$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1A4E/A49B4D7437C611EA9D96AE51C4F9AE02/qSFjXHST8hzSYJPVkDUQgC9ONYY.mft File: qSFjXHST8hzSYJPVkDUQgC9ONYY.mft (raw, json) Hash identifier: vk/HjoUhnck0w5GAQ8sjcR75+Y5tcwOvGRfKmhYWgXw= Subject key identifier: 51:E3:A1:6A:89:91:43:78:69:69:FD:95:33:DE:BA:8F:80:BB:A4:6B Authority key identifier: A9:21:63:5C:74:93:F2:1C:D2:60:93:D5:90:35:10:80:2F:4E:35:86 Certificate issuer: /CN=A91C1A4E/serialNumber=A921635C7493F21CD26093D5903510802F4E3586 Certificate serial: 0B5E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSFjXHST8hzSYJPVkDUQgC9ONYY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1A4E/A49B4D7437C611EA9D96AE51C4F9AE02/qSFjXHST8hzSYJPVkDUQgC9ONYY.mft Manifest number: 0B3F Signing time: Fri 04 Apr 2025 19:19:45 +0000 Manifest this update: Fri 04 Apr 2025 19:19:45 +0000 Manifest next update: Fri 11 Apr 2025 19:19:45 +0000 Files and hashes: 1: qSFjXHST8hzSYJPVkDUQgC9ONYY.crl (hash: C56MgO8XW5HyslegiCN3IqItUiMSEZC4sIa0Z5mkFKM=) 2: 8610B9DCF33F11EEB412F210C4F9AE02.roa (hash: pnaBbR2DtiTGY+c3G7fBP288UhK6UiUJopbmpztAwNM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1A4E/A49B4D7437C611EA9D96AE51C4F9AE02/qSFjXHST8hzSYJPVkDUQgC9ONYY.crl rsync://rpki.apnic.net/member_repository/A91C1A4E/A49B4D7437C611EA9D96AE51C4F9AE02/qSFjXHST8hzSYJPVkDUQgC9ONYY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSFjXHST8hzSYJPVkDUQgC9ONYY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 19:19:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2910 (0xb5e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1A4E Validity Not Before: Apr 4 19:19:45 2025 GMT Not After : Apr 11 19:19:45 2025 GMT Subject: CN=67f030d1-c4e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:04:6e:23:a8:d3:3a:a7:66:74:ae:28:c7:09: 51:71:56:2b:f2:f6:f7:fa:ef:12:71:8b:1c:26:49: d9:22:79:26:bb:53:70:fd:3f:5b:cf:3d:07:b5:ec: 57:fe:ef:bb:06:1a:b3:b2:ec:b5:bf:6a:e9:df:64: 69:45:68:69:f3:e1:d2:64:b1:3e:c5:bf:f1:63:b6: fa:28:e1:d3:7e:06:80:04:e3:1b:6d:e7:bc:bb:84: 8c:8e:ff:0b:e2:c6:66:77:d1:34:3f:d4:db:0f:9f: d4:2b:cc:b9:57:b3:3e:d8:c5:c7:bc:15:2d:00:b8: 06:fa:84:50:8c:ae:d7:85:77:50:16:64:bc:71:5a: d3:cf:af:b5:87:00:d5:d0:4b:a6:9d:2a:54:67:4f: 37:33:32:54:00:62:47:9b:eb:94:cf:85:29:3a:cb: 47:ea:46:8f:ef:75:3f:15:73:e3:ba:e8:4e:18:66: 82:0f:9b:30:00:f5:d2:ee:b3:35:ea:09:b3:73:21: 5a:7c:28:85:b4:3c:56:ec:5f:28:d9:0b:44:c0:de: e2:b3:4f:50:28:db:32:bf:af:11:ac:aa:da:24:e4: 93:b1:97:a4:a6:63:dc:02:df:ac:af:e6:48:95:00: e1:8a:a1:e5:36:26:bb:02:0d:cf:83:28:c3:a2:88: 80:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:E3:A1:6A:89:91:43:78:69:69:FD:95:33:DE:BA:8F:80:BB:A4:6B X509v3 Authority Key Identifier: keyid:A9:21:63:5C:74:93:F2:1C:D2:60:93:D5:90:35:10:80:2F:4E:35:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1A4E/A49B4D7437C611EA9D96AE51C4F9AE02/qSFjXHST8hzSYJPVkDUQgC9ONYY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSFjXHST8hzSYJPVkDUQgC9ONYY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1A4E/A49B4D7437C611EA9D96AE51C4F9AE02/qSFjXHST8hzSYJPVkDUQgC9ONYY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:fc:09:72:4c:ef:94:73:8f:42:63:ea:47:91:e2:ec:bd:63: bb:b4:ff:01:31:6c:a9:2b:a8:3a:9a:3c:b1:eb:c7:2a:cd:b3: 2c:74:c1:e2:58:2c:32:39:ac:51:4a:7b:15:74:87:ae:81:5d: 93:92:9a:a8:8e:49:28:4e:3c:b4:3e:06:58:30:54:ec:08:a1: c6:72:1c:ae:70:4f:42:8c:c2:52:f6:a0:03:d1:e3:ea:c7:b9: 1d:63:89:83:17:1d:2c:f5:2f:f4:70:86:a8:2b:e5:03:9c:89: 9d:a2:fa:0d:fe:cf:16:37:55:73:a7:90:f0:58:50:02:39:8a: 82:ab:b6:92:fb:1a:22:e8:a9:c7:5b:57:07:94:8c:c2:c3:cb: 1c:95:cb:80:9b:fb:f9:d8:63:fc:b9:2d:12:56:af:42:85:f2: 0c:95:08:7d:53:4f:bb:bd:f1:c4:ca:97:5f:41:03:f4:9d:40: 61:91:11:e7:fe:2d:d7:31:78:7c:4d:70:d7:19:00:0d:e4:bf: a3:d2:62:5d:2e:b3:5d:3c:0e:79:77:1d:a3:51:43:ae:a2:29: 24:27:64:b8:b4:b3:9c:3e:c1:99:4e:4b:a6:be:0d:bd:7a:9b: ea:c2:7a:c3:30:2f:66:5d:1c:87:5f:a3:95:a5:22:c6:ed:da: 69:dd:b9:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC14wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzFBNEUxMTAvBgNVBAUTKEE5MjE2MzVDNzQ5M0YyMUNEMjYwOTNENTkwMzUxMDgw MkY0RTM1ODYwHhcNMjUwNDA0MTkxOTQ1WhcNMjUwNDExMTkxOTQ1WjAYMRYwFAYD VQQDEw02N2YwMzBkMS1jNGUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1gRuI6jTOqdmdK4oxwlRcVYr8vb3+u8ScYscJknZInkmu1Nw/T9bzz0HtexX /u+7Bhqzsuy1v2rp32RpRWhp8+HSZLE+xb/xY7b6KOHTfgaABOMbbee8u4SMjv8L 4sZmd9E0P9TbD5/UK8y5V7M+2MXHvBUtALgG+oRQjK7XhXdQFmS8cVrTz6+1hwDV 0EumnSpUZ083MzJUAGJHm+uUz4UpOstH6kaP73U/FXPjuuhOGGaCD5swAPXS7rM1 6gmzcyFafCiFtDxW7F8o2QtEwN7is09QKNsyv68RrKraJOSTsZekpmPcAt+sr+ZI lQDhiqHlNia7Ag3PgyjDooiAkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFHjoWqJ kUN4aWn9lTPeuo+Au6RrMB8GA1UdIwQYMBaAFKkhY1x0k/Ic0mCT1ZA1EIAvTjWG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMUE0RS9BNDlCNEQ3NDM3 QzYxMUVBOUQ5NkFFNTFDNEY5QUUwMi9xU0ZqWEhTVDhoelNZSlBWa0RVUWdDOU9O WVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FTRmpYSFNUOGh6U1lKUFZrRFVRZ0M5T05ZWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MUE0RS9BNDlCNEQ3NDM3QzYxMUVBOUQ5NkFFNTFDNEY5QUUwMi9xU0ZqWEhTVDho elNZSlBWa0RVUWdDOU9OWVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCS/AlyTO+Uc49CY+pHkeLsvWO7tP8BMWypK6g6mjyx68cqzbMsdMHi WCwyOaxRSnsVdIeugV2TkpqojkkoTjy0PgZYMFTsCKHGchyucE9CjMJS9qAD0ePq x7kdY4mDFx0s9S/0cIaoK+UDnImdovoN/s8WN1Vzp5DwWFACOYqCq7aS+xoi6KnH W1cHlIzCw8sclcuAm/v52GP8uS0SVq9ChfIMlQh9U0+7vfHEypdfQQP0nUBhkRHn /i3XMXh8TXDXGQAN5L+j0mJdLrNdPA55dx2jUUOuoikkJ2S4tLOcPsGZTkumvg29 epvqwnrDMC9mXRyHX6OVpSLG7dpp3bmI -----END CERTIFICATE-----Generated at Sun Apr 6 17:29:15 2025 by rpki-client