$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5216/5CD5E7306E0811EDBEED6284C4F9AE02/qEG9xa-p6aCpW4hUYRPKdF7pY7U.mft File: qEG9xa-p6aCpW4hUYRPKdF7pY7U.mft (raw, json) Hash identifier: IChhSOiHZg+a0jdV1GbqHDvs7Q12vtT22cYIt5rpDOw= Subject key identifier: 2A:8E:72:61:12:E4:EF:D3:15:85:9E:9C:B3:DF:DC:4A:38:98:94:74 Authority key identifier: A8:41:BD:C5:AF:A9:E9:A0:A9:5B:88:54:61:13:CA:74:5E:E9:63:B5 Certificate issuer: /CN=A91F5216/serialNumber=A841BDC5AFA9E9A0A95B88546113CA745EE963B5 Certificate serial: 01C5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qEG9xa-p6aCpW4hUYRPKdF7pY7U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F5216/5CD5E7306E0811EDBEED6284C4F9AE02/qEG9xa-p6aCpW4hUYRPKdF7pY7U.mft Manifest number: 01C0 Signing time: Fri 11 Apr 2025 02:22:05 +0000 Manifest this update: Fri 11 Apr 2025 02:22:05 +0000 Manifest next update: Fri 18 Apr 2025 02:22:05 +0000 Files and hashes: 1: qEG9xa-p6aCpW4hUYRPKdF7pY7U.crl (hash: oZECnEAbK77iMWgiiYPm6kkODzwbQMl/ExnEmiU11rI=) 2: CDA9BB546E0C11ED8BF41547C4F9AE02.roa (hash: zVPRl8aSlwcxV68OyN0H+R3+MRPBkO3MLKHRfVZXzvw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F5216/5CD5E7306E0811EDBEED6284C4F9AE02/qEG9xa-p6aCpW4hUYRPKdF7pY7U.crl rsync://rpki.apnic.net/member_repository/A91F5216/5CD5E7306E0811EDBEED6284C4F9AE02/qEG9xa-p6aCpW4hUYRPKdF7pY7U.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qEG9xa-p6aCpW4hUYRPKdF7pY7U.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 02:22:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 453 (0x1c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F5216, serialNumber=A841BDC5AFA9E9A0A95B88546113CA745EE963B5 Validity Not Before: Apr 11 02:22:05 2025 GMT Not After : Apr 18 02:22:05 2025 GMT Subject: CN=67f87ccd-4ec4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:8d:89:eb:f3:a1:65:fd:18:e8:62:0f:f4:84: 4d:2b:64:bb:88:ed:7a:3c:42:05:df:ad:9d:26:f3: f5:d3:6d:5c:e5:64:87:f3:02:34:a5:25:c6:4d:9b: 10:cb:23:47:eb:f4:37:52:42:87:7d:40:ea:a4:a1: 0a:8e:c6:cf:80:12:2f:ef:e1:f3:2c:9c:84:28:54: 3f:c5:ea:67:56:e4:8e:2c:b9:2b:b6:6b:00:aa:56: ac:33:7b:c2:97:5c:9e:21:df:c9:f1:ec:89:f7:18: b2:63:31:94:91:09:c8:60:ff:4b:57:20:28:00:76: 22:9f:af:70:2b:c3:4f:7f:60:bb:d3:2b:88:57:37: 7a:53:4e:67:ba:e7:35:f8:dc:29:db:d9:be:2d:5b: 14:0f:a7:d8:e9:1d:dc:2a:20:bb:cf:e3:ad:3f:50: db:68:bf:5b:26:38:fc:a8:ac:7c:35:58:a2:6a:5a: d4:bd:a4:2d:16:a8:5d:5a:07:d1:bb:79:86:9a:50: 90:c0:1f:a0:d5:f2:08:4e:5e:f1:5e:73:e9:a2:d1: f4:80:5d:56:88:3d:e1:39:21:e4:9e:cc:88:6b:b6: 50:15:8f:e6:1b:3f:14:0f:69:be:66:fb:f5:b7:1c: 02:e8:b1:d2:a6:fa:d6:c9:59:2b:e1:49:40:3d:b3: 49:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:8E:72:61:12:E4:EF:D3:15:85:9E:9C:B3:DF:DC:4A:38:98:94:74 X509v3 Authority Key Identifier: keyid:A8:41:BD:C5:AF:A9:E9:A0:A9:5B:88:54:61:13:CA:74:5E:E9:63:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F5216/5CD5E7306E0811EDBEED6284C4F9AE02/qEG9xa-p6aCpW4hUYRPKdF7pY7U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qEG9xa-p6aCpW4hUYRPKdF7pY7U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5216/5CD5E7306E0811EDBEED6284C4F9AE02/qEG9xa-p6aCpW4hUYRPKdF7pY7U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:66:f5:66:b5:92:9b:0a:f1:fd:d2:86:dd:04:21:46:ec:a1: a2:00:e9:3b:d3:af:2d:2e:d0:57:15:8d:46:e5:59:03:e8:9f: 25:f0:93:3b:d4:83:63:b4:e5:dd:fe:67:a1:8a:a0:d5:3f:ae: 07:60:9f:44:1f:e9:ef:7b:c6:d2:06:31:cd:e4:09:92:8b:ee: 02:eb:32:6b:80:44:c6:f0:cc:ca:15:d4:80:b4:30:8e:1c:22: 58:57:a0:4c:b5:5b:cf:e1:d7:c1:62:1f:ab:65:8a:d2:e3:4d: 51:a3:37:3e:15:6b:ef:0c:0d:b7:12:2e:bc:4a:48:8a:43:9c: d7:2f:00:86:a3:46:73:56:b6:b3:d2:7f:0a:cd:79:3c:d0:99: a5:f2:25:95:02:41:f2:ba:6b:b5:db:ee:07:65:16:24:42:38: 9f:dd:6e:26:32:4f:a1:9c:e1:43:2e:64:4f:4a:f8:a9:7b:29: 0a:e6:30:79:84:f8:68:3a:97:44:b2:ad:6e:cd:5f:0d:ce:a6: 67:a5:b2:bd:7c:86:27:1d:b6:40:82:73:fc:5e:7d:fa:be:49: 7c:88:f7:8f:f5:91:1a:01:34:42:3f:05:4d:56:dd:db:9b:27: f8:29:6e:8c:62:26:ae:cb:4a:9c:67:5c:35:61:7c:6e:0e:21: 7b:e3:0f:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjUyMTYxMTAvBgNVBAUTKEE4NDFCREM1QUZBOUU5QTBBOTVCODg1NDYxMTNDQTc0 NUVFOTYzQjUwHhcNMjUwNDExMDIyMjA1WhcNMjUwNDE4MDIyMjA1WjAYMRYwFAYD VQQDEw02N2Y4N2NjZC00ZWM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwo2J6/OhZf0Y6GIP9IRNK2S7iO16PEIF362dJvP1021c5WSH8wI0pSXGTZsQ yyNH6/Q3UkKHfUDqpKEKjsbPgBIv7+HzLJyEKFQ/xepnVuSOLLkrtmsAqlasM3vC l1yeId/J8eyJ9xiyYzGUkQnIYP9LVyAoAHYin69wK8NPf2C70yuIVzd6U05nuuc1 +Nwp29m+LVsUD6fY6R3cKiC7z+OtP1DbaL9bJjj8qKx8NViialrUvaQtFqhdWgfR u3mGmlCQwB+g1fIITl7xXnPpotH0gF1WiD3hOSHknsyIa7ZQFY/mGz8UD2m+Zvv1 txwC6LHSpvrWyVkr4UlAPbNJyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCqOcmES 5O/TFYWenLPf3Eo4mJR0MB8GA1UdIwQYMBaAFKhBvcWvqemgqVuIVGETynRe6WO1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTIxNi81Q0Q1RTczMDZF MDgxMUVEQkVFRDYyODRDNEY5QUUwMi9xRUc5eGEtcDZhQ3BXNGhVWVJQS2RGN3BZ N1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3FFRzl4YS1wNmFDcFc0aFVZUlBLZEY3cFk3VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTIxNi81Q0Q1RTczMDZFMDgxMUVEQkVFRDYyODRDNEY5QUUwMi9xRUc5eGEtcDZh Q3BXNGhVWVJQS2RGN3BZN1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkZvVmtZKbCvH90obdBCFG7KGiAOk7068tLtBXFY1G5VkD6J8l8JM7 1INjtOXd/mehiqDVP64HYJ9EH+nve8bSBjHN5AmSi+4C6zJrgETG8MzKFdSAtDCO HCJYV6BMtVvP4dfBYh+rZYrS401Rozc+FWvvDA23Ei68SkiKQ5zXLwCGo0ZzVraz 0n8KzXk80Jml8iWVAkHyumu12+4HZRYkQjif3W4mMk+hnOFDLmRPSvipeykK5jB5 hPhoOpdEsq1uzV8NzqZnpbK9fIYnHbZAgnP8Xn36vkl8iPeP9ZEaATRCPwVNVt3b myf4KW6MYiauy0qcZ1w1YXxuDiF74w8R -----END CERTIFICATE-----Generated at Sun Apr 13 00:24:51 2025 by rpki-client