:8b:8c:f8:b0: e9:52:37:7d:db:82:5c:ed:58:e1:dc:03:6e:73:a1: 72:b0:3f:6e:6b:ae:b7:80:46:49:47:38:1d:e4:0b: 79:a1:e1:35:4d:72:3d:6c:ff:a9:c3:69:7b:73:58: fa:74:e7:52:80:0d:a8:ff:64:5d:69:b2:52:09:08: bb:93:b7:ed:c8:fc:cb:ad:49:b2:fd:8d:e7:32:82: 31:be:45:d1:ad:02:15:6e:c4:31:7e:8b:ae:57:61: 91:b7:d8:fb:6f:78:bf:6f:f6:17:ac:d7:60:cf:2f: da:83:8a:03:0b:fb:6c:3a:80:40:9d:42:3e:78:d2: e6:f3:2a:e2:5e:27:6b:91:7a:6c:9c:a9:be:f9:ab: 23:bf:26:55:d0:a8:0b:3c:67:a8:2f:80:c0:dd:15: ee:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:0C:72:5F:2F:A2:CB:B5:CE:B4:56:B8:69:09:01:E1:66:9E:17:4E X509v3 Authority Key Identifier: keyid:AA:B0:E2:B6:2F:63:43:89:57:30:C0:54:88:E7:FC:4E:26:C5:1A:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrDiti9jQ4lXMMBUiOf8TibFGmw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:e1:af:fd:45:32:95:d3:a4:fb:84:bf:66:8e:f7:8b:48:bf: 5a:6e:6d:61:61:b3:ba:97:8c:33:8f:70:13:7b:92:98:65:aa: 83:8c:5e:28:71:a7:94:bc:61:cf:a3:dd:fe:4e:5f:13:29:a3: 36:e8:09:ed:08:15:f7:94:51:09:07:78:f6:04:a8:ce:52:7e: 30:f7:a3:a1:87:21:29:96:92:3f:2d:35:e3:16:b0:89:90:c4: c5:34:e8:68:ea:be:bc:45:f2:b7:77:e4:95:ce:5f:bc:ab:74: 2a:7a:69:2f:51:11:47:f0:9a:be:30:a6:3b:4e:3e:bf:88:60: 2f:92:fe:aa:76:9b:27:58:7a:a3:83:1d:e3:b3:77:99:25:2b: 88:53:b2:7c:7e:52:65:c7:bf:1e:83:34:dc:9e:73:80:0a:31: 19:f3:63:e3:bc:27:b9:a6:af:b8:28:8a:d4:68:61:27:82:28: e4:4f:67:12:45:c3:76:56:1c:02:0f:af:c6:85:22:74:25:19: e3:10:0e:40:aa:81:22:8f:62:0e:16:55:21:82:c8:8d:08:66: e2:36:aa:cc:76:27:6e:2a:5f:49:0f:d5:75:dc:b6:20:cd:e9: de:e6:3c:9d:f8:2d:58:fa:b3:c9:ff:c6:44:67:4b:f7:99:92: ec:06:d1:ed -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNMwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RENBRTgxMTAvBgNVBAUTKEFBQjBFMkI2MkY2MzQzODk1NzMwQzA1NDg4RTdGQzRF MjZDNTFBNkMwHhcNMjUwNTA4MTQ0NjU4WhcNMjUwNTE1MTQ0NjU4WjAYMRYwFAYD VQQDEw02ODFjYzNlMi0wMjNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxZt6nFQHkgv9g0OVoxYuajv2yc53QmFVbUlWdIHWjhUPdP8GHPRvEsng7Tkb Bkw5GXSMwZOToXzeZxfT5axWgzjMvnHPb4PHh7wundB2ihN4MVJ8oCfrcF0fsSLr hdZS/CDWSYuM+LDpUjd924Jc7Vjh3ANuc6FysD9ua663gEZJRzgd5At5oeE1TXI9 bP+pw2l7c1j6dOdSgA2o/2RdabJSCQi7k7ftyPzLrUmy/Y3nMoIxvkXRrQIVbsQx fouuV2GRt9j7b3i/b/YXrNdgzy/ag4oDC/tsOoBAnUI+eNLm8yriXidrkXpsnKm+ +asjvyZV0KgLPGeoL4DA3RXuYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKkMcl8v osu1zrRWuGkJAeFmnhdOMB8GA1UdIwQYMBaAFKqw4rYvY0OJVzDAVIjn/E4mxRps MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQ0FFOC84QjZBREUxNDFE OTMxMUUyOTJDQjIzRjcwOEIwMkNEMi9xckRpdGk5alE0bFhNTUJVaU9mOFRpYkZH bXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FyRGl0aTlqUTRsWE1NQlVpT2Y4VGliRkdtdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Q0FFOC84QjZBREUxNDFEOTMxMUUyOTJDQjIzRjcwOEIwMkNEMi9xckRpdGk5alE0 bFhNTUJVaU9mOFRpYkZHbXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBc4a/9RTKV06T7hL9mjveLSL9abm1hYbO6l4wzj3ATe5KYZaqDjF4o caeUvGHPo93+Tl8TKaM26AntCBX3lFEJB3j2BKjOUn4w96OhhyEplpI/LTXjFrCJ kMTFNOho6r68RfK3d+SVzl+8q3QqemkvURFH8Jq+MKY7Tj6/iGAvkv6qdpsnWHqj gx3js3eZJSuIU7J8flJlx78egzTcnnOACjEZ82PjvCe5pq+4KIrUaGEngijkT2cS RcN2VhwCD6/GhSJ0JRnjEA5AqoEij2IOFlUhgsiNCGbiNqrMdiduKl9JD9V13LYg zene5jyd+C1Y+rPJ/8ZEZ0v3mZLsBtHt -----END CERTIFICATE-----Generated at Fri May 9 02:55:42 2025 by rpki-client