$ rpki-client -vvf rpki.apnic.net/member_repository/A91DAAAF/56B01DC0F85111EDA86FC820C4F9AE02/q-I6igEe0yhhVdpR9a14wbb8yT0.mft File: q-I6igEe0yhhVdpR9a14wbb8yT0.mft (raw, json) Hash identifier: b731BZl3zCOC2Gv+/+ilqdqBPBtaFhB0yabQ5QIK5nA= Subject key identifier: 23:36:5E:B7:62:DC:42:4A:CA:C5:01:6F:91:C2:5C:ED:43:08:F3:80 Authority key identifier: AB:E2:3A:8A:01:1E:D3:28:61:55:DA:51:F5:AD:78:C1:B6:FC:C9:3D Certificate issuer: /CN=A91DAAAF/serialNumber=ABE23A8A011ED3286155DA51F5AD78C1B6FCC93D Certificate serial: 015E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q-I6igEe0yhhVdpR9a14wbb8yT0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DAAAF/56B01DC0F85111EDA86FC820C4F9AE02/q-I6igEe0yhhVdpR9a14wbb8yT0.mft Manifest number: 015C Signing time: Sat 29 Mar 2025 03:30:21 +0000 Manifest this update: Sat 29 Mar 2025 03:30:20 +0000 Manifest next update: Sat 05 Apr 2025 03:30:20 +0000 Files and hashes: 1: q-I6igEe0yhhVdpR9a14wbb8yT0.crl (hash: 0eqy7aXCVLcXbY4wbSnMCJYbpNQzP3pL4qlMXIQAoPA=) 2: 34EEA87C040511EEA466E336C4F9AE02.roa (hash: 5uqHr9WzaI9hGdiEKRKQvARm6NgS6ujezLHWBDKu2RQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DAAAF/56B01DC0F85111EDA86FC820C4F9AE02/q-I6igEe0yhhVdpR9a14wbb8yT0.crl rsync://rpki.apnic.net/member_repository/A91DAAAF/56B01DC0F85111EDA86FC820C4F9AE02/q-I6igEe0yhhVdpR9a14wbb8yT0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q-I6igEe0yhhVdpR9a14wbb8yT0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 03:30:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 350 (0x15e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DAAAF Validity Not Before: Mar 29 03:30:20 2025 GMT Not After : Apr 5 03:30:20 2025 GMT Subject: CN=67e7694c-1032 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:84:4c:7a:6b:ed:58:53:34:da:e9:a7:5f:aa: 57:da:1d:9c:ae:f5:79:78:00:3c:3f:ce:f3:78:4a: 5e:d1:c7:c3:64:94:d8:5f:83:08:fe:3b:3e:48:48: 2a:27:99:5c:4f:d8:32:80:1d:78:50:12:61:63:ec: cc:cd:cf:1e:f4:6d:4a:ce:68:35:fa:ae:d1:f8:6e: 85:d6:48:2f:7c:ea:de:1d:61:b1:58:e3:06:d9:95: b8:22:f9:b8:1c:52:b8:68:22:de:ea:06:e6:cf:17: c8:01:8e:c3:80:3c:4c:e5:a7:5b:fc:82:ff:e8:42: 20:f6:7f:49:f4:45:22:c7:d2:aa:e0:ba:0b:b5:0f: 17:49:08:7a:c0:6e:7f:de:c7:93:08:8f:01:61:bd: bc:56:c2:32:eb:ee:4e:ee:33:73:ea:a4:97:20:89: f0:a2:fb:53:70:8e:bd:9b:50:9d:b0:33:33:de:c2: 05:cb:4f:aa:1e:bb:b7:2a:11:a1:7f:59:45:06:bc: 81:de:db:cf:7c:1e:5b:c8:f1:72:14:d1:03:72:1d: 36:47:c9:f8:a3:a1:3b:71:da:6f:c6:4e:dc:ab:e5: cf:b1:94:03:65:47:9c:7f:38:75:5e:32:c9:4c:c0: ac:97:a7:70:18:ff:bc:93:1c:f5:cc:de:9c:f8:37: 79:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:36:5E:B7:62:DC:42:4A:CA:C5:01:6F:91:C2:5C:ED:43:08:F3:80 X509v3 Authority Key Identifier: keyid:AB:E2:3A:8A:01:1E:D3:28:61:55:DA:51:F5:AD:78:C1:B6:FC:C9:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DAAAF/56B01DC0F85111EDA86FC820C4F9AE02/q-I6igEe0yhhVdpR9a14wbb8yT0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q-I6igEe0yhhVdpR9a14wbb8yT0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DAAAF/56B01DC0F85111EDA86FC820C4F9AE02/q-I6igEe0yhhVdpR9a14wbb8yT0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:fc:d2:7a:7c:07:4c:5d:0b:80:9d:dd:25:e6:08:98:c5:6c: 4f:b9:07:6e:f1:f7:ad:5e:2d:3f:ee:54:fa:e9:53:93:78:20: 62:0a:b3:67:a3:54:59:e2:19:b7:06:09:15:f6:96:75:40:14: 37:f1:54:13:2c:33:c3:22:f6:40:b6:3e:4c:de:72:01:e9:d7: d6:03:59:bd:d5:62:50:2d:b9:09:be:ed:15:57:35:70:6b:2f: 29:de:73:3d:b5:0f:32:58:86:7c:69:42:06:bc:13:c1:c3:39: fe:f3:96:10:49:94:78:71:8e:3b:74:33:9c:8c:8b:a4:4f:59: da:f3:e6:7e:31:d7:d0:8a:1c:b5:6e:7b:c9:47:35:45:27:78: da:f3:09:ce:44:97:80:6c:09:5f:b7:e4:41:b9:30:87:f2:e4: 2a:1e:34:3c:9d:c4:2b:51:36:f9:ad:78:29:f5:e6:c2:76:ef: b0:9e:2a:7f:f0:e7:6e:9b:07:6c:e1:77:dc:0e:c2:ee:8f:02: ff:ab:6d:d8:04:20:65:03:e3:b6:b8:07:e5:ce:ec:8f:6f:92: 4f:9d:63:8f:f7:e8:ce:3a:7d:3c:6b:1c:29:0e:3b:3d:e0:af: a8:c6:9e:b4:7f:28:8e:93:94:6b:aa:f8:50:b3:95:b3:0b:c7: d2:8d:73:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAV4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REFBQUYxMTAvBgNVBAUTKEFCRTIzQThBMDExRUQzMjg2MTU1REE1MUY1QUQ3OEMx QjZGQ0M5M0QwHhcNMjUwMzI5MDMzMDIwWhcNMjUwNDA1MDMzMDIwWjAYMRYwFAYD VQQDEw02N2U3Njk0Yy0xMDMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo4RMemvtWFM02umnX6pX2h2crvV5eAA8P87zeEpe0cfDZJTYX4MI/js+SEgq J5lcT9gygB14UBJhY+zMzc8e9G1Kzmg1+q7R+G6F1kgvfOreHWGxWOMG2ZW4Ivm4 HFK4aCLe6gbmzxfIAY7DgDxM5adb/IL/6EIg9n9J9EUix9Kq4LoLtQ8XSQh6wG5/ 3seTCI8BYb28VsIy6+5O7jNz6qSXIInwovtTcI69m1CdsDMz3sIFy0+qHru3KhGh f1lFBryB3tvPfB5byPFyFNEDch02R8n4o6E7cdpvxk7cq+XPsZQDZUecfzh1XjLJ TMCsl6dwGP+8kxz1zN6c+Dd5AQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCM2Xrdi 3EJKysUBb5HCXO1DCPOAMB8GA1UdIwQYMBaAFKviOooBHtMoYVXaUfWteMG2/Mk9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQUFBRi81NkIwMURDMEY4 NTExMUVEQTg2RkM4MjBDNEY5QUUwMi9xLUk2aWdFZTB5aGhWZHBSOWExNHdiYjh5 VDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3EtSTZpZ0VlMHloaFZkcFI5YTE0d2JiOHlUMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QUFBRi81NkIwMURDMEY4NTExMUVEQTg2RkM4MjBDNEY5QUUwMi9xLUk2aWdFZTB5 aGhWZHBSOWExNHdiYjh5VDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCY/NJ6fAdMXQuAnd0l5giYxWxPuQdu8fetXi0/7lT66VOTeCBiCrNn o1RZ4hm3BgkV9pZ1QBQ38VQTLDPDIvZAtj5M3nIB6dfWA1m91WJQLbkJvu0VVzVw ay8p3nM9tQ8yWIZ8aUIGvBPBwzn+85YQSZR4cY47dDOcjIukT1na8+Z+MdfQihy1 bnvJRzVFJ3ja8wnORJeAbAlft+RBuTCH8uQqHjQ8ncQrUTb5rXgp9ebCdu+wnip/ 8Odumwds4XfcDsLujwL/q23YBCBlA+O2uAflzuyPb5JPnWOP9+jOOn08axwpDjs9 4K+oxp60fyiOk5RrqvhQs5WzC8fSjXMU -----END CERTIFICATE-----Generated at Fri Apr 4 21:52:02 2025 by rpki-client