$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC068/781E7DC4D51611EEB35E6A60C4F9AE02/qjbeqgtIjXQ9MJajdNPOwwNOado.mft File: qjbeqgtIjXQ9MJajdNPOwwNOado.mft (raw, json) Hash identifier: Cb8CLuW4ORgF/JlyVvpswFwzc0aTiu6fBqi5ludVj3w= Subject key identifier: FB:72:EC:F0:10:51:EC:F0:14:24:25:01:40:3A:6A:12:74:8E:8A:BE Authority key identifier: AA:36:DE:AA:0B:48:8D:74:3D:30:96:A3:74:D3:CE:C3:03:4E:69:DA Certificate issuer: /CN=A91DC068/serialNumber=AA36DEAA0B488D743D3096A374D3CEC3034E69DA Certificate serial: D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qjbeqgtIjXQ9MJajdNPOwwNOado.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC068/781E7DC4D51611EEB35E6A60C4F9AE02/qjbeqgtIjXQ9MJajdNPOwwNOado.mft Manifest number: D1 Signing time: Sat 29 Mar 2025 05:06:01 +0000 Manifest this update: Sat 29 Mar 2025 05:06:01 +0000 Manifest next update: Sat 05 Apr 2025 05:06:01 +0000 Files and hashes: 1: qjbeqgtIjXQ9MJajdNPOwwNOado.crl (hash: /zlbJsZWD+2jusGBL2dIIxBX5aTiLFP4JO/Q/JxYxvA=) 2: 4C798C5AD5DD11EEA5B1C711C4F9AE02.roa (hash: UehIW4ne9/pa7E+bJ7b7vlEagKFtkPy1RDy9gQNG8w4=) 3: 4CFFF0A6D5DD11EEA5B1C711C4F9AE02.roa (hash: 39NjyNN95zMryV/4gipoP40hgOhWq2OieGFrOUrcjx8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC068/781E7DC4D51611EEB35E6A60C4F9AE02/qjbeqgtIjXQ9MJajdNPOwwNOado.crl rsync://rpki.apnic.net/member_repository/A91DC068/781E7DC4D51611EEB35E6A60C4F9AE02/qjbeqgtIjXQ9MJajdNPOwwNOado.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qjbeqgtIjXQ9MJajdNPOwwNOado.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 05:06:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 213 (0xd5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC068 Validity Not Before: Mar 29 05:06:01 2025 GMT Not After : Apr 5 05:06:01 2025 GMT Subject: CN=67e77fb9-8a97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:57:9b:4e:8e:b4:2f:de:b1:85:e0:4f:09:b4: 1e:fd:96:89:58:9b:56:52:16:60:27:24:fd:f7:e6: b6:45:68:ec:63:81:47:13:41:1a:14:01:4f:e2:82: 1a:07:6d:9b:1b:ae:3b:4a:6a:96:25:af:7c:b2:a5: 73:ae:65:85:40:a3:d0:b8:63:bc:c9:d3:b0:cb:90: 05:58:b2:1e:b6:39:26:0e:ce:ba:6b:7b:01:23:8d: e8:d0:17:2f:e3:7f:74:64:25:a0:f6:a2:7f:ed:a3: 01:3d:8d:20:e3:11:3c:9e:6e:80:aa:4d:c2:9e:e5: 0c:25:f4:76:0d:54:b6:7f:3e:f1:d5:e7:b8:8a:fc: 98:2d:b0:06:b6:d5:4e:b6:48:64:ff:35:13:5f:aa: 3e:97:92:28:65:fd:2d:46:ed:d9:06:47:d5:fb:38: 84:48:11:45:ad:0e:df:f0:86:2d:64:5c:9e:33:96: bb:4f:25:e1:e0:e8:64:7a:70:8a:13:a9:df:5f:f8: 57:62:d0:e9:59:ba:e6:87:cb:84:cb:9e:40:a9:b1: f9:73:84:87:15:a2:8f:13:f3:3c:bf:36:d5:78:87: fc:8d:95:19:88:a9:e4:99:65:34:fa:66:0a:68:c6: dd:77:48:d2:c1:af:75:eb:15:20:b8:e4:88:0d:61: 0b:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:72:EC:F0:10:51:EC:F0:14:24:25:01:40:3A:6A:12:74:8E:8A:BE X509v3 Authority Key Identifier: keyid:AA:36:DE:AA:0B:48:8D:74:3D:30:96:A3:74:D3:CE:C3:03:4E:69:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC068/781E7DC4D51611EEB35E6A60C4F9AE02/qjbeqgtIjXQ9MJajdNPOwwNOado.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qjbeqgtIjXQ9MJajdNPOwwNOado.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC068/781E7DC4D51611EEB35E6A60C4F9AE02/qjbeqgtIjXQ9MJajdNPOwwNOado.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:6c:d5:c2:74:63:7c:d2:5a:2a:4a:59:43:03:15:d0:02:d8: 6d:14:7e:26:fa:86:43:76:85:24:a6:42:ce:7c:5d:00:d4:ea: 94:f3:70:5b:a4:a7:0f:07:75:c6:61:de:5a:66:c8:c5:d1:3f: ee:de:d7:f5:6c:7a:ee:80:fc:3d:65:17:be:6c:a6:e4:02:0a: 96:42:13:4e:81:aa:87:46:e5:f6:ba:a3:43:30:74:78:fb:4e: 10:5b:b7:78:45:24:7d:be:4c:87:e2:01:20:55:52:e5:bc:af: 70:c9:26:dc:21:f5:f2:76:44:8d:a7:22:04:29:ec:35:14:bf: 8f:78:cd:1e:49:bc:b2:39:3e:25:85:fb:d9:e9:c8:fe:cd:b8: cb:21:a7:bf:a3:f1:9a:5c:95:bb:0b:83:74:e9:6b:ee:51:f0: e3:30:e4:1c:18:37:95:45:e2:11:d2:f4:06:53:c0:25:dd:2e: 66:53:98:a8:ae:17:38:65:5e:24:13:be:44:2c:49:01:23:2d: 8c:99:bb:5b:c9:6c:2c:67:45:be:6a:8a:80:f0:de:6e:81:a4: fb:32:bc:d2:b3:61:a8:3b:7f:51:ff:80:28:54:71:61:d3:07: 65:af:a0:15:90:78:55:35:f6:1c:ac:e0:e8:0d:b7:34:75:77: 73:f5:99:d9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REMwNjgxMTAvBgNVBAUTKEFBMzZERUFBMEI0ODhENzQzRDMwOTZBMzc0RDNDRUMz MDM0RTY5REEwHhcNMjUwMzI5MDUwNjAxWhcNMjUwNDA1MDUwNjAxWjAYMRYwFAYD VQQDEw02N2U3N2ZiOS04YTk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6lebTo60L96xheBPCbQe/ZaJWJtWUhZgJyT99+a2RWjsY4FHE0EaFAFP4oIa B22bG647SmqWJa98sqVzrmWFQKPQuGO8ydOwy5AFWLIetjkmDs66a3sBI43o0Bcv 4390ZCWg9qJ/7aMBPY0g4xE8nm6Aqk3CnuUMJfR2DVS2fz7x1ee4ivyYLbAGttVO tkhk/zUTX6o+l5IoZf0tRu3ZBkfV+ziESBFFrQ7f8IYtZFyeM5a7TyXh4OhkenCK E6nfX/hXYtDpWbrmh8uEy55AqbH5c4SHFaKPE/M8vzbVeIf8jZUZiKnkmWU0+mYK aMbdd0jSwa916xUguOSIDWELhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPty7PAQ UezwFCQlAUA6ahJ0joq+MB8GA1UdIwQYMBaAFKo23qoLSI10PTCWo3TTzsMDTmna MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzA2OC83ODFFN0RDNEQ1 MTYxMUVFQjM1RTZBNjBDNEY5QUUwMi9xamJlcWd0SWpYUTlNSmFqZE5QT3d3Tk9h ZG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FqYmVxZ3RJalhROU1KYWpkTlBPd3dOT2Fkby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzA2OC83ODFFN0RDNEQ1MTYxMUVFQjM1RTZBNjBDNEY5QUUwMi9xamJlcWd0SWpY UTlNSmFqZE5QT3d3Tk9hZG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAEbNXCdGN80loqSllDAxXQAthtFH4m+oZDdoUkpkLOfF0A1OqU83Bb pKcPB3XGYd5aZsjF0T/u3tf1bHrugPw9ZRe+bKbkAgqWQhNOgaqHRuX2uqNDMHR4 +04QW7d4RSR9vkyH4gEgVVLlvK9wySbcIfXydkSNpyIEKew1FL+PeM0eSbyyOT4l hfvZ6cj+zbjLIae/o/GaXJW7C4N06WvuUfDjMOQcGDeVReIR0vQGU8Al3S5mU5io rhc4ZV4kE75ELEkBIy2MmbtbyWwsZ0W+aoqA8N5ugaT7MrzSs2GoO39R/4AoVHFh 0wdlr6AVkHhVNfYcrODoDbc0dXdz9ZnZ -----END CERTIFICATE-----Generated at Fri Apr 4 22:00:46 2025 by rpki-client