$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.mft File: qriBuCFHwwNrgPxnWTTcLkbOD38.mft (raw, json) Hash identifier: kSO2Zp2AnGHvUBT5a87Z1sHvJvZDgneV9h9qNdkj0Lk= Subject key identifier: 39:D3:FC:8F:5D:70:F8:F0:F4:81:7B:29:10:7D:16:57:98:29:6D:A6 Authority key identifier: AA:B8:81:B8:21:47:C3:03:6B:80:FC:67:59:34:DC:2E:46:CE:0F:7F Certificate issuer: /CN=A91F4EDE/serialNumber=AAB881B82147C3036B80FC675934DC2E46CE0F7F Certificate serial: 05D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qriBuCFHwwNrgPxnWTTcLkbOD38.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.mft Manifest number: 05CA Signing time: Wed 14 May 2025 23:08:18 +0000 Manifest this update: Wed 14 May 2025 23:08:17 +0000 Manifest next update: Wed 21 May 2025 23:08:17 +0000 Files and hashes: 1: qriBuCFHwwNrgPxnWTTcLkbOD38.crl (hash: gFsAUtlaoziKfCOX81PCPFuEuyCbATxwFxZT/FYWym0=) 2: 8C4BB9AED9DB11EF9AE05220C4F9AE02.roa (hash: zsrAxxFfRp403bl7GSNrqmEpDz70fh0k4+NlvivXGV8=) 3: 5A9BFC3ABE7C11EB8BC25C1CC4F9AE02.roa (hash: +PXzRKDa1pBP+673hTlbAtrA0Uh8pso6MOGI9Du2wJM=) 4: 7E859EFEE60411EF89467057C4F9AE02.roa (hash: G47KdDVGbUCyf898ZT3HzgYoD9VrL0ChsA84sDifaK4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.crl rsync://rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qriBuCFHwwNrgPxnWTTcLkbOD38.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 23:08:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1491 (0x5d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4EDE, serialNumber=AAB881B82147C3036B80FC675934DC2E46CE0F7F Validity Not Before: May 14 23:08:17 2025 GMT Not After : May 21 23:08:17 2025 GMT Subject: CN=68252261-0bb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:69:f4:32:00:7a:d4:6f:d9:fa:89:4a:26:3d: 1f:98:9c:d1:9d:4e:08:ec:a0:6d:2b:7c:33:e9:f7: 85:af:24:f0:43:f6:76:00:a0:d2:0d:bb:5e:67:64: 0d:06:7b:0f:00:20:cd:8d:8a:e1:c0:02:db:30:f6: 1f:d9:37:c5:49:b0:2a:fb:e9:83:0b:fa:9e:71:9b: 50:79:94:b3:c2:35:be:fb:b5:fc:3e:68:76:ad:24: ee:4b:35:51:fd:13:6c:3f:16:d7:e6:5f:1e:57:75: 14:f3:37:4c:1f:13:f8:d2:71:af:2d:bd:d7:cc:ed: f5:bf:e9:4c:c8:77:f7:66:97:9d:52:bc:25:5f:82: 6e:89:47:52:05:44:d8:b2:74:83:78:52:74:b8:f8: 3b:7e:24:07:e6:fe:8d:2f:54:4f:cb:c5:91:41:86: 0f:47:bb:ac:b5:31:3f:b9:f0:f2:c9:66:e3:3f:17: 0d:0f:27:cf:45:0e:ff:4e:f2:18:8a:5c:a6:4d:db: 6c:cb:1f:89:2f:f8:a4:0f:46:e9:e1:03:29:22:ab: 2a:1f:f2:b8:41:49:5d:1e:8d:2d:2d:0a:f9:de:57: e7:79:c9:22:ea:3e:99:f8:2c:0b:90:20:3b:b2:b0: a5:ce:39:79:04:34:a7:93:a0:9d:b4:36:82:56:c9: c7:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:D3:FC:8F:5D:70:F8:F0:F4:81:7B:29:10:7D:16:57:98:29:6D:A6 X509v3 Authority Key Identifier: keyid:AA:B8:81:B8:21:47:C3:03:6B:80:FC:67:59:34:DC:2E:46:CE:0F:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qriBuCFHwwNrgPxnWTTcLkbOD38.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:74:a9:3d:ed:fc:b9:e8:25:b2:ad:95:36:8b:1e:f1:5d:d8: 47:63:87:c5:51:36:c8:54:93:ba:ed:b8:cd:f7:7f:98:ae:5a: 45:42:e9:3f:ac:14:7d:58:cd:17:be:c7:34:7d:c7:91:50:88: a8:d8:07:a8:6f:8f:c5:28:bc:59:fe:b9:bb:25:00:1d:b9:18: 74:ae:cc:63:47:45:f7:76:c2:07:af:e4:23:f7:b9:85:d1:4b: d0:b8:f6:3d:61:7d:2e:71:e8:d5:30:ff:23:17:af:8a:ff:2e: 73:50:92:a8:19:9f:10:4e:c5:72:67:0e:d0:ab:60:ce:98:20: d5:53:fe:a4:17:79:96:47:8f:9c:69:9a:41:1d:6d:b1:99:93: 28:73:50:61:01:cb:15:49:39:10:f6:63:6c:77:44:d6:37:d8: 86:4c:e1:06:f6:9b:e6:f2:5b:ef:20:74:ed:dc:65:e8:67:52: 1d:46:6c:96:2f:5c:4b:a9:53:f8:e5:49:e7:25:59:80:46:90: 31:e7:80:4a:92:97:a0:bc:8a:4e:a8:e9:d7:db:4d:b9:79:82: 04:ab:eb:b9:b2:75:39:2f:91:26:d1:26:a2:b7:e1:4b:cb:e3: 12:75:44:55:92:85:e9:ef:0a:34:7a:ed:dd:f5:f7:d3:0f:6b: 88:06:de:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBdMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjRFREUxMTAvBgNVBAUTKEFBQjg4MUI4MjE0N0MzMDM2QjgwRkM2NzU5MzREQzJF NDZDRTBGN0YwHhcNMjUwNTE0MjMwODE3WhcNMjUwNTIxMjMwODE3WjAYMRYwFAYD VQQDEw02ODI1MjI2MS0wYmIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq2n0MgB61G/Z+olKJj0fmJzRnU4I7KBtK3wz6feFryTwQ/Z2AKDSDbteZ2QN BnsPACDNjYrhwALbMPYf2TfFSbAq++mDC/qecZtQeZSzwjW++7X8Pmh2rSTuSzVR /RNsPxbX5l8eV3UU8zdMHxP40nGvLb3XzO31v+lMyHf3ZpedUrwlX4JuiUdSBUTY snSDeFJ0uPg7fiQH5v6NL1RPy8WRQYYPR7ustTE/ufDyyWbjPxcNDyfPRQ7/TvIY ilymTdtsyx+JL/ikD0bp4QMpIqsqH/K4QUldHo0tLQr53lfnecki6j6Z+CwLkCA7 srClzjl5BDSnk6CdtDaCVsnHJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDnT/I9d cPjw9IF7KRB9FleYKW2mMB8GA1UdIwQYMBaAFKq4gbghR8MDa4D8Z1k03C5Gzg9/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNEVERS8yQ0IwMzI1OEJF NzkxMUVCOTUxMThCMTlDNEY5QUUwMi9xcmlCdUNGSHd3TnJnUHhuV1RUY0xrYk9E MzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FyaUJ1Q0ZId3dOcmdQeG5XVFRjTGtiT0QzOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NEVERS8yQ0IwMzI1OEJFNzkxMUVCOTUxMThCMTlDNEY5QUUwMi9xcmlCdUNGSHd3 TnJnUHhuV1RUY0xrYk9EMzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWdKk97fy56CWyrZU2ix7xXdhHY4fFUTbIVJO67bjN93+YrlpFQuk/ rBR9WM0Xvsc0fceRUIio2Aeob4/FKLxZ/rm7JQAduRh0rsxjR0X3dsIHr+Qj97mF 0UvQuPY9YX0ucejVMP8jF6+K/y5zUJKoGZ8QTsVyZw7Qq2DOmCDVU/6kF3mWR4+c aZpBHW2xmZMoc1BhAcsVSTkQ9mNsd0TWN9iGTOEG9pvm8lvvIHTt3GXoZ1IdRmyW L1xLqVP45UnnJVmARpAx54BKkpegvIpOqOnX2025eYIEq+u5snU5L5Em0Sait+FL y+MSdURVkoXp7wo0eu3d9ffTD2uIBt5P -----END CERTIFICATE-----Generated at Thu May 15 21:01:52 2025 by rpki-client