$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA2AB/111E55E0097E11EEAE7F351FC4F9AE02/QOlPucJEwgzdpE57Dop6cZqXdA8.mft File: QOlPucJEwgzdpE57Dop6cZqXdA8.mft (raw, json) Hash identifier: R4izWMOi0Mt97e+O+vLd7IUU61SgHkCEr4PpuTwAo/0= Subject key identifier: 83:79:AE:1B:A5:50:83:5A:93:81:4E:66:82:52:D0:61:6A:C1:D9:A8 Authority key identifier: 40:E9:4F:B9:C2:44:C2:0C:DD:A4:4E:7B:0E:8A:7A:71:9A:97:74:0F Certificate issuer: /CN=A91BA2AB/serialNumber=40E94FB9C244C20CDDA44E7B0E8A7A719A97740F Certificate serial: 0159 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOlPucJEwgzdpE57Dop6cZqXdA8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA2AB/111E55E0097E11EEAE7F351FC4F9AE02/QOlPucJEwgzdpE57Dop6cZqXdA8.mft Manifest number: 0157 Signing time: Fri 11 Apr 2025 03:21:55 +0000 Manifest this update: Fri 11 Apr 2025 03:21:54 +0000 Manifest next update: Fri 18 Apr 2025 03:21:54 +0000 Files and hashes: 1: QOlPucJEwgzdpE57Dop6cZqXdA8.crl (hash: As4bIKONYX60913rbf86XvBe5APZ9G2kh+5SBa0xL80=) 2: 7A8706087CA011EF8491607DC4F9AE02.roa (hash: EAsHcyPYziRKahL54/4beVq18nLBLDrzExkB1EWt7iQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA2AB/111E55E0097E11EEAE7F351FC4F9AE02/QOlPucJEwgzdpE57Dop6cZqXdA8.crl rsync://rpki.apnic.net/member_repository/A91BA2AB/111E55E0097E11EEAE7F351FC4F9AE02/QOlPucJEwgzdpE57Dop6cZqXdA8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOlPucJEwgzdpE57Dop6cZqXdA8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 03:21:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 345 (0x159) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA2AB, serialNumber=40E94FB9C244C20CDDA44E7B0E8A7A719A97740F Validity Not Before: Apr 11 03:21:54 2025 GMT Not After : Apr 18 03:21:54 2025 GMT Subject: CN=67f88ad2-8ba5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c2:9e:4f:3e:09:4e:cb:ac:62:48:f4:fd:c0: 4b:ab:f6:ae:66:be:d4:93:f2:b6:67:a3:01:a9:30: 0c:5d:20:08:be:3f:5f:16:53:10:87:da:32:50:60: cb:3c:e3:82:bd:be:68:29:7d:b2:02:70:ab:14:46: a7:d2:8f:90:21:55:71:a0:ab:82:9f:89:8c:c6:a3: da:8a:5a:fa:df:ab:17:ce:f8:71:65:de:61:23:9f: 17:c4:30:80:3e:5e:e0:88:5e:90:6f:15:58:a5:57: ab:a2:4d:78:e3:3a:60:3d:7f:2d:dd:de:83:41:92: 29:8a:75:0f:fe:d7:97:14:f1:20:be:5a:70:71:fe: 2c:cc:f0:a9:cf:c0:3c:8d:52:18:e1:63:fa:e8:51: de:52:f8:73:3a:d3:9f:41:7d:4a:25:ba:fc:94:2b: 88:d5:28:bd:c4:02:39:b7:e6:07:ca:b1:ac:e2:a4: 16:fd:42:59:a6:b6:70:32:17:a3:27:62:e9:cf:a7: b0:a9:57:8e:6c:5d:68:3f:01:63:39:29:45:64:8a: 48:59:27:2e:75:7d:88:cf:74:cc:fa:34:4b:ea:00: c6:99:b2:19:b8:21:39:fd:9c:60:d7:8d:9e:6a:70: df:09:3d:31:51:e1:79:52:33:a6:94:e0:d5:e0:49: 82:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:79:AE:1B:A5:50:83:5A:93:81:4E:66:82:52:D0:61:6A:C1:D9:A8 X509v3 Authority Key Identifier: keyid:40:E9:4F:B9:C2:44:C2:0C:DD:A4:4E:7B:0E:8A:7A:71:9A:97:74:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA2AB/111E55E0097E11EEAE7F351FC4F9AE02/QOlPucJEwgzdpE57Dop6cZqXdA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOlPucJEwgzdpE57Dop6cZqXdA8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA2AB/111E55E0097E11EEAE7F351FC4F9AE02/QOlPucJEwgzdpE57Dop6cZqXdA8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:a8:60:c4:f7:7c:ea:71:d7:04:f9:0b:7b:83:92:68:e4:d3: 3b:cf:a3:06:eb:e8:24:37:15:a9:a9:3f:09:48:30:48:b9:0a: 8e:e4:b1:4c:4e:81:6a:9e:12:84:8a:1b:b2:54:f3:ef:15:ce: c0:3f:cc:b6:0c:5e:cc:f5:64:5f:36:10:63:3f:16:43:ee:0a: ca:d3:ac:aa:21:0f:5f:33:79:2c:79:44:e9:66:a3:26:27:14: ba:1e:21:93:44:b2:2b:2f:64:eb:6d:3a:67:32:13:a2:49:c1: 55:d2:97:38:08:d2:48:c0:fb:1d:07:96:2c:10:11:5b:15:ab: 76:a7:5c:23:e3:43:1e:98:9e:fe:19:b2:27:d2:df:01:cf:db: 6d:64:c8:1b:cc:e5:4d:9e:82:c2:86:41:80:98:09:7c:35:b7: ca:99:c3:84:89:e0:7d:1a:64:f2:8b:47:ce:5b:f6:6d:82:6e: 96:bf:3a:dd:7d:e1:31:ec:f9:db:f3:cb:0d:d8:2d:20:b6:70: 99:68:21:16:64:e9:de:ee:d2:59:e4:8a:f0:9c:29:35:34:40: 16:c5:50:b3:5f:b7:7b:dd:11:09:57:2f:d3:1e:a9:79:d5:f0: b0:53:14:ca:c6:4a:6a:00:fc:6a:d8:db:12:7f:9c:0d:58:a5: 60:62:01:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkEyQUIxMTAvBgNVBAUTKDQwRTk0RkI5QzI0NEMyMENEREE0NEU3QjBFOEE3QTcx OUE5Nzc0MEYwHhcNMjUwNDExMDMyMTU0WhcNMjUwNDE4MDMyMTU0WjAYMRYwFAYD VQQDEw02N2Y4OGFkMi04YmE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuMKeTz4JTsusYkj0/cBLq/auZr7Uk/K2Z6MBqTAMXSAIvj9fFlMQh9oyUGDL POOCvb5oKX2yAnCrFEan0o+QIVVxoKuCn4mMxqPailr636sXzvhxZd5hI58XxDCA Pl7giF6QbxVYpVerok144zpgPX8t3d6DQZIpinUP/teXFPEgvlpwcf4szPCpz8A8 jVIY4WP66FHeUvhzOtOfQX1KJbr8lCuI1Si9xAI5t+YHyrGs4qQW/UJZprZwMhej J2Lpz6ewqVeObF1oPwFjOSlFZIpIWScudX2Iz3TM+jRL6gDGmbIZuCE5/Zxg142e anDfCT0xUeF5UjOmlODV4EmCaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIN5rhul UINak4FOZoJS0GFqwdmoMB8GA1UdIwQYMBaAFEDpT7nCRMIM3aROew6KenGal3QP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTJBQi8xMTFFNTVFMDA5 N0UxMUVFQUU3RjM1MUZDNEY5QUUwMi9RT2xQdWNKRXdnemRwRTU3RG9wNmNacVhk QTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FPbFB1Y0pFd2d6ZHBFNTdEb3A2Y1pxWGRBOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTJBQi8xMTFFNTVFMDA5N0UxMUVFQUU3RjM1MUZDNEY5QUUwMi9RT2xQdWNKRXdn emRwRTU3RG9wNmNacVhkQTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYqGDE93zqcdcE+Qt7g5Jo5NM7z6MG6+gkNxWpqT8JSDBIuQqO5LFM ToFqnhKEihuyVPPvFc7AP8y2DF7M9WRfNhBjPxZD7grK06yqIQ9fM3kseUTpZqMm JxS6HiGTRLIrL2TrbTpnMhOiScFV0pc4CNJIwPsdB5YsEBFbFat2p1wj40MemJ7+ GbIn0t8Bz9ttZMgbzOVNnoLChkGAmAl8NbfKmcOEieB9GmTyi0fOW/Ztgm6Wvzrd feEx7Pnb88sN2C0gtnCZaCEWZOne7tJZ5IrwnCk1NEAWxVCzX7d73REJVy/THql5 1fCwUxTKxkpqAPxq2NsSf5wNWKVgYgG8 -----END CERTIFICATE-----Generated at Sat Apr 12 23:15:05 2025 by rpki-client