$ rpki-client -vvf rpki.apnic.net/member_repository/A91B72D9/AA23FA96697111ECB625930CC4F9AE02/QeXcIVUGn_MX5e44x1t4icIhl-M.mft File: QeXcIVUGn_MX5e44x1t4icIhl-M.mft (raw, json) Hash identifier: 2GJbbAphssdmiuWivpFaFvqfzOmkxvlqlACHNoFSrlY= Subject key identifier: 0A:25:A0:E5:CB:C8:E0:18:28:F7:05:54:B6:00:75:97:0E:86:1D:2A Authority key identifier: 41:E5:DC:21:55:06:9F:F3:17:E5:EE:38:C7:5B:78:89:C2:21:97:E3 Certificate issuer: /CN=A91B72D9/serialNumber=41E5DC2155069FF317E5EE38C75B7889C22197E3 Certificate serial: 0423 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QeXcIVUGn_MX5e44x1t4icIhl-M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B72D9/AA23FA96697111ECB625930CC4F9AE02/QeXcIVUGn_MX5e44x1t4icIhl-M.mft Manifest number: 040F Signing time: Thu 03 Apr 2025 00:29:57 +0000 Manifest this update: Thu 03 Apr 2025 00:29:56 +0000 Manifest next update: Thu 10 Apr 2025 00:29:56 +0000 Files and hashes: 1: QeXcIVUGn_MX5e44x1t4icIhl-M.crl (hash: hqd4WdQccdVZSoODeMgkhcmhnCCL5YoWtX7QdEM+Y9w=) 2: 43E6BE1AF53411EF9DE3BD34C4F9AE02.roa (hash: d0073l1e/pxbjtRy8RJAwD/f1Qu4geicKXKAmauL91Y=) 3: 4FD9C050F53411EFBF7FCA34C4F9AE02.roa (hash: UdXjbAhF6oniMP9h+eQndIWcxlYyRMTp0LAX//sl/pw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B72D9/AA23FA96697111ECB625930CC4F9AE02/QeXcIVUGn_MX5e44x1t4icIhl-M.crl rsync://rpki.apnic.net/member_repository/A91B72D9/AA23FA96697111ECB625930CC4F9AE02/QeXcIVUGn_MX5e44x1t4icIhl-M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QeXcIVUGn_MX5e44x1t4icIhl-M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 00:29:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1059 (0x423) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B72D9 Validity Not Before: Apr 3 00:29:56 2025 GMT Not After : Apr 10 00:29:56 2025 GMT Subject: CN=67edd685-c887 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:06:e1:78:f0:c4:c6:55:e4:4c:c3:c3:86:fc: b3:8d:5b:bb:1b:0c:a8:67:e4:1b:47:e7:3a:41:b7: 84:42:87:2a:7e:29:d3:c7:bf:52:08:ca:bd:7f:06: 76:1e:46:53:f6:25:1d:33:12:2f:97:5e:98:7c:24: de:d0:ee:47:53:25:e1:ec:49:e0:d0:1e:11:c7:7d: f4:51:c9:e2:d6:b4:d8:e9:64:2a:fb:fe:3c:19:98: d1:9e:75:8c:1b:d5:35:33:46:5c:d3:a2:73:4d:94: 9b:50:60:49:a2:af:6e:9c:7b:ac:ed:59:c7:df:d0: 7b:1e:f1:76:54:62:15:f2:22:ff:f1:46:83:83:56: 74:51:74:ea:07:b9:a5:77:6d:06:da:59:31:17:5d: 05:de:9b:4c:1b:b8:01:11:4e:c7:1e:5d:62:01:39: 93:85:46:04:db:c5:08:bc:f4:0e:e6:6d:0f:37:5c: 1f:97:49:1e:0d:4e:d3:54:59:12:6c:25:f4:3e:2c: 89:c1:67:61:6c:d7:af:70:fa:12:15:aa:ab:4d:ca: 21:34:33:5c:4a:23:05:24:b9:50:d4:1b:19:cf:47: 50:cc:93:ad:1e:fa:0b:6f:83:83:7b:13:69:9c:40: 95:6b:c1:9d:3b:be:87:7b:d6:cc:5b:de:08:c1:95: 9d:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:25:A0:E5:CB:C8:E0:18:28:F7:05:54:B6:00:75:97:0E:86:1D:2A X509v3 Authority Key Identifier: keyid:41:E5:DC:21:55:06:9F:F3:17:E5:EE:38:C7:5B:78:89:C2:21:97:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B72D9/AA23FA96697111ECB625930CC4F9AE02/QeXcIVUGn_MX5e44x1t4icIhl-M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QeXcIVUGn_MX5e44x1t4icIhl-M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B72D9/AA23FA96697111ECB625930CC4F9AE02/QeXcIVUGn_MX5e44x1t4icIhl-M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:a4:5a:64:65:47:32:91:08:19:29:10:15:26:9a:53:5c:0c: 1e:28:10:de:5f:19:cd:74:e8:4e:e6:a0:9d:3d:8e:d9:f8:03: 59:e1:cb:c7:ca:20:34:45:56:a6:3d:89:3b:5e:cf:95:41:37: 5e:3f:9a:e8:8b:b2:bd:42:e9:4e:98:81:6d:75:01:24:04:fd: bb:f3:48:91:f4:19:3e:61:24:07:d0:b3:7d:00:29:a5:96:09: 7f:4f:aa:63:2e:be:3f:c3:12:7d:4a:76:2f:30:98:20:9d:e7: 56:4f:6e:ec:95:31:18:57:b7:4b:75:63:f9:de:bc:85:dc:ef: f4:bc:59:89:38:39:38:b5:6a:05:02:3f:1a:e0:cd:60:92:f0: d3:e7:23:8f:db:fa:e0:2d:b3:22:bd:a6:9e:f6:64:ec:30:70: c1:ea:ad:d0:ac:3c:43:db:eb:16:30:e7:e7:36:5c:57:f3:e2: a3:63:60:90:ae:bc:07:7a:6c:e1:2c:fe:e2:97:9a:14:cd:b2: 4f:ac:56:f8:50:3f:bd:e1:ef:32:36:ab:17:d3:69:14:68:72: ac:ef:f8:df:fc:09:c7:72:3e:65:c9:bd:30:dc:97:eb:b5:6f: 6b:f5:d2:08:05:c1:16:e0:6b:a6:c6:c1:df:36:f4:40:d2:25: 41:12:e9:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBCMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjcyRDkxMTAvBgNVBAUTKDQxRTVEQzIxNTUwNjlGRjMxN0U1RUUzOEM3NUI3ODg5 QzIyMTk3RTMwHhcNMjUwNDAzMDAyOTU2WhcNMjUwNDEwMDAyOTU2WjAYMRYwFAYD VQQDEw02N2VkZDY4NS1jODg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnwbhePDExlXkTMPDhvyzjVu7GwyoZ+QbR+c6QbeEQocqfinTx79SCMq9fwZ2 HkZT9iUdMxIvl16YfCTe0O5HUyXh7Eng0B4Rx330Ucni1rTY6WQq+/48GZjRnnWM G9U1M0Zc06JzTZSbUGBJoq9unHus7VnH39B7HvF2VGIV8iL/8UaDg1Z0UXTqB7ml d20G2lkxF10F3ptMG7gBEU7HHl1iATmThUYE28UIvPQO5m0PN1wfl0keDU7TVFkS bCX0PiyJwWdhbNevcPoSFaqrTcohNDNcSiMFJLlQ1BsZz0dQzJOtHvoLb4ODexNp nECVa8GdO76He9bMW94IwZWd2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAoloOXL yOAYKPcFVLYAdZcOhh0qMB8GA1UdIwQYMBaAFEHl3CFVBp/zF+XuOMdbeInCIZfj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzJEOS9BQTIzRkE5NjY5 NzExMUVDQjYyNTkzMENDNEY5QUUwMi9RZVhjSVZVR25fTVg1ZTQ0eDF0NGljSWhs LU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FlWGNJVlVHbl9NWDVlNDR4MXQ0aWNJaGwtTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NzJEOS9BQTIzRkE5NjY5NzExMUVDQjYyNTkzMENDNEY5QUUwMi9RZVhjSVZVR25f TVg1ZTQ0eDF0NGljSWhsLU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmpFpkZUcykQgZKRAVJppTXAweKBDeXxnNdOhO5qCdPY7Z+ANZ4cvH yiA0RVamPYk7Xs+VQTdeP5roi7K9QulOmIFtdQEkBP2780iR9Bk+YSQH0LN9ACml lgl/T6pjLr4/wxJ9SnYvMJggnedWT27slTEYV7dLdWP53ryF3O/0vFmJODk4tWoF Aj8a4M1gkvDT5yOP2/rgLbMivaae9mTsMHDB6q3QrDxD2+sWMOfnNlxX8+KjY2CQ rrwHemzhLP7il5oUzbJPrFb4UD+94e8yNqsX02kUaHKs7/jf/AnHcj5lyb0w3Jfr tW9r9dIIBcEW4GumxsHfNvRA0iVBEukI -----END CERTIFICATE-----Generated at Fri Apr 4 22:06:43 2025 by rpki-client