$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6E35/729CB23076FF11EBBFB60D14C4F9AE02/qg08vlkeG_ZBGL9vA2QSX6abipA.mft File: qg08vlkeG_ZBGL9vA2QSX6abipA.mft (raw, json) Hash identifier: x9uRJ+zytZrWBdCIu/XjCnn/vXEXzHaQ2mQJJz+h1mQ= Subject key identifier: 2A:F7:AB:22:4A:DB:CD:79:0F:B5:D7:ED:CA:B3:6A:44:BC:D8:A8:41 Authority key identifier: AA:0D:3C:BE:59:1E:1B:F6:41:18:BF:6F:03:64:12:5F:A6:9B:8A:90 Certificate issuer: /CN=A91D6E35/serialNumber=AA0D3CBE591E1BF64118BF6F0364125FA69B8A90 Certificate serial: 0675 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qg08vlkeG_ZBGL9vA2QSX6abipA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6E35/729CB23076FF11EBBFB60D14C4F9AE02/qg08vlkeG_ZBGL9vA2QSX6abipA.mft Manifest number: 066C Signing time: Sun 20 Apr 2025 21:59:15 +0000 Manifest this update: Sun 20 Apr 2025 21:59:14 +0000 Manifest next update: Sun 27 Apr 2025 21:59:14 +0000 Files and hashes: 1: qg08vlkeG_ZBGL9vA2QSX6abipA.crl (hash: sWqpzl6IakQ6gE0osPunjFVZ8E59TFHRWzqu2HVzuN8=) 2: EE188D209F2B11EDBB1C587AC4F9AE02.roa (hash: xunDUR+vk1rAB3LOb72QA9qMR5Y4O+s76u7aM9CtIVg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6E35/729CB23076FF11EBBFB60D14C4F9AE02/qg08vlkeG_ZBGL9vA2QSX6abipA.crl rsync://rpki.apnic.net/member_repository/A91D6E35/729CB23076FF11EBBFB60D14C4F9AE02/qg08vlkeG_ZBGL9vA2QSX6abipA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qg08vlkeG_ZBGL9vA2QSX6abipA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 21:59:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1653 (0x675) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6E35, serialNumber=AA0D3CBE591E1BF64118BF6F0364125FA69B8A90 Validity Not Before: Apr 20 21:59:14 2025 GMT Not After : Apr 27 21:59:14 2025 GMT Subject: CN=68056e33-a6ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f2:74:a3:83:43:6d:c1:e7:08:84:aa:46:f1: 2f:92:e6:33:2f:30:e9:44:7e:59:4f:db:7a:84:e0: 25:c4:c9:3e:2b:79:1b:94:3b:0e:53:73:7a:aa:83: f2:c4:99:2c:33:2c:2b:1c:e3:c0:1a:5c:76:10:bd: 48:d0:de:87:48:26:3f:aa:dc:03:c1:a6:1a:4a:e4: f0:73:c5:e2:a5:05:c2:43:5a:52:f5:b0:50:70:d5: 70:19:a8:6b:29:87:68:ea:f3:a2:7b:e7:f1:b1:82: a4:51:c1:da:43:57:48:38:65:e1:b5:dc:97:55:2b: 5f:b5:4b:e5:dd:b6:e5:42:72:2c:c2:af:21:97:c9: ae:a9:37:c1:31:9d:e1:fb:ed:4b:7b:09:a6:e7:9f: c5:a6:79:0d:00:cd:ac:7e:1e:62:13:58:ea:e2:3b: a9:86:94:37:c5:56:bf:c7:b8:42:3c:48:fb:e7:fa: 08:d8:1e:43:86:9a:04:95:be:99:3f:44:f7:d2:69: 6d:7e:1e:b9:0d:3e:bb:00:06:14:af:f3:55:62:8c: 54:c5:c3:22:db:39:67:6f:73:f3:f5:2c:dd:cd:cf: dd:54:33:f7:4b:7e:34:ec:08:d3:c0:6a:72:a5:02: a5:8b:d0:51:75:5c:f5:23:b4:f4:6c:7f:9f:7c:5b: 5f:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:F7:AB:22:4A:DB:CD:79:0F:B5:D7:ED:CA:B3:6A:44:BC:D8:A8:41 X509v3 Authority Key Identifier: keyid:AA:0D:3C:BE:59:1E:1B:F6:41:18:BF:6F:03:64:12:5F:A6:9B:8A:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6E35/729CB23076FF11EBBFB60D14C4F9AE02/qg08vlkeG_ZBGL9vA2QSX6abipA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qg08vlkeG_ZBGL9vA2QSX6abipA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6E35/729CB23076FF11EBBFB60D14C4F9AE02/qg08vlkeG_ZBGL9vA2QSX6abipA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:df:ea:14:21:fd:8e:51:d8:80:41:59:3a:d6:8f:1b:62:c8: e8:1e:fc:ff:92:64:fd:da:f3:3e:be:3e:7d:eb:d1:5a:65:9c: 72:a3:f7:10:bb:14:b2:5e:f7:1d:f7:59:41:aa:74:7b:23:6a: db:a0:77:c0:f5:a5:2e:66:bb:3a:37:00:76:1b:fa:a6:04:33: ed:f1:0b:4b:58:44:01:ea:3e:e2:af:66:37:92:d4:1d:79:b8: 9e:f9:93:e1:0f:b3:37:b6:93:2c:d2:a8:49:bd:13:39:04:c9: 78:55:2c:93:7e:3f:31:c2:0e:4c:f9:86:ac:e9:93:92:30:f1: d5:fb:0c:26:d1:ca:e7:d5:a2:fa:3c:fa:ea:86:86:9e:89:c2: 31:f1:0c:13:4f:53:f7:88:b5:c2:30:cb:c0:63:fd:d1:06:8e: 17:c2:23:f7:3d:28:d8:6a:3e:0b:33:90:ee:de:90:15:ed:da: e0:6b:8a:0e:7a:48:73:06:6e:a3:8b:b5:81:00:a1:98:d5:3b: de:4d:5c:bb:bf:96:8d:4f:19:7d:a2:1f:47:9e:e7:c0:c6:42: 7d:eb:93:a5:06:54:f3:e0:23:72:d9:45:42:92:58:8e:ea:43: 5f:2f:ed:6b:e9:34:22:77:3a:dc:64:3a:18:74:cb:ea:a5:fc: f2:42:87:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBnUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDZFMzUxMTAvBgNVBAUTKEFBMEQzQ0JFNTkxRTFCRjY0MTE4QkY2RjAzNjQxMjVG QTY5QjhBOTAwHhcNMjUwNDIwMjE1OTE0WhcNMjUwNDI3MjE1OTE0WjAYMRYwFAYD VQQDEw02ODA1NmUzMy1hNmVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvfJ0o4NDbcHnCISqRvEvkuYzLzDpRH5ZT9t6hOAlxMk+K3kblDsOU3N6qoPy xJksMywrHOPAGlx2EL1I0N6HSCY/qtwDwaYaSuTwc8XipQXCQ1pS9bBQcNVwGahr KYdo6vOie+fxsYKkUcHaQ1dIOGXhtdyXVStftUvl3bblQnIswq8hl8muqTfBMZ3h ++1Lewmm55/FpnkNAM2sfh5iE1jq4juphpQ3xVa/x7hCPEj75/oI2B5DhpoElb6Z P0T30mltfh65DT67AAYUr/NVYoxUxcMi2zlnb3Pz9Szdzc/dVDP3S3407AjTwGpy pQKli9BRdVz1I7T0bH+ffFtfawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCr3qyJK 2815D7XX7cqzakS82KhBMB8GA1UdIwQYMBaAFKoNPL5ZHhv2QRi/bwNkEl+mm4qQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENkUzNS83MjlDQjIzMDc2 RkYxMUVCQkZCNjBEMTRDNEY5QUUwMi9xZzA4dmxrZUdfWkJHTDl2QTJRU1g2YWJp cEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FnMDh2bGtlR19aQkdMOXZBMlFTWDZhYmlwQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NkUzNS83MjlDQjIzMDc2RkYxMUVCQkZCNjBEMTRDNEY5QUUwMi9xZzA4dmxrZUdf WkJHTDl2QTJRU1g2YWJpcEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAS3+oUIf2OUdiAQVk61o8bYsjoHvz/kmT92vM+vj5969FaZZxyo/cQ uxSyXvcd91lBqnR7I2rboHfA9aUuZrs6NwB2G/qmBDPt8QtLWEQB6j7ir2Y3ktQd ebie+ZPhD7M3tpMs0qhJvRM5BMl4VSyTfj8xwg5M+Yas6ZOSMPHV+wwm0crn1aL6 PPrqhoaeicIx8QwTT1P3iLXCMMvAY/3RBo4XwiP3PSjYaj4LM5Du3pAV7drga4oO ekhzBm6ji7WBAKGY1TveTVy7v5aNTxl9oh9HnufAxkJ965OlBlTz4CNy2UVCkliO 6kNfL+1r6TQidzrcZDoYdMvqpfzyQofD -----END CERTIFICATE-----Generated at Tue Apr 22 02:15:09 2025 by rpki-client