$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4EF7/C46FD7741B8F11E7AC4C7229C4F9AE02/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.mft File: qrUk5ZWlMOEsE6ohHC7ya2ndnJs.mft (raw, json) Hash identifier: 59j+zIhMh6Le+pROqF1lcRR7npZJ4hYPoy0rrl3bWfA= Subject key identifier: 20:C6:2D:59:6D:54:97:43:C8:45:04:02:42:1D:50:9C:65:3E:CE:3B Authority key identifier: AA:B5:24:E5:95:A5:30:E1:2C:13:AA:21:1C:2E:F2:6B:69:DD:9C:9B Certificate issuer: /CN=A91E4EF7/serialNumber=AAB524E595A530E12C13AA211C2EF26B69DD9C9B Certificate serial: 1B07 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4EF7/C46FD7741B8F11E7AC4C7229C4F9AE02/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.mft Manifest number: 1AFC Signing time: Fri 04 Apr 2025 16:20:44 +0000 Manifest this update: Fri 04 Apr 2025 16:20:43 +0000 Manifest next update: Fri 11 Apr 2025 16:20:43 +0000 Files and hashes: 1: qrUk5ZWlMOEsE6ohHC7ya2ndnJs.crl (hash: nScC0NG/2fBzFpbLA3jC5CVUkZiBOkqc0Jx7SZi+DLo=) 2: E24736EC9D9011EC89314083C4F9AE02.roa (hash: MQLW+ckG9k/91Edmhff4+dci4t4G4rJfBHrG+oHBPHU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4EF7/C46FD7741B8F11E7AC4C7229C4F9AE02/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.crl rsync://rpki.apnic.net/member_repository/A91E4EF7/C46FD7741B8F11E7AC4C7229C4F9AE02/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 16:20:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6919 (0x1b07) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4EF7 Validity Not Before: Apr 4 16:20:43 2025 GMT Not After : Apr 11 16:20:43 2025 GMT Subject: CN=67f006dc-dbdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:82:78:c1:59:de:9a:cb:0d:84:27:10:42:da: fa:51:67:a4:c7:df:0e:cc:cd:30:0c:a3:6f:c1:61: 2f:7a:39:fe:d8:50:db:ea:99:04:15:28:43:cf:e9: 0d:2c:7a:77:33:fa:2d:b7:59:74:1e:d8:9c:e0:14: 1c:2b:fa:87:93:3b:de:6c:f0:ad:14:0b:cb:4a:59: 71:e4:f3:ed:56:ed:64:ee:76:7f:63:b9:78:27:c9: f5:af:92:00:e1:67:e8:0b:37:d1:63:dc:b4:3c:46: c3:dc:b3:16:36:bd:6a:23:01:54:f0:8b:37:81:b4: fd:6e:6a:86:75:31:70:61:48:4f:df:92:3e:ef:43: f4:88:68:52:ac:50:04:8d:af:f0:7f:72:ec:94:7b: e4:54:32:f6:9e:4c:e1:ce:70:90:31:40:6b:48:e3: 33:4d:b1:f2:93:3a:51:57:af:c7:0c:5b:97:ac:30: cb:d3:7b:69:1b:4b:48:a2:3a:99:33:0e:94:69:01: 3f:fc:1c:28:f2:e0:2a:8a:28:a4:31:da:ae:59:af: 5a:88:76:c6:ab:4d:08:5d:87:3a:88:cf:e2:ab:84: b6:de:cd:9b:15:fc:5b:39:03:e9:d2:71:dd:85:54: 9a:61:aa:1d:f4:9f:b4:f2:03:e2:b9:a8:e2:63:51: 1c:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:C6:2D:59:6D:54:97:43:C8:45:04:02:42:1D:50:9C:65:3E:CE:3B X509v3 Authority Key Identifier: keyid:AA:B5:24:E5:95:A5:30:E1:2C:13:AA:21:1C:2E:F2:6B:69:DD:9C:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4EF7/C46FD7741B8F11E7AC4C7229C4F9AE02/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4EF7/C46FD7741B8F11E7AC4C7229C4F9AE02/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:83:fc:db:2e:7e:29:80:b9:04:b1:15:a8:97:7a:52:51:ad: fb:fc:16:25:41:a7:45:33:74:03:98:1c:88:95:ba:d4:80:07: 5d:58:90:c1:d3:e0:8e:aa:1b:8f:ef:7b:5a:9c:44:44:55:b9: 77:5a:df:45:b2:f7:c9:1b:d5:55:5c:d1:40:d0:72:f2:8a:b7: ae:80:ea:85:c3:5f:b4:78:92:6a:25:11:4a:07:e0:a3:53:9a: 8d:31:83:a9:a8:ae:c4:35:c8:8a:22:f4:e9:e9:29:c5:58:ec: 12:63:64:e7:37:92:95:db:33:bb:ad:ec:b3:3e:d9:27:1b:e5: 46:32:b3:d1:11:51:ef:c6:77:fb:49:85:f4:c3:95:93:3b:83: 0c:dd:7f:da:b4:3d:dd:2e:1c:2a:01:3a:86:c9:89:bf:35:92: e1:5b:2e:71:9b:34:3b:d6:62:2b:cd:1d:6e:df:d4:fc:db:46: a4:e7:bc:32:21:e5:28:12:a3:f2:10:8a:c6:fa:8b:8f:a1:ea: b6:ee:69:95:fa:f9:55:81:7c:d9:51:d4:c7:d7:ee:27:7e:fb: 35:cf:c1:a5:8f:00:e3:f4:9f:69:28:2c:aa:c0:7e:6f:e0:d9: 88:2a:85:6d:be:a9:10:8c:de:29:e2:f7:71:14:ab:bd:41:98: 61:55:92:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGwcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTRFRjcxMTAvBgNVBAUTKEFBQjUyNEU1OTVBNTMwRTEyQzEzQUEyMTFDMkVGMjZC NjlERDlDOUIwHhcNMjUwNDA0MTYyMDQzWhcNMjUwNDExMTYyMDQzWjAYMRYwFAYD VQQDEw02N2YwMDZkYy1kYmRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlYJ4wVnemssNhCcQQtr6UWekx98OzM0wDKNvwWEvejn+2FDb6pkEFShDz+kN LHp3M/ott1l0Htic4BQcK/qHkzvebPCtFAvLSllx5PPtVu1k7nZ/Y7l4J8n1r5IA 4WfoCzfRY9y0PEbD3LMWNr1qIwFU8Is3gbT9bmqGdTFwYUhP35I+70P0iGhSrFAE ja/wf3LslHvkVDL2nkzhznCQMUBrSOMzTbHykzpRV6/HDFuXrDDL03tpG0tIojqZ Mw6UaQE//Bwo8uAqiiikMdquWa9aiHbGq00IXYc6iM/iq4S23s2bFfxbOQPp0nHd hVSaYaod9J+08gPiuajiY1EcpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCDGLVlt VJdDyEUEAkIdUJxlPs47MB8GA1UdIwQYMBaAFKq1JOWVpTDhLBOqIRwu8mtp3Zyb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNEVGNy9DNDZGRDc3NDFC OEYxMUU3QUM0QzcyMjlDNEY5QUUwMi9xclVrNVpXbE1PRXNFNm9oSEM3eWEybmRu SnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FyVWs1WldsTU9Fc0U2b2hIQzd5YTJuZG5Kcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NEVGNy9DNDZGRDc3NDFCOEYxMUU3QUM0QzcyMjlDNEY5QUUwMi9xclVrNVpXbE1P RXNFNm9oSEM3eWEybmRuSnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAcg/zbLn4pgLkEsRWol3pSUa37/BYlQadFM3QDmByIlbrUgAddWJDB 0+COqhuP73tanEREVbl3Wt9FsvfJG9VVXNFA0HLyireugOqFw1+0eJJqJRFKB+Cj U5qNMYOpqK7ENciKIvTp6SnFWOwSY2TnN5KV2zO7reyzPtknG+VGMrPREVHvxnf7 SYX0w5WTO4MM3X/atD3dLhwqATqGyYm/NZLhWy5xmzQ71mIrzR1u39T820ak57wy IeUoEqPyEIrG+ouPoeq27mmV+vlVgXzZUdTH1+4nfvs1z8GljwDj9J9pKCyqwH5v 4NmIKoVtvqkQjN4p4vdxFKu9QZhhVZKz -----END CERTIFICATE-----Generated at Sat Apr 5 20:52:11 2025 by rpki-client