$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB04D/E958AFE6019C11EC91644B7BC4F9AE02/qhOo9ipv0n6bme44axRRnm_MhjI.mft File: qhOo9ipv0n6bme44axRRnm_MhjI.mft (raw, json) Hash identifier: DVlHhGLZ6Gkmlv4dArCxCQj6uylVU+47jGDe7rISCQ8= Subject key identifier: B4:60:89:D8:0C:03:E1:F3:E1:AA:F8:ED:1C:E8:09:46:05:E1:9F:47 Authority key identifier: AA:13:A8:F6:2A:6F:D2:7E:9B:99:EE:38:6B:14:51:9E:6F:CC:86:32 Certificate issuer: /CN=A91DB04D/serialNumber=AA13A8F62A6FD27E9B99EE386B14519E6FCC8632 Certificate serial: 0510 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qhOo9ipv0n6bme44axRRnm_MhjI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB04D/E958AFE6019C11EC91644B7BC4F9AE02/qhOo9ipv0n6bme44axRRnm_MhjI.mft Manifest number: 050A Signing time: Thu 10 Apr 2025 23:36:49 +0000 Manifest this update: Thu 10 Apr 2025 23:36:48 +0000 Manifest next update: Thu 17 Apr 2025 23:36:48 +0000 Files and hashes: 1: qhOo9ipv0n6bme44axRRnm_MhjI.crl (hash: hvdVhJU1uwQHeoJvzts3rfkrYAxwzwCI9pkcaerO4qk=) 2: 5913DBAA01A011ECBFF72849C4F9AE02.roa (hash: L2t/K4jYZMjKtZ2tLHjje+iSEvp8dgbz2aouwvg2y60=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB04D/E958AFE6019C11EC91644B7BC4F9AE02/qhOo9ipv0n6bme44axRRnm_MhjI.crl rsync://rpki.apnic.net/member_repository/A91DB04D/E958AFE6019C11EC91644B7BC4F9AE02/qhOo9ipv0n6bme44axRRnm_MhjI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qhOo9ipv0n6bme44axRRnm_MhjI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Apr 2025 23:36:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1296 (0x510) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB04D, serialNumber=AA13A8F62A6FD27E9B99EE386B14519E6FCC8632 Validity Not Before: Apr 10 23:36:48 2025 GMT Not After : Apr 17 23:36:48 2025 GMT Subject: CN=67f85611-df5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:98:79:7d:8a:07:5d:aa:17:0c:a6:7e:0c:71: 9f:79:8c:30:74:fa:89:fc:f1:05:b5:e2:57:48:e6: 21:bd:f5:d2:32:59:cf:51:e9:14:bf:d8:19:e5:3c: 78:89:6d:e9:35:72:34:25:52:c2:d4:80:1d:79:ca: a9:a2:59:42:ec:20:08:63:c0:73:c0:6d:db:9a:25: 00:53:44:ed:ed:70:b6:6b:81:ae:dc:df:b8:36:a0: aa:63:9f:fe:7e:e4:2c:90:ad:0e:c8:38:cb:9e:30: 62:db:e8:13:06:0c:13:22:80:a0:9b:71:53:0c:38: 73:9b:df:ce:44:95:a0:16:4f:e9:e4:ca:4c:cb:ba: 2d:5e:e5:71:63:63:55:d4:72:ed:18:42:6a:75:9d: 0b:0e:78:59:cd:5c:ae:4f:e0:f2:73:c6:ca:ff:a2: 4d:91:a7:d0:23:13:05:1d:79:ca:8c:76:0e:ec:3d: ff:25:5e:59:a8:06:0e:d6:a7:fb:9f:70:dc:ae:fa: 8c:4c:c2:51:02:63:72:31:5f:35:be:a5:0f:ac:a4: d6:a3:77:d3:83:b0:10:d9:67:e7:91:1f:c8:7f:85: d1:b2:0d:99:d2:6f:26:c9:e6:d9:ee:df:86:ea:51: 73:6c:6b:c5:14:79:c3:83:80:78:8b:4c:cf:d1:1b: 51:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:60:89:D8:0C:03:E1:F3:E1:AA:F8:ED:1C:E8:09:46:05:E1:9F:47 X509v3 Authority Key Identifier: keyid:AA:13:A8:F6:2A:6F:D2:7E:9B:99:EE:38:6B:14:51:9E:6F:CC:86:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB04D/E958AFE6019C11EC91644B7BC4F9AE02/qhOo9ipv0n6bme44axRRnm_MhjI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qhOo9ipv0n6bme44axRRnm_MhjI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB04D/E958AFE6019C11EC91644B7BC4F9AE02/qhOo9ipv0n6bme44axRRnm_MhjI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:b0:62:4e:92:28:32:0d:0f:b9:9a:3b:db:c2:1a:b5:7b:ec: d9:c8:a1:c8:6d:19:13:3c:7e:06:76:d8:bf:93:a5:c4:04:30: b3:92:46:1a:e8:d8:c2:f8:0f:ff:d1:ec:a2:cb:de:b7:cd:ad: 0d:78:c6:1f:da:bd:80:00:90:0e:f9:da:cc:7f:ac:90:97:5b: 47:b0:5c:22:cf:63:d2:47:26:e0:5a:4c:91:7d:94:4e:51:5a: 57:fa:96:72:29:c1:0a:cd:75:2f:2f:1d:f9:e4:42:b7:cc:9a: 1b:00:19:06:8c:c5:ec:7d:d8:ef:38:30:1a:75:53:0e:31:a6: 5d:51:f5:4e:89:c3:01:de:01:0a:55:9d:f1:20:18:f1:20:ce: f4:8e:08:64:eb:08:45:c3:a1:26:43:d2:0b:50:ab:ca:25:2b: f1:f1:91:ae:3a:7e:90:fe:03:80:45:1a:1c:72:36:65:39:03: 5a:e9:b7:10:66:ed:00:ad:6b:c0:2c:51:ca:f3:fc:dc:8e:ad: c5:43:f5:19:5c:98:e4:d2:df:27:9a:75:1d:61:09:0f:b8:b7: aa:e3:a0:f7:a1:ad:57:09:f3:1a:03:1e:34:32:68:6e:0d:a9: ba:e1:dc:29:c6:23:86:e3:47:9f:bc:51:b0:1a:2d:eb:5a:b7: bb:4a:df:c7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBRAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REIwNEQxMTAvBgNVBAUTKEFBMTNBOEY2MkE2RkQyN0U5Qjk5RUUzODZCMTQ1MTlF NkZDQzg2MzIwHhcNMjUwNDEwMjMzNjQ4WhcNMjUwNDE3MjMzNjQ4WjAYMRYwFAYD VQQDEw02N2Y4NTYxMS1kZjViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5ph5fYoHXaoXDKZ+DHGfeYwwdPqJ/PEFteJXSOYhvfXSMlnPUekUv9gZ5Tx4 iW3pNXI0JVLC1IAdecqpollC7CAIY8BzwG3bmiUAU0Tt7XC2a4Gu3N+4NqCqY5/+ fuQskK0OyDjLnjBi2+gTBgwTIoCgm3FTDDhzm9/ORJWgFk/p5MpMy7otXuVxY2NV 1HLtGEJqdZ0LDnhZzVyuT+Dyc8bK/6JNkafQIxMFHXnKjHYO7D3/JV5ZqAYO1qf7 n3DcrvqMTMJRAmNyMV81vqUPrKTWo3fTg7AQ2WfnkR/If4XRsg2Z0m8myebZ7t+G 6lFzbGvFFHnDg4B4i0zP0RtRKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLRgidgM A+Hz4ar47RzoCUYF4Z9HMB8GA1UdIwQYMBaAFKoTqPYqb9J+m5nuOGsUUZ5vzIYy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjA0RC9FOTU4QUZFNjAx OUMxMUVDOTE2NDRCN0JDNEY5QUUwMi9xaE9vOWlwdjBuNmJtZTQ0YXhSUm5tX01o akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FoT285aXB2MG42Ym1lNDRheFJSbm1fTWhqSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjA0RC9FOTU4QUZFNjAxOUMxMUVDOTE2NDRCN0JDNEY5QUUwMi9xaE9vOWlwdjBu NmJtZTQ0YXhSUm5tX01oakkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASsGJOkigyDQ+5mjvbwhq1e+zZyKHIbRkTPH4Gdti/k6XEBDCzkkYa 6NjC+A//0eyiy963za0NeMYf2r2AAJAO+drMf6yQl1tHsFwiz2PSRybgWkyRfZRO UVpX+pZyKcEKzXUvLx355EK3zJobABkGjMXsfdjvODAadVMOMaZdUfVOicMB3gEK VZ3xIBjxIM70jghk6whFw6EmQ9ILUKvKJSvx8ZGuOn6Q/gOARRoccjZlOQNa6bcQ Zu0ArWvALFHK8/zcjq3FQ/UZXJjk0t8nmnUdYQkPuLeq46D3oa1XCfMaAx40Mmhu Dam64dwpxiOG40efvFGwGi3rWre7St/H -----END CERTIFICATE-----Generated at Sat Apr 12 19:09:45 2025 by rpki-client