$ rpki-client -vvf rpki.apnic.net/member_repository/A91B872C/F20E5596DBDC11EA93FF7D44C4F9AE02/QGBqW10pu_QhZ_posyaGfvkOgm8.mft File: QGBqW10pu_QhZ_posyaGfvkOgm8.mft (raw, json) Hash identifier: F5nYsULu0/m2Yeq8CLBCAggNZdzlMrPoZJFHr8TN9kY= Subject key identifier: 0C:4C:70:9E:51:5B:B9:85:18:BF:4F:8B:7A:E6:FE:EC:4B:A2:70:80 Authority key identifier: 40:60:6A:5B:5D:29:BB:F4:21:67:FA:68:B3:26:86:7E:F9:0E:82:6F Certificate issuer: /CN=A91B872C/serialNumber=40606A5B5D29BBF42167FA68B326867EF90E826F Certificate serial: 07FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QGBqW10pu_QhZ_posyaGfvkOgm8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B872C/F20E5596DBDC11EA93FF7D44C4F9AE02/QGBqW10pu_QhZ_posyaGfvkOgm8.mft Manifest number: 07F1 Signing time: Sun 06 Apr 2025 20:38:17 +0000 Manifest this update: Sun 06 Apr 2025 20:38:16 +0000 Manifest next update: Sun 13 Apr 2025 20:38:16 +0000 Files and hashes: 1: QGBqW10pu_QhZ_posyaGfvkOgm8.crl (hash: F/eLmV7hfcknjbsP7y+aKQY/XrnGZ9lUyfHP5fw8H9I=) 2: 7B2649225FE211EB9C1A7864C4F9AE02.roa (hash: b5aUsASBnsIOTpMPwep8wURlLe5syVCTwDPawKkUzSQ=) 3: C86D4880DBDE11EAB7E6495DC4F9AE02.roa (hash: uwJuVm6AlMvySENN89snQUpf9n5HdrFH2LmfnmM6GGU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B872C/F20E5596DBDC11EA93FF7D44C4F9AE02/QGBqW10pu_QhZ_posyaGfvkOgm8.crl rsync://rpki.apnic.net/member_repository/A91B872C/F20E5596DBDC11EA93FF7D44C4F9AE02/QGBqW10pu_QhZ_posyaGfvkOgm8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QGBqW10pu_QhZ_posyaGfvkOgm8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 13 Apr 2025 20:38:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2043 (0x7fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B872C Validity Not Before: Apr 6 20:38:16 2025 GMT Not After : Apr 13 20:38:16 2025 GMT Subject: CN=67f2e638-b84a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:5e:ff:f0:d8:f8:83:d9:c9:e2:01:c8:d3:53: 71:d7:71:ee:06:1e:6c:d2:3e:7d:9b:19:1b:ee:9f: a8:82:76:34:f0:97:1e:05:f8:d3:0a:18:2c:55:ac: 5d:a1:50:11:d0:4f:6a:4c:79:74:10:8a:80:f9:77: 83:54:90:55:9d:a8:e5:b4:97:db:aa:c5:7e:9d:d9: 0b:e9:a5:84:ab:a9:b7:78:d6:b8:99:2c:c1:49:31: 23:e3:29:f3:bd:4f:05:86:1d:2a:d5:b9:32:2e:ab: a1:ca:96:e4:c5:17:9a:0b:1c:8a:4a:11:6c:bb:70: b8:c5:01:dc:b8:31:e9:be:28:77:b0:a7:0c:0b:bc: 24:be:16:0e:b0:46:d1:24:55:65:b8:0c:f2:3f:7f: 25:f1:e8:81:bb:c9:7e:4f:50:e2:3a:34:a7:a1:be: d0:a4:34:d9:54:de:a1:1a:d0:e2:65:35:4f:72:79: 3e:14:99:41:9d:99:88:e9:b7:de:2a:51:d8:ac:b7: db:36:7d:d8:33:19:cc:71:3f:a9:e7:82:91:97:49: ea:65:5f:72:12:3b:1a:eb:78:b6:3d:78:d1:11:b2: d4:e1:ba:55:5f:81:cf:02:d2:58:12:50:f7:76:54: e5:f9:79:e5:b3:fe:82:9a:f1:5b:86:81:20:21:8d: 83:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:4C:70:9E:51:5B:B9:85:18:BF:4F:8B:7A:E6:FE:EC:4B:A2:70:80 X509v3 Authority Key Identifier: keyid:40:60:6A:5B:5D:29:BB:F4:21:67:FA:68:B3:26:86:7E:F9:0E:82:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B872C/F20E5596DBDC11EA93FF7D44C4F9AE02/QGBqW10pu_QhZ_posyaGfvkOgm8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QGBqW10pu_QhZ_posyaGfvkOgm8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B872C/F20E5596DBDC11EA93FF7D44C4F9AE02/QGBqW10pu_QhZ_posyaGfvkOgm8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:06:9d:63:0d:64:5c:2b:fe:66:f6:83:1b:fd:b2:2d:a8:14: 41:0f:b6:40:b0:d5:6e:d7:91:1a:e3:13:b2:e0:33:0a:2e:a9: 20:75:60:19:0c:23:8e:80:6c:7c:4a:6e:19:dc:4e:75:93:12: 76:a8:8f:69:2f:ec:eb:f8:3a:67:b1:46:55:41:fa:4a:5a:9e: 87:ca:24:a5:6f:17:1f:b4:4d:9a:b3:2d:af:fc:01:0d:22:fd: ae:49:56:fd:23:01:d9:eb:a5:b3:5d:7e:3f:39:01:83:24:e9: 26:3a:c7:db:4f:85:4d:7f:30:6d:cb:b9:c5:d9:95:15:49:d8: 71:bd:3a:b2:64:85:5b:ea:1c:aa:4d:74:61:bd:88:c4:59:5f: c5:c6:19:58:2c:bf:44:77:5d:f9:f5:18:ab:54:fd:cd:a2:9f: 33:51:6e:17:e4:46:bf:09:e8:45:e2:49:6b:d6:8f:d7:b2:7b: 4e:0d:4b:fd:76:15:a9:a8:34:d5:09:5a:d8:60:0a:85:7d:41: 47:15:dc:80:da:47:3f:b0:01:5b:2d:7a:aa:1f:15:07:05:48: 94:4b:a0:25:d0:5e:eb:ec:28:3a:52:b7:92:95:0f:e2:b8:8f: 8a:fa:80:81:ad:e5:58:4d:75:89:09:46:e2:e0:9c:92:d3:06: 2a:4e:f4:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB/swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjg3MkMxMTAvBgNVBAUTKDQwNjA2QTVCNUQyOUJCRjQyMTY3RkE2OEIzMjY4NjdF RjkwRTgyNkYwHhcNMjUwNDA2MjAzODE2WhcNMjUwNDEzMjAzODE2WjAYMRYwFAYD VQQDEw02N2YyZTYzOC1iODRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApV7/8Nj4g9nJ4gHI01Nx13HuBh5s0j59mxkb7p+ognY08JceBfjTChgsVaxd oVAR0E9qTHl0EIqA+XeDVJBVnajltJfbqsV+ndkL6aWEq6m3eNa4mSzBSTEj4ynz vU8Fhh0q1bkyLquhypbkxReaCxyKShFsu3C4xQHcuDHpvih3sKcMC7wkvhYOsEbR JFVluAzyP38l8eiBu8l+T1DiOjSnob7QpDTZVN6hGtDiZTVPcnk+FJlBnZmI6bfe KlHYrLfbNn3YMxnMcT+p54KRl0nqZV9yEjsa63i2PXjREbLU4bpVX4HPAtJYElD3 dlTl+Xnls/6CmvFbhoEgIY2DcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAxMcJ5R W7mFGL9Pi3rm/uxLonCAMB8GA1UdIwQYMBaAFEBgaltdKbv0IWf6aLMmhn75DoJv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODcyQy9GMjBFNTU5NkRC REMxMUVBOTNGRjdENDRDNEY5QUUwMi9RR0JxVzEwcHVfUWhaX3Bvc3lhR2Z2a09n bTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FHQnFXMTBwdV9RaFpfcG9zeWFHZnZrT2dtOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC ODcyQy9GMjBFNTU5NkRCREMxMUVBOTNGRjdENDRDNEY5QUUwMi9RR0JxVzEwcHVf UWhaX3Bvc3lhR2Z2a09nbTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBYBp1jDWRcK/5m9oMb/bItqBRBD7ZAsNVu15Ea4xOy4DMKLqkgdWAZ DCOOgGx8Sm4Z3E51kxJ2qI9pL+zr+DpnsUZVQfpKWp6HyiSlbxcftE2asy2v/AEN Iv2uSVb9IwHZ66WzXX4/OQGDJOkmOsfbT4VNfzBty7nF2ZUVSdhxvTqyZIVb6hyq TXRhvYjEWV/FxhlYLL9Ed1359RirVP3Nop8zUW4X5Ea/CehF4klr1o/XsntODUv9 dhWpqDTVCVrYYAqFfUFHFdyA2kc/sAFbLXqqHxUHBUiUS6Al0F7r7Cg6UreSlQ/i uI+K+oCBreVYTXWJCUbi4JyS0wYqTvSo -----END CERTIFICATE-----Generated at Mon Apr 7 13:57:06 2025 by rpki-client