$ rpki-client -vvf rpki.apnic.net/member_repository/A91127A2/D1CD5458B1CE11EB8FF1C067C4F9AE02/qSHPiNjIngus1O4YU4wzsnipWSw.mft File: qSHPiNjIngus1O4YU4wzsnipWSw.mft (raw, json) Hash identifier: g94L36qAkUUyydji+gM2b+jJJZ7JJetqemstV+K73G4= Subject key identifier: 81:28:3E:96:D2:9F:76:08:F1:92:4B:DA:0A:5A:08:30:BB:4B:80:14 Authority key identifier: A9:21:CF:88:D8:C8:9E:0B:AC:D4:EE:18:53:8C:33:B2:78:A9:59:2C Certificate issuer: /CN=A91127A2/serialNumber=A921CF88D8C89E0BACD4EE18538C33B278A9592C Certificate serial: 05DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSHPiNjIngus1O4YU4wzsnipWSw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91127A2/D1CD5458B1CE11EB8FF1C067C4F9AE02/qSHPiNjIngus1O4YU4wzsnipWSw.mft Manifest number: 05D5 Signing time: Fri 18 Apr 2025 23:00:49 +0000 Manifest this update: Fri 18 Apr 2025 23:00:49 +0000 Manifest next update: Fri 25 Apr 2025 23:00:49 +0000 Files and hashes: 1: qSHPiNjIngus1O4YU4wzsnipWSw.crl (hash: m0yjLu6r7EmLLgLkEvtW4WrU6PgRgOJiji/jvCgbo6Q=) 2: 07332486B1D111EBA956F96AC4F9AE02.roa (hash: QK+G6fNVeQvRNDArbOTnNoOHNeXa2RP5xEy26aJHwS0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91127A2/D1CD5458B1CE11EB8FF1C067C4F9AE02/qSHPiNjIngus1O4YU4wzsnipWSw.crl rsync://rpki.apnic.net/member_repository/A91127A2/D1CD5458B1CE11EB8FF1C067C4F9AE02/qSHPiNjIngus1O4YU4wzsnipWSw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSHPiNjIngus1O4YU4wzsnipWSw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Apr 2025 23:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1498 (0x5da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91127A2, serialNumber=A921CF88D8C89E0BACD4EE18538C33B278A9592C Validity Not Before: Apr 18 23:00:49 2025 GMT Not After : Apr 25 23:00:49 2025 GMT Subject: CN=6802d9a1-a4aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:0b:d5:b7:0b:f5:b2:df:25:06:96:d0:fe:05: 7d:92:96:42:f9:17:ab:05:ea:99:d1:6f:c9:89:a1: 17:ef:e8:32:03:1e:73:31:1d:6f:35:3b:76:03:c5: 89:5f:83:76:53:38:ad:19:5a:5e:cc:15:d3:7d:7f: 88:93:07:51:ac:6e:67:0d:a0:40:45:a4:83:3e:1b: 7e:3d:ac:d7:68:b2:92:50:6f:cd:52:8f:6b:c2:f6: 03:33:76:3d:19:3d:8c:85:5e:94:c0:98:a8:9f:74: c2:e4:64:73:8a:7e:14:f8:b6:0d:3c:3e:81:3a:1e: 9a:27:45:ff:88:26:d7:cc:19:2a:f8:9e:c8:42:77: 16:23:40:7d:bb:f1:2e:30:26:4d:11:38:0f:82:45: 95:0b:5f:0f:e1:1f:f5:b9:ad:dc:8d:e8:c7:0c:03: 5e:39:b0:25:79:c8:3b:de:24:87:09:54:1d:e3:39: 77:a4:a2:1d:b8:84:3e:55:2b:16:be:94:a7:c9:f3: d6:79:dd:40:51:cd:39:d4:a7:b5:a0:e7:01:45:2e: 10:78:f7:dd:5d:85:e9:c2:26:96:ac:52:da:94:c1: 12:47:45:1d:ee:31:76:90:92:75:88:23:f4:ce:e4: 0a:de:d8:fb:a1:70:2a:50:b2:88:94:cd:89:2f:10: 35:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:28:3E:96:D2:9F:76:08:F1:92:4B:DA:0A:5A:08:30:BB:4B:80:14 X509v3 Authority Key Identifier: keyid:A9:21:CF:88:D8:C8:9E:0B:AC:D4:EE:18:53:8C:33:B2:78:A9:59:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91127A2/D1CD5458B1CE11EB8FF1C067C4F9AE02/qSHPiNjIngus1O4YU4wzsnipWSw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSHPiNjIngus1O4YU4wzsnipWSw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91127A2/D1CD5458B1CE11EB8FF1C067C4F9AE02/qSHPiNjIngus1O4YU4wzsnipWSw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:95:e8:82:ed:86:92:99:62:bb:a4:43:74:3a:32:1a:a4:d1: f5:c8:34:b2:a7:8c:81:bb:db:48:33:36:4d:73:12:bd:c4:35: 71:13:d5:2a:e8:1b:c1:b5:58:30:e8:a3:79:08:85:14:09:4a: 80:d0:fb:6b:1a:e5:c3:b4:8c:a6:14:6d:60:0a:e6:29:81:39: 55:0e:b8:73:5b:1c:8b:15:e9:a7:b9:05:77:c3:1c:55:0d:13: 6c:2a:50:9f:74:29:f4:16:41:34:70:69:1d:74:f7:d8:6e:b0: 94:a0:7c:f9:71:b7:dd:63:ba:8f:b5:ac:66:af:26:17:27:4f: 81:d4:78:71:d4:f9:c2:c7:1e:95:cb:cc:80:fe:74:2f:dc:56: 83:33:87:6f:ac:29:49:6a:3a:d8:5d:1c:f6:e4:ab:87:26:93: a4:ff:7c:12:01:36:b5:6a:b4:a1:6a:be:46:0c:36:e9:07:1b: ce:3d:d2:ea:fa:69:25:a7:eb:32:60:ed:c1:da:be:d5:63:4e: cd:d7:68:fb:2e:07:da:9f:b7:38:d5:3f:25:50:60:4e:3f:af: 6f:2c:b3:66:3b:83:ac:6f:dc:4c:18:a5:46:6a:da:be:3a:ab: d0:61:90:e6:90:b5:24:f0:2f:e8:25:0f:7d:80:94:78:3b:21: c8:d2:ed:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBdowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI3QTIxMTAvBgNVBAUTKEE5MjFDRjg4RDhDODlFMEJBQ0Q0RUUxODUzOEMzM0Iy NzhBOTU5MkMwHhcNMjUwNDE4MjMwMDQ5WhcNMjUwNDI1MjMwMDQ5WjAYMRYwFAYD VQQDEw02ODAyZDlhMS1hNGFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzQvVtwv1st8lBpbQ/gV9kpZC+RerBeqZ0W/JiaEX7+gyAx5zMR1vNTt2A8WJ X4N2UzitGVpezBXTfX+IkwdRrG5nDaBARaSDPht+PazXaLKSUG/NUo9rwvYDM3Y9 GT2MhV6UwJion3TC5GRzin4U+LYNPD6BOh6aJ0X/iCbXzBkq+J7IQncWI0B9u/Eu MCZNETgPgkWVC18P4R/1ua3cjejHDANeObAlecg73iSHCVQd4zl3pKIduIQ+VSsW vpSnyfPWed1AUc051Ke1oOcBRS4QePfdXYXpwiaWrFLalMESR0Ud7jF2kJJ1iCP0 zuQK3tj7oXAqULKIlM2JLxA1TwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIEoPpbS n3YI8ZJL2gpaCDC7S4AUMB8GA1UdIwQYMBaAFKkhz4jYyJ4LrNTuGFOMM7J4qVks MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjdBMi9EMUNENTQ1OEIx Q0UxMUVCOEZGMUMwNjdDNEY5QUUwMi9xU0hQaU5qSW5ndXMxTzRZVTR3enNuaXBX U3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FTSFBpTmpJbmd1czFPNFlVNHd6c25pcFdTdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjdBMi9EMUNENTQ1OEIxQ0UxMUVCOEZGMUMwNjdDNEY5QUUwMi9xU0hQaU5qSW5n dXMxTzRZVTR3enNuaXBXU3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDleiC7YaSmWK7pEN0OjIapNH1yDSyp4yBu9tIMzZNcxK9xDVxE9Uq 6BvBtVgw6KN5CIUUCUqA0PtrGuXDtIymFG1gCuYpgTlVDrhzWxyLFemnuQV3wxxV DRNsKlCfdCn0FkE0cGkddPfYbrCUoHz5cbfdY7qPtaxmryYXJ0+B1Hhx1PnCxx6V y8yA/nQv3FaDM4dvrClJajrYXRz25KuHJpOk/3wSATa1arShar5GDDbpBxvOPdLq +mklp+syYO3B2r7VY07N12j7Lgfan7c41T8lUGBOP69vLLNmO4Osb9xMGKVGatq+ OqvQYZDmkLUk8C/oJQ99gJR4OyHI0u1F -----END CERTIFICATE-----Generated at Sat Apr 19 06:18:14 2025 by rpki-client