$ rpki-client -vvf rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/QOWCY5crniQUK6qbWvoFNIGjcZ4.mft File: QOWCY5crniQUK6qbWvoFNIGjcZ4.mft (raw, json) Hash identifier: gyTGaCGWa7Dd8aVgygAMAl8f9a1kLULb4NRQPCZwrhc= Subject key identifier: 4C:2D:0E:71:17:E4:72:C9:77:4D:19:F5:EB:D0:A7:9D:9F:8F:EF:87 Authority key identifier: 40:E5:82:63:97:2B:9E:24:14:2B:AA:9B:5A:FA:05:34:81:A3:71:9E Certificate issuer: /CN=A91C31A2/serialNumber=40E58263972B9E24142BAA9B5AFA053481A3719E Certificate serial: 021D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QOWCY5crniQUK6qbWvoFNIGjcZ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/QOWCY5crniQUK6qbWvoFNIGjcZ4.mft Manifest number: 020C Signing time: Sat 05 Apr 2025 02:12:36 +0000 Manifest this update: Sat 05 Apr 2025 02:12:36 +0000 Manifest next update: Sat 12 Apr 2025 02:12:36 +0000 Files and hashes: 1: QOWCY5crniQUK6qbWvoFNIGjcZ4.crl (hash: GhW4mWIS4ToZiSUonT1BM9q8vz41Nmd5489XNSMCpX0=) 2: EE83B18A7F7E11ED86E00936C4F9AE02.roa (hash: foc/Rgh+D7sXQX3ATXjse5P2fbG3rVc6pPyYs/SuwvQ=) 3: 94855EA0357711EDB81B8A34C4F9AE02.roa (hash: IN+H6LUETq8W/dLs0PZX77bed7F0mQsx+AWJPeSHLek=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/QOWCY5crniQUK6qbWvoFNIGjcZ4.crl rsync://rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/QOWCY5crniQUK6qbWvoFNIGjcZ4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QOWCY5crniQUK6qbWvoFNIGjcZ4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 02:12:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 541 (0x21d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C31A2 Validity Not Before: Apr 5 02:12:36 2025 GMT Not After : Apr 12 02:12:36 2025 GMT Subject: CN=67f09194-0238 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:f2:eb:9d:51:c2:10:f2:ef:37:41:36:a1:9f: f1:8e:97:b6:49:8e:19:c3:3d:85:31:c6:2a:82:35: da:ad:5a:fc:61:94:54:ab:62:e9:15:7f:6e:0e:6a: 9b:27:95:ec:8c:be:b7:0b:90:1b:b3:b0:f2:b4:ef: ce:56:75:75:35:ef:b3:41:f5:6e:cf:b2:37:46:49: e9:12:33:72:36:92:10:f4:d4:c8:49:02:fe:47:68: 24:12:43:a9:1f:61:fe:51:6a:6e:da:ca:25:41:95: 46:49:30:b3:a5:31:35:72:10:d9:b7:cf:0a:26:d1: 15:1c:0b:c2:81:ab:c2:4d:18:7b:ae:be:ad:33:fa: c9:04:a2:88:df:1a:20:26:63:fc:58:54:4c:ca:26: e4:ce:ec:69:40:e7:ec:bc:45:45:f7:9a:87:5d:fb: db:9a:19:0a:2a:75:83:df:38:8d:b1:20:f9:60:ea: 28:55:0b:64:0b:a8:90:c3:42:e8:92:04:53:b8:70: 9f:58:77:14:83:6e:ad:5c:68:6c:d8:b6:e9:5b:42: fd:7a:39:f3:7f:71:f3:dc:81:06:00:6b:40:4f:72: 72:9b:e9:53:cd:b8:22:36:b7:94:8b:da:9e:ea:aa: 38:f2:68:2c:cd:a8:5f:87:4b:a8:61:34:88:bd:93: 93:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:2D:0E:71:17:E4:72:C9:77:4D:19:F5:EB:D0:A7:9D:9F:8F:EF:87 X509v3 Authority Key Identifier: keyid:40:E5:82:63:97:2B:9E:24:14:2B:AA:9B:5A:FA:05:34:81:A3:71:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/QOWCY5crniQUK6qbWvoFNIGjcZ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QOWCY5crniQUK6qbWvoFNIGjcZ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/QOWCY5crniQUK6qbWvoFNIGjcZ4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:65:a4:fa:3c:cb:d8:63:82:46:19:af:6e:38:aa:7d:5a:f9: 89:a8:96:fa:52:ba:2c:52:81:e3:c6:2d:e8:8f:bd:47:5c:00: f0:84:bc:ee:ec:5b:10:5b:66:d7:3d:c6:e3:82:83:99:56:56: 63:fb:c4:d1:1c:d1:30:1c:61:7e:df:cd:a5:da:03:af:40:4b: 8e:4a:f1:45:51:31:73:1f:26:a9:09:4b:34:b4:b4:04:88:af: da:f2:5e:03:4d:56:87:52:a3:f3:0c:b2:b4:f7:83:d1:67:30: 45:64:09:ee:1d:8b:28:48:38:ef:1c:a4:11:8e:f7:bb:39:60: f9:3b:c7:6d:33:a2:04:88:a3:f5:51:28:42:f9:14:1a:c6:fc: 8e:45:e0:5d:4a:97:8a:99:c8:98:35:56:9e:ed:1f:ed:cc:07: d7:63:31:aa:42:48:39:8d:97:1b:85:8b:53:de:48:d4:54:2b: 2d:a7:c2:54:d6:c7:70:e8:93:f3:52:66:9c:4e:57:51:a8:3b: 3c:3c:d2:a8:19:3a:f8:92:d1:bf:cb:a1:17:c6:d2:43:43:1b: 8a:5f:f2:bc:96:45:00:66:6d:3a:8d:02:88:3d:2a:52:68:2a: aa:d8:a7:8a:ff:1b:e0:01:db:e7:7d:f6:97:ad:55:04:16:d3: 4d:dc:ed:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAh0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzMxQTIxMTAvBgNVBAUTKDQwRTU4MjYzOTcyQjlFMjQxNDJCQUE5QjVBRkEwNTM0 ODFBMzcxOUUwHhcNMjUwNDA1MDIxMjM2WhcNMjUwNDEyMDIxMjM2WjAYMRYwFAYD VQQDEw02N2YwOTE5NC0wMjM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApPLrnVHCEPLvN0E2oZ/xjpe2SY4Zwz2FMcYqgjXarVr8YZRUq2LpFX9uDmqb J5XsjL63C5Abs7DytO/OVnV1Ne+zQfVuz7I3RknpEjNyNpIQ9NTISQL+R2gkEkOp H2H+UWpu2solQZVGSTCzpTE1chDZt88KJtEVHAvCgavCTRh7rr6tM/rJBKKI3xog JmP8WFRMyibkzuxpQOfsvEVF95qHXfvbmhkKKnWD3ziNsSD5YOooVQtkC6iQw0Lo kgRTuHCfWHcUg26tXGhs2LbpW0L9ejnzf3Hz3IEGAGtAT3Jym+lTzbgiNreUi9qe 6qo48mgszahfh0uoYTSIvZOTVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEwtDnEX 5HLJd00Z9evQp52fj++HMB8GA1UdIwQYMBaAFEDlgmOXK54kFCuqm1r6BTSBo3Ge MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzFBMi9ENDc2RUQ3NjM1 NzIxMUVEQUU5Nzc4MzlDNEY5QUUwMi9RT1dDWTVjcm5pUVVLNnFiV3ZvRk5JR2pj WjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1FPV0NZNWNybmlRVUs2cWJXdm9GTklHamNaNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MzFBMi9ENDc2RUQ3NjM1NzIxMUVEQUU5Nzc4MzlDNEY5QUUwMi9RT1dDWTVjcm5p UVVLNnFiV3ZvRk5JR2pjWjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLZaT6PMvYY4JGGa9uOKp9WvmJqJb6UrosUoHjxi3oj71HXADwhLzu 7FsQW2bXPcbjgoOZVlZj+8TRHNEwHGF+382l2gOvQEuOSvFFUTFzHyapCUs0tLQE iK/a8l4DTVaHUqPzDLK094PRZzBFZAnuHYsoSDjvHKQRjve7OWD5O8dtM6IEiKP1 UShC+RQaxvyOReBdSpeKmciYNVae7R/tzAfXYzGqQkg5jZcbhYtT3kjUVCstp8JU 1sdw6JPzUmacTldRqDs8PNKoGTr4ktG/y6EXxtJDQxuKX/K8lkUAZm06jQKIPSpS aCqq2KeK/xvgAdvnffaXrVUEFtNN3O3i -----END CERTIFICATE-----Generated at Sat Apr 5 16:53:54 2025 by rpki-client