$ rpki-client -vvf rpki.apnic.net/member_repository/A91C31B7/FCC334CC1E6B11EFAC0E914EC4F9AE02/qB0VXKQErkFFeBrwXrU6Ehni4GU.mft File: qB0VXKQErkFFeBrwXrU6Ehni4GU.mft (raw, json) Hash identifier: NfhX6C72Q+NdCfXjtl6x208L1IjCoYpTrbvEAhYupr8= Subject key identifier: 9F:F7:0D:B7:CA:B2:D1:9F:4D:B9:AF:76:6A:10:87:52:D4:8E:4A:B6 Authority key identifier: A8:1D:15:5C:A4:04:AE:41:45:78:1A:F0:5E:B5:3A:12:19:E2:E0:65 Certificate issuer: /CN=A91C31B7/serialNumber=A81D155CA404AE4145781AF05EB53A1219E2E065 Certificate serial: 9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qB0VXKQErkFFeBrwXrU6Ehni4GU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C31B7/FCC334CC1E6B11EFAC0E914EC4F9AE02/qB0VXKQErkFFeBrwXrU6Ehni4GU.mft Manifest number: 9D Signing time: Sat 29 Mar 2025 05:36:48 +0000 Manifest this update: Sat 29 Mar 2025 05:36:48 +0000 Manifest next update: Sat 05 Apr 2025 05:36:48 +0000 Files and hashes: 1: qB0VXKQErkFFeBrwXrU6Ehni4GU.crl (hash: Dun59muwcaU42I9/tiL2N5RFOXsSFI5anEwrqjHPrkY=) 2: 42C6F6041E6F11EF898C1E38C4F9AE02.roa (hash: Nwxndbe8HVB4N9vkz2u0yYwDfuyP9L4g9kHPKAHCIos=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C31B7/FCC334CC1E6B11EFAC0E914EC4F9AE02/qB0VXKQErkFFeBrwXrU6Ehni4GU.crl rsync://rpki.apnic.net/member_repository/A91C31B7/FCC334CC1E6B11EFAC0E914EC4F9AE02/qB0VXKQErkFFeBrwXrU6Ehni4GU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qB0VXKQErkFFeBrwXrU6Ehni4GU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 05:08:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 158 (0x9e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C31B7 Validity Not Before: Mar 29 05:36:48 2025 GMT Not After : Apr 5 05:36:48 2025 GMT Subject: CN=67e786f0-200e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:cf:49:b8:75:7e:4c:09:73:98:d3:ad:25:59: 3b:82:40:bc:1e:69:25:49:db:d5:5b:82:17:1c:40: 9d:ef:4b:b8:70:70:ba:ef:b1:a1:9c:66:11:15:6b: 16:21:09:11:56:7d:17:03:c1:a1:9c:71:5b:bf:bd: d8:33:3e:f0:70:9f:43:cc:0d:e5:6a:23:46:d9:d6: a3:aa:af:56:87:82:fa:65:eb:a9:03:60:8d:ee:72: 4a:4d:2a:e5:4e:73:12:56:20:8b:63:9e:b8:ed:d5: 1a:91:1f:6d:a5:92:07:87:0b:ba:e6:7c:ff:ab:f9: ab:33:45:74:8d:2b:90:b9:31:5e:ab:85:99:92:f6: f0:3f:7c:63:05:dd:4d:2b:3f:d0:43:16:0b:10:47: 39:a0:9a:58:3d:3a:48:72:5f:68:bc:6b:43:a0:79: 2c:ed:33:42:12:d9:b8:a6:d2:6b:55:8a:fd:3b:e1: 31:70:a2:93:01:85:44:65:34:85:f7:79:78:92:56: 08:95:25:42:50:e3:58:14:48:4e:ca:b7:fa:e2:42: 2e:df:45:d1:72:ac:06:ec:17:e3:f5:49:bd:57:5b: 44:95:2f:ef:3e:ba:a4:77:13:d1:8c:5c:24:50:a7: d4:e9:40:eb:3d:ea:76:ba:89:06:76:a6:76:d4:e3: 89:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:F7:0D:B7:CA:B2:D1:9F:4D:B9:AF:76:6A:10:87:52:D4:8E:4A:B6 X509v3 Authority Key Identifier: keyid:A8:1D:15:5C:A4:04:AE:41:45:78:1A:F0:5E:B5:3A:12:19:E2:E0:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C31B7/FCC334CC1E6B11EFAC0E914EC4F9AE02/qB0VXKQErkFFeBrwXrU6Ehni4GU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qB0VXKQErkFFeBrwXrU6Ehni4GU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C31B7/FCC334CC1E6B11EFAC0E914EC4F9AE02/qB0VXKQErkFFeBrwXrU6Ehni4GU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:3b:ba:93:24:94:7c:31:16:d8:f8:ce:66:49:cc:bc:fb:02: dd:73:ec:31:02:72:ad:52:40:dc:00:18:74:41:72:8e:e2:19: 03:69:f2:39:12:a6:0c:7d:a5:cd:13:48:32:89:1d:b2:6b:70: e3:a5:a8:f8:ed:07:49:a8:23:39:b3:10:35:12:1a:c3:b2:1a: 91:4f:eb:98:27:2c:d4:27:01:8c:19:c6:b6:73:d0:eb:3c:b9: 71:18:8d:37:45:9b:53:48:60:06:64:8d:17:e2:d5:79:3e:80: 63:4f:7d:00:59:73:53:7c:f9:1e:09:d1:9c:8f:f6:45:a8:49: 7c:a5:af:37:c7:07:56:cc:e4:84:84:f3:c9:c1:2b:b6:54:97: 8b:0c:c4:0b:10:4d:a4:9f:3a:4c:0a:4c:40:25:fb:3a:b6:25: 5b:48:ef:9d:83:26:e7:25:5b:2f:75:46:cf:a6:65:23:78:ab: c2:34:5b:b3:94:c3:22:f3:1c:ec:c7:2a:c2:c5:fd:04:e0:8f: 99:c0:ad:06:62:09:62:2c:72:ac:8c:2d:50:d2:1c:25:e1:62: ed:59:a7:a7:da:3e:9e:28:45:90:5e:63:20:4a:65:ec:38:21: a0:0c:81:8f:3c:b5:f7:6d:82:8c:d6:94:3e:60:f2:82:9f:2c: 89:82:c2:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzMxQjcxMTAvBgNVBAUTKEE4MUQxNTVDQTQwNEFFNDE0NTc4MUFGMDVFQjUzQTEy MTlFMkUwNjUwHhcNMjUwMzI5MDUzNjQ4WhcNMjUwNDA1MDUzNjQ4WjAYMRYwFAYD VQQDEw02N2U3ODZmMC0yMDBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAus9JuHV+TAlzmNOtJVk7gkC8HmklSdvVW4IXHECd70u4cHC677GhnGYRFWsW IQkRVn0XA8GhnHFbv73YMz7wcJ9DzA3laiNG2dajqq9Wh4L6ZeupA2CN7nJKTSrl TnMSViCLY5647dUakR9tpZIHhwu65nz/q/mrM0V0jSuQuTFeq4WZkvbwP3xjBd1N Kz/QQxYLEEc5oJpYPTpIcl9ovGtDoHks7TNCEtm4ptJrVYr9O+ExcKKTAYVEZTSF 93l4klYIlSVCUONYFEhOyrf64kIu30XRcqwG7Bfj9Um9V1tElS/vPrqkdxPRjFwk UKfU6UDrPep2uokGdqZ21OOJAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ/3DbfK stGfTbmvdmoQh1LUjkq2MB8GA1UdIwQYMBaAFKgdFVykBK5BRXga8F61OhIZ4uBl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzFCNy9GQ0MzMzRDQzFF NkIxMUVGQUMwRTkxNEVDNEY5QUUwMi9xQjBWWEtRRXJrRkZlQnJ3WHJVNkVobmk0 R1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FCMFZYS1FFcmtGRmVCcndYclU2RWhuaTRHVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MzFCNy9GQ0MzMzRDQzFFNkIxMUVGQUMwRTkxNEVDNEY5QUUwMi9xQjBWWEtRRXJr RkZlQnJ3WHJVNkVobmk0R1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOO7qTJJR8MRbY+M5mScy8+wLdc+wxAnKtUkDcABh0QXKO4hkDafI5 EqYMfaXNE0gyiR2ya3Djpaj47QdJqCM5sxA1EhrDshqRT+uYJyzUJwGMGca2c9Dr PLlxGI03RZtTSGAGZI0X4tV5PoBjT30AWXNTfPkeCdGcj/ZFqEl8pa83xwdWzOSE hPPJwSu2VJeLDMQLEE2knzpMCkxAJfs6tiVbSO+dgybnJVsvdUbPpmUjeKvCNFuz lMMi8xzsxyrCxf0E4I+ZwK0GYgliLHKsjC1Q0hwl4WLtWaen2j6eKEWQXmMgSmXs OCGgDIGPPLX3bYKM1pQ+YPKCnyyJgsLo -----END CERTIFICATE-----Generated at Fri Apr 4 21:51:48 2025 by rpki-client