$ rpki-client -vvf rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/qB0NYfe3MN23QsxIrdiKBNRv0CQ.mft File: qB0NYfe3MN23QsxIrdiKBNRv0CQ.mft (raw, json) Hash identifier: GMoNN0zGwYoYp/2sTD6/BAI6Z51hNy6JRJB9lLG6JAs= Subject key identifier: 8C:B0:1A:47:84:AA:85:AF:8F:C0:8D:F6:04:33:F9:84:8B:E1:6F:DD Authority key identifier: A8:1D:0D:61:F7:B7:30:DD:B7:42:CC:48:AD:D8:8A:04:D4:6F:D0:24 Certificate issuer: /CN=A91A192D/serialNumber=A81D0D61F7B730DDB742CC48ADD88A04D46FD024 Certificate serial: 0131 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qB0NYfe3MN23QsxIrdiKBNRv0CQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/qB0NYfe3MN23QsxIrdiKBNRv0CQ.mft Manifest number: 0113 Signing time: Sat 29 Mar 2025 04:44:05 +0000 Manifest this update: Sat 29 Mar 2025 04:44:04 +0000 Manifest next update: Sat 05 Apr 2025 04:44:04 +0000 Files and hashes: 1: qB0NYfe3MN23QsxIrdiKBNRv0CQ.crl (hash: /gBlYwnnuLLaVOTId+Q9XSZh8nQx7QjSpONQcZN61B0=) 2: C352565AC6E011EF87D90241C4F9AE02.roa (hash: mUqqXY0c6pz96Csa4vpgVVN0TcEzh2ALUeu6fy0AUoM=) 3: 4B3A3F3CC6DD11EFA7A63533C4F9AE02.roa (hash: uACmpnSBSy2IF2u/5ZZ5RmpW3FYah3J395Q52mX87Ds=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/qB0NYfe3MN23QsxIrdiKBNRv0CQ.crl rsync://rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/qB0NYfe3MN23QsxIrdiKBNRv0CQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qB0NYfe3MN23QsxIrdiKBNRv0CQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 04:44:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 305 (0x131) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A192D Validity Not Before: Mar 29 04:44:04 2025 GMT Not After : Apr 5 04:44:04 2025 GMT Subject: CN=67e77a95-a363 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:c6:e4:0b:e9:f4:0a:0d:d5:d3:6c:48:38:ea: fe:ae:75:85:0a:40:e2:83:ae:67:15:3a:aa:e9:c9: 88:74:2a:9a:f4:0e:5e:ce:32:88:13:f6:49:52:23: 0d:16:a6:63:6f:96:93:0a:4a:be:a9:4c:17:49:15: 9b:d3:5a:2f:31:a6:b0:75:ee:18:0f:1e:9c:ef:40: 0f:9a:4b:6c:54:bb:0b:32:2f:95:a0:4c:4a:dd:71: 5d:da:00:ef:84:78:4c:04:2d:82:a0:75:dc:ea:e9: 94:2c:39:21:9f:6a:fd:bb:73:17:70:8d:a2:4d:6d: 0f:2b:84:f3:51:28:73:db:e1:75:63:6e:bb:ef:45: d1:19:93:44:10:79:29:fe:b8:08:9d:c4:21:cb:61: 17:64:96:39:f4:a2:7d:67:ba:75:b5:69:52:ec:05: 61:f2:1f:36:d8:cc:10:5a:71:e7:67:1b:ef:95:b0: 4e:87:6c:ab:1b:47:9e:25:3f:19:be:ae:51:a3:2d: 29:49:e4:b3:ee:6b:ee:93:d9:47:c9:94:de:ce:95: a1:e2:b0:ca:55:0a:0a:9e:87:3a:74:2e:c4:5c:64: 09:e3:60:ed:a7:2e:79:21:75:06:b5:02:b5:d2:0e: 44:16:c1:b2:e8:20:b9:fa:6f:1a:6f:82:11:e4:cc: fc:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:B0:1A:47:84:AA:85:AF:8F:C0:8D:F6:04:33:F9:84:8B:E1:6F:DD X509v3 Authority Key Identifier: keyid:A8:1D:0D:61:F7:B7:30:DD:B7:42:CC:48:AD:D8:8A:04:D4:6F:D0:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/qB0NYfe3MN23QsxIrdiKBNRv0CQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qB0NYfe3MN23QsxIrdiKBNRv0CQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/qB0NYfe3MN23QsxIrdiKBNRv0CQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:c7:ed:6e:6a:a5:c4:be:fb:91:a5:92:f4:20:5b:f7:28:c3: aa:8a:d1:c4:c4:1b:b7:fa:51:78:62:a4:ca:1e:a1:0b:4e:07: 4a:9b:6d:9a:28:3b:30:0e:74:e0:94:4d:00:d4:c5:d7:62:56: fe:46:4b:bc:8e:b6:7c:9c:7d:53:b9:a7:15:7f:86:ac:67:78: f0:1f:42:af:a0:59:f0:63:b4:7e:86:74:3b:fa:f5:68:53:31: 23:e5:8d:4a:64:8f:0f:c2:ef:44:77:19:7a:74:ac:38:bc:37: 9c:f5:0a:56:77:6b:5d:56:a2:22:f5:3e:59:3b:7e:1c:22:f8: 28:60:32:5a:b6:3a:52:7b:50:9b:9b:de:7c:08:36:4a:1e:fd: d6:ae:0c:b3:f7:d4:7a:8b:01:fb:29:82:98:1d:58:64:1b:5b: 46:07:e5:b6:9b:fc:74:85:a8:4a:c9:05:9c:0d:5e:d8:8b:66: fa:91:62:eb:07:8a:75:f3:b6:28:5e:35:55:d6:ac:80:ad:8d: 24:c5:9d:95:8b:64:47:5c:8c:68:33:e3:c2:7c:ca:28:8a:53: 3f:77:79:8f:25:99:de:65:d0:01:c5:1a:ed:ce:23:04:e9:15: ef:88:a4:ef:59:0c:0b:1a:71:55:99:25:33:58:aa:73:ba:b5: a0:96:34:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTE5MkQxMTAvBgNVBAUTKEE4MUQwRDYxRjdCNzMwRERCNzQyQ0M0OEFERDg4QTA0 RDQ2RkQwMjQwHhcNMjUwMzI5MDQ0NDA0WhcNMjUwNDA1MDQ0NDA0WjAYMRYwFAYD VQQDEw02N2U3N2E5NS1hMzYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA08bkC+n0Cg3V02xIOOr+rnWFCkDig65nFTqq6cmIdCqa9A5ezjKIE/ZJUiMN FqZjb5aTCkq+qUwXSRWb01ovMaawde4YDx6c70APmktsVLsLMi+VoExK3XFd2gDv hHhMBC2CoHXc6umULDkhn2r9u3MXcI2iTW0PK4TzUShz2+F1Y26770XRGZNEEHkp /rgIncQhy2EXZJY59KJ9Z7p1tWlS7AVh8h822MwQWnHnZxvvlbBOh2yrG0eeJT8Z vq5Roy0pSeSz7mvuk9lHyZTezpWh4rDKVQoKnoc6dC7EXGQJ42Dtpy55IXUGtQK1 0g5EFsGy6CC5+m8ab4IR5Mz8FwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIywGkeE qoWvj8CN9gQz+YSL4W/dMB8GA1UdIwQYMBaAFKgdDWH3tzDdt0LMSK3YigTUb9Ak MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMTkyRC9DQzY3RDI1MkE0 QkMxMUVFOUU1QTVENzJDNEY5QUUwMi9xQjBOWWZlM01OMjNRc3hJcmRpS0JOUnYw Q1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FCME5ZZmUzTU4yM1FzeElyZGlLQk5SdjBDUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MTkyRC9DQzY3RDI1MkE0QkMxMUVFOUU1QTVENzJDNEY5QUUwMi9xQjBOWWZlM01O MjNRc3hJcmRpS0JOUnYwQ1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAnx+1uaqXEvvuRpZL0IFv3KMOqitHExBu3+lF4YqTKHqELTgdKm22a KDswDnTglE0A1MXXYlb+Rku8jrZ8nH1TuacVf4asZ3jwH0KvoFnwY7R+hnQ7+vVo UzEj5Y1KZI8Pwu9Edxl6dKw4vDec9QpWd2tdVqIi9T5ZO34cIvgoYDJatjpSe1Cb m958CDZKHv3Wrgyz99R6iwH7KYKYHVhkG1tGB+W2m/x0hahKyQWcDV7Yi2b6kWLr B4p187YoXjVV1qyArY0kxZ2Vi2RHXIxoM+PCfMooilM/d3mPJZneZdABxRrtziME 6RXviKTvWQwLGnFVmSUzWKpzurWgljRk -----END CERTIFICATE-----Generated at Fri Apr 4 22:06:46 2025 by rpki-client