$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.mft File: qriBuCFHwwNrgPxnWTTcLkbOD38.mft (raw, json) Hash identifier: cVcCAnf26E6AO91sBD29Q5qBVNUlegH8SXqccapZIyY= Subject key identifier: D7:99:22:3B:15:D9:F4:7E:C6:80:90:EB:A3:95:E1:ED:98:CF:1D:8A Authority key identifier: AA:B8:81:B8:21:47:C3:03:6B:80:FC:67:59:34:DC:2E:46:CE:0F:7F Certificate issuer: /CN=A91F4EDE/serialNumber=AAB881B82147C3036B80FC675934DC2E46CE0F7F Certificate serial: 05BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qriBuCFHwwNrgPxnWTTcLkbOD38.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.mft Manifest number: 05B5 Signing time: Wed 02 Apr 2025 23:09:31 +0000 Manifest this update: Wed 02 Apr 2025 23:09:31 +0000 Manifest next update: Wed 09 Apr 2025 23:09:31 +0000 Files and hashes: 1: qriBuCFHwwNrgPxnWTTcLkbOD38.crl (hash: ikdcbZozBsI9t9Eo6pL5lK6vmTQ8kHYqOBcRYitW9aI=) 2: 8C4BB9AED9DB11EF9AE05220C4F9AE02.roa (hash: zsrAxxFfRp403bl7GSNrqmEpDz70fh0k4+NlvivXGV8=) 3: 5A9BFC3ABE7C11EB8BC25C1CC4F9AE02.roa (hash: +PXzRKDa1pBP+673hTlbAtrA0Uh8pso6MOGI9Du2wJM=) 4: 7E859EFEE60411EF89467057C4F9AE02.roa (hash: G47KdDVGbUCyf898ZT3HzgYoD9VrL0ChsA84sDifaK4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.crl rsync://rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qriBuCFHwwNrgPxnWTTcLkbOD38.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 23:09:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1470 (0x5be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4EDE Validity Not Before: Apr 2 23:09:31 2025 GMT Not After : Apr 9 23:09:31 2025 GMT Subject: CN=67edc3ab-2447 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ff:49:36:c3:31:9f:fe:f9:70:2a:19:47:a5: 6d:10:be:b9:b1:6a:81:80:bc:15:ef:aa:f2:8f:fa: 49:ad:84:e7:18:6f:cd:4a:36:f2:28:8a:8f:fa:7c: 4e:ad:e0:72:e0:af:76:0f:23:e1:ca:ee:db:b7:e1: 77:8e:38:11:71:9b:08:15:ff:10:83:a7:4f:32:c7: 6f:eb:25:37:68:19:21:3a:2c:7a:2d:b7:73:78:52: 95:90:9d:7f:51:b2:5b:9c:dd:de:01:60:99:82:f0: 8f:41:10:85:84:9b:56:73:3a:0d:a3:8f:5c:3c:48: f5:01:d3:00:12:02:55:56:d3:24:41:04:52:ea:da: 03:d7:16:5b:35:3a:44:9f:78:c2:79:e4:b6:85:21: 3a:66:92:1a:47:5a:0a:89:06:31:99:e4:d5:02:b5: d7:97:e5:40:a8:d9:b7:87:4e:f7:ff:61:d6:d3:fa: c0:de:31:cb:bf:cc:46:f3:a4:8a:22:c8:8c:9b:7a: b3:f7:77:c4:68:9d:6a:16:ce:5c:2c:75:d6:27:a4: 0f:cf:7d:a9:44:1b:b8:f8:9e:11:fb:78:02:d8:83: d9:d0:73:ff:2e:04:c2:24:20:41:a6:0f:46:7b:12: 23:d9:2c:9f:3c:45:b6:53:33:c6:01:8e:53:57:00: 9d:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:99:22:3B:15:D9:F4:7E:C6:80:90:EB:A3:95:E1:ED:98:CF:1D:8A X509v3 Authority Key Identifier: keyid:AA:B8:81:B8:21:47:C3:03:6B:80:FC:67:59:34:DC:2E:46:CE:0F:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qriBuCFHwwNrgPxnWTTcLkbOD38.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:07:0b:47:10:13:97:c8:e4:79:e7:ab:15:a5:5e:12:71:1f: e1:4f:a0:a2:a9:99:32:69:16:ce:a7:47:45:c1:46:e7:61:f9: 6f:eb:9c:64:40:5c:8f:a5:da:41:08:1e:8f:14:16:53:96:90: 87:bd:03:d7:0c:b8:34:3c:1d:07:7c:18:ea:be:13:96:ce:9c: 52:bd:33:bd:44:bd:bb:0a:8a:ff:91:70:fb:e1:04:d7:f7:d0: aa:11:16:83:ad:78:8e:9f:88:64:72:93:c9:44:43:d6:60:8b: c1:6f:06:5e:fe:9d:e5:48:f2:a0:84:0d:7b:a0:c6:40:99:0d: 01:9f:6f:e6:9f:a4:9b:10:63:ee:a6:7e:cc:3b:85:99:63:a6: a5:ee:d6:45:cb:2a:8c:e9:68:bf:cb:71:2f:8a:bb:8b:2d:2d: e9:1f:15:98:59:fa:d9:c1:fb:66:f2:d4:9e:d6:3f:c0:f2:8f: cf:e1:4a:18:3d:7d:84:08:11:89:39:a1:eb:0e:e8:94:32:bf: a1:5a:71:b5:a3:89:e4:1b:70:e8:ec:77:20:62:a5:d1:6e:d8: 6f:cd:a6:82:b1:9a:19:c0:a8:46:84:0b:76:bc:ad:b9:6f:b8: 09:9e:79:04:bf:cf:89:df:fa:6a:af:63:5a:00:9f:56:4d:e0: ba:04:b3:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBb4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjRFREUxMTAvBgNVBAUTKEFBQjg4MUI4MjE0N0MzMDM2QjgwRkM2NzU5MzREQzJF NDZDRTBGN0YwHhcNMjUwNDAyMjMwOTMxWhcNMjUwNDA5MjMwOTMxWjAYMRYwFAYD VQQDEw02N2VkYzNhYi0yNDQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx/9JNsMxn/75cCoZR6VtEL65sWqBgLwV76ryj/pJrYTnGG/NSjbyKIqP+nxO reBy4K92DyPhyu7bt+F3jjgRcZsIFf8Qg6dPMsdv6yU3aBkhOix6LbdzeFKVkJ1/ UbJbnN3eAWCZgvCPQRCFhJtWczoNo49cPEj1AdMAEgJVVtMkQQRS6toD1xZbNTpE n3jCeeS2hSE6ZpIaR1oKiQYxmeTVArXXl+VAqNm3h073/2HW0/rA3jHLv8xG86SK IsiMm3qz93fEaJ1qFs5cLHXWJ6QPz32pRBu4+J4R+3gC2IPZ0HP/LgTCJCBBpg9G exIj2SyfPEW2UzPGAY5TVwCdOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNeZIjsV 2fR+xoCQ66OV4e2Yzx2KMB8GA1UdIwQYMBaAFKq4gbghR8MDa4D8Z1k03C5Gzg9/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNEVERS8yQ0IwMzI1OEJF NzkxMUVCOTUxMThCMTlDNEY5QUUwMi9xcmlCdUNGSHd3TnJnUHhuV1RUY0xrYk9E MzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FyaUJ1Q0ZId3dOcmdQeG5XVFRjTGtiT0QzOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NEVERS8yQ0IwMzI1OEJFNzkxMUVCOTUxMThCMTlDNEY5QUUwMi9xcmlCdUNGSHd3 TnJnUHhuV1RUY0xrYk9EMzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSBwtHEBOXyOR556sVpV4ScR/hT6CiqZkyaRbOp0dFwUbnYflv65xk QFyPpdpBCB6PFBZTlpCHvQPXDLg0PB0HfBjqvhOWzpxSvTO9RL27Cor/kXD74QTX 99CqERaDrXiOn4hkcpPJREPWYIvBbwZe/p3lSPKghA17oMZAmQ0Bn2/mn6SbEGPu pn7MO4WZY6al7tZFyyqM6Wi/y3EviruLLS3pHxWYWfrZwftm8tSe1j/A8o/P4UoY PX2ECBGJOaHrDuiUMr+hWnG1o4nkG3Do7HcgYqXRbthvzaaCsZoZwKhGhAt2vK25 b7gJnnkEv8+J3/pqr2NaAJ9WTeC6BLMk -----END CERTIFICATE-----Generated at Fri Apr 4 22:19:56 2025 by rpki-client