$ rpki-client -vvf rpki.apnic.net/member_repository/A91ECD98/7802048A66A411EA8FCB2B6FC4F9AE02/QcZcAPCmsH08D2sSkFZPv4OC2nM.mft File: QcZcAPCmsH08D2sSkFZPv4OC2nM.mft (raw, json) Hash identifier: ENLpJhZ3Doo/plnnnVaXslxHyUNJX7XU0IeUdLOyl5U= Subject key identifier: DB:62:2C:00:DA:76:6A:80:91:E2:28:56:47:17:A8:D0:D8:99:D3:11 Authority key identifier: 41:C6:5C:00:F0:A6:B0:7D:3C:0F:6B:12:90:56:4F:BF:83:82:DA:73 Certificate issuer: /CN=A91ECD98/serialNumber=41C65C00F0A6B07D3C0F6B1290564FBF8382DA73 Certificate serial: 0A4C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QcZcAPCmsH08D2sSkFZPv4OC2nM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ECD98/7802048A66A411EA8FCB2B6FC4F9AE02/QcZcAPCmsH08D2sSkFZPv4OC2nM.mft Manifest number: 0A44 Signing time: Sun 04 May 2025 19:31:08 +0000 Manifest this update: Sun 04 May 2025 19:31:08 +0000 Manifest next update: Sun 11 May 2025 19:31:08 +0000 Files and hashes: 1: QcZcAPCmsH08D2sSkFZPv4OC2nM.crl (hash: fs1Ll1BAkjh6R9hGcgohYYyzMCur4ChyGEYPH9pWO6U=) 2: F760C48ACE0111EB980FBD53C4F9AE02.roa (hash: lEjGikQ+ii4jtTGbAoJ/KSsQ3VS5/CajiRstqwCSiwQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ECD98/7802048A66A411EA8FCB2B6FC4F9AE02/QcZcAPCmsH08D2sSkFZPv4OC2nM.crl rsync://rpki.apnic.net/member_repository/A91ECD98/7802048A66A411EA8FCB2B6FC4F9AE02/QcZcAPCmsH08D2sSkFZPv4OC2nM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QcZcAPCmsH08D2sSkFZPv4OC2nM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 19:31:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2636 (0xa4c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ECD98, serialNumber=41C65C00F0A6B07D3C0F6B1290564FBF8382DA73 Validity Not Before: May 4 19:31:08 2025 GMT Not After : May 11 19:31:08 2025 GMT Subject: CN=6817c07c-6876 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ed:42:5f:25:6f:15:06:4e:be:30:28:27:8a: 92:7d:0a:02:7e:b4:d2:c6:b3:22:2c:5a:1c:4a:21: 65:0b:82:15:42:ae:95:77:2f:94:af:60:32:fb:cc: b9:de:0b:1a:38:02:a0:0f:4e:7d:f6:0d:9a:55:c3: f8:15:ac:5e:b1:3e:70:8e:e5:54:fb:f0:84:11:9d: c5:5e:8c:23:fc:95:a1:3d:2a:9e:82:09:66:f3:dc: 58:25:1e:e2:e2:e9:91:b7:31:37:2d:a7:09:dc:2d: 79:f4:88:65:60:fd:37:94:e4:77:5c:a8:99:4e:69: 39:04:8f:23:fd:bf:69:8f:6c:c6:f9:23:52:4a:cb: ab:3c:b2:4a:20:78:63:db:8b:c8:01:8e:ce:b9:d6: 0d:c8:31:93:1a:e6:b8:fb:f8:9b:51:48:6c:11:1c: 67:d2:f7:3e:53:fe:97:67:af:5e:42:b8:11:79:09: 3e:3b:d2:81:d6:c3:22:d0:6a:cb:d6:bd:5c:d7:5c: 37:36:5e:98:fd:2c:24:6a:e6:bd:ac:9c:2a:80:81: 3a:ba:2a:ba:66:70:61:03:1e:2e:44:46:ef:dc:79: 10:31:53:c8:34:1f:f8:8f:99:f6:2a:6e:c8:4d:bc: 60:a5:73:85:4a:94:21:9d:d5:60:76:5c:55:9e:3a: 57:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:62:2C:00:DA:76:6A:80:91:E2:28:56:47:17:A8:D0:D8:99:D3:11 X509v3 Authority Key Identifier: keyid:41:C6:5C:00:F0:A6:B0:7D:3C:0F:6B:12:90:56:4F:BF:83:82:DA:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ECD98/7802048A66A411EA8FCB2B6FC4F9AE02/QcZcAPCmsH08D2sSkFZPv4OC2nM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QcZcAPCmsH08D2sSkFZPv4OC2nM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ECD98/7802048A66A411EA8FCB2B6FC4F9AE02/QcZcAPCmsH08D2sSkFZPv4OC2nM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:15:a7:89:c9:62:95:f8:92:c0:6c:cb:68:96:02:b2:3e:bb: d7:99:1c:de:78:dc:fd:9d:1e:f9:3f:0a:52:43:f2:62:33:37: cd:b6:42:96:5c:a2:eb:4c:da:d9:a8:a5:0f:55:d5:97:4d:2c: 8d:22:d7:f5:34:34:99:c6:03:01:52:45:aa:f1:4a:d0:43:b3: 22:7d:9a:72:1a:f0:8c:b2:25:46:3f:0c:41:27:07:dd:28:09: d4:9a:d9:fc:c4:6e:7e:b5:30:af:f2:c3:15:ed:87:ef:f0:9c: 8a:64:92:18:4a:78:d0:1b:ba:a7:9a:5f:dc:9a:95:56:90:19: f9:5b:e6:c2:cf:96:b0:f6:9d:a6:ec:95:d8:91:9c:ae:c4:2d: 6b:08:d4:ee:ce:2b:c6:cf:3c:48:2d:66:9c:b7:fb:e2:33:e3: be:e5:26:93:2d:0e:27:fe:14:20:15:79:7b:58:53:da:35:1d: b5:bd:47:1a:28:64:35:67:26:5e:5f:3f:29:15:58:46:d7:34: e6:f1:e0:b6:82:e4:58:99:14:19:df:9c:67:4c:4e:e2:4f:5b: ac:20:cd:63:c5:54:55:14:b6:c0:6e:e1:30:14:b6:79:1d:ac: 00:31:fa:b1:c5:68:0f:06:af:13:0f:5f:6c:46:67:e7:d4:61: af:78:df:c4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCkwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUNEOTgxMTAvBgNVBAUTKDQxQzY1QzAwRjBBNkIwN0QzQzBGNkIxMjkwNTY0RkJG ODM4MkRBNzMwHhcNMjUwNTA0MTkzMTA4WhcNMjUwNTExMTkzMTA4WjAYMRYwFAYD VQQDEw02ODE3YzA3Yy02ODc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAse1CXyVvFQZOvjAoJ4qSfQoCfrTSxrMiLFocSiFlC4IVQq6Vdy+Ur2Ay+8y5 3gsaOAKgD0599g2aVcP4FaxesT5wjuVU+/CEEZ3FXowj/JWhPSqegglm89xYJR7i 4umRtzE3LacJ3C159IhlYP03lOR3XKiZTmk5BI8j/b9pj2zG+SNSSsurPLJKIHhj 24vIAY7OudYNyDGTGua4+/ibUUhsERxn0vc+U/6XZ69eQrgReQk+O9KB1sMi0GrL 1r1c11w3Nl6Y/Swkaua9rJwqgIE6uiq6ZnBhAx4uREbv3HkQMVPINB/4j5n2Km7I TbxgpXOFSpQhndVgdlxVnjpXkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNtiLADa dmqAkeIoVkcXqNDYmdMRMB8GA1UdIwQYMBaAFEHGXADwprB9PA9rEpBWT7+Dgtpz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQ0Q5OC83ODAyMDQ4QTY2 QTQxMUVBOEZDQjJCNkZDNEY5QUUwMi9RY1pjQVBDbXNIMDhEMnNTa0ZaUHY0T0My bk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FjWmNBUENtc0gwOEQyc1NrRlpQdjRPQzJuTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF Q0Q5OC83ODAyMDQ4QTY2QTQxMUVBOEZDQjJCNkZDNEY5QUUwMi9RY1pjQVBDbXNI MDhEMnNTa0ZaUHY0T0Mybk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPFaeJyWKV+JLAbMtolgKyPrvXmRzeeNz9nR75PwpSQ/JiMzfNtkKW XKLrTNrZqKUPVdWXTSyNItf1NDSZxgMBUkWq8UrQQ7MifZpyGvCMsiVGPwxBJwfd KAnUmtn8xG5+tTCv8sMV7Yfv8JyKZJIYSnjQG7qnml/cmpVWkBn5W+bCz5aw9p2m 7JXYkZyuxC1rCNTuzivGzzxILWact/viM+O+5SaTLQ4n/hQgFXl7WFPaNR21vUca KGQ1ZyZeXz8pFVhG1zTm8eC2guRYmRQZ35xnTE7iT1usIM1jxVRVFLbAbuEwFLZ5 HawAMfqxxWgPBq8TD19sRmfn1GGveN/E -----END CERTIFICATE-----Generated at Mon May 5 13:24:22 2025 by rpki-client