$ rpki-client -vvf rpki.apnic.net/member_repository/A91A97D0/B89FA3C6303211ED9BDC0A83C4F9AE02/rqbfs2Sis7WSfwB6ToJPMsQI5cg.mft File: rqbfs2Sis7WSfwB6ToJPMsQI5cg.mft (raw, json) Hash identifier: 0TMkmflagCwc6LWr2r/bmL94K3mZLY9uU7U5Es9b3nw= Subject key identifier: DB:6A:14:07:34:B5:B5:A6:89:7B:BB:53:E9:13:76:E9:1A:5A:8C:6D Authority key identifier: AE:A6:DF:B3:64:A2:B3:B5:92:7F:00:7A:4E:82:4F:32:C4:08:E5:C8 Certificate issuer: /CN=A91A97D0/serialNumber=AEA6DFB364A2B3B5927F007A4E824F32C408E5C8 Certificate serial: 020F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rqbfs2Sis7WSfwB6ToJPMsQI5cg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A97D0/B89FA3C6303211ED9BDC0A83C4F9AE02/rqbfs2Sis7WSfwB6ToJPMsQI5cg.mft Manifest number: 0207 Signing time: Sat 05 Apr 2025 02:10:19 +0000 Manifest this update: Sat 05 Apr 2025 02:10:18 +0000 Manifest next update: Sat 12 Apr 2025 02:10:18 +0000 Files and hashes: 1: rqbfs2Sis7WSfwB6ToJPMsQI5cg.crl (hash: PTiczgZTKCmZ3GtoImotQQeo85wCLyqnv4sPPZMyUOA=) 2: 28BD1EFC3B4311EDAB5E6382C4F9AE02.roa (hash: iDeeY7cczGJlVpoNqxYKwzcP0iNYTGCgB6+Xi39HWPg=) 3: C31A6BFA717D11EE90B95137C4F9AE02.roa (hash: MlSWr+baoX0iIeudBnt/7RnQIgEalzKtR7VxANOwdB4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A97D0/B89FA3C6303211ED9BDC0A83C4F9AE02/rqbfs2Sis7WSfwB6ToJPMsQI5cg.crl rsync://rpki.apnic.net/member_repository/A91A97D0/B89FA3C6303211ED9BDC0A83C4F9AE02/rqbfs2Sis7WSfwB6ToJPMsQI5cg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rqbfs2Sis7WSfwB6ToJPMsQI5cg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 02:10:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 527 (0x20f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A97D0 Validity Not Before: Apr 5 02:10:18 2025 GMT Not After : Apr 12 02:10:18 2025 GMT Subject: CN=67f0910b-9bb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e7:0c:92:82:79:ac:6f:7c:db:7b:43:c4:fd: 57:c8:1b:aa:f4:c1:dc:c5:5b:fc:12:19:bc:dc:f2: dd:27:77:31:a6:92:aa:20:90:37:b4:3e:88:06:5a: 51:8f:be:14:db:e5:cc:63:ff:8e:24:0b:ce:44:c6: 1d:fb:ff:e3:43:8c:d9:f5:9c:24:5a:54:1e:17:54: 7a:3f:01:9e:77:bd:59:6d:28:53:a8:b5:d4:7e:40: 96:01:0d:c0:11:15:23:98:31:78:5f:46:ee:0b:a0: c5:28:88:a8:61:9d:c8:e2:80:2a:b2:82:93:4b:6f: fe:bb:18:f6:d3:fd:84:35:ec:fc:37:98:91:4c:ae: 87:4a:48:c7:59:a3:31:b4:d6:e8:ef:d9:08:dc:5d: df:05:dc:0b:29:13:63:2b:e3:f8:81:c7:f2:91:74: c2:9c:8f:7d:1a:94:5c:43:b8:0d:d7:cc:e1:32:18: 31:7a:7d:40:24:f5:65:c3:94:c6:e2:2a:e6:91:c2: 2f:16:c3:dd:98:d5:b4:cf:a3:f0:9e:1d:ce:8c:bf: 4c:e1:cc:d9:c5:50:e4:f4:70:55:3a:82:29:09:12: ac:e6:35:e5:70:f4:d0:ff:11:a3:20:c6:16:bf:7b: 77:f3:ec:fd:44:06:be:d3:34:cf:29:11:40:80:c5: 3e:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:6A:14:07:34:B5:B5:A6:89:7B:BB:53:E9:13:76:E9:1A:5A:8C:6D X509v3 Authority Key Identifier: keyid:AE:A6:DF:B3:64:A2:B3:B5:92:7F:00:7A:4E:82:4F:32:C4:08:E5:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A97D0/B89FA3C6303211ED9BDC0A83C4F9AE02/rqbfs2Sis7WSfwB6ToJPMsQI5cg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rqbfs2Sis7WSfwB6ToJPMsQI5cg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A97D0/B89FA3C6303211ED9BDC0A83C4F9AE02/rqbfs2Sis7WSfwB6ToJPMsQI5cg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:86:d4:33:fc:f5:36:0e:a6:72:93:6c:a0:a8:b3:91:fd:4e: 19:6c:5c:d3:6f:56:46:48:b3:f5:25:c2:6c:26:92:d1:21:25: 68:d3:b2:e0:78:66:0b:60:5c:8f:66:55:ee:63:32:b0:ee:7b: da:34:a8:04:9b:04:b5:80:56:70:5f:6d:71:7e:26:fa:47:dd: 92:3c:b7:8a:3c:9c:a4:1d:58:e9:5e:ee:6e:2f:df:2c:56:2f: e1:6e:6e:10:d2:9d:c5:2a:1f:34:c3:af:50:e6:de:de:62:5f: 6c:2a:eb:d9:99:dd:00:0c:dd:6e:63:e7:0f:78:05:07:30:58: 9f:49:90:08:fb:92:13:e1:11:c9:c9:a8:94:e5:d7:39:67:83: 25:67:d8:29:c1:7e:19:4c:db:68:27:0b:48:6d:cf:3d:12:a2: bf:fc:3d:ba:14:6a:a5:96:fc:e3:34:b5:5f:91:68:1a:44:99: d3:78:3d:1e:0e:d1:ff:98:46:06:83:de:ef:a3:26:9a:b4:68: 68:df:10:ee:44:04:03:7f:af:88:ea:a2:cb:18:11:7f:fc:39: 79:57:3f:ab:02:cc:9a:e6:2e:f7:09:34:0e:e8:fd:c4:11:de: b5:5c:a6:00:97:f6:86:6a:c1:f8:8a:f5:75:28:0c:80:cb:4d: 51:52:cb:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAg8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTk3RDAxMTAvBgNVBAUTKEFFQTZERkIzNjRBMkIzQjU5MjdGMDA3QTRFODI0RjMy QzQwOEU1QzgwHhcNMjUwNDA1MDIxMDE4WhcNMjUwNDEyMDIxMDE4WjAYMRYwFAYD VQQDEw02N2YwOTEwYi05YmI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvecMkoJ5rG9823tDxP1XyBuq9MHcxVv8Ehm83PLdJ3cxppKqIJA3tD6IBlpR j74U2+XMY/+OJAvORMYd+//jQ4zZ9ZwkWlQeF1R6PwGed71ZbShTqLXUfkCWAQ3A ERUjmDF4X0buC6DFKIioYZ3I4oAqsoKTS2/+uxj20/2ENez8N5iRTK6HSkjHWaMx tNbo79kI3F3fBdwLKRNjK+P4gcfykXTCnI99GpRcQ7gN18zhMhgxen1AJPVlw5TG 4irmkcIvFsPdmNW0z6Pwnh3OjL9M4czZxVDk9HBVOoIpCRKs5jXlcPTQ/xGjIMYW v3t38+z9RAa+0zTPKRFAgMU+NwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNtqFAc0 tbWmiXu7U+kTdukaWoxtMB8GA1UdIwQYMBaAFK6m37NkorO1kn8Aek6CTzLECOXI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTdEMC9CODlGQTNDNjMw MzIxMUVEOUJEQzBBODNDNEY5QUUwMi9ycWJmczJTaXM3V1Nmd0I2VG9KUE1zUUk1 Y2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JxYmZzMlNpczdXU2Z3QjZUb0pQTXNRSTVjZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OTdEMC9CODlGQTNDNjMwMzIxMUVEOUJEQzBBODNDNEY5QUUwMi9ycWJmczJTaXM3 V1Nmd0I2VG9KUE1zUUk1Y2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQClhtQz/PU2DqZyk2ygqLOR/U4ZbFzTb1ZGSLP1JcJsJpLRISVo07Lg eGYLYFyPZlXuYzKw7nvaNKgEmwS1gFZwX21xfib6R92SPLeKPJykHVjpXu5uL98s Vi/hbm4Q0p3FKh80w69Q5t7eYl9sKuvZmd0ADN1uY+cPeAUHMFifSZAI+5IT4RHJ yaiU5dc5Z4MlZ9gpwX4ZTNtoJwtIbc89EqK//D26FGqllvzjNLVfkWgaRJnTeD0e DtH/mEYGg97voyaatGho3xDuRAQDf6+I6qLLGBF//Dl5Vz+rAsya5i73CTQO6P3E Ed61XKYAl/aGasH4ivV1KAyAy01RUsvY -----END CERTIFICATE-----Generated at Sun Apr 6 02:07:01 2025 by rpki-client