$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDD3F/C1A47FD895AF11E6B7854371C4F9AE02/p-QTTZsR3qt1sReR1V450XROC_E.mft File: p-QTTZsR3qt1sReR1V450XROC_E.mft (raw, json) Hash identifier: i02dW+7HpQp3FGjMJQaLxbVy/kIgcL9KXP/RqQfZT2A= Subject key identifier: 64:FC:D0:70:80:D1:E5:EC:45:EA:2E:8C:AD:88:EE:81:55:30:43:BE Authority key identifier: A7:E4:13:4D:9B:11:DE:AB:75:B1:17:91:D5:5E:39:D1:74:4E:0B:F1 Certificate issuer: /CN=A91DDD3F/serialNumber=A7E4134D9B11DEAB75B11791D55E39D1744E0BF1 Certificate serial: 1DAE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-QTTZsR3qt1sReR1V450XROC_E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DDD3F/C1A47FD895AF11E6B7854371C4F9AE02/p-QTTZsR3qt1sReR1V450XROC_E.mft Manifest number: 1DA5 Signing time: Fri 04 Apr 2025 16:10:08 +0000 Manifest this update: Fri 04 Apr 2025 16:10:08 +0000 Manifest next update: Fri 11 Apr 2025 16:10:08 +0000 Files and hashes: 1: p-QTTZsR3qt1sReR1V450XROC_E.crl (hash: bbVj5rHUslhbcDgw4Gg5htAFoVUogi3oIWQMUbFhY7c=) 2: AE58A24695B011E696EFE472C4F9AE02.roa (hash: iaqQr5dNZ60TDLIhN3MftiKcnJuy69N4C5+umHfRLFA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DDD3F/C1A47FD895AF11E6B7854371C4F9AE02/p-QTTZsR3qt1sReR1V450XROC_E.crl rsync://rpki.apnic.net/member_repository/A91DDD3F/C1A47FD895AF11E6B7854371C4F9AE02/p-QTTZsR3qt1sReR1V450XROC_E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-QTTZsR3qt1sReR1V450XROC_E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 16:10:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7598 (0x1dae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DDD3F Validity Not Before: Apr 4 16:10:08 2025 GMT Not After : Apr 11 16:10:08 2025 GMT Subject: CN=67f00460-6481 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:e0:93:e9:a4:7c:1d:c0:fd:54:c4:27:95:dc: 65:02:71:4a:d9:65:8f:e7:82:23:06:be:20:d4:55: 4d:91:5e:f1:6f:95:c3:dc:bf:d2:08:b1:57:f8:7f: 2e:c6:61:ff:40:ca:0f:90:46:52:c6:df:a6:32:8e: 52:7f:ef:05:5e:9d:73:79:73:7d:c2:16:15:da:e7: d5:2f:6a:1e:0d:ac:25:1f:32:50:eb:51:6e:2d:dd: 04:1d:4c:40:d7:fc:7e:98:62:6e:b4:ca:b7:30:48: 25:61:92:5e:da:99:96:40:d6:bc:57:55:79:04:08: de:f7:1a:d5:06:46:71:cb:20:b0:94:d8:07:ee:22: a9:69:88:93:79:41:63:4f:ed:99:32:40:73:51:39: 39:51:a6:74:c8:68:74:49:36:dd:d3:be:22:3f:48: 7f:d3:f0:e6:02:14:20:00:ee:97:36:de:05:e5:da: e4:e9:08:27:86:d1:dc:b8:9f:00:f0:2f:e2:55:9d: 4a:df:b0:29:42:6f:19:1d:77:84:61:3d:57:44:5d: 79:e8:03:0a:f5:f5:d0:ea:f5:00:a4:c1:e7:a1:70: 3b:82:a5:b3:f7:53:6b:e7:8d:8c:13:1e:2c:0a:b4: 09:63:7d:85:a7:b1:a2:1d:15:1f:7a:8a:1e:00:40: 2e:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:FC:D0:70:80:D1:E5:EC:45:EA:2E:8C:AD:88:EE:81:55:30:43:BE X509v3 Authority Key Identifier: keyid:A7:E4:13:4D:9B:11:DE:AB:75:B1:17:91:D5:5E:39:D1:74:4E:0B:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DDD3F/C1A47FD895AF11E6B7854371C4F9AE02/p-QTTZsR3qt1sReR1V450XROC_E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-QTTZsR3qt1sReR1V450XROC_E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDD3F/C1A47FD895AF11E6B7854371C4F9AE02/p-QTTZsR3qt1sReR1V450XROC_E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:81:02:1b:07:7f:d5:8f:4f:a6:cd:f5:23:4d:0b:61:ef:4f: f2:8c:7a:f9:37:25:81:ee:db:b9:dc:2f:df:24:28:8d:5b:18: 26:f3:4b:5c:cb:7b:1b:c8:62:42:9e:0e:77:a0:e8:5c:47:71: 00:58:71:66:6e:47:5f:76:60:1c:64:84:e7:af:72:d7:a8:d5: eb:01:8b:78:66:99:5b:ab:39:1a:1b:bf:ba:a4:32:a3:5d:bd: 83:9e:e9:bf:4e:8c:fe:f0:3c:e7:5f:e0:35:2e:a3:a2:2f:1b: ff:0e:f3:75:43:5c:22:2a:48:bd:00:e5:95:5b:f8:84:c3:34: e8:20:c0:93:dd:ff:52:79:27:66:39:49:10:a4:c6:62:48:0c: 7d:79:cd:d7:16:70:2e:73:28:9c:21:58:52:98:51:97:45:b0: cf:12:f0:a6:58:36:21:94:75:4c:d1:dc:f3:97:43:f5:6e:d6: de:79:e7:d6:27:0a:23:1d:16:b2:88:33:dd:bd:97:3b:bf:5c: 85:63:54:06:0a:1e:c7:cf:2a:9b:58:44:52:7c:dc:b4:08:38: ac:04:47:ef:28:87:4e:80:8c:b5:6c:37:53:94:92:2d:72:c1: e5:3e:64:31:e9:3e:8d:25:ac:60:d7:eb:5f:61:89:18:c2:44: cc:3d:c0:5f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHa4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REREM0YxMTAvBgNVBAUTKEE3RTQxMzREOUIxMURFQUI3NUIxMTc5MUQ1NUUzOUQx NzQ0RTBCRjEwHhcNMjUwNDA0MTYxMDA4WhcNMjUwNDExMTYxMDA4WjAYMRYwFAYD VQQDEw02N2YwMDQ2MC02NDgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxeCT6aR8HcD9VMQnldxlAnFK2WWP54IjBr4g1FVNkV7xb5XD3L/SCLFX+H8u xmH/QMoPkEZSxt+mMo5Sf+8FXp1zeXN9whYV2ufVL2oeDawlHzJQ61FuLd0EHUxA 1/x+mGJutMq3MEglYZJe2pmWQNa8V1V5BAje9xrVBkZxyyCwlNgH7iKpaYiTeUFj T+2ZMkBzUTk5UaZ0yGh0STbd074iP0h/0/DmAhQgAO6XNt4F5drk6QgnhtHcuJ8A 8C/iVZ1K37ApQm8ZHXeEYT1XRF156AMK9fXQ6vUApMHnoXA7gqWz91Nr542MEx4s CrQJY32Fp7GiHRUfeooeAEAu6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGT80HCA 0eXsReoujK2I7oFVMEO+MB8GA1UdIwQYMBaAFKfkE02bEd6rdbEXkdVeOdF0Tgvx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEREQzRi9DMUE0N0ZEODk1 QUYxMUU2Qjc4NTQzNzFDNEY5QUUwMi9wLVFUVFpzUjNxdDFzUmVSMVY0NTBYUk9D X0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3AtUVRUWnNSM3F0MXNSZVIxVjQ1MFhST0NfRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE REQzRi9DMUE0N0ZEODk1QUYxMUU2Qjc4NTQzNzFDNEY5QUUwMi9wLVFUVFpzUjNx dDFzUmVSMVY0NTBYUk9DX0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4gQIbB3/Vj0+mzfUjTQth70/yjHr5NyWB7tu53C/fJCiNWxgm80tc y3sbyGJCng53oOhcR3EAWHFmbkdfdmAcZITnr3LXqNXrAYt4ZplbqzkaG7+6pDKj Xb2Dnum/Toz+8DznX+A1LqOiLxv/DvN1Q1wiKki9AOWVW/iEwzToIMCT3f9SeSdm OUkQpMZiSAx9ec3XFnAucyicIVhSmFGXRbDPEvCmWDYhlHVM0dzzl0P1btbeeefW JwojHRayiDPdvZc7v1yFY1QGCh7HzyqbWERSfNy0CDisBEfvKIdOgIy1bDdTlJIt csHlPmQx6T6NJaxg1+tfYYkYwkTMPcBf -----END CERTIFICATE-----Generated at Sun Apr 6 02:14:39 2025 by rpki-client