$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA582/974FCAA0A11911EC8C4FFA83C4F9AE02/qkjQtX4IXNlA26F5HapYc8wZx_4.mft File: qkjQtX4IXNlA26F5HapYc8wZx_4.mft (raw, json) Hash identifier: stHPyWvPaRMCEbmsAtqLmxwp0AG6kpQLbzKBNYSz/d0= Subject key identifier: D1:A0:4D:B2:DA:9C:F0:31:82:2E:67:B2:A6:F2:8C:E0:6E:16:69:FE Authority key identifier: AA:48:D0:B5:7E:08:5C:D9:40:DB:A1:79:1D:AA:58:73:CC:19:C7:FE Certificate issuer: /CN=A91EA582/serialNumber=AA48D0B57E085CD940DBA1791DAA5873CC19C7FE Certificate serial: 038A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkjQtX4IXNlA26F5HapYc8wZx_4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA582/974FCAA0A11911EC8C4FFA83C4F9AE02/qkjQtX4IXNlA26F5HapYc8wZx_4.mft Manifest number: 0384 Signing time: Tue 13 May 2025 00:41:01 +0000 Manifest this update: Tue 13 May 2025 00:41:01 +0000 Manifest next update: Tue 20 May 2025 00:41:01 +0000 Files and hashes: 1: qkjQtX4IXNlA26F5HapYc8wZx_4.crl (hash: 7g/gsHiMwllPk4QgbFsG+nPHOMk5Eb/U3ocJjpTBKQs=) 2: 9924B750A1AF11EC9A73D814C4F9AE02.roa (hash: H07H0KC74DRAPdC4SUe3j+pKIkb6uyeJtaN+ueDEin0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA582/974FCAA0A11911EC8C4FFA83C4F9AE02/qkjQtX4IXNlA26F5HapYc8wZx_4.crl rsync://rpki.apnic.net/member_repository/A91EA582/974FCAA0A11911EC8C4FFA83C4F9AE02/qkjQtX4IXNlA26F5HapYc8wZx_4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkjQtX4IXNlA26F5HapYc8wZx_4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 00:41:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 906 (0x38a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA582, serialNumber=AA48D0B57E085CD940DBA1791DAA5873CC19C7FE Validity Not Before: May 13 00:41:01 2025 GMT Not After : May 20 00:41:01 2025 GMT Subject: CN=6822951d-a862 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:d0:2e:e6:13:37:0e:6a:1b:d0:cb:eb:81:27: 71:90:ad:f6:d5:1f:3a:aa:a0:c6:6c:83:a4:c9:b8: 85:65:65:49:d4:c2:fb:3f:2e:b5:97:6c:b1:4c:b2: c7:55:4c:3a:1b:0b:d7:dd:b1:b9:32:11:17:81:5e: c4:d2:00:39:b8:1b:b3:30:df:21:f2:d8:ab:e0:14: 0c:53:28:9b:89:83:61:b4:5d:bd:3c:02:e4:af:0e: 29:5d:fc:6f:bc:bd:cc:31:96:a0:78:b7:56:47:83: 38:1b:ff:3e:20:84:19:fa:0b:18:c3:e2:7a:1b:73: e1:72:f1:e5:31:28:a5:c4:18:47:01:eb:65:d9:36: 05:db:07:91:d7:d0:d0:ba:31:83:60:55:d0:db:d0: 4d:9d:12:67:a6:16:f9:ab:39:af:a5:6e:5e:a9:ad: 58:bd:4f:5a:bf:bb:18:9c:9a:cd:ab:92:40:b5:31: 81:ab:a3:96:85:d4:5d:12:66:d3:54:9f:a5:06:e7: b9:5e:05:28:8e:c1:3b:2f:47:cc:50:86:7e:b5:b0: e4:85:b3:0d:72:42:23:2e:c8:34:6a:66:38:47:55: 50:ea:f6:a3:27:02:0c:77:f4:a5:bd:29:dd:64:a8: ab:f7:62:21:8f:23:66:d2:1b:9c:2f:5d:ac:4d:2d: f6:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:A0:4D:B2:DA:9C:F0:31:82:2E:67:B2:A6:F2:8C:E0:6E:16:69:FE X509v3 Authority Key Identifier: keyid:AA:48:D0:B5:7E:08:5C:D9:40:DB:A1:79:1D:AA:58:73:CC:19:C7:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA582/974FCAA0A11911EC8C4FFA83C4F9AE02/qkjQtX4IXNlA26F5HapYc8wZx_4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkjQtX4IXNlA26F5HapYc8wZx_4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA582/974FCAA0A11911EC8C4FFA83C4F9AE02/qkjQtX4IXNlA26F5HapYc8wZx_4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:a2:0b:dd:87:e1:66:9d:5c:7b:0c:28:dd:b6:7a:42:bf:ac: 5c:cd:f0:e9:53:c6:ea:74:57:f5:bf:4d:77:63:50:ce:a3:84: 7f:c7:70:42:6d:2f:ba:3a:f9:1e:6c:65:62:eb:2e:95:03:a5: 73:3c:3c:0c:40:3d:47:1b:af:78:f4:b0:ad:d2:74:96:ff:8f: c2:5e:36:c3:4f:0b:43:52:65:ec:2c:9d:fd:84:6e:ed:2c:60: 9b:a6:43:4c:a4:6f:c7:b0:79:db:27:6e:07:5d:05:c1:c9:da: de:e4:29:36:4c:e7:2c:28:06:95:ca:34:ea:41:b4:65:04:6e: 42:1d:69:11:e2:9a:30:7f:fa:1e:0d:3a:77:b1:20:4e:18:f8: 19:4e:6a:e8:35:58:af:d4:8e:69:c0:9e:2d:f9:63:2b:0b:9f: e7:67:05:3b:ea:68:2b:83:09:49:e6:00:b2:74:79:63:74:9f: 6c:84:a5:41:a5:53:65:92:50:d9:4f:ac:e8:dd:23:e3:b4:cf: 85:de:d4:1b:44:6e:6d:1f:fb:9f:12:5a:6d:fe:85:5c:a9:83: f4:0c:a1:d5:e8:57:12:0d:4c:2f:83:ce:02:c2:25:e8:2b:56: 09:bb:06:7e:c2:0f:b1:80:4a:00:bf:ab:10:d9:cd:be:f9:de: a2:5c:3a:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA4owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE1ODIxMTAvBgNVBAUTKEFBNDhEMEI1N0UwODVDRDk0MERCQTE3OTFEQUE1ODcz Q0MxOUM3RkUwHhcNMjUwNTEzMDA0MTAxWhcNMjUwNTIwMDA0MTAxWjAYMRYwFAYD VQQDEw02ODIyOTUxZC1hODYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwtAu5hM3Dmob0MvrgSdxkK321R86qqDGbIOkybiFZWVJ1ML7Py61l2yxTLLH VUw6GwvX3bG5MhEXgV7E0gA5uBuzMN8h8tir4BQMUyibiYNhtF29PALkrw4pXfxv vL3MMZageLdWR4M4G/8+IIQZ+gsYw+J6G3PhcvHlMSilxBhHAetl2TYF2weR19DQ ujGDYFXQ29BNnRJnphb5qzmvpW5eqa1YvU9av7sYnJrNq5JAtTGBq6OWhdRdEmbT VJ+lBue5XgUojsE7L0fMUIZ+tbDkhbMNckIjLsg0amY4R1VQ6vajJwIMd/SlvSnd ZKir92IhjyNm0hucL12sTS32bwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNGgTbLa nPAxgi5nsqbyjOBuFmn+MB8GA1UdIwQYMBaAFKpI0LV+CFzZQNuheR2qWHPMGcf+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTU4Mi85NzRGQ0FBMEEx MTkxMUVDOEM0RkZBODNDNEY5QUUwMi9xa2pRdFg0SVhObEEyNkY1SGFwWWM4d1p4 XzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FralF0WDRJWE5sQTI2RjVIYXBZYzh3WnhfNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTU4Mi85NzRGQ0FBMEExMTkxMUVDOEM0RkZBODNDNEY5QUUwMi9xa2pRdFg0SVhO bEEyNkY1SGFwWWM4d1p4XzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0ogvdh+FmnVx7DCjdtnpCv6xczfDpU8bqdFf1v013Y1DOo4R/x3BC bS+6OvkebGVi6y6VA6VzPDwMQD1HG6949LCt0nSW/4/CXjbDTwtDUmXsLJ39hG7t LGCbpkNMpG/HsHnbJ24HXQXBydre5Ck2TOcsKAaVyjTqQbRlBG5CHWkR4powf/oe DTp3sSBOGPgZTmroNViv1I5pwJ4t+WMrC5/nZwU76mgrgwlJ5gCydHljdJ9shKVB pVNlklDZT6zo3SPjtM+F3tQbRG5tH/ufElpt/oVcqYP0DKHV6FcSDUwvg84CwiXo K1YJuwZ+wg+xgEoAv6sQ2c2++d6iXDoA -----END CERTIFICATE-----Generated at Wed May 14 05:26:25 2025 by rpki-client