$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDD3F/C1A47FD895AF11E6B7854371C4F9AE02/p-QTTZsR3qt1sReR1V450XROC_E.mft File: p-QTTZsR3qt1sReR1V450XROC_E.mft (raw, json) Hash identifier: KY41COxJSpzGiK2SA7lIouZW6X1ttcdHEkqH8ZoDx6Q= Subject key identifier: AB:10:E4:B5:BC:8E:73:AE:D3:1E:DD:7C:27:AC:60:C8:E1:2A:B2:69 Authority key identifier: A7:E4:13:4D:9B:11:DE:AB:75:B1:17:91:D5:5E:39:D1:74:4E:0B:F1 Certificate issuer: /CN=A91DDD3F/serialNumber=A7E4134D9B11DEAB75B11791D55E39D1744E0BF1 Certificate serial: 1DBF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-QTTZsR3qt1sReR1V450XROC_E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DDD3F/C1A47FD895AF11E6B7854371C4F9AE02/p-QTTZsR3qt1sReR1V450XROC_E.mft Manifest number: 1DB6 Signing time: Thu 08 May 2025 16:10:48 +0000 Manifest this update: Thu 08 May 2025 16:10:47 +0000 Manifest next update: Thu 15 May 2025 16:10:47 +0000 Files and hashes: 1: p-QTTZsR3qt1sReR1V450XROC_E.crl (hash: zU5Ee8etQsjopQ3E0g8U9oK0Ht1cuYecgO7sOlIngDc=) 2: AE58A24695B011E696EFE472C4F9AE02.roa (hash: iaqQr5dNZ60TDLIhN3MftiKcnJuy69N4C5+umHfRLFA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DDD3F/C1A47FD895AF11E6B7854371C4F9AE02/p-QTTZsR3qt1sReR1V450XROC_E.crl rsync://rpki.apnic.net/member_repository/A91DDD3F/C1A47FD895AF11E6B7854371C4F9AE02/p-QTTZsR3qt1sReR1V450XROC_E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-QTTZsR3qt1sReR1V450XROC_E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 May 2025 16:10:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7615 (0x1dbf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DDD3F, serialNumber=A7E4134D9B11DEAB75B11791D55E39D1744E0BF1 Validity Not Before: May 8 16:10:47 2025 GMT Not After : May 15 16:10:47 2025 GMT Subject: CN=681cd787-3fca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:49:65:1a:b8:7a:a0:a7:9b:e3:4f:ce:2d:03: 35:a1:3b:b2:8c:fb:6c:5b:2d:1f:ea:4f:4b:ee:27: 95:dd:9e:4d:bd:25:6f:d2:1f:85:a8:55:c5:d8:ad: 46:5a:cc:2c:b6:cf:2f:a2:db:17:0a:08:9d:37:dc: 50:8d:03:4d:fc:93:4c:16:06:73:40:9e:1f:90:fb: 8c:cb:01:32:d7:f4:9e:78:1b:21:1a:e9:24:dd:53: b2:71:ef:30:c5:f3:c6:a8:2d:19:84:39:33:1e:76: 0f:fa:40:9f:08:d3:38:59:ac:a0:e9:d1:55:fd:12: 4e:82:10:b3:3f:fb:d0:b5:91:12:a4:e5:b6:23:4d: 89:e5:59:74:ff:e9:16:bd:d4:cd:64:58:6a:8a:dc: f7:99:91:fd:15:32:cd:70:f8:57:bc:19:97:fa:5f: a4:64:f5:66:9b:54:08:cf:36:8f:c7:db:66:fe:42: 8e:b4:43:cb:53:ee:1c:c0:c8:00:f1:07:d2:3b:97: cc:50:dc:2e:73:6b:07:6e:c5:d0:11:70:24:ad:99: ce:a7:d3:09:97:fd:84:c9:a9:27:18:74:85:52:b9: 57:01:33:6e:1c:6b:67:b0:02:22:58:4c:0a:01:99: 15:25:ce:56:e3:5a:1e:31:e5:ce:1d:e1:59:14:3d: 3c:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:10:E4:B5:BC:8E:73:AE:D3:1E:DD:7C:27:AC:60:C8:E1:2A:B2:69 X509v3 Authority Key Identifier: keyid:A7:E4:13:4D:9B:11:DE:AB:75:B1:17:91:D5:5E:39:D1:74:4E:0B:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DDD3F/C1A47FD895AF11E6B7854371C4F9AE02/p-QTTZsR3qt1sReR1V450XROC_E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-QTTZsR3qt1sReR1V450XROC_E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDD3F/C1A47FD895AF11E6B7854371C4F9AE02/p-QTTZsR3qt1sReR1V450XROC_E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:f7:54:57:36:d2:d0:69:c7:c3:7d:28:0e:05:1c:44:19:a7: b2:62:bc:5c:2c:6a:d6:00:2a:4e:29:b5:ec:5d:f8:88:89:e1: ae:bd:89:90:6d:81:2f:dd:64:d0:e9:71:bd:1d:02:d2:0a:d4: 28:df:2c:58:e9:a1:c0:33:ce:0f:5c:d0:e6:bd:de:33:38:ac: f7:49:78:2b:36:ac:7b:a7:db:a5:c8:bd:cd:01:54:a6:26:b9: 88:a8:49:bd:12:29:83:2f:a3:37:8d:f8:7e:be:39:48:49:29: 42:16:42:df:76:38:73:8a:6d:c3:3f:d5:27:fb:07:b6:41:06: 9f:e2:9a:3a:2c:cd:1f:eb:d3:d9:d9:5a:78:4e:a0:c0:be:d4: 86:d7:9c:4a:79:20:66:40:a3:66:a3:13:5d:1e:aa:12:c5:6f: 04:4d:b9:e6:bf:e5:6d:30:00:44:79:52:0b:7f:47:c4:c5:f9: df:3f:00:d6:e1:07:09:4c:42:cb:f1:ad:43:30:c5:4d:e8:d4: 22:b6:c1:f2:d9:58:33:9f:54:60:ab:11:d4:c6:76:3a:1e:c2: 82:66:86:cf:7a:04:f4:67:3a:53:5b:13:9f:5f:72:c6:b7:d8: 51:ae:69:fa:09:e9:b3:36:59:19:8a:78:c3:dc:6d:a8:c1:1a: ba:f6:ff:b7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHb8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REREM0YxMTAvBgNVBAUTKEE3RTQxMzREOUIxMURFQUI3NUIxMTc5MUQ1NUUzOUQx NzQ0RTBCRjEwHhcNMjUwNTA4MTYxMDQ3WhcNMjUwNTE1MTYxMDQ3WjAYMRYwFAYD VQQDEw02ODFjZDc4Ny0zZmNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp0llGrh6oKeb40/OLQM1oTuyjPtsWy0f6k9L7ieV3Z5NvSVv0h+FqFXF2K1G Wswsts8votsXCgidN9xQjQNN/JNMFgZzQJ4fkPuMywEy1/SeeBshGukk3VOyce8w xfPGqC0ZhDkzHnYP+kCfCNM4Wayg6dFV/RJOghCzP/vQtZESpOW2I02J5Vl0/+kW vdTNZFhqitz3mZH9FTLNcPhXvBmX+l+kZPVmm1QIzzaPx9tm/kKOtEPLU+4cwMgA 8QfSO5fMUNwuc2sHbsXQEXAkrZnOp9MJl/2EyaknGHSFUrlXATNuHGtnsAIiWEwK AZkVJc5W41oeMeXOHeFZFD08/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKsQ5LW8 jnOu0x7dfCesYMjhKrJpMB8GA1UdIwQYMBaAFKfkE02bEd6rdbEXkdVeOdF0Tgvx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEREQzRi9DMUE0N0ZEODk1 QUYxMUU2Qjc4NTQzNzFDNEY5QUUwMi9wLVFUVFpzUjNxdDFzUmVSMVY0NTBYUk9D X0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3AtUVRUWnNSM3F0MXNSZVIxVjQ1MFhST0NfRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE REQzRi9DMUE0N0ZEODk1QUYxMUU2Qjc4NTQzNzFDNEY5QUUwMi9wLVFUVFpzUjNx dDFzUmVSMVY0NTBYUk9DX0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA891RXNtLQacfDfSgOBRxEGaeyYrxcLGrWACpOKbXsXfiIieGuvYmQ bYEv3WTQ6XG9HQLSCtQo3yxY6aHAM84PXNDmvd4zOKz3SXgrNqx7p9ulyL3NAVSm JrmIqEm9EimDL6M3jfh+vjlISSlCFkLfdjhzim3DP9Un+we2QQaf4po6LM0f69PZ 2Vp4TqDAvtSG15xKeSBmQKNmoxNdHqoSxW8ETbnmv+VtMABEeVILf0fExfnfPwDW 4QcJTELL8a1DMMVN6NQitsHy2Vgzn1RgqxHUxnY6HsKCZobPegT0ZzpTWxOfX3LG t9hRrmn6CemzNlkZinjD3G2owRq69v+3 -----END CERTIFICATE-----Generated at Fri May 9 23:44:39 2025 by rpki-client