$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4F4C/940765FCF97611EA9534C043C4F9AE02/QeOAoMn6vMEPjqMpY1Lmp4eNNTs.mft File: QeOAoMn6vMEPjqMpY1Lmp4eNNTs.mft (raw, json) Hash identifier: jpXefKr+UiCHSVfrRPaqv1SrNkMLFqAJHPY9XMiC5Po= Subject key identifier: 5B:64:E7:39:19:0F:AC:AD:FC:0F:47:92:E4:59:2D:B4:FC:E8:75:E0 Authority key identifier: 41:E3:80:A0:C9:FA:BC:C1:0F:8E:A3:29:63:52:E6:A7:87:8D:35:3B Certificate issuer: /CN=A91F4F4C/serialNumber=41E380A0C9FABCC10F8EA3296352E6A7878D353B Certificate serial: 07BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QeOAoMn6vMEPjqMpY1Lmp4eNNTs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4F4C/940765FCF97611EA9534C043C4F9AE02/QeOAoMn6vMEPjqMpY1Lmp4eNNTs.mft Manifest number: 07B7 Signing time: Wed 14 May 2025 21:15:03 +0000 Manifest this update: Wed 14 May 2025 21:15:03 +0000 Manifest next update: Wed 21 May 2025 21:15:03 +0000 Files and hashes: 1: QeOAoMn6vMEPjqMpY1Lmp4eNNTs.crl (hash: rZOouakPvuNOzeGsEYom0tHbHmWbiiQypcRaXZyBqWU=) 2: 770BCA98F97A11EAB938DA5DC4F9AE02.roa (hash: fZBIeDUKsdRpTczFyA/tRXZpgobXbgClU9BqXFuQJMY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4F4C/940765FCF97611EA9534C043C4F9AE02/QeOAoMn6vMEPjqMpY1Lmp4eNNTs.crl rsync://rpki.apnic.net/member_repository/A91F4F4C/940765FCF97611EA9534C043C4F9AE02/QeOAoMn6vMEPjqMpY1Lmp4eNNTs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QeOAoMn6vMEPjqMpY1Lmp4eNNTs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 21:15:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1982 (0x7be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4F4C, serialNumber=41E380A0C9FABCC10F8EA3296352E6A7878D353B Validity Not Before: May 14 21:15:03 2025 GMT Not After : May 21 21:15:03 2025 GMT Subject: CN=682507d7-dd97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:39:ce:1c:71:a8:1b:66:5d:00:aa:a4:b1:06: 62:9a:26:7f:db:cb:df:90:7b:0f:a5:bb:4d:59:6a: 85:49:59:3f:df:46:77:cc:fc:51:7d:69:71:f6:e4: 23:dc:3c:45:6c:ec:e0:8f:e1:cc:c1:72:38:d6:c0: 8a:84:e1:1e:4f:9a:42:05:7b:0f:f3:64:78:c7:d5: 3b:40:66:04:cb:f2:43:6c:5b:dc:fc:52:16:cc:2c: 54:51:2e:5b:79:c3:47:81:2a:d4:9d:eb:2f:8b:a8: ca:df:35:1d:42:ea:91:16:dc:e2:a8:3a:4c:c1:ee: 9f:2d:b1:0d:4d:93:14:76:7d:0e:dc:e4:38:39:e8: 40:44:03:e0:70:e1:d7:83:e1:a5:da:b9:bb:29:60: 74:cb:b8:58:87:7c:ab:1e:e0:77:4f:c0:a9:a1:e9: 91:29:5b:a5:a3:9c:a9:30:89:58:cb:a2:eb:c5:0e: 4b:e4:75:01:68:b0:f7:24:3f:9d:7f:e4:93:5a:0b: 3f:46:2c:5d:53:44:0e:10:34:e7:c8:b8:f3:2c:7c: e5:24:dc:29:96:37:86:06:5e:b3:c0:ac:85:16:84: 3e:49:73:b8:cf:61:73:6b:57:e5:0d:b9:58:7d:af: aa:a1:6f:43:84:77:27:ca:f9:cf:72:10:08:c0:bd: aa:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:64:E7:39:19:0F:AC:AD:FC:0F:47:92:E4:59:2D:B4:FC:E8:75:E0 X509v3 Authority Key Identifier: keyid:41:E3:80:A0:C9:FA:BC:C1:0F:8E:A3:29:63:52:E6:A7:87:8D:35:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4F4C/940765FCF97611EA9534C043C4F9AE02/QeOAoMn6vMEPjqMpY1Lmp4eNNTs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QeOAoMn6vMEPjqMpY1Lmp4eNNTs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4F4C/940765FCF97611EA9534C043C4F9AE02/QeOAoMn6vMEPjqMpY1Lmp4eNNTs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:97:8f:f2:01:70:01:aa:b2:d0:2d:ec:a7:8a:fd:81:f7:fe: 4f:0d:e7:40:0e:a8:df:a4:f6:e2:e3:ce:b6:5c:a6:25:62:5a: ec:05:d8:1c:85:45:be:d0:ba:f2:61:48:6d:38:7a:50:eb:b3: 35:20:d6:d9:52:24:b2:2a:fa:6b:c5:3b:fe:83:06:c8:7a:55: 2d:ea:de:96:1b:04:64:81:d4:87:28:e7:72:e3:f4:09:0b:3f: 4b:c5:39:00:b3:e4:62:04:c8:91:3b:05:59:b4:e4:99:eb:59: 8f:17:4e:e1:49:7e:c4:71:18:82:e8:1f:3b:6a:ba:04:12:16: 0e:f8:63:d8:2f:8e:1c:ec:cf:b0:ff:6e:20:97:d4:db:51:11: 2c:9e:c5:59:3e:f8:16:f3:4c:63:c3:fc:f5:1e:ba:3c:ad:67: 64:ea:fb:b8:2e:11:1d:67:e1:32:4d:4e:d9:d3:03:5a:f6:95: 39:42:7f:62:13:06:bc:18:1c:fb:30:05:cb:4b:77:c9:88:ea: 7d:66:b1:06:89:ce:91:ec:f2:ab:be:ff:e6:f9:56:19:ce:c4: 81:26:3d:b0:0a:fa:63:99:4f:19:ed:9c:d5:36:36:a9:94:c3: 7b:e1:c7:fe:c8:93:7b:e9:35:8f:1f:a0:eb:f3:df:10:f2:8b: 11:44:e1:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB74wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjRGNEMxMTAvBgNVBAUTKDQxRTM4MEEwQzlGQUJDQzEwRjhFQTMyOTYzNTJFNkE3 ODc4RDM1M0IwHhcNMjUwNTE0MjExNTAzWhcNMjUwNTIxMjExNTAzWjAYMRYwFAYD VQQDEw02ODI1MDdkNy1kZDk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwjnOHHGoG2ZdAKqksQZimiZ/28vfkHsPpbtNWWqFSVk/30Z3zPxRfWlx9uQj 3DxFbOzgj+HMwXI41sCKhOEeT5pCBXsP82R4x9U7QGYEy/JDbFvc/FIWzCxUUS5b ecNHgSrUnesvi6jK3zUdQuqRFtziqDpMwe6fLbENTZMUdn0O3OQ4OehARAPgcOHX g+Gl2rm7KWB0y7hYh3yrHuB3T8CpoemRKVulo5ypMIlYy6LrxQ5L5HUBaLD3JD+d f+STWgs/RixdU0QOEDTnyLjzLHzlJNwpljeGBl6zwKyFFoQ+SXO4z2Fza1flDblY fa+qoW9DhHcnyvnPchAIwL2qPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFtk5zkZ D6yt/A9HkuRZLbT86HXgMB8GA1UdIwQYMBaAFEHjgKDJ+rzBD46jKWNS5qeHjTU7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNEY0Qy85NDA3NjVGQ0Y5 NzYxMUVBOTUzNEMwNDNDNEY5QUUwMi9RZU9Bb01uNnZNRVBqcU1wWTFMbXA0ZU5O VHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FlT0FvTW42dk1FUGpxTXBZMUxtcDRlTk5Ucy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NEY0Qy85NDA3NjVGQ0Y5NzYxMUVBOTUzNEMwNDNDNEY5QUUwMi9RZU9Bb01uNnZN RVBqcU1wWTFMbXA0ZU5OVHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsl4/yAXABqrLQLeyniv2B9/5PDedADqjfpPbi4862XKYlYlrsBdgc hUW+0LryYUhtOHpQ67M1INbZUiSyKvprxTv+gwbIelUt6t6WGwRkgdSHKOdy4/QJ Cz9LxTkAs+RiBMiROwVZtOSZ61mPF07hSX7EcRiC6B87aroEEhYO+GPYL44c7M+w /24gl9TbUREsnsVZPvgW80xjw/z1Hro8rWdk6vu4LhEdZ+EyTU7Z0wNa9pU5Qn9i Ewa8GBz7MAXLS3fJiOp9ZrEGic6R7PKrvv/m+VYZzsSBJj2wCvpjmU8Z7ZzVNjap lMN74cf+yJN76TWPH6Dr898Q8osRROFb -----END CERTIFICATE-----Generated at Fri May 16 17:57:13 2025 by rpki-client