$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB4AF/CC7B255ADCA911EC94E3E029C4F9AE02/qX6qTW8VW40nxAro4yfZulLDS0I.mft File: qX6qTW8VW40nxAro4yfZulLDS0I.mft (raw, json) Hash identifier: Ho+p9gf3GGChNfjg5L+iATvl6ytG/eLhxHtvU4rMnjw= Subject key identifier: A0:D9:0B:9F:2F:88:9C:02:5E:ED:EF:03:47:36:F2:B3:64:29:04:F2 Authority key identifier: A9:7E:AA:4D:6F:15:5B:8D:27:C4:0A:E8:E3:27:D9:BA:52:C3:4B:42 Certificate issuer: /CN=A91EB4AF/serialNumber=A97EAA4D6F155B8D27C40AE8E327D9BA52C34B42 Certificate serial: 02F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qX6qTW8VW40nxAro4yfZulLDS0I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB4AF/CC7B255ADCA911EC94E3E029C4F9AE02/qX6qTW8VW40nxAro4yfZulLDS0I.mft Manifest number: 02E6 Signing time: Fri 11 Apr 2025 01:18:39 +0000 Manifest this update: Fri 11 Apr 2025 01:18:39 +0000 Manifest next update: Fri 18 Apr 2025 01:18:39 +0000 Files and hashes: 1: qX6qTW8VW40nxAro4yfZulLDS0I.crl (hash: RSKxpnZVlHsZdSiUY6731+UMs2Ej+rNAxQPF830y33c=) 2: EC6483F2A21011ED850DD13CC4F9AE02.roa (hash: g+RGOAxg+gmDH6UuR6SC/jIzZA3SVBi6O8pr1DQbvx4=) 3: DCE70C6EF9B911ED8314C10EC4F9AE02.roa (hash: 9rL5P9zHSC/zuIwV8jLjeMHlPXI3Jer8IGE3VjIcIMA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB4AF/CC7B255ADCA911EC94E3E029C4F9AE02/qX6qTW8VW40nxAro4yfZulLDS0I.crl rsync://rpki.apnic.net/member_repository/A91EB4AF/CC7B255ADCA911EC94E3E029C4F9AE02/qX6qTW8VW40nxAro4yfZulLDS0I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qX6qTW8VW40nxAro4yfZulLDS0I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 01:18:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 753 (0x2f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB4AF, serialNumber=A97EAA4D6F155B8D27C40AE8E327D9BA52C34B42 Validity Not Before: Apr 11 01:18:39 2025 GMT Not After : Apr 18 01:18:39 2025 GMT Subject: CN=67f86def-81d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:97:be:7c:c1:8b:ec:68:f3:4a:b0:05:4f:57: 30:47:74:7c:79:4e:97:9c:25:c5:b7:b6:21:7e:df: d8:fe:70:9e:1e:49:58:19:43:b6:c7:57:ba:cf:f0: 75:4c:b1:17:b4:45:80:1a:9e:23:6b:87:8d:a4:19: a8:74:94:ec:83:c8:e5:d2:8f:a4:b7:e7:d5:35:1f: 5f:06:fd:17:7d:5a:76:ba:61:e8:ad:78:a5:22:58: 4e:51:c5:be:a4:c8:6f:fb:b9:83:e8:90:14:4e:15: d1:f5:42:a2:9a:a4:30:f8:85:2e:bc:63:be:d9:81: e4:d0:38:0d:da:24:da:73:16:fd:3a:15:b1:0b:67: 6e:89:69:b6:73:b5:09:e6:42:a4:7e:bf:4b:e4:b9: ac:79:b4:c5:f0:aa:37:c4:37:98:be:32:fa:dc:99: 3b:db:c5:66:41:b6:3d:89:22:cb:9b:13:b1:8f:10: 25:a1:2a:38:76:77:db:01:bf:d0:74:78:5d:6f:d7: 9f:18:cf:01:99:cd:f0:cb:fd:9c:f1:16:89:d9:5f: 96:9f:56:5f:1f:0a:e2:d0:ad:c0:b9:63:68:62:ae: 53:a7:ea:4a:2a:a2:10:3b:20:84:12:6f:60:b2:0a: 82:06:41:37:84:4a:f8:1f:93:9f:9a:75:4f:d5:e4: d3:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:D9:0B:9F:2F:88:9C:02:5E:ED:EF:03:47:36:F2:B3:64:29:04:F2 X509v3 Authority Key Identifier: keyid:A9:7E:AA:4D:6F:15:5B:8D:27:C4:0A:E8:E3:27:D9:BA:52:C3:4B:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB4AF/CC7B255ADCA911EC94E3E029C4F9AE02/qX6qTW8VW40nxAro4yfZulLDS0I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qX6qTW8VW40nxAro4yfZulLDS0I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB4AF/CC7B255ADCA911EC94E3E029C4F9AE02/qX6qTW8VW40nxAro4yfZulLDS0I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:6c:40:99:a5:b2:02:84:21:8b:45:9e:63:87:4c:4e:25:8d: 73:81:06:0a:62:20:4b:06:a4:86:db:0b:b0:c7:6f:69:8c:f3: 07:fb:ba:38:16:79:0e:25:1a:91:72:d8:5b:0f:51:aa:26:c2: f8:41:3b:19:f4:45:57:67:f9:05:d2:fc:1a:46:1a:4f:f5:a5: e0:aa:92:05:63:5d:0a:99:ed:a3:d8:38:1b:02:3f:25:71:3a: a8:f9:08:81:1d:3b:78:4b:ab:be:d7:5c:a9:cc:5d:07:4a:48: 66:34:6e:92:69:c4:19:a8:f2:36:d3:4a:3c:ac:1c:31:c4:11: c0:c3:12:e2:b4:22:c4:3d:a0:5d:2f:0e:33:b9:cf:d1:69:f2: f6:3c:55:50:d1:5a:d4:fe:bc:3e:99:60:6c:ec:19:aa:a8:11: 08:e7:85:cb:5b:36:b2:4f:22:01:29:fa:88:84:99:b3:e2:e9: 33:8f:fc:28:a9:00:52:13:91:b8:23:fb:5a:ba:be:f9:c9:21: 1e:17:7a:22:70:35:58:ff:09:f9:2d:88:51:a5:ad:70:26:bd: f4:96:5b:21:74:61:46:52:7c:04:79:ab:27:f9:50:f8:3b:d0: 6b:84:80:ec:c2:21:0c:13:75:25:fa:5d:6c:e4:20:88:93:96: 46:91:fc:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAvEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUI0QUYxMTAvBgNVBAUTKEE5N0VBQTRENkYxNTVCOEQyN0M0MEFFOEUzMjdEOUJB NTJDMzRCNDIwHhcNMjUwNDExMDExODM5WhcNMjUwNDE4MDExODM5WjAYMRYwFAYD VQQDEw02N2Y4NmRlZi04MWQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4Ze+fMGL7GjzSrAFT1cwR3R8eU6XnCXFt7Yhft/Y/nCeHklYGUO2x1e6z/B1 TLEXtEWAGp4ja4eNpBmodJTsg8jl0o+kt+fVNR9fBv0XfVp2umHorXilIlhOUcW+ pMhv+7mD6JAUThXR9UKimqQw+IUuvGO+2YHk0DgN2iTacxb9OhWxC2duiWm2c7UJ 5kKkfr9L5LmsebTF8Ko3xDeYvjL63Jk728VmQbY9iSLLmxOxjxAloSo4dnfbAb/Q dHhdb9efGM8Bmc3wy/2c8RaJ2V+Wn1ZfHwri0K3AuWNoYq5Tp+pKKqIQOyCEEm9g sgqCBkE3hEr4H5OfmnVP1eTTkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKDZC58v iJwCXu3vA0c28rNkKQTyMB8GA1UdIwQYMBaAFKl+qk1vFVuNJ8QK6OMn2bpSw0tC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjRBRi9DQzdCMjU1QURD QTkxMUVDOTRFM0UwMjlDNEY5QUUwMi9xWDZxVFc4Vlc0MG54QXJvNHlmWnVsTERT MEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FYNnFUVzhWVzQwbnhBcm80eWZadWxMRFMwSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QjRBRi9DQzdCMjU1QURDQTkxMUVDOTRFM0UwMjlDNEY5QUUwMi9xWDZxVFc4Vlc0 MG54QXJvNHlmWnVsTERTMEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhbECZpbIChCGLRZ5jh0xOJY1zgQYKYiBLBqSG2wuwx29pjPMH+7o4 FnkOJRqRcthbD1GqJsL4QTsZ9EVXZ/kF0vwaRhpP9aXgqpIFY10Kme2j2DgbAj8l cTqo+QiBHTt4S6u+11ypzF0HSkhmNG6SacQZqPI200o8rBwxxBHAwxLitCLEPaBd Lw4zuc/RafL2PFVQ0VrU/rw+mWBs7BmqqBEI54XLWzayTyIBKfqIhJmz4ukzj/wo qQBSE5G4I/taur75ySEeF3oicDVY/wn5LYhRpa1wJr30llshdGFGUnwEeasn+VD4 O9BrhIDswiEME3Ul+l1s5CCIk5ZGkfzX -----END CERTIFICATE-----Generated at Sat Apr 12 17:00:06 2025 by rpki-client