$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.mft File: qrDiti9jQ4lXMMBUiOf8TibFGmw.mft (raw, json) Hash identifier: p6yIAbvad+wn4IZ8m7Cqt8hCpEJxz4mHHS9du7wwG8s= Subject key identifier: BC:49:3E:3F:75:83:AB:86:D5:8C:6D:EC:66:09:9B:28:2E:B1:D0:76 Authority key identifier: AA:B0:E2:B6:2F:63:43:89:57:30:C0:54:88:E7:FC:4E:26:C5:1A:6C Certificate issuer: /CN=A91DCAE8/serialNumber=AAB0E2B62F6343895730C05488E7FC4E26C51A6C Certificate serial: 34BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrDiti9jQ4lXMMBUiOf8TibFGmw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.mft Manifest number: 3498 Signing time: Tue 08 Apr 2025 14:47:32 +0000 Manifest this update: Tue 08 Apr 2025 14:47:32 +0000 Manifest next update: Tue 15 Apr 2025 14:47:32 +0000 Files and hashes: 1: qrDiti9jQ4lXMMBUiOf8TibFGmw.crl (hash: yIpCPCqS2Kdojo2ozyK66mbulK9ivBQPkbVCXC628kY=) 2: 006CE5442FBA11ECA05BB46EC4F9AE02.roa (hash: apmElx5HYADo3Em3FsRyatuvuOLQ9ijUTXsLu3KjKZY=) 3: 56F533B4A63011EEA6054D52C4F9AE02.roa (hash: 6oWZaqd4YEA2LX4UVdAVOpmAruJNhp7dksiMD1n7i0s=) 4: 2D89110A9A5311EE9CB13140C4F9AE02.roa (hash: 51Xns0oB8DIUPAAqRrljxkibyJY0Qjy6OKFbsk2hMYw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.crl rsync://rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrDiti9jQ4lXMMBUiOf8TibFGmw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 15 Apr 2025 14:47:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13501 (0x34bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DCAE8 Validity Not Before: Apr 8 14:47:32 2025 GMT Not After : Apr 15 14:47:32 2025 GMT Subject: CN=67f53704-b1b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:cd:72:35:22:78:79:58:c3:51:e0:76:90:95: 25:f7:6e:45:2a:a2:3c:e2:98:1c:c6:52:18:c3:5e: d3:88:7b:79:38:f5:6d:c0:13:9a:23:5e:ca:09:d2: 71:78:68:4e:b9:8b:aa:6b:d4:fc:67:e1:2f:de:bf: 19:10:d5:ea:24:06:59:7f:c3:d8:40:43:53:49:75: 82:16:25:39:5a:93:a9:48:31:51:31:19:51:39:b7: 5c:8c:65:3e:79:0e:b8:2b:fb:48:6b:94:e6:fc:1b: 39:67:a6:9c:4d:4d:8e:cd:7a:a6:b4:75:6f:ef:73: fa:87:c5:b2:81:56:f4:58:e4:f1:2c:ef:72:d6:67: 2b:86:11:5f:3c:23:b2:3a:29:2a:93:85:2e:1b:76: f3:fc:7b:dd:d0:8e:6b:9c:8f:cb:e1:66:8e:18:16: 1f:77:48:f5:db:47:68:7c:b9:d7:90:9d:03:46:86: 04:3f:68:c8:c6:21:4b:f9:14:d2:7a:9c:04:36:4b: 55:59:8a:9f:c7:50:df:44:57:fd:ec:88:6a:95:2a: 29:d6:4c:f8:06:80:60:2c:46:d2:79:a2:12:0a:57: fb:ed:b4:bf:0f:82:08:61:ba:61:8b:15:20:88:8f: af:9b:ef:84:4c:d9:35:75:57:0d:ab:b7:36:7b:a3: f5:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:49:3E:3F:75:83:AB:86:D5:8C:6D:EC:66:09:9B:28:2E:B1:D0:76 X509v3 Authority Key Identifier: keyid:AA:B0:E2:B6:2F:63:43:89:57:30:C0:54:88:E7:FC:4E:26:C5:1A:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrDiti9jQ4lXMMBUiOf8TibFGmw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:0c:76:63:3d:4b:29:8a:2e:28:44:71:d7:7a:0a:c6:14:8a: 65:a3:fe:ea:47:c2:d8:f1:c7:28:ea:36:bb:47:17:7c:7b:2c: f9:4d:ab:a4:b4:2c:c6:a5:3e:aa:18:c9:84:d9:a7:74:86:d7: 30:a9:59:5d:64:83:49:a6:8f:38:94:bc:fa:f1:9f:63:ba:4d: 35:0e:58:49:4a:14:5a:d4:7c:57:d1:16:ca:45:62:5a:53:77: d2:bd:f2:dd:d1:28:a6:5b:e1:0a:bb:9b:be:1f:0d:d6:3a:cf: bd:5e:62:ef:1d:a0:44:e6:35:95:1e:28:e7:c8:6e:0a:de:89: 9b:8d:e8:2f:dd:24:d5:66:81:70:26:10:c5:81:28:93:d0:f4: ea:7a:c7:19:3d:86:f1:73:7b:ba:37:bf:ce:64:68:c8:3b:ec: 9d:88:61:d4:ad:81:ee:54:63:77:6b:58:5a:cf:a4:dc:fb:0f: 4c:20:26:3e:4a:e0:58:64:ed:90:00:74:55:d1:6a:23:55:e3: 2e:aa:1f:a2:52:f5:ab:16:6f:d3:9a:10:7c:0a:75:55:68:88: 52:cc:0e:43:96:1e:61:67:4c:1a:30:61:dd:9d:fe:2b:1d:1a: 4d:fa:b0:2d:08:01:f0:04:93:09:c2:da:f8:6d:e1:33:3d:4e: ee:1a:23:bf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNL0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RENBRTgxMTAvBgNVBAUTKEFBQjBFMkI2MkY2MzQzODk1NzMwQzA1NDg4RTdGQzRF MjZDNTFBNkMwHhcNMjUwNDA4MTQ0NzMyWhcNMjUwNDE1MTQ0NzMyWjAYMRYwFAYD VQQDEw02N2Y1MzcwNC1iMWIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwM1yNSJ4eVjDUeB2kJUl925FKqI84pgcxlIYw17TiHt5OPVtwBOaI17KCdJx eGhOuYuqa9T8Z+Ev3r8ZENXqJAZZf8PYQENTSXWCFiU5WpOpSDFRMRlRObdcjGU+ eQ64K/tIa5Tm/Bs5Z6acTU2OzXqmtHVv73P6h8WygVb0WOTxLO9y1mcrhhFfPCOy Oikqk4UuG3bz/Hvd0I5rnI/L4WaOGBYfd0j120dofLnXkJ0DRoYEP2jIxiFL+RTS epwENktVWYqfx1DfRFf97IhqlSop1kz4BoBgLEbSeaISClf77bS/D4IIYbphixUg iI+vm++ETNk1dVcNq7c2e6P1mQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLxJPj91 g6uG1Yxt7GYJmygusdB2MB8GA1UdIwQYMBaAFKqw4rYvY0OJVzDAVIjn/E4mxRps MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQ0FFOC84QjZBREUxNDFE OTMxMUUyOTJDQjIzRjcwOEIwMkNEMi9xckRpdGk5alE0bFhNTUJVaU9mOFRpYkZH bXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FyRGl0aTlqUTRsWE1NQlVpT2Y4VGliRkdtdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Q0FFOC84QjZBREUxNDFEOTMxMUUyOTJDQjIzRjcwOEIwMkNEMi9xckRpdGk5alE0 bFhNTUJVaU9mOFRpYkZHbXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC7DHZjPUspii4oRHHXegrGFIplo/7qR8LY8cco6ja7Rxd8eyz5Tauk tCzGpT6qGMmE2ad0htcwqVldZINJpo84lLz68Z9juk01DlhJShRa1HxX0RbKRWJa U3fSvfLd0SimW+EKu5u+Hw3WOs+9XmLvHaBE5jWVHijnyG4K3ombjegv3STVZoFw JhDFgSiT0PTqescZPYbxc3u6N7/OZGjIO+ydiGHUrYHuVGN3a1haz6Tc+w9MICY+ SuBYZO2QAHRV0WojVeMuqh+iUvWrFm/TmhB8CnVVaIhSzA5Dlh5hZ0waMGHdnf4r HRpN+rAtCAHwBJMJwtr4beEzPU7uGiO/ -----END CERTIFICATE-----Generated at Thu Apr 10 17:28:01 2025 by rpki-client