$ rpki-client -vvf rpki.apnic.net/member_repository/A91E711B/505C9738F5DB11EC9D06777BC4F9AE02/Qi87B4JkeC6YeHPYanROKGHypQM.mft File: Qi87B4JkeC6YeHPYanROKGHypQM.mft (raw, json) Hash identifier: Tbfn2yv8RJDUqS2qlZAxuoc+pU2XxAx50jqt4MfS2e8= Subject key identifier: 28:20:23:C0:EC:11:60:B6:EC:65:DA:99:0C:6B:AA:83:6F:9C:FE:CF Authority key identifier: 42:2F:3B:07:82:64:78:2E:98:78:73:D8:6A:74:4E:28:61:F2:A5:03 Certificate issuer: /CN=A91E711B/serialNumber=422F3B078264782E987873D86A744E2861F2A503 Certificate serial: 029F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qi87B4JkeC6YeHPYanROKGHypQM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E711B/505C9738F5DB11EC9D06777BC4F9AE02/Qi87B4JkeC6YeHPYanROKGHypQM.mft Manifest number: 029A Signing time: Thu 03 Apr 2025 01:32:03 +0000 Manifest this update: Thu 03 Apr 2025 01:32:03 +0000 Manifest next update: Thu 10 Apr 2025 01:32:03 +0000 Files and hashes: 1: Qi87B4JkeC6YeHPYanROKGHypQM.crl (hash: UlQPNAxkpKSurvx50i3JPLixFpdTvQTRECJLmag1OHI=) 2: 819F3DD6F5E111EC9754EB85C4F9AE02.roa (hash: hbDMnvq+3uPhy+l00wQh92gtO222M2b23uJyUw6S38s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E711B/505C9738F5DB11EC9D06777BC4F9AE02/Qi87B4JkeC6YeHPYanROKGHypQM.crl rsync://rpki.apnic.net/member_repository/A91E711B/505C9738F5DB11EC9D06777BC4F9AE02/Qi87B4JkeC6YeHPYanROKGHypQM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qi87B4JkeC6YeHPYanROKGHypQM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 01:32:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 671 (0x29f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E711B Validity Not Before: Apr 3 01:32:03 2025 GMT Not After : Apr 10 01:32:03 2025 GMT Subject: CN=67ede513-8b51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:e7:e3:bf:f9:3f:ae:79:4e:40:b1:62:33:c3: 85:6d:69:dc:93:fb:eb:75:c3:b1:c3:f2:f1:28:3b: 93:c1:ac:c7:42:f0:8d:34:9c:44:c5:e1:85:bb:d1: 6e:ab:94:d8:34:7b:dd:8f:65:cd:a6:20:a9:3d:5a: f5:58:0b:66:d9:1d:8b:7a:39:16:7d:9b:bc:d4:e3: 25:eb:6f:51:56:14:6c:bb:c0:65:96:62:9f:3a:29: 88:9b:b6:26:de:97:83:92:fd:b6:e5:07:f8:46:51: 7f:3a:f3:6b:47:2f:e6:3d:4d:f6:0f:d6:2e:e3:38: 3e:a4:52:20:ec:37:f3:b6:7b:eb:be:d5:e6:af:86: ba:e4:08:6a:f5:89:72:5c:06:a3:37:76:26:3e:a6: 8d:a3:3c:31:35:02:d1:f1:88:4f:98:43:bb:f2:1c: 43:cf:8b:a0:1d:49:ae:6f:8f:ca:bf:aa:2f:42:da: f9:75:33:fb:f7:54:c5:3a:21:38:f6:17:f7:b7:97: f5:50:a9:b5:c7:ad:a7:0d:20:94:15:0f:8e:ff:ec: 4c:16:1c:f8:08:99:5a:e1:77:a0:47:bf:33:d7:c7: e9:33:a0:d8:71:66:9c:30:d1:b8:79:20:61:c4:f9: 3b:8f:ea:8b:ac:90:df:f1:42:8a:aa:0a:cc:a8:15: 78:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:20:23:C0:EC:11:60:B6:EC:65:DA:99:0C:6B:AA:83:6F:9C:FE:CF X509v3 Authority Key Identifier: keyid:42:2F:3B:07:82:64:78:2E:98:78:73:D8:6A:74:4E:28:61:F2:A5:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E711B/505C9738F5DB11EC9D06777BC4F9AE02/Qi87B4JkeC6YeHPYanROKGHypQM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qi87B4JkeC6YeHPYanROKGHypQM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E711B/505C9738F5DB11EC9D06777BC4F9AE02/Qi87B4JkeC6YeHPYanROKGHypQM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:2c:a5:fb:ee:1a:62:65:7f:0f:f6:d6:ad:dc:c5:62:c3:39: c2:2b:d4:db:5c:1d:59:cb:fe:ee:d9:70:bc:d5:3d:81:de:37: c3:55:d3:72:8c:87:c4:98:17:93:61:90:bc:da:c3:fd:b6:c1: fb:b0:92:23:3e:0b:1c:9a:36:c7:a4:63:61:ce:9e:14:53:6e: 09:69:0e:f0:bf:cf:96:d2:85:98:ee:d5:0b:a2:d4:6a:e0:30: 13:35:31:e4:2b:4b:4f:94:a2:cf:47:35:ff:5d:c4:6b:f1:b2: ba:a7:a7:23:5f:cf:80:5d:f6:f7:a3:af:45:c3:ac:5b:ed:96: e8:81:e8:3b:ab:35:42:73:c1:5f:62:15:e3:b7:e9:70:bc:de: e9:26:c3:2a:8a:d2:92:36:78:59:de:94:60:36:0c:dd:71:08: bb:fe:da:af:c7:5a:36:dc:aa:f9:0a:4b:07:28:3d:d2:40:ed: cf:50:39:a3:72:d6:83:39:be:23:6c:ce:2c:5d:cf:f3:ec:7c: cb:77:25:25:06:20:2d:87:ae:43:29:64:ea:c5:ff:93:3d:f6: 94:1d:d8:69:ed:4e:ce:bb:03:95:e7:56:c1:57:68:1e:a8:c8: fe:d4:08:2c:03:85:c1:2a:60:6a:86:e0:e5:51:c4:b4:48:c8: d6:a5:f9:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAp8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTcxMUIxMTAvBgNVBAUTKDQyMkYzQjA3ODI2NDc4MkU5ODc4NzNEODZBNzQ0RTI4 NjFGMkE1MDMwHhcNMjUwNDAzMDEzMjAzWhcNMjUwNDEwMDEzMjAzWjAYMRYwFAYD VQQDEw02N2VkZTUxMy04YjUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5ufjv/k/rnlOQLFiM8OFbWnck/vrdcOxw/LxKDuTwazHQvCNNJxExeGFu9Fu q5TYNHvdj2XNpiCpPVr1WAtm2R2LejkWfZu81OMl629RVhRsu8BllmKfOimIm7Ym 3peDkv225Qf4RlF/OvNrRy/mPU32D9Yu4zg+pFIg7DfztnvrvtXmr4a65Ahq9Yly XAajN3YmPqaNozwxNQLR8YhPmEO78hxDz4ugHUmub4/Kv6ovQtr5dTP791TFOiE4 9hf3t5f1UKm1x62nDSCUFQ+O/+xMFhz4CJla4XegR78z18fpM6DYcWacMNG4eSBh xPk7j+qLrJDf8UKKqgrMqBV4MQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCggI8Ds EWC27GXamQxrqoNvnP7PMB8GA1UdIwQYMBaAFEIvOweCZHgumHhz2Gp0Tihh8qUD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzExQi81MDVDOTczOEY1 REIxMUVDOUQwNjc3N0JDNEY5QUUwMi9RaTg3QjRKa2VDNlllSFBZYW5ST0tHSHlw UU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FpODdCNEprZUM2WWVIUFlhblJPS0dIeXBRTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzExQi81MDVDOTczOEY1REIxMUVDOUQwNjc3N0JDNEY5QUUwMi9RaTg3QjRKa2VD NlllSFBZYW5ST0tHSHlwUU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAULKX77hpiZX8P9tat3MViwznCK9TbXB1Zy/7u2XC81T2B3jfDVdNy jIfEmBeTYZC82sP9tsH7sJIjPgscmjbHpGNhzp4UU24JaQ7wv8+W0oWY7tULotRq 4DATNTHkK0tPlKLPRzX/XcRr8bK6p6cjX8+AXfb3o69Fw6xb7Zbogeg7qzVCc8Ff YhXjt+lwvN7pJsMqitKSNnhZ3pRgNgzdcQi7/tqvx1o23Kr5CksHKD3SQO3PUDmj ctaDOb4jbM4sXc/z7HzLdyUlBiAth65DKWTqxf+TPfaUHdhp7U7OuwOV51bBV2ge qMj+1AgsA4XBKmBqhuDlUcS0SMjWpflg -----END CERTIFICATE-----Generated at Fri Apr 4 21:54:06 2025 by rpki-client