$ rpki-client -vvf rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.mft File: QAHwzRnduZQstaOVZ-w2k74lxqA.mft (raw, json) Hash identifier: 4uIG85rhH8ounzTdJZXSiclo+TGICDp3eygWBx7yRT4= Subject key identifier: FF:F0:67:C9:D7:5E:8A:1D:50:56:91:72:9C:6C:75:5F:F0:EC:98:2A Authority key identifier: 40:01:F0:CD:19:DD:B9:94:2C:B5:A3:95:67:EC:36:93:BE:25:C6:A0 Certificate issuer: /CN=A91F96DB/serialNumber=4001F0CD19DDB9942CB5A39567EC3693BE25C6A0 Certificate serial: 03BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QAHwzRnduZQstaOVZ-w2k74lxqA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.mft Manifest number: 03B4 Signing time: Tue 13 May 2025 00:29:16 +0000 Manifest this update: Tue 13 May 2025 00:29:15 +0000 Manifest next update: Tue 20 May 2025 00:29:15 +0000 Files and hashes: 1: QAHwzRnduZQstaOVZ-w2k74lxqA.crl (hash: IrvhmfFfrMJdCUn78QnLk3p5zPzEJhi74SYTIapjM84=) 2: F91B41A40C5811EFB9F63337C4F9AE02.roa (hash: qOMt8gV+qKOqfr/cX53ygmFqRFWIxLXDn07p9oOee54=) 3: 0ECA16060C5911EFA8601E42C4F9AE02.roa (hash: vlEni3UTKg6N69bA/qO6bko6oc0V7Y603/5krA0YD5s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.crl rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QAHwzRnduZQstaOVZ-w2k74lxqA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 00:29:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 956 (0x3bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F96DB, serialNumber=4001F0CD19DDB9942CB5A39567EC3693BE25C6A0 Validity Not Before: May 13 00:29:15 2025 GMT Not After : May 20 00:29:15 2025 GMT Subject: CN=6822925c-d505 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:7b:11:cf:45:bd:11:5f:82:a2:68:27:b0:df: a8:3f:87:b2:49:b1:bd:3f:34:c4:c4:58:a2:a1:de: b4:89:be:54:37:b1:a8:23:a7:c4:44:0a:96:78:30: bc:0b:b5:65:85:09:34:72:6d:40:d1:be:44:a4:b1: 7d:b7:eb:16:f4:35:31:33:81:7d:b1:11:05:62:d2: d3:48:3d:fc:93:e3:ae:d8:02:c6:62:b0:54:31:e9: 5d:49:3b:cc:4d:6f:3d:f5:b0:c5:c3:6b:7f:0a:5d: 98:b3:a6:61:cf:e4:34:4a:ff:dd:7b:40:f2:b9:98: 5d:0b:a0:ff:b9:31:a0:a4:12:ea:80:aa:3c:61:23: 34:dc:ca:3e:0a:cb:aa:df:f1:14:38:d1:02:de:f1: 8f:42:4d:b1:89:7a:b6:93:a0:d8:fb:b1:f4:e2:b2: 6d:15:67:d5:6b:22:40:78:f1:6f:e9:d8:10:99:66: c8:09:70:fc:d9:8c:be:f9:c3:bd:9f:4c:54:61:b7: a2:c1:17:7e:2b:af:35:6e:34:ca:3a:22:21:e0:62: 51:b0:4d:2a:5e:a0:81:41:ad:3f:8b:c1:f7:77:ff: c4:51:eb:22:b6:2e:ee:3e:da:a4:15:6b:ac:32:11: e8:73:07:7d:88:aa:3c:91:d9:00:7a:61:cc:3e:1a: 46:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:F0:67:C9:D7:5E:8A:1D:50:56:91:72:9C:6C:75:5F:F0:EC:98:2A X509v3 Authority Key Identifier: keyid:40:01:F0:CD:19:DD:B9:94:2C:B5:A3:95:67:EC:36:93:BE:25:C6:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QAHwzRnduZQstaOVZ-w2k74lxqA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:0c:3e:61:12:35:be:2a:66:a4:23:8f:3b:a3:c2:22:01:4e: 85:ab:5b:e1:02:f4:77:c9:c8:68:0e:ef:08:00:82:d1:cc:10: 53:f8:0a:1e:55:34:29:c6:48:48:7c:1f:58:e4:72:fc:d0:ee: d4:39:d8:42:8f:b5:5c:76:75:18:49:54:75:dd:68:bd:b9:b4: ac:d9:11:e1:4c:2e:91:cc:75:a0:b8:fe:1e:a2:f3:92:d6:09: 8f:6b:b8:40:9f:23:3f:ee:ca:35:f9:b2:b2:72:b5:dc:bc:34: 5a:1b:37:59:94:90:1f:98:f9:8b:5f:38:35:66:d3:4d:0e:35: 97:1e:7b:80:be:3d:79:c9:0b:c1:ee:0b:82:5d:6a:4b:21:69: a3:29:da:93:fc:0e:09:b6:dc:b5:30:23:eb:71:1e:ae:a7:75: 44:5a:f5:0d:99:3f:50:13:09:fd:2e:4c:9f:d2:c9:18:ee:cd: 52:45:01:2f:77:5c:29:3b:da:60:f7:0c:cc:69:bd:ba:32:ae: dd:d9:d4:ac:56:35:53:fa:fb:62:67:b1:b5:17:d6:b8:be:ba: 6c:e0:56:45:f0:26:bb:29:90:98:92:1e:5b:41:1f:02:11:56: af:f0:a9:d9:cf:23:73:8d:61:e4:03:43:c8:9e:b5:3c:47:82: 55:d9:f6:ec -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA7wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjk2REIxMTAvBgNVBAUTKDQwMDFGMENEMTlEREI5OTQyQ0I1QTM5NTY3RUMzNjkz QkUyNUM2QTAwHhcNMjUwNTEzMDAyOTE1WhcNMjUwNTIwMDAyOTE1WjAYMRYwFAYD VQQDEw02ODIyOTI1Yy1kNTA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv3sRz0W9EV+ComgnsN+oP4eySbG9PzTExFiiod60ib5UN7GoI6fERAqWeDC8 C7VlhQk0cm1A0b5EpLF9t+sW9DUxM4F9sREFYtLTSD38k+Ou2ALGYrBUMeldSTvM TW899bDFw2t/Cl2Ys6Zhz+Q0Sv/de0DyuZhdC6D/uTGgpBLqgKo8YSM03Mo+Csuq 3/EUONEC3vGPQk2xiXq2k6DY+7H04rJtFWfVayJAePFv6dgQmWbICXD82Yy++cO9 n0xUYbeiwRd+K681bjTKOiIh4GJRsE0qXqCBQa0/i8H3d//EUesiti7uPtqkFWus MhHocwd9iKo8kdkAemHMPhpG6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP/wZ8nX XoodUFaRcpxsdV/w7JgqMB8GA1UdIwQYMBaAFEAB8M0Z3bmULLWjlWfsNpO+Jcag MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOTZEQi9BODY0RDBFQThF M0QxMUVDQTg3QUJGMTZDNEY5QUUwMi9RQUh3elJuZHVaUXN0YU9WWi13Mms3NGx4 cUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FBSHd6Um5kdVpRc3RhT1ZaLXcyazc0bHhxQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OTZEQi9BODY0RDBFQThFM0QxMUVDQTg3QUJGMTZDNEY5QUUwMi9RQUh3elJuZHVa UXN0YU9WWi13Mms3NGx4cUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYDD5hEjW+KmakI487o8IiAU6Fq1vhAvR3ychoDu8IAILRzBBT+Aoe VTQpxkhIfB9Y5HL80O7UOdhCj7VcdnUYSVR13Wi9ubSs2RHhTC6RzHWguP4eovOS 1gmPa7hAnyM/7so1+bKycrXcvDRaGzdZlJAfmPmLXzg1ZtNNDjWXHnuAvj15yQvB 7guCXWpLIWmjKdqT/A4Jtty1MCPrcR6up3VEWvUNmT9QEwn9Lkyf0skY7s1SRQEv d1wpO9pg9wzMab26Mq7d2dSsVjVT+vtiZ7G1F9a4vrps4FZF8Ca7KZCYkh5bQR8C EVav8KnZzyNzjWHkA0PInrU8R4JV2fbs -----END CERTIFICATE-----Generated at Wed May 14 15:57:20 2025 by rpki-client