$ rpki-client -vvf rpki.apnic.net/member_repository/A91E711B/505C9738F5DB11EC9D06777BC4F9AE02/Qi87B4JkeC6YeHPYanROKGHypQM.mft File: Qi87B4JkeC6YeHPYanROKGHypQM.mft (raw, json) Hash identifier: LTB3Y4VpgcBCRM1WJPvqaIdrBMZuk69Ljd+CwrkugVs= Subject key identifier: 90:B7:EA:D3:F1:05:03:1C:AB:25:1F:50:64:A9:03:59:CB:9A:D5:89 Authority key identifier: 42:2F:3B:07:82:64:78:2E:98:78:73:D8:6A:74:4E:28:61:F2:A5:03 Certificate issuer: /CN=A91E711B/serialNumber=422F3B078264782E987873D86A744E2861F2A503 Certificate serial: 02B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qi87B4JkeC6YeHPYanROKGHypQM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E711B/505C9738F5DB11EC9D06777BC4F9AE02/Qi87B4JkeC6YeHPYanROKGHypQM.mft Manifest number: 02AD Signing time: Sun 11 May 2025 01:01:07 +0000 Manifest this update: Sun 11 May 2025 01:01:06 +0000 Manifest next update: Sun 18 May 2025 01:01:06 +0000 Files and hashes: 1: Qi87B4JkeC6YeHPYanROKGHypQM.crl (hash: abhstiy64bEnLLNE08Jd3nwgMJwJTFMHGLzHrUq1dh8=) 2: 819F3DD6F5E111EC9754EB85C4F9AE02.roa (hash: hbDMnvq+3uPhy+l00wQh92gtO222M2b23uJyUw6S38s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E711B/505C9738F5DB11EC9D06777BC4F9AE02/Qi87B4JkeC6YeHPYanROKGHypQM.crl rsync://rpki.apnic.net/member_repository/A91E711B/505C9738F5DB11EC9D06777BC4F9AE02/Qi87B4JkeC6YeHPYanROKGHypQM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qi87B4JkeC6YeHPYanROKGHypQM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 01:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 690 (0x2b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E711B, serialNumber=422F3B078264782E987873D86A744E2861F2A503 Validity Not Before: May 11 01:01:06 2025 GMT Not After : May 18 01:01:06 2025 GMT Subject: CN=681ff6d2-7aac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ad:eb:f1:fa:fe:d9:9c:45:b7:2f:a5:ba:24: 32:ae:cc:32:3e:e8:28:6e:78:46:74:e0:ca:3c:47: 1b:4f:05:9d:9f:c1:9b:5c:73:6d:68:5c:1f:c1:87: cb:48:91:41:df:99:08:ed:a0:ca:80:c8:a0:0e:a7: 5b:17:63:b7:04:89:a7:b4:e9:c1:54:60:d1:7f:22: df:87:11:11:50:38:86:a1:96:53:58:c7:fc:f6:73: 79:a2:4b:ee:a3:5b:7b:38:7b:53:df:2b:b8:70:c2: 4c:12:a8:28:e1:37:95:54:54:4e:68:d3:c7:58:6e: 7e:25:ca:9b:f4:97:34:79:c4:f8:4a:c6:6d:87:bd: 1e:f3:c3:17:dd:0f:21:59:6c:8d:01:3f:3e:54:c8: ff:4e:fa:bd:33:8d:25:af:ab:93:ca:38:0e:91:c2: 65:f1:c9:38:9c:83:c8:3d:d1:ec:ec:16:43:fc:44: 6e:7c:62:c1:67:16:9a:8e:0c:88:32:f9:d9:ab:97: 7e:59:62:b4:4a:b0:fc:77:70:e3:92:2b:8a:c8:f4: da:f6:a9:ef:c9:04:ba:6d:95:af:13:22:06:24:11: 25:bd:3d:29:39:c1:fb:9b:00:fb:bf:9b:8e:38:5b: 2c:36:6d:ec:9f:b5:33:58:e2:02:43:11:38:15:14: be:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:B7:EA:D3:F1:05:03:1C:AB:25:1F:50:64:A9:03:59:CB:9A:D5:89 X509v3 Authority Key Identifier: keyid:42:2F:3B:07:82:64:78:2E:98:78:73:D8:6A:74:4E:28:61:F2:A5:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E711B/505C9738F5DB11EC9D06777BC4F9AE02/Qi87B4JkeC6YeHPYanROKGHypQM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qi87B4JkeC6YeHPYanROKGHypQM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E711B/505C9738F5DB11EC9D06777BC4F9AE02/Qi87B4JkeC6YeHPYanROKGHypQM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:ec:21:05:c9:05:20:b8:5d:9e:ed:e4:96:97:58:ab:40:49: b0:7d:2c:dc:85:c0:1d:23:10:7a:c3:5a:4f:19:57:b1:3e:63: 7f:ee:05:98:05:82:31:32:92:a8:9e:90:6e:4b:c5:51:0f:9c: 83:bc:c3:2e:c4:61:d9:f6:ab:d5:c1:ed:22:19:79:d4:3c:a0: 46:1b:94:db:c3:03:4e:20:23:67:dd:b3:95:7d:22:de:5e:f1: 2b:a3:1e:93:b5:5f:4d:ae:c9:b5:f3:ca:bf:06:9c:92:50:9e: d6:b7:4b:26:ed:be:d9:45:71:a5:a9:11:1f:ef:cd:ea:12:35: e7:50:8e:77:81:ed:1e:31:b7:98:a3:ae:90:cf:27:49:bc:1d: 07:b1:94:bc:b1:57:47:63:6c:9b:bd:ff:34:54:22:21:f9:b7: d8:5d:0e:53:c8:f2:7e:c2:24:c0:c1:7a:db:23:b8:d1:ee:f7: b6:b5:60:ee:7d:31:e1:da:b2:60:1e:a1:05:5b:1f:ee:81:84: 79:ac:a3:8f:0e:a4:ad:dc:47:e0:5e:9e:f1:2c:de:39:38:e8: 6d:8c:81:af:cb:ce:7f:c6:72:04:72:67:3d:74:fe:ba:1c:00: ed:49:75:0e:09:a8:06:a1:f8:1d:e1:ad:b5:85:6d:37:31:03: 7d:44:31:39 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICArIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTcxMUIxMTAvBgNVBAUTKDQyMkYzQjA3ODI2NDc4MkU5ODc4NzNEODZBNzQ0RTI4 NjFGMkE1MDMwHhcNMjUwNTExMDEwMTA2WhcNMjUwNTE4MDEwMTA2WjAYMRYwFAYD VQQDEw02ODFmZjZkMi03YWFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxq3r8fr+2ZxFty+luiQyrswyPugobnhGdODKPEcbTwWdn8GbXHNtaFwfwYfL SJFB35kI7aDKgMigDqdbF2O3BImntOnBVGDRfyLfhxERUDiGoZZTWMf89nN5okvu o1t7OHtT3yu4cMJMEqgo4TeVVFROaNPHWG5+Jcqb9Jc0ecT4SsZth70e88MX3Q8h WWyNAT8+VMj/Tvq9M40lr6uTyjgOkcJl8ck4nIPIPdHs7BZD/ERufGLBZxaajgyI MvnZq5d+WWK0SrD8d3DjkiuKyPTa9qnvyQS6bZWvEyIGJBElvT0pOcH7mwD7v5uO OFssNm3sn7UzWOICQxE4FRS+PQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJC36tPx BQMcqyUfUGSpA1nLmtWJMB8GA1UdIwQYMBaAFEIvOweCZHgumHhz2Gp0Tihh8qUD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzExQi81MDVDOTczOEY1 REIxMUVDOUQwNjc3N0JDNEY5QUUwMi9RaTg3QjRKa2VDNlllSFBZYW5ST0tHSHlw UU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FpODdCNEprZUM2WWVIUFlhblJPS0dIeXBRTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzExQi81MDVDOTczOEY1REIxMUVDOUQwNjc3N0JDNEY5QUUwMi9RaTg3QjRKa2VD NlllSFBZYW5ST0tHSHlwUU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCm7CEFyQUguF2e7eSWl1irQEmwfSzchcAdIxB6w1pPGVexPmN/7gWY BYIxMpKonpBuS8VRD5yDvMMuxGHZ9qvVwe0iGXnUPKBGG5TbwwNOICNn3bOVfSLe XvErox6TtV9Nrsm188q/BpySUJ7Wt0sm7b7ZRXGlqREf783qEjXnUI53ge0eMbeY o66QzydJvB0HsZS8sVdHY2ybvf80VCIh+bfYXQ5TyPJ+wiTAwXrbI7jR7ve2tWDu fTHh2rJgHqEFWx/ugYR5rKOPDqSt3EfgXp7xLN45OOhtjIGvy85/xnIEcmc9dP66 HADtSXUOCagGofgd4a21hW03MQN9RDE5 -----END CERTIFICATE-----Generated at Mon May 12 04:11:02 2025 by rpki-client