$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/q2foL8hqrKgqz_jcNkXNcWEBP3Y.mft File: q2foL8hqrKgqz_jcNkXNcWEBP3Y.mft (raw, json) Hash identifier: 4zpHDxJ0D8x9Rdc8vCtHSm8OTbzyPYWsmDdUIT+f+Zg= Subject key identifier: 14:5F:11:7F:33:2B:49:6C:5D:07:4F:91:3D:BD:67:C2:70:FA:45:0F Authority key identifier: AB:67:E8:2F:C8:6A:AC:A8:2A:CF:F8:DC:36:45:CD:71:61:01:3F:76 Certificate issuer: /CN=A91D1E4C/serialNumber=AB67E82FC86AACA82ACFF8DC3645CD7161013F76 Certificate serial: 02D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2foL8hqrKgqz_jcNkXNcWEBP3Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/q2foL8hqrKgqz_jcNkXNcWEBP3Y.mft Manifest number: 0ABF Signing time: Fri 04 Apr 2025 21:03:44 +0000 Manifest this update: Fri 04 Apr 2025 21:03:43 +0000 Manifest next update: Fri 11 Apr 2025 21:03:43 +0000 Files and hashes: 1: q2foL8hqrKgqz_jcNkXNcWEBP3Y.crl (hash: aVImFUVhVM7Fi2wRbmit1CqEe1ZfMibK22YI2tZbXw8=) 2: 743B3188E57211ECBC81A87EC4F9AE02.roa (hash: ukecD2pxHGlgKyIFMtJzbdcdaqfvaNOkIkVTe1ei8KE=) 3: FC358296CFA011EDA4AC5B18C4F9AE02.roa (hash: Kfs6t0RkTXatIBLPnXrK64Ffg/DQYtGVawG99/fXQls=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/q2foL8hqrKgqz_jcNkXNcWEBP3Y.crl rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/q2foL8hqrKgqz_jcNkXNcWEBP3Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2foL8hqrKgqz_jcNkXNcWEBP3Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 21:03:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 727 (0x2d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1E4C Validity Not Before: Apr 4 21:03:43 2025 GMT Not After : Apr 11 21:03:43 2025 GMT Subject: CN=67f0492f-8270 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f0:56:81:5c:67:fc:87:79:bc:a6:aa:5d:5e: 73:1c:69:3e:da:b6:4f:4f:f7:42:6d:5a:6e:10:2e: b6:bb:57:db:e9:9c:99:97:ab:fd:29:e3:9f:32:3a: dc:76:f1:10:13:d9:d0:7c:cf:60:6e:4c:07:40:8c: 4b:88:16:1d:99:63:ea:fe:1d:7f:b8:60:b8:d4:e3: f5:c1:1c:c9:90:70:39:19:8d:90:8a:6d:63:32:dd: b7:b0:40:e1:e2:2e:d3:2e:2f:66:c6:0b:f9:96:47: d3:20:83:0c:07:7d:bb:6c:82:69:7e:4f:47:a3:19: 6c:c7:62:fd:4f:8c:37:94:2f:37:5d:41:73:e1:41: 8b:58:50:50:35:20:55:6b:04:65:42:42:19:51:e3: 40:9a:9b:61:b2:59:81:df:ac:ec:51:31:0d:f4:44: f2:b2:e5:bf:76:73:35:14:80:1a:87:f6:97:3f:b7: 32:0b:3e:08:d1:ed:43:d1:e4:08:58:8d:b3:59:2e: 25:af:62:11:65:24:03:f6:63:3f:24:27:92:32:12: 7c:e0:d1:8d:21:d3:f4:52:af:58:4c:66:c6:6d:66: 62:23:c3:cc:75:86:6b:16:78:40:b6:05:eb:ad:c6: aa:1b:75:7f:e4:af:57:d5:82:75:30:8f:d1:1b:27: 9e:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:5F:11:7F:33:2B:49:6C:5D:07:4F:91:3D:BD:67:C2:70:FA:45:0F X509v3 Authority Key Identifier: keyid:AB:67:E8:2F:C8:6A:AC:A8:2A:CF:F8:DC:36:45:CD:71:61:01:3F:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/q2foL8hqrKgqz_jcNkXNcWEBP3Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2foL8hqrKgqz_jcNkXNcWEBP3Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/q2foL8hqrKgqz_jcNkXNcWEBP3Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:05:0b:0f:4f:0f:16:d9:47:ac:04:6a:dc:23:35:f3:b4:6f: 57:10:25:0f:09:bc:b3:c6:c3:7e:f0:c1:f3:0e:cb:32:cd:d2: e0:26:e8:be:22:e4:a5:37:c7:e2:9a:22:9e:eb:cc:10:09:49: a9:99:83:47:43:5f:6a:41:c7:76:a1:c9:7a:68:8e:b1:ab:b2: 9e:47:7c:1d:16:be:c3:6f:ce:d0:b1:c8:61:db:cc:68:be:46: e9:b7:99:78:f8:ce:f0:a1:d8:44:eb:67:c0:fe:18:a6:d9:83: 6a:ad:e6:60:f6:89:03:fd:77:3b:41:6d:ae:26:c5:67:bb:34: 27:4e:d3:98:d6:2e:7b:7f:57:b8:f8:88:f7:04:43:0d:89:f6: 6b:f2:78:13:c3:b7:99:6f:ce:78:36:bb:a0:49:00:36:5b:8d: 41:36:c8:8d:b5:83:1f:c9:d2:04:15:46:17:98:ff:c9:b8:b6: 42:b2:ed:e9:8b:89:e7:22:03:60:a0:ae:2a:ed:c2:1c:57:80: 2e:01:ca:e8:95:c8:4b:91:ad:35:81:4c:46:c5:54:8e:e4:05: ac:38:eb:e1:e6:21:2c:c0:51:62:d1:05:18:92:d4:b0:d5:14: 27:89:9b:86:b4:71:65:0e:3c:08:a3:c4:02:07:4c:04:80:3f: 59:20:07:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAtcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDFFNEMxMTAvBgNVBAUTKEFCNjdFODJGQzg2QUFDQTgyQUNGRjhEQzM2NDVDRDcx NjEwMTNGNzYwHhcNMjUwNDA0MjEwMzQzWhcNMjUwNDExMjEwMzQzWjAYMRYwFAYD VQQDEw02N2YwNDkyZi04MjcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAufBWgVxn/Id5vKaqXV5zHGk+2rZPT/dCbVpuEC62u1fb6ZyZl6v9KeOfMjrc dvEQE9nQfM9gbkwHQIxLiBYdmWPq/h1/uGC41OP1wRzJkHA5GY2Qim1jMt23sEDh 4i7TLi9mxgv5lkfTIIMMB327bIJpfk9Hoxlsx2L9T4w3lC83XUFz4UGLWFBQNSBV awRlQkIZUeNAmpthslmB36zsUTEN9ETysuW/dnM1FIAah/aXP7cyCz4I0e1D0eQI WI2zWS4lr2IRZSQD9mM/JCeSMhJ84NGNIdP0Uq9YTGbGbWZiI8PMdYZrFnhAtgXr rcaqG3V/5K9X1YJ1MI/RGyeetwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBRfEX8z K0lsXQdPkT29Z8Jw+kUPMB8GA1UdIwQYMBaAFKtn6C/IaqyoKs/43DZFzXFhAT92 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMUU0Qy83REFEQTU2Q0Q5 NEQxMUVBQTYwNEFDNTNDNEY5QUUwMi9xMmZvTDhocXJLZ3F6X2pjTmtYTmNXRUJQ M1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3EyZm9MOGhxcktncXpfamNOa1hOY1dFQlAzWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MUU0Qy83REFEQTU2Q0Q5NEQxMUVBQTYwNEFDNTNDNEY5QUUwMi9xMmZvTDhocXJL Z3F6X2pjTmtYTmNXRUJQM1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMBQsPTw8W2UesBGrcIzXztG9XECUPCbyzxsN+8MHzDssyzdLgJui+ IuSlN8fimiKe68wQCUmpmYNHQ19qQcd2ocl6aI6xq7KeR3wdFr7Db87Qschh28xo vkbpt5l4+M7wodhE62fA/him2YNqreZg9okD/Xc7QW2uJsVnuzQnTtOY1i57f1e4 +Ij3BEMNifZr8ngTw7eZb854NrugSQA2W41BNsiNtYMfydIEFUYXmP/JuLZCsu3p i4nnIgNgoK4q7cIcV4AuAcrolchLka01gUxGxVSO5AWsOOvh5iEswFFi0QUYktSw 1RQniZuGtHFlDjwIo8QCB0wEgD9ZIAfA -----END CERTIFICATE-----Generated at Sat Apr 5 12:31:13 2025 by rpki-client