$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDD4D/6E94AAFED27D11ED8E9A2580C4F9AE02/qXeTIZMxLej1k4T5CX9D3WvDF-E.mft File: qXeTIZMxLej1k4T5CX9D3WvDF-E.mft (raw, json) Hash identifier: u8KRxggY6FKeIMwE8s+q2t4NOhDGI8WQwBev1T9N4pY= Subject key identifier: 1A:FF:DD:8E:E1:29:FB:9B:3F:76:CF:8B:35:D5:91:6A:57:1D:78:A5 Authority key identifier: A9:77:93:21:93:31:2D:E8:F5:93:84:F9:09:7F:43:DD:6B:C3:17:E1 Certificate issuer: /CN=A91FDD4D/serialNumber=A977932193312DE8F59384F9097F43DD6BC317E1 Certificate serial: 019A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qXeTIZMxLej1k4T5CX9D3WvDF-E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDD4D/6E94AAFED27D11ED8E9A2580C4F9AE02/qXeTIZMxLej1k4T5CX9D3WvDF-E.mft Manifest number: 0197 Signing time: Mon 12 May 2025 15:53:49 +0000 Manifest this update: Mon 12 May 2025 15:53:49 +0000 Manifest next update: Mon 19 May 2025 15:53:49 +0000 Files and hashes: 1: qXeTIZMxLej1k4T5CX9D3WvDF-E.crl (hash: vrbUm8URfKpz+GDGnI5NLRhXgfDVhGNPfxZcjUvS4yE=) 2: 10F77754D28311EDB1655152C4F9AE02.roa (hash: F/LDXxakDpGw+3XLXdPKCVfoeyAVKMDr7JqjszcCvB0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDD4D/6E94AAFED27D11ED8E9A2580C4F9AE02/qXeTIZMxLej1k4T5CX9D3WvDF-E.crl rsync://rpki.apnic.net/member_repository/A91FDD4D/6E94AAFED27D11ED8E9A2580C4F9AE02/qXeTIZMxLej1k4T5CX9D3WvDF-E.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qXeTIZMxLej1k4T5CX9D3WvDF-E.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 15:53:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 410 (0x19a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDD4D, serialNumber=A977932193312DE8F59384F9097F43DD6BC317E1 Validity Not Before: May 12 15:53:49 2025 GMT Not After : May 19 15:53:49 2025 GMT Subject: CN=6822198d-3dff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:0c:be:f0:b8:21:a7:fa:f9:8b:bc:ca:2e:7c: a4:19:00:be:11:4c:aa:25:69:5b:cb:a2:3c:a8:a9: 41:4d:26:2b:a2:be:55:21:60:6e:24:2d:37:d6:0d: 3a:05:0b:92:ce:4a:f1:ed:33:13:ea:2a:bc:6b:08: 7c:61:19:93:4b:db:9b:6c:76:24:25:25:34:23:f1: 1b:1c:26:57:ed:3e:df:07:1d:27:b1:6a:6b:c8:44: 1f:e2:c7:a7:11:eb:7b:84:7f:e1:79:00:c5:6a:24: 1b:28:28:b2:ed:cc:25:d9:32:3f:40:7f:8a:71:f1: e4:92:97:5a:f9:8a:de:aa:5a:00:00:5a:2c:d8:3b: 6f:9a:61:06:a1:9a:fb:ca:09:15:e6:f5:1b:14:9f: 6c:e4:db:70:c8:3f:70:2d:f5:28:e0:dc:1a:97:58: 35:75:90:e2:7b:42:82:f7:6d:d6:4b:ee:16:9a:d9: 6a:fc:c7:16:45:43:74:47:c1:c0:92:47:5b:9e:a4: 18:94:ba:ba:4e:54:aa:9e:e3:85:c4:90:ea:8d:80: 18:8b:23:af:b0:c9:63:d4:96:7a:27:3d:7b:73:69: 5d:fb:58:cf:b3:0f:85:a5:c5:b4:91:b5:60:14:b3: d3:20:9c:d9:39:00:ff:70:cd:22:e5:17:a8:d9:66: 0b:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:FF:DD:8E:E1:29:FB:9B:3F:76:CF:8B:35:D5:91:6A:57:1D:78:A5 X509v3 Authority Key Identifier: keyid:A9:77:93:21:93:31:2D:E8:F5:93:84:F9:09:7F:43:DD:6B:C3:17:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDD4D/6E94AAFED27D11ED8E9A2580C4F9AE02/qXeTIZMxLej1k4T5CX9D3WvDF-E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qXeTIZMxLej1k4T5CX9D3WvDF-E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDD4D/6E94AAFED27D11ED8E9A2580C4F9AE02/qXeTIZMxLej1k4T5CX9D3WvDF-E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:ab:23:4c:34:4a:05:35:d0:20:8d:fe:4b:49:7a:e9:e0:7c: 4e:74:fe:e0:17:df:f3:dc:0a:8e:23:ef:14:48:04:31:ee:a1: 2d:f8:97:2a:d3:3a:aa:6e:5a:77:10:0b:1f:0c:a2:83:9e:54: 39:30:aa:6c:b6:e5:20:f6:71:5d:9e:d2:df:82:41:23:41:91: e5:e6:fc:01:25:61:bc:34:a1:59:52:eb:eb:23:c2:ca:eb:66: fe:3a:66:1d:c5:04:92:6b:48:84:1f:9e:ba:e2:04:8f:ed:fd: 7d:31:2a:a2:cf:ee:c3:66:71:23:39:03:70:95:53:76:ba:72: 94:ef:2e:44:f3:47:7c:d0:f0:4b:23:be:a2:49:aa:bc:38:68: 1b:89:fd:0e:75:2c:de:4a:f2:95:23:10:14:b3:21:79:8a:b5: ed:a2:28:16:e3:3e:e3:be:9a:17:23:45:a7:11:c0:07:84:1d: 53:24:16:78:fc:29:d2:1a:84:6b:7a:aa:25:d8:1a:ee:62:61: 68:74:d5:03:02:47:10:44:9b:c3:2a:cc:fa:49:96:94:91:a5: fc:2d:6c:04:dd:47:24:a4:18:da:aa:3c:2c:e3:c7:0c:b7:f0: ec:44:af:78:b5:76:64:54:d9:83:7d:0c:ea:f6:c5:fe:98:c3: f5:3a:e5:fa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRENEQxMTAvBgNVBAUTKEE5Nzc5MzIxOTMzMTJERThGNTkzODRGOTA5N0Y0M0RE NkJDMzE3RTEwHhcNMjUwNTEyMTU1MzQ5WhcNMjUwNTE5MTU1MzQ5WjAYMRYwFAYD VQQDEw02ODIyMTk4ZC0zZGZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9Qy+8Lghp/r5i7zKLnykGQC+EUyqJWlby6I8qKlBTSYror5VIWBuJC031g06 BQuSzkrx7TMT6iq8awh8YRmTS9ubbHYkJSU0I/EbHCZX7T7fBx0nsWpryEQf4sen Eet7hH/heQDFaiQbKCiy7cwl2TI/QH+KcfHkkpda+YreqloAAFos2DtvmmEGoZr7 ygkV5vUbFJ9s5NtwyD9wLfUo4Nwal1g1dZDie0KC923WS+4Wmtlq/McWRUN0R8HA kkdbnqQYlLq6TlSqnuOFxJDqjYAYiyOvsMlj1JZ6Jz17c2ld+1jPsw+FpcW0kbVg FLPTIJzZOQD/cM0i5Reo2WYLtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBr/3Y7h KfubP3bPizXVkWpXHXilMB8GA1UdIwQYMBaAFKl3kyGTMS3o9ZOE+Ql/Q91rwxfh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREQ0RC82RTk0QUFGRUQy N0QxMUVEOEU5QTI1ODBDNEY5QUUwMi9xWGVUSVpNeExlajFrNFQ1Q1g5RDNXdkRG LUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3FYZVRJWk14TGVqMWs0VDVDWDlEM1d2REYtRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG REQ0RC82RTk0QUFGRUQyN0QxMUVEOEU5QTI1ODBDNEY5QUUwMi9xWGVUSVpNeExl ajFrNFQ1Q1g5RDNXdkRGLUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKqyNMNEoFNdAgjf5LSXrp4HxOdP7gF9/z3AqOI+8USAQx7qEt+Jcq 0zqqblp3EAsfDKKDnlQ5MKpstuUg9nFdntLfgkEjQZHl5vwBJWG8NKFZUuvrI8LK 62b+OmYdxQSSa0iEH5664gSP7f19MSqiz+7DZnEjOQNwlVN2unKU7y5E80d80PBL I76iSaq8OGgbif0OdSzeSvKVIxAUsyF5irXtoigW4z7jvpoXI0WnEcAHhB1TJBZ4 /CnSGoRreqol2BruYmFodNUDAkcQRJvDKsz6SZaUkaX8LWwE3UckpBjaqjws48cM t/DsRK94tXZkVNmDfQzq9sX+mMP1OuX6 -----END CERTIFICATE-----Generated at Wed May 14 10:35:12 2025 by rpki-client