$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7C1D/A8070AF28AF011EAA9528309C4F9AE02/qK6pspMKYU1coxq59-hDeTYaL0M.mft File: qK6pspMKYU1coxq59-hDeTYaL0M.mft (raw, json) Hash identifier: TL6JrdWUOZhA54Wr6XkGA/ROG5UEyH96bd6e5IPhYdk= Subject key identifier: 1F:B5:9D:41:2B:C0:F8:7D:7F:31:42:18:94:CC:01:80:27:27:CD:B4 Authority key identifier: A8:AE:A9:B2:93:0A:61:4D:5C:A3:1A:B9:F7:E8:43:79:36:1A:2F:43 Certificate issuer: /CN=A91D7C1D/serialNumber=A8AEA9B2930A614D5CA31AB9F7E84379361A2F43 Certificate serial: 098F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qK6pspMKYU1coxq59-hDeTYaL0M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D7C1D/A8070AF28AF011EAA9528309C4F9AE02/qK6pspMKYU1coxq59-hDeTYaL0M.mft Manifest number: 0981 Signing time: Fri 04 Apr 2025 20:18:47 +0000 Manifest this update: Fri 04 Apr 2025 20:18:47 +0000 Manifest next update: Fri 11 Apr 2025 20:18:47 +0000 Files and hashes: 1: qK6pspMKYU1coxq59-hDeTYaL0M.crl (hash: SZrEK0XJXzBwDV2Ma9hhkQpT20R680rXmX3I3a1G758=) 2: A292E3529E9711EEB6899B1CC4F9AE02.roa (hash: tLBsV4g2bMzhVFiX/6V4C27n2kArFIEOkUcBuZutWVg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D7C1D/A8070AF28AF011EAA9528309C4F9AE02/qK6pspMKYU1coxq59-hDeTYaL0M.crl rsync://rpki.apnic.net/member_repository/A91D7C1D/A8070AF28AF011EAA9528309C4F9AE02/qK6pspMKYU1coxq59-hDeTYaL0M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qK6pspMKYU1coxq59-hDeTYaL0M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 19:54:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2447 (0x98f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D7C1D Validity Not Before: Apr 4 20:18:47 2025 GMT Not After : Apr 11 20:18:47 2025 GMT Subject: CN=67f03ea7-082c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:dd:53:11:67:f3:68:de:26:b6:b6:ec:dc:13: 16:3b:d6:fd:a2:37:27:84:a8:4b:77:22:64:85:4a: f5:0d:1a:0d:36:11:87:24:84:29:72:fc:bf:7e:f6: 6a:0d:9e:23:42:32:bb:1c:2f:ed:01:ff:0f:24:2f: dc:93:07:e0:8a:8e:91:9b:24:84:1e:a3:2e:c9:5e: bd:5b:e5:1c:6b:05:3b:fc:20:f7:15:c9:86:b6:e3: 85:f5:a8:56:e7:c2:c0:ac:8c:0e:52:3b:c1:87:06: ce:3f:23:6c:87:81:08:50:10:1b:72:b3:43:35:39: 4c:de:b0:73:5c:82:3d:0e:f9:6e:54:ed:00:65:df: da:a9:de:0a:77:81:1f:06:58:11:b7:d1:f7:de:d8: 84:d2:80:e8:c6:be:5f:6f:ba:47:04:df:d7:d7:13: db:b9:bb:c5:39:74:bf:fa:e1:66:d3:9a:5d:43:63: 57:a8:1c:99:b5:54:70:a9:53:b2:86:f2:59:27:a2: d6:10:6a:18:21:53:5c:3f:48:90:f2:3c:fc:fc:3e: 37:73:2d:04:e3:bc:cd:9e:a1:7f:ab:3e:ab:5f:2e: ac:01:e3:fb:9c:43:5a:8d:a9:7a:9d:e0:aa:e6:8f: b3:d2:05:ae:bc:79:22:07:91:20:77:ce:da:ac:b4: 58:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:B5:9D:41:2B:C0:F8:7D:7F:31:42:18:94:CC:01:80:27:27:CD:B4 X509v3 Authority Key Identifier: keyid:A8:AE:A9:B2:93:0A:61:4D:5C:A3:1A:B9:F7:E8:43:79:36:1A:2F:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D7C1D/A8070AF28AF011EAA9528309C4F9AE02/qK6pspMKYU1coxq59-hDeTYaL0M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qK6pspMKYU1coxq59-hDeTYaL0M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7C1D/A8070AF28AF011EAA9528309C4F9AE02/qK6pspMKYU1coxq59-hDeTYaL0M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:95:be:0d:8d:87:27:f8:17:cf:cd:0d:fd:d6:cc:20:68:f7: 85:d2:a9:45:ef:b6:1e:37:bd:2f:73:0e:18:cb:41:a0:4f:5a: f4:af:85:28:34:96:08:9a:2e:45:0d:6e:d9:10:ac:df:b8:b0: f4:ce:c5:72:43:4f:4e:0d:ba:7b:e9:55:ea:47:9c:36:45:bf: 86:e7:4c:6b:c9:75:bf:22:65:5f:7d:7d:83:22:7e:de:a7:9a: e9:5a:c6:be:c6:ae:41:76:55:a5:ab:de:20:fb:b4:7a:eb:f3: 8a:84:77:ea:86:3b:e3:d3:27:a2:8c:68:29:65:4d:48:ff:c1: c5:e6:29:9d:7b:73:17:d5:e4:19:2d:b7:e2:c8:a4:e5:c2:c2: a6:81:e2:fc:3f:53:30:f1:0b:d6:14:09:ec:6d:5b:57:0d:bd: 72:36:a5:ba:47:15:27:df:e4:de:69:d0:10:93:5a:e9:c1:a5: 82:4a:29:8e:41:c9:8a:55:92:42:0c:7f:6a:f1:f1:c4:48:d8: 53:21:d0:bc:08:66:67:be:a8:75:de:69:ac:bd:d6:fa:25:93: c6:c3:47:c7:7a:6b:da:73:86:5b:0a:03:3a:32:47:6b:11:a1: 8b:68:1c:c0:ff:2b:ba:ad:66:2a:a6:7e:4f:96:c7:95:9a:77: ed:6b:4d:41 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCY8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDdDMUQxMTAvBgNVBAUTKEE4QUVBOUIyOTMwQTYxNEQ1Q0EzMUFCOUY3RTg0Mzc5 MzYxQTJGNDMwHhcNMjUwNDA0MjAxODQ3WhcNMjUwNDExMjAxODQ3WjAYMRYwFAYD VQQDEw02N2YwM2VhNy0wODJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArd1TEWfzaN4mtrbs3BMWO9b9ojcnhKhLdyJkhUr1DRoNNhGHJIQpcvy/fvZq DZ4jQjK7HC/tAf8PJC/ckwfgio6RmySEHqMuyV69W+UcawU7/CD3FcmGtuOF9ahW 58LArIwOUjvBhwbOPyNsh4EIUBAbcrNDNTlM3rBzXII9DvluVO0AZd/aqd4Kd4Ef BlgRt9H33tiE0oDoxr5fb7pHBN/X1xPbubvFOXS/+uFm05pdQ2NXqByZtVRwqVOy hvJZJ6LWEGoYIVNcP0iQ8jz8/D43cy0E47zNnqF/qz6rXy6sAeP7nENajal6neCq 5o+z0gWuvHkiB5Egd87arLRYdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB+1nUEr wPh9fzFCGJTMAYAnJ820MB8GA1UdIwQYMBaAFKiuqbKTCmFNXKMauffoQ3k2Gi9D MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEN0MxRC9BODA3MEFGMjhB RjAxMUVBQTk1MjgzMDlDNEY5QUUwMi9xSzZwc3BNS1lVMWNveHE1OS1oRGVUWWFM ME0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FLNnBzcE1LWVUxY294cTU5LWhEZVRZYUwwTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE N0MxRC9BODA3MEFGMjhBRjAxMUVBQTk1MjgzMDlDNEY5QUUwMi9xSzZwc3BNS1lV MWNveHE1OS1oRGVUWWFMME0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCelb4NjYcn+BfPzQ391swgaPeF0qlF77YeN70vcw4Yy0GgT1r0r4Uo NJYImi5FDW7ZEKzfuLD0zsVyQ09ODbp76VXqR5w2Rb+G50xryXW/ImVffX2DIn7e p5rpWsa+xq5BdlWlq94g+7R66/OKhHfqhjvj0yeijGgpZU1I/8HF5imde3MX1eQZ LbfiyKTlwsKmgeL8P1Mw8QvWFAnsbVtXDb1yNqW6RxUn3+TeadAQk1rpwaWCSimO QcmKVZJCDH9q8fHESNhTIdC8CGZnvqh13mmsvdb6JZPGw0fHemvac4ZbCgM6Mkdr EaGLaBzA/yu6rWYqpn5PlseVmnfta01B -----END CERTIFICATE-----Generated at Fri Apr 4 22:34:41 2025 by rpki-client