$ rpki-client -vvf rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/qeq8JGURbtEdbIza4gESN88fWd8.mft File: qeq8JGURbtEdbIza4gESN88fWd8.mft (raw, json) Hash identifier: rNBDCe8bQGRHKUsIJz+ksMyCSYcgiQSMThZJLXR1aUg= Subject key identifier: 1E:2A:ED:22:1D:42:FE:58:E6:A1:E1:CC:F5:8B:3D:05:A9:66:90:A8 Authority key identifier: A9:EA:BC:24:65:11:6E:D1:1D:6C:8C:DA:E2:01:12:37:CF:1F:59:DF Certificate issuer: /CN=A91871C2/serialNumber=A9EABC2465116ED11D6C8CDAE2011237CF1F59DF Certificate serial: 0736 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qeq8JGURbtEdbIza4gESN88fWd8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/qeq8JGURbtEdbIza4gESN88fWd8.mft Manifest number: 0703 Signing time: Fri 28 Mar 2025 22:25:51 +0000 Manifest this update: Fri 28 Mar 2025 22:25:50 +0000 Manifest next update: Fri 04 Apr 2025 22:25:50 +0000 Files and hashes: 1: qeq8JGURbtEdbIza4gESN88fWd8.crl (hash: oX/n0fL+cQKrNg4ws5F4dbCrS2GGuP/IuzCha9ugM6Q=) 2: 3BCBA04AE97211ECB2067F31C4F9AE02.roa (hash: S20AgwmMD32xuDu5IGHvW4IWHrtUSQ1t37c8fQjNokk=) 3: B43753D005AC11ECB86F694EC4F9AE02.roa (hash: 4k+rKheNnbTveN1MujuQeZF7WX147LGgGeCmhBGihc4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/qeq8JGURbtEdbIza4gESN88fWd8.crl rsync://rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/qeq8JGURbtEdbIza4gESN88fWd8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qeq8JGURbtEdbIza4gESN88fWd8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 22:25:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1846 (0x736) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91871C2 Validity Not Before: Mar 28 22:25:50 2025 GMT Not After : Apr 4 22:25:50 2025 GMT Subject: CN=67e721ef-c04d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:8f:37:99:df:06:7e:07:5e:ab:97:ea:bd:7d: 3e:c8:86:7e:a0:43:09:a2:16:b7:8b:41:b4:c1:c2: e6:28:2d:38:78:a1:d8:11:d3:f5:6d:53:61:50:0a: 02:eb:32:71:29:77:68:b7:90:97:d4:f9:4c:24:58: 13:7d:16:5e:4a:fa:f8:4a:bd:b7:cf:a3:2b:64:79: 0e:9f:b9:16:17:b9:51:e3:06:c5:90:1c:6d:2a:02: 73:b3:89:56:d5:43:59:a5:2b:d3:76:4b:44:e6:b8: e8:ed:18:f4:28:9a:3d:7e:f9:22:b5:2e:d1:af:2f: 15:94:52:a2:31:42:3b:30:36:5c:73:c1:16:c8:73: 0b:f9:4e:e9:87:64:47:ed:47:33:bb:63:9b:c8:f4: 1a:88:1c:f0:66:6b:61:3d:0e:ca:ce:af:47:42:76: 71:b3:43:08:2c:3a:7d:4f:b7:80:66:28:2e:34:08: 04:00:68:14:76:6c:a0:e5:db:1a:b3:a5:8b:19:b5: f0:c3:88:86:5d:ff:12:9b:e8:7e:55:f8:a2:39:cb: cf:70:6f:39:1f:23:77:69:79:af:87:21:ed:5b:36: 25:01:08:d2:fb:11:5d:81:9a:21:40:3f:34:94:72: 1d:4b:92:a6:88:72:3c:6e:98:15:7e:4a:3c:c5:a4: 54:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:2A:ED:22:1D:42:FE:58:E6:A1:E1:CC:F5:8B:3D:05:A9:66:90:A8 X509v3 Authority Key Identifier: keyid:A9:EA:BC:24:65:11:6E:D1:1D:6C:8C:DA:E2:01:12:37:CF:1F:59:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/qeq8JGURbtEdbIza4gESN88fWd8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qeq8JGURbtEdbIza4gESN88fWd8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/qeq8JGURbtEdbIza4gESN88fWd8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:44:2b:02:b0:f8:9b:e1:7a:39:e4:0e:a1:83:23:86:56:5c: 25:db:d5:3d:56:61:63:1c:20:2a:98:10:5e:0c:8d:0c:67:fc: d0:f9:e3:f6:37:9f:84:b0:dd:2f:47:73:65:50:62:01:24:fd: 1a:b0:8d:65:9c:36:01:06:20:86:f8:1a:40:c9:85:cb:35:ae: 11:61:e3:c0:36:64:de:af:20:e9:9b:0f:57:dc:bf:c2:62:cb: 56:ff:58:d1:c0:4c:b1:b8:5d:ea:72:2a:73:81:4b:9e:34:a1: 84:5d:cc:97:92:fb:64:71:3a:9d:cf:04:be:50:f2:57:6a:27: 9d:4d:e7:30:27:6d:f2:dd:73:a1:d8:4d:bb:d4:61:2e:b7:6a: 60:be:0f:2c:29:3b:ad:6a:9b:f6:75:fd:f9:3a:a7:77:81:3f: 02:9d:5c:77:d1:b0:e3:40:2e:3a:7b:e7:25:ce:16:13:ae:42: ee:d4:21:ea:f2:d5:58:19:02:04:37:33:25:01:51:5e:aa:bb: c5:8a:8d:90:8e:36:8c:30:55:c9:0d:16:d5:7f:f7:92:31:36: 18:18:12:33:79:93:86:db:2d:9d:8d:06:c2:fd:98:67:f0:e1: 3e:36:7c:06:d0:5f:47:cb:54:9c:87:5f:4a:d7:58:21:38:49: 4a:30:1e:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBzYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODcxQzIxMTAvBgNVBAUTKEE5RUFCQzI0NjUxMTZFRDExRDZDOENEQUUyMDExMjM3 Q0YxRjU5REYwHhcNMjUwMzI4MjIyNTUwWhcNMjUwNDA0MjIyNTUwWjAYMRYwFAYD VQQDEw02N2U3MjFlZi1jMDRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAk483md8Gfgdeq5fqvX0+yIZ+oEMJoha3i0G0wcLmKC04eKHYEdP1bVNhUAoC 6zJxKXdot5CX1PlMJFgTfRZeSvr4Sr23z6MrZHkOn7kWF7lR4wbFkBxtKgJzs4lW 1UNZpSvTdktE5rjo7Rj0KJo9fvkitS7Rry8VlFKiMUI7MDZcc8EWyHML+U7ph2RH 7Uczu2ObyPQaiBzwZmthPQ7Kzq9HQnZxs0MILDp9T7eAZiguNAgEAGgUdmyg5dsa s6WLGbXww4iGXf8Sm+h+VfiiOcvPcG85HyN3aXmvhyHtWzYlAQjS+xFdgZohQD80 lHIdS5KmiHI8bpgVfko8xaRUewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB4q7SId Qv5Y5qHhzPWLPQWpZpCoMB8GA1UdIwQYMBaAFKnqvCRlEW7RHWyM2uIBEjfPH1nf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzFDMi9ERTYxNjY2ODU1 QTkxMUVCOTlBRkRBNURDNEY5QUUwMi9xZXE4SkdVUmJ0RWRiSXphNGdFU044OGZX ZDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FlcThKR1VSYnRFZGJJemE0Z0VTTjg4ZldkOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzFDMi9ERTYxNjY2ODU1QTkxMUVCOTlBRkRBNURDNEY5QUUwMi9xZXE4SkdVUmJ0 RWRiSXphNGdFU044OGZXZDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALRCsCsPib4Xo55A6hgyOGVlwl29U9VmFjHCAqmBBeDI0MZ/zQ+eP2 N5+EsN0vR3NlUGIBJP0asI1lnDYBBiCG+BpAyYXLNa4RYePANmTeryDpmw9X3L/C YstW/1jRwEyxuF3qcipzgUueNKGEXcyXkvtkcTqdzwS+UPJXaiedTecwJ23y3XOh 2E271GEut2pgvg8sKTutapv2df35Oqd3gT8CnVx30bDjQC46e+clzhYTrkLu1CHq 8tVYGQIENzMlAVFeqrvFio2QjjaMMFXJDRbVf/eSMTYYGBIzeZOG2y2djQbC/Zhn 8OE+NnwG0F9Hy1Sch19K11ghOElKMB58 -----END CERTIFICATE-----Generated at Fri Apr 4 18:24:19 2025 by rpki-client