$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8A55/5FC658260BC911EE9C6F185EC4F9AE02/QyiNyelBKGI4XB6D3TeGNYMyDRg.mft File: QyiNyelBKGI4XB6D3TeGNYMyDRg.mft (raw, json) Hash identifier: qefdOtmHCN0YvOVJWhutA5daKL2NeOZpecgq0qrr2k4= Subject key identifier: E7:FB:47:63:88:A2:F2:34:6D:E6:B7:69:BA:6B:76:B1:E3:19:BE:B4 Authority key identifier: 43:28:8D:C9:E9:41:28:62:38:5C:1E:83:DD:37:86:35:83:32:0D:18 Certificate issuer: /CN=A91D8A55/serialNumber=43288DC9E9412862385C1E83DD37863583320D18 Certificate serial: 0161 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QyiNyelBKGI4XB6D3TeGNYMyDRg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8A55/5FC658260BC911EE9C6F185EC4F9AE02/QyiNyelBKGI4XB6D3TeGNYMyDRg.mft Manifest number: 015D Signing time: Sat 19 Apr 2025 03:18:14 +0000 Manifest this update: Sat 19 Apr 2025 03:18:14 +0000 Manifest next update: Sat 26 Apr 2025 03:18:14 +0000 Files and hashes: 1: QyiNyelBKGI4XB6D3TeGNYMyDRg.crl (hash: KAVW4An61kuQix/1bFKb2gkxZwIrJ3yJOr87xJoJink=) 2: D1596F0E0BCF11EE8FB8EE16C4F9AE02.roa (hash: JnZnYwDPY6T9KAqalaHmfpI6/yYUrsg6tF5XISERaGQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8A55/5FC658260BC911EE9C6F185EC4F9AE02/QyiNyelBKGI4XB6D3TeGNYMyDRg.crl rsync://rpki.apnic.net/member_repository/A91D8A55/5FC658260BC911EE9C6F185EC4F9AE02/QyiNyelBKGI4XB6D3TeGNYMyDRg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QyiNyelBKGI4XB6D3TeGNYMyDRg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 353 (0x161) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8A55, serialNumber=43288DC9E9412862385C1E83DD37863583320D18 Validity Not Before: Apr 19 03:18:14 2025 GMT Not After : Apr 26 03:18:14 2025 GMT Subject: CN=680315f6-aaaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:87:27:2f:b2:71:d7:03:a2:da:5b:0e:13:be: b1:c2:4b:2a:6b:4a:84:4a:a6:39:d8:cc:f1:9c:17: 1b:53:a8:94:16:9e:63:95:3b:b7:36:4d:08:52:66: 27:38:a0:36:ff:e9:11:b8:09:f0:5b:fd:e0:83:f2: c4:6b:1d:c1:4f:18:ae:43:8a:de:d4:55:99:97:6a: 03:8c:df:c2:f5:51:10:39:3b:60:08:3f:66:46:fc: 48:73:f7:1d:02:d2:25:65:97:33:4f:5f:28:b1:f7: 17:93:6f:07:50:8e:24:86:fd:ae:08:bf:be:d4:c6: 95:8d:87:95:86:18:e5:48:f4:f6:6f:bc:ab:cd:4e: b7:24:fb:f7:fe:2f:8c:c6:43:34:80:aa:67:f5:da: 90:50:08:bb:0d:23:91:ba:bb:5e:a9:73:c4:9a:67: 4f:30:82:59:75:72:b4:ee:32:63:62:b5:84:53:01: ef:ab:5a:ac:7d:b1:3c:ca:31:ec:62:06:9a:e4:fc: 73:57:15:1c:0a:74:98:79:3c:22:d8:3c:1b:de:06: 8f:32:47:68:41:80:9f:5d:5a:2f:fb:e2:ef:5d:6c: 8f:5f:2e:58:44:b1:d9:72:ec:8c:66:02:8f:de:95: ab:81:6e:f2:95:7b:dd:f9:aa:a8:9d:22:62:8c:9c: 85:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:FB:47:63:88:A2:F2:34:6D:E6:B7:69:BA:6B:76:B1:E3:19:BE:B4 X509v3 Authority Key Identifier: keyid:43:28:8D:C9:E9:41:28:62:38:5C:1E:83:DD:37:86:35:83:32:0D:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8A55/5FC658260BC911EE9C6F185EC4F9AE02/QyiNyelBKGI4XB6D3TeGNYMyDRg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QyiNyelBKGI4XB6D3TeGNYMyDRg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8A55/5FC658260BC911EE9C6F185EC4F9AE02/QyiNyelBKGI4XB6D3TeGNYMyDRg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:fe:95:b3:9b:99:a4:8e:c7:42:0c:16:73:04:df:4a:fb:dd: 5e:bb:32:71:4c:a4:24:77:95:d3:ba:c7:66:27:a5:4c:ad:8f: 90:00:09:78:92:db:59:7f:3d:fe:fe:b4:27:1d:18:24:32:3b: d0:3c:9b:7d:24:68:87:db:4a:09:d9:00:34:c3:bc:d4:e9:b7: 35:d2:6a:ce:66:d7:89:d3:ec:ce:25:03:7c:40:6c:31:01:18: 1d:7b:1b:da:94:59:7c:2b:70:2b:ac:22:27:a5:7f:5e:a8:c4: 73:73:da:ca:58:cc:84:1f:14:e6:97:b8:ae:be:1d:9d:3d:32: e8:45:4c:5d:84:6d:88:ec:36:38:eb:91:74:4b:31:dc:32:9f: 84:62:38:09:76:4c:d3:94:5a:88:49:5f:3d:67:a8:58:cc:50: e5:81:90:2c:64:35:2c:0c:a4:2f:01:ed:03:dc:0d:ca:76:95: 8d:a6:c6:e7:7e:98:0e:a2:65:a2:d2:58:7e:df:44:36:5b:fe: 8e:9e:e4:41:05:8f:d9:45:10:3e:84:5f:f1:40:d9:39:5a:64: 62:ea:18:09:9b:a7:76:25:d9:4d:8d:f7:d5:e8:d0:98:a0:32: 11:a7:1b:1a:35:be:b6:6d:fa:8a:f5:96:51:1b:42:95:2b:76: 08:cd:16:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDhBNTUxMTAvBgNVBAUTKDQzMjg4REM5RTk0MTI4NjIzODVDMUU4M0REMzc4NjM1 ODMzMjBEMTgwHhcNMjUwNDE5MDMxODE0WhcNMjUwNDI2MDMxODE0WjAYMRYwFAYD VQQDEw02ODAzMTVmNi1hYWFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtocnL7Jx1wOi2lsOE76xwksqa0qESqY52MzxnBcbU6iUFp5jlTu3Nk0IUmYn OKA2/+kRuAnwW/3gg/LEax3BTxiuQ4re1FWZl2oDjN/C9VEQOTtgCD9mRvxIc/cd AtIlZZczT18osfcXk28HUI4khv2uCL++1MaVjYeVhhjlSPT2b7yrzU63JPv3/i+M xkM0gKpn9dqQUAi7DSORurteqXPEmmdPMIJZdXK07jJjYrWEUwHvq1qsfbE8yjHs Ygaa5PxzVxUcCnSYeTwi2Dwb3gaPMkdoQYCfXVov++LvXWyPXy5YRLHZcuyMZgKP 3pWrgW7ylXvd+aqonSJijJyFDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOf7R2OI ovI0bea3abprdrHjGb60MB8GA1UdIwQYMBaAFEMojcnpQShiOFweg903hjWDMg0Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOEE1NS81RkM2NTgyNjBC QzkxMUVFOUM2RjE4NUVDNEY5QUUwMi9ReWlOeWVsQktHSTRYQjZEM1RlR05ZTXlE UmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1F5aU55ZWxCS0dJNFhCNkQzVGVHTllNeURSZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OEE1NS81RkM2NTgyNjBCQzkxMUVFOUM2RjE4NUVDNEY5QUUwMi9ReWlOeWVsQktH STRYQjZEM1RlR05ZTXlEUmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBv/pWzm5mkjsdCDBZzBN9K+91euzJxTKQkd5XTusdmJ6VMrY+QAAl4 kttZfz3+/rQnHRgkMjvQPJt9JGiH20oJ2QA0w7zU6bc10mrOZteJ0+zOJQN8QGwx ARgdexvalFl8K3ArrCInpX9eqMRzc9rKWMyEHxTml7iuvh2dPTLoRUxdhG2I7DY4 65F0SzHcMp+EYjgJdkzTlFqISV89Z6hYzFDlgZAsZDUsDKQvAe0D3A3KdpWNpsbn fpgOomWi0lh+30Q2W/6OnuRBBY/ZRRA+hF/xQNk5WmRi6hgJm6d2JdlNjffV6NCY oDIRpxsaNb62bfqK9ZZRG0KVK3YIzRYR -----END CERTIFICATE-----Generated at Sat Apr 19 04:47:24 2025 by rpki-client