$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3B2E/0F55C696D67D11ED86D33750C4F9AE02/QSPpAOai7I_ptdcDt5KA7yFAfIE.mft File: QSPpAOai7I_ptdcDt5KA7yFAfIE.mft (raw, json) Hash identifier: xACC+hOKP90462/LykHKcXVUhEWCRgcZgJvff230trs= Subject key identifier: 69:45:35:71:58:7F:BC:E4:0D:82:9B:CD:B0:0C:DA:3B:05:34:AB:1D Authority key identifier: 41:23:E9:00:E6:A2:EC:8F:E9:B5:D7:03:B7:92:80:EF:21:40:7C:81 Certificate issuer: /CN=A91F3B2E/serialNumber=4123E900E6A2EC8FE9B5D703B79280EF21407C81 Certificate serial: 01B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSPpAOai7I_ptdcDt5KA7yFAfIE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3B2E/0F55C696D67D11ED86D33750C4F9AE02/QSPpAOai7I_ptdcDt5KA7yFAfIE.mft Manifest number: 01A3 Signing time: Sun 11 May 2025 02:32:12 +0000 Manifest this update: Sun 11 May 2025 02:32:12 +0000 Manifest next update: Sun 18 May 2025 02:32:12 +0000 Files and hashes: 1: QSPpAOai7I_ptdcDt5KA7yFAfIE.crl (hash: zufvWvNUnWtTJ1CvZwcQiq6lRPG/pkzAySCjF7rbJEI=) 2: A91AF6A8CE7811EF89FA3944C4F9AE02.roa (hash: xYipp+ZcmQFz/ogxlth1vHSd96eYxW/drt1nbOwk66E=) 3: 2B8EF9AA083911F0A051CE72C4F9AE02.roa (hash: NUJLc0QRL6TCVIjI3d7tAKvp2NahPW0NGI52wQUI1t4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3B2E/0F55C696D67D11ED86D33750C4F9AE02/QSPpAOai7I_ptdcDt5KA7yFAfIE.crl rsync://rpki.apnic.net/member_repository/A91F3B2E/0F55C696D67D11ED86D33750C4F9AE02/QSPpAOai7I_ptdcDt5KA7yFAfIE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSPpAOai7I_ptdcDt5KA7yFAfIE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 02:32:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 439 (0x1b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3B2E, serialNumber=4123E900E6A2EC8FE9B5D703B79280EF21407C81 Validity Not Before: May 11 02:32:12 2025 GMT Not After : May 18 02:32:12 2025 GMT Subject: CN=68200c2c-dd94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:a3:98:79:ac:3b:cf:0a:16:71:51:07:71:9f: f9:69:43:6e:b0:79:f8:11:2b:92:dc:79:43:ae:c3: 69:ee:09:6c:0a:a9:22:0e:bc:b8:3b:89:b8:ef:4b: 9e:26:99:02:ee:45:0d:5d:40:db:9f:f1:f0:a5:8c: 93:02:02:fb:0a:2d:c2:a4:75:0f:26:b4:37:48:41: 49:6b:bd:ae:b7:76:06:a5:aa:8e:26:a1:44:25:9b: 9d:eb:a4:42:59:db:69:78:6b:67:fa:06:af:c0:1c: 4f:fd:2e:31:6e:4b:93:96:d8:07:f2:54:69:bb:a0: 9a:e4:75:89:2b:27:6a:0b:e8:44:d5:52:71:9a:62: 0e:d4:c9:25:f1:51:c4:e7:a5:6b:ce:d0:af:17:f1: 49:0b:a6:ea:51:b8:ba:73:e9:f4:cf:ac:7f:c9:a1: e4:d5:36:42:e0:2d:c2:f4:b7:08:b1:bf:09:dc:e7: 22:08:73:67:f5:d8:19:31:7b:9b:15:0a:91:5e:4d: dc:da:94:4c:97:8a:98:a2:0e:f7:2c:01:61:d1:ee: 71:6a:d1:49:fa:c7:53:fd:1c:da:61:c9:a8:2e:c4: 31:af:79:90:61:1e:d2:f8:0a:27:62:e0:45:57:cc: 1f:bf:e4:50:ba:17:17:fc:ad:2c:2a:e3:07:a4:6f: 31:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:45:35:71:58:7F:BC:E4:0D:82:9B:CD:B0:0C:DA:3B:05:34:AB:1D X509v3 Authority Key Identifier: keyid:41:23:E9:00:E6:A2:EC:8F:E9:B5:D7:03:B7:92:80:EF:21:40:7C:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3B2E/0F55C696D67D11ED86D33750C4F9AE02/QSPpAOai7I_ptdcDt5KA7yFAfIE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSPpAOai7I_ptdcDt5KA7yFAfIE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3B2E/0F55C696D67D11ED86D33750C4F9AE02/QSPpAOai7I_ptdcDt5KA7yFAfIE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:6e:63:b5:d5:24:d6:94:d6:2c:59:0b:80:c7:a6:dd:2b:d9: ac:56:73:24:68:6a:40:cf:c6:d6:40:7a:17:5d:78:09:b6:44: 49:94:1b:bf:ef:22:a3:8e:4e:71:0f:25:35:9a:57:45:bd:20: 8b:ed:ca:25:7d:68:27:6d:cc:83:61:57:49:61:6b:bf:d3:a9: b9:99:21:49:92:7f:a0:63:3c:f1:98:99:1d:c3:dc:77:a4:7e: 04:9f:20:24:7b:eb:6a:e9:bc:dc:54:08:0f:78:67:3b:f1:81: 3a:24:bc:be:c5:27:1b:75:74:c1:55:c8:a4:ce:93:f1:ea:e2: 0a:a7:88:47:62:e6:bc:e9:d7:54:7b:b2:82:b6:b5:e9:25:75: b0:bc:48:4f:d7:5a:ee:40:ab:bd:ea:eb:ff:96:8b:ea:60:6d: a6:a7:5a:30:bb:39:0b:2a:11:4f:9c:d8:6c:bf:73:88:91:d0: 04:5c:49:23:48:92:7f:41:54:e1:ec:53:2c:32:56:09:d5:27: 00:b8:3d:06:e4:57:0e:33:cc:89:6b:13:50:4e:b6:f5:c2:63: 3e:46:13:e6:aa:aa:f8:6f:b8:c8:6e:7a:75:ff:e4:c1:67:ff: ff:84:15:9f:01:32:2d:58:71:98:51:d2:ef:a5:00:c2:da:f2: f6:f9:69:39 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjNCMkUxMTAvBgNVBAUTKDQxMjNFOTAwRTZBMkVDOEZFOUI1RDcwM0I3OTI4MEVG MjE0MDdDODEwHhcNMjUwNTExMDIzMjEyWhcNMjUwNTE4MDIzMjEyWjAYMRYwFAYD VQQDEw02ODIwMGMyYy1kZDk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7KOYeaw7zwoWcVEHcZ/5aUNusHn4ESuS3HlDrsNp7glsCqkiDry4O4m470ue JpkC7kUNXUDbn/HwpYyTAgL7Ci3CpHUPJrQ3SEFJa72ut3YGpaqOJqFEJZud66RC WdtpeGtn+gavwBxP/S4xbkuTltgH8lRpu6Ca5HWJKydqC+hE1VJxmmIO1Mkl8VHE 56VrztCvF/FJC6bqUbi6c+n0z6x/yaHk1TZC4C3C9LcIsb8J3OciCHNn9dgZMXub FQqRXk3c2pRMl4qYog73LAFh0e5xatFJ+sdT/RzaYcmoLsQxr3mQYR7S+AonYuBF V8wfv+RQuhcX/K0sKuMHpG8xWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGlFNXFY f7zkDYKbzbAM2jsFNKsdMB8GA1UdIwQYMBaAFEEj6QDmouyP6bXXA7eSgO8hQHyB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGM0IyRS8wRjU1QzY5NkQ2 N0QxMUVEODZEMzM3NTBDNEY5QUUwMi9RU1BwQU9haTdJX3B0ZGNEdDVLQTd5RkFm SUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FTUHBBT2FpN0lfcHRkY0R0NUtBN3lGQWZJRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG M0IyRS8wRjU1QzY5NkQ2N0QxMUVEODZEMzM3NTBDNEY5QUUwMi9RU1BwQU9haTdJ X3B0ZGNEdDVLQTd5RkFmSUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJbmO11STWlNYsWQuAx6bdK9msVnMkaGpAz8bWQHoXXXgJtkRJlBu/ 7yKjjk5xDyU1mldFvSCL7colfWgnbcyDYVdJYWu/06m5mSFJkn+gYzzxmJkdw9x3 pH4EnyAke+tq6bzcVAgPeGc78YE6JLy+xScbdXTBVcikzpPx6uIKp4hHYua86ddU e7KCtrXpJXWwvEhP11ruQKu96uv/lovqYG2mp1owuzkLKhFPnNhsv3OIkdAEXEkj SJJ/QVTh7FMsMlYJ1ScAuD0G5FcOM8yJaxNQTrb1wmM+RhPmqqr4b7jIbnp1/+TB Z///hBWfATItWHGYUdLvpQDC2vL2+Wk5 -----END CERTIFICATE-----Generated at Sun May 11 18:54:01 2025 by rpki-client