$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1AD0/86EF4BDE66CA11EBAC642735C4F9AE02/QwISXvsUnkUVYMdJW31DzZ6az_c.mft File: QwISXvsUnkUVYMdJW31DzZ6az_c.mft (raw, json) Hash identifier: ZcevFBqVNoRFnhJEOzQ0A6JpyuKBgb7u6m8Du6C19bE= Subject key identifier: CC:32:95:AB:08:7E:42:A5:CB:93:42:7A:CD:5E:AB:16:EF:A5:D9:DC Authority key identifier: 43:02:12:5E:FB:14:9E:45:15:60:C7:49:5B:7D:43:CD:9E:9A:CF:F7 Certificate issuer: /CN=A91F1AD0/serialNumber=4302125EFB149E451560C7495B7D43CD9E9ACFF7 Certificate serial: 0696 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QwISXvsUnkUVYMdJW31DzZ6az_c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F1AD0/86EF4BDE66CA11EBAC642735C4F9AE02/QwISXvsUnkUVYMdJW31DzZ6az_c.mft Manifest number: 068F Signing time: Fri 04 Apr 2025 22:24:05 +0000 Manifest this update: Fri 04 Apr 2025 22:24:05 +0000 Manifest next update: Fri 11 Apr 2025 22:24:05 +0000 Files and hashes: 1: QwISXvsUnkUVYMdJW31DzZ6az_c.crl (hash: 0LqAiIVnXYndvxim4e7+1+ug7yEDlbZ0wtHz4iLVRiM=) 2: 9507A58E66CC11EB8CD9533AC4F9AE02.roa (hash: mw0tfPfPL7FKi2Yof+LC4zjkegn0Gmah4wfaxap8CoE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F1AD0/86EF4BDE66CA11EBAC642735C4F9AE02/QwISXvsUnkUVYMdJW31DzZ6az_c.crl rsync://rpki.apnic.net/member_repository/A91F1AD0/86EF4BDE66CA11EBAC642735C4F9AE02/QwISXvsUnkUVYMdJW31DzZ6az_c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QwISXvsUnkUVYMdJW31DzZ6az_c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 22:24:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1686 (0x696) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F1AD0 Validity Not Before: Apr 4 22:24:05 2025 GMT Not After : Apr 11 22:24:05 2025 GMT Subject: CN=67f05c05-3887 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:72:d6:16:2a:58:3f:cc:c7:20:59:40:69:d4: 01:ee:0a:15:6f:05:8a:1f:a4:fe:7d:55:e3:95:47: 02:43:86:db:ba:2b:a7:1b:d5:07:7d:02:f3:3f:de: 2e:7a:f8:d1:90:ca:e8:e7:a4:87:81:f6:30:ad:11: 77:72:20:31:7e:1e:ab:dd:4b:0e:79:89:01:2b:4e: 03:be:db:a1:56:bc:0d:cb:c8:5a:20:d6:95:74:17: b3:6c:a7:b6:21:78:45:6e:8e:3e:2f:02:9e:4a:34: 27:4c:47:3a:32:52:bd:2b:bf:9f:f9:75:9f:48:8a: a6:d8:5b:f7:f7:40:72:23:43:f4:a6:af:ab:16:3b: 0d:49:2b:e9:23:e6:a8:e3:31:93:55:36:8b:bd:4f: 3a:1e:b1:de:73:20:c3:d4:d9:fa:36:f4:ff:c9:9f: 68:bd:7a:f9:a9:3e:d6:9c:58:03:37:37:0d:b6:3f: 56:94:cf:7a:58:38:f8:00:f4:a8:03:da:6e:9c:0a: 12:78:69:0b:63:30:06:42:6f:6c:73:50:c1:e4:18: 8c:a4:77:33:56:cb:6f:0a:83:0e:eb:44:50:cc:96: 3d:04:31:49:4c:1d:bb:c7:b5:17:fb:84:ff:d2:50: 68:7e:54:b2:1f:b1:18:80:7f:3b:aa:48:16:6f:22: d1:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:32:95:AB:08:7E:42:A5:CB:93:42:7A:CD:5E:AB:16:EF:A5:D9:DC X509v3 Authority Key Identifier: keyid:43:02:12:5E:FB:14:9E:45:15:60:C7:49:5B:7D:43:CD:9E:9A:CF:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F1AD0/86EF4BDE66CA11EBAC642735C4F9AE02/QwISXvsUnkUVYMdJW31DzZ6az_c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QwISXvsUnkUVYMdJW31DzZ6az_c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1AD0/86EF4BDE66CA11EBAC642735C4F9AE02/QwISXvsUnkUVYMdJW31DzZ6az_c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:b2:48:83:70:70:de:f6:09:fc:dd:db:87:d8:8b:11:dd:c0: ce:da:dd:e4:c5:a5:4d:28:d6:b7:fd:37:45:1d:d9:e7:ba:04: 7b:4d:3e:58:f6:f3:44:43:fb:0b:db:8a:5f:7c:26:ac:12:d2: cf:65:ff:1c:e5:65:05:14:4e:d9:76:4d:94:e5:a1:86:b6:89: f3:48:0c:af:cb:97:fa:2b:b2:69:4a:bf:f5:63:85:d9:34:e1: e9:22:80:c6:9f:f2:99:d0:20:a2:40:f9:fd:3f:3c:d2:48:f2: c7:a4:92:52:ef:e4:b6:4f:31:c8:3b:3a:ee:37:b4:6e:97:ff: 68:6e:9b:1e:44:ea:76:d1:c8:02:22:b4:56:39:cd:ba:c0:1f: a1:35:b5:c7:7f:45:9b:b4:12:34:73:2f:56:52:f7:2d:6d:94: a1:16:65:fd:2d:28:27:21:fb:21:7f:3b:68:12:99:8b:a4:a7: 1d:6b:9a:90:e9:f9:a6:5a:ff:83:d3:ec:a3:61:53:51:67:06: dc:6b:7a:14:b1:38:37:98:bc:27:b8:72:f1:02:de:cb:44:98: 08:1e:b2:74:45:3d:db:20:8d:d9:b4:64:73:ea:fa:6c:40:96: a3:08:09:68:0a:45:3e:f4:df:3d:ab:d9:17:c0:5e:6f:58:2d: 13:b9:c7:2f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBpYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjFBRDAxMTAvBgNVBAUTKDQzMDIxMjVFRkIxNDlFNDUxNTYwQzc0OTVCN0Q0M0NE OUU5QUNGRjcwHhcNMjUwNDA0MjIyNDA1WhcNMjUwNDExMjIyNDA1WjAYMRYwFAYD VQQDEw02N2YwNWMwNS0zODg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzHLWFipYP8zHIFlAadQB7goVbwWKH6T+fVXjlUcCQ4bbuiunG9UHfQLzP94u evjRkMro56SHgfYwrRF3ciAxfh6r3UsOeYkBK04DvtuhVrwNy8haINaVdBezbKe2 IXhFbo4+LwKeSjQnTEc6MlK9K7+f+XWfSIqm2Fv390ByI0P0pq+rFjsNSSvpI+ao 4zGTVTaLvU86HrHecyDD1Nn6NvT/yZ9ovXr5qT7WnFgDNzcNtj9WlM96WDj4APSo A9punAoSeGkLYzAGQm9sc1DB5BiMpHczVstvCoMO60RQzJY9BDFJTB27x7UX+4T/ 0lBoflSyH7EYgH87qkgWbyLRcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMwylasI fkKly5NCes1eqxbvpdncMB8GA1UdIwQYMBaAFEMCEl77FJ5FFWDHSVt9Q82ems/3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMUFEMC84NkVGNEJERTY2 Q0ExMUVCQUM2NDI3MzVDNEY5QUUwMi9Rd0lTWHZzVW5rVVZZTWRKVzMxRHpaNmF6 X2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1F3SVNYdnNVbmtVVllNZEpXMzFEelo2YXpfYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MUFEMC84NkVGNEJERTY2Q0ExMUVCQUM2NDI3MzVDNEY5QUUwMi9Rd0lTWHZzVW5r VVZZTWRKVzMxRHpaNmF6X2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUskiDcHDe9gn83duH2IsR3cDO2t3kxaVNKNa3/TdFHdnnugR7TT5Y 9vNEQ/sL24pffCasEtLPZf8c5WUFFE7Zdk2U5aGGtonzSAyvy5f6K7JpSr/1Y4XZ NOHpIoDGn/KZ0CCiQPn9PzzSSPLHpJJS7+S2TzHIOzruN7Rul/9obpseROp20cgC IrRWOc26wB+hNbXHf0WbtBI0cy9WUvctbZShFmX9LSgnIfshfztoEpmLpKcda5qQ 6fmmWv+D0+yjYVNRZwbca3oUsTg3mLwnuHLxAt7LRJgIHrJ0RT3bII3ZtGRz6vps QJajCAloCkU+9N89q9kXwF5vWC0Tuccv -----END CERTIFICATE-----Generated at Sun Apr 6 16:19:25 2025 by rpki-client