$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB4AF/CC7B255ADCA911EC94E3E029C4F9AE02/qX6qTW8VW40nxAro4yfZulLDS0I.mft File: qX6qTW8VW40nxAro4yfZulLDS0I.mft (raw, json) Hash identifier: qBP9Upa0rppFMvfY0C/jCVB1w1aZj27V/cRrh7Vf964= Subject key identifier: 06:3E:0A:82:D4:94:C0:39:FF:E3:28:EA:77:4C:E1:89:4D:B2:97:59 Authority key identifier: A9:7E:AA:4D:6F:15:5B:8D:27:C4:0A:E8:E3:27:D9:BA:52:C3:4B:42 Certificate issuer: /CN=A91EB4AF/serialNumber=A97EAA4D6F155B8D27C40AE8E327D9BA52C34B42 Certificate serial: 0304 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qX6qTW8VW40nxAro4yfZulLDS0I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB4AF/CC7B255ADCA911EC94E3E029C4F9AE02/qX6qTW8VW40nxAro4yfZulLDS0I.mft Manifest number: 02F6 Signing time: Mon 05 May 2025 00:54:40 +0000 Manifest this update: Mon 05 May 2025 00:54:40 +0000 Manifest next update: Mon 12 May 2025 00:54:40 +0000 Files and hashes: 1: qX6qTW8VW40nxAro4yfZulLDS0I.crl (hash: 38hAU8/rG6irvchkWvWHkP/IyX40YTj1CcN9srv0WH0=) 2: 595774341B6211F0B9733473C4F9AE02.roa (hash: odVPPwfcVNo8VayXEukIHnnjKu+cZ3Vme/PEEPSIOfg=) 3: DCE70C6EF9B911ED8314C10EC4F9AE02.roa (hash: Tn8STgUoF8I50uE/0Z1qBgI407z6TwGOKBDeoEbq/9M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB4AF/CC7B255ADCA911EC94E3E029C4F9AE02/qX6qTW8VW40nxAro4yfZulLDS0I.crl rsync://rpki.apnic.net/member_repository/A91EB4AF/CC7B255ADCA911EC94E3E029C4F9AE02/qX6qTW8VW40nxAro4yfZulLDS0I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qX6qTW8VW40nxAro4yfZulLDS0I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 00:54:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 772 (0x304) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB4AF, serialNumber=A97EAA4D6F155B8D27C40AE8E327D9BA52C34B42 Validity Not Before: May 5 00:54:40 2025 GMT Not After : May 12 00:54:40 2025 GMT Subject: CN=68180c50-b5a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:6b:20:30:a7:14:12:5e:9d:41:20:72:63:1e: ac:56:e3:3a:c6:ca:68:5a:c5:00:19:e1:a2:e6:a8: 67:47:02:da:07:b4:7e:76:e6:85:1d:cd:29:31:d4: 44:e2:d6:c1:49:1b:26:3a:62:da:06:a9:4c:21:3a: 98:11:61:84:53:28:fa:08:ac:2b:a5:0a:a3:17:e3: da:a4:41:64:37:a9:97:f7:de:a3:0e:ba:38:a7:22: 8d:48:24:ef:bc:84:51:9d:c8:cf:df:a3:54:b7:ff: 8c:01:d9:f0:66:27:dc:c4:d9:e0:e5:c9:68:67:68: ad:f9:5b:fe:d6:35:e0:8c:f7:1c:70:b9:c3:86:a8: 3c:29:65:e6:4f:66:58:22:b3:91:d6:56:11:cf:43: 08:5f:fc:30:b8:34:e3:84:c6:ac:92:c2:03:f7:f4: b4:e2:d3:c8:d9:a0:14:d5:0d:66:c7:af:30:c8:31: b5:28:5b:d0:49:31:d3:06:06:13:81:ab:ba:88:16: aa:2a:a9:de:25:d6:6b:5f:44:55:e8:ad:40:f6:f0: 02:ac:b6:64:e3:cd:ae:4e:81:dc:25:54:53:a9:30: ec:27:36:4c:1a:2b:5e:e0:2a:2c:b1:53:2f:fb:99: a6:cd:1a:11:3a:3e:c1:88:24:78:b1:a9:2e:c5:2c: 4c:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:3E:0A:82:D4:94:C0:39:FF:E3:28:EA:77:4C:E1:89:4D:B2:97:59 X509v3 Authority Key Identifier: keyid:A9:7E:AA:4D:6F:15:5B:8D:27:C4:0A:E8:E3:27:D9:BA:52:C3:4B:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB4AF/CC7B255ADCA911EC94E3E029C4F9AE02/qX6qTW8VW40nxAro4yfZulLDS0I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qX6qTW8VW40nxAro4yfZulLDS0I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB4AF/CC7B255ADCA911EC94E3E029C4F9AE02/qX6qTW8VW40nxAro4yfZulLDS0I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:2c:79:d0:7d:f3:5b:2c:68:99:2c:0f:3f:94:d1:a6:a9:29: da:89:1b:eb:16:59:d1:77:10:84:00:9c:5d:10:81:8d:ff:b0: 6c:99:05:7e:50:93:d0:76:3b:32:4e:55:bd:3b:65:cb:23:95: 8a:9e:76:94:2a:fb:93:10:60:91:e1:e9:e1:11:03:cb:c2:71: ac:10:08:2f:21:17:f3:90:46:f7:66:d8:d1:e9:4b:5b:5c:51: 74:d2:9f:a9:88:d7:aa:64:4a:26:24:ad:34:7d:20:08:fd:66: e8:28:7f:e8:d2:6f:c0:4b:34:af:55:d4:48:e3:5f:5a:e6:5b: d6:98:6a:78:f7:7f:a5:ac:87:af:27:61:e7:6a:2e:a5:2a:94: 83:36:8b:af:49:d3:1f:14:d8:f9:a0:6d:c6:59:4c:0d:b4:81: 3a:9d:b6:cd:8f:d8:69:ad:b6:a0:b1:8d:d2:c9:bb:38:7c:1a: d4:26:ee:25:5e:4b:36:f0:69:ee:e7:4d:e9:45:15:34:e6:4c: 12:8b:78:cb:12:05:6a:39:1e:0c:04:0e:2d:06:d4:02:6f:e3: ea:94:0e:be:29:8f:67:b8:98:c2:1e:0e:4a:48:61:b2:ff:21: 4b:f9:49:b8:c5:42:b1:ec:f7:1d:e2:7b:8c:9b:83:29:b3:9c: 0b:9b:c4:39 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAwQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUI0QUYxMTAvBgNVBAUTKEE5N0VBQTRENkYxNTVCOEQyN0M0MEFFOEUzMjdEOUJB NTJDMzRCNDIwHhcNMjUwNTA1MDA1NDQwWhcNMjUwNTEyMDA1NDQwWjAYMRYwFAYD VQQDEw02ODE4MGM1MC1iNWE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtGsgMKcUEl6dQSByYx6sVuM6xspoWsUAGeGi5qhnRwLaB7R+duaFHc0pMdRE 4tbBSRsmOmLaBqlMITqYEWGEUyj6CKwrpQqjF+PapEFkN6mX996jDro4pyKNSCTv vIRRncjP36NUt/+MAdnwZifcxNng5cloZ2it+Vv+1jXgjPcccLnDhqg8KWXmT2ZY IrOR1lYRz0MIX/wwuDTjhMasksID9/S04tPI2aAU1Q1mx68wyDG1KFvQSTHTBgYT gau6iBaqKqneJdZrX0RV6K1A9vACrLZk482uToHcJVRTqTDsJzZMGite4CossVMv +5mmzRoROj7BiCR4sakuxSxMqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAY+CoLU lMA5/+Mo6ndM4YlNspdZMB8GA1UdIwQYMBaAFKl+qk1vFVuNJ8QK6OMn2bpSw0tC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjRBRi9DQzdCMjU1QURD QTkxMUVDOTRFM0UwMjlDNEY5QUUwMi9xWDZxVFc4Vlc0MG54QXJvNHlmWnVsTERT MEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FYNnFUVzhWVzQwbnhBcm80eWZadWxMRFMwSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QjRBRi9DQzdCMjU1QURDQTkxMUVDOTRFM0UwMjlDNEY5QUUwMi9xWDZxVFc4Vlc0 MG54QXJvNHlmWnVsTERTMEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1LHnQffNbLGiZLA8/lNGmqSnaiRvrFlnRdxCEAJxdEIGN/7BsmQV+ UJPQdjsyTlW9O2XLI5WKnnaUKvuTEGCR4enhEQPLwnGsEAgvIRfzkEb3ZtjR6Utb XFF00p+piNeqZEomJK00fSAI/WboKH/o0m/ASzSvVdRI419a5lvWmGp493+lrIev J2Hnai6lKpSDNouvSdMfFNj5oG3GWUwNtIE6nbbNj9hprbagsY3Sybs4fBrUJu4l Xks28Gnu503pRRU05kwSi3jLEgVqOR4MBA4tBtQCb+PqlA6+KY9nuJjCHg5KSGGy /yFL+Um4xUKx7Pcd4nuMm4Mps5wLm8Q5 -----END CERTIFICATE-----Generated at Tue May 6 06:20:59 2025 by rpki-client