$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB095/AABEB56A1A5311EEA4608814C4F9AE02/spEQIVRHIYPPUNKub6MOG940K_Q.mft File: spEQIVRHIYPPUNKub6MOG940K_Q.mft (raw, json) Hash identifier: 7hygAB9XIkj2Rs4bxaql2VNDAzva1UDx0E7HZ9F8Jww= Subject key identifier: D9:E7:FD:B9:84:C6:C4:9F:E1:AB:8B:83:A5:C4:11:18:C3:11:B8:D9 Authority key identifier: B2:91:10:21:54:47:21:83:CF:50:D2:AE:6F:A3:0E:1B:DE:34:2B:F4 Certificate issuer: /CN=A91FB095/serialNumber=B291102154472183CF50D2AE6FA30E1BDE342BF4 Certificate serial: 0159 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/spEQIVRHIYPPUNKub6MOG940K_Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FB095/AABEB56A1A5311EEA4608814C4F9AE02/spEQIVRHIYPPUNKub6MOG940K_Q.mft Manifest number: 0152 Signing time: Thu 03 Apr 2025 03:30:14 +0000 Manifest this update: Thu 03 Apr 2025 03:30:13 +0000 Manifest next update: Thu 10 Apr 2025 03:30:13 +0000 Files and hashes: 1: spEQIVRHIYPPUNKub6MOG940K_Q.crl (hash: a5jWaMgkQAakFsUYyA/E1+RNc+EX2GfUZL4HIvpE6UA=) 2: 35A46D4E1A5611EE93742844C4F9AE02.roa (hash: d+JJ+I8S/10V6aRjr1ig3NwOOf5vZtvPjsJauOreVMs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FB095/AABEB56A1A5311EEA4608814C4F9AE02/spEQIVRHIYPPUNKub6MOG940K_Q.crl rsync://rpki.apnic.net/member_repository/A91FB095/AABEB56A1A5311EEA4608814C4F9AE02/spEQIVRHIYPPUNKub6MOG940K_Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/spEQIVRHIYPPUNKub6MOG940K_Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 03:30:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 345 (0x159) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FB095 Validity Not Before: Apr 3 03:30:13 2025 GMT Not After : Apr 10 03:30:13 2025 GMT Subject: CN=67ee00c5-1678 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:64:cf:c8:94:cd:af:a4:b6:8e:fd:a1:b4:7d: 4a:5e:c8:51:d3:4d:e4:25:a2:53:28:2e:14:c8:21: 66:eb:1b:20:1e:61:d9:09:6e:6d:5d:5a:5d:9c:96: e8:04:3d:1c:05:96:eb:06:40:1e:a3:59:24:c2:0b: 1f:c1:52:db:b4:7b:cd:a9:a5:48:4a:a0:50:ac:1c: ff:4b:3f:c3:11:72:22:e8:c4:28:64:3c:9d:56:23: 1f:f2:42:05:be:21:28:e0:4d:c4:23:7c:ba:f1:75: 7b:52:33:2b:d2:e3:f1:a9:86:bf:ab:71:97:f8:ef: 55:13:ab:83:a9:3f:26:f6:84:9b:dd:f2:6a:0f:14: be:f8:19:ea:a8:11:84:e6:6d:03:9b:ae:7d:bb:5a: 15:f2:e0:76:9d:67:93:89:74:ed:9c:b9:29:2f:83: d8:f2:4d:47:83:2e:08:4a:0b:72:7b:dc:27:f5:96: 06:7a:f4:70:26:1b:da:78:05:67:4e:4a:45:55:a4: 3c:ec:ee:9c:4f:4e:3b:96:f4:19:d9:bf:f2:e9:f5: 82:11:c2:ff:6e:e9:3c:17:1c:b7:f3:2b:55:be:e0: 2d:a1:60:76:fd:14:48:c5:fa:b1:36:cc:b7:88:7f: 3c:ea:27:31:35:4f:98:d4:bd:b6:d9:21:e5:e5:d1: ff:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:E7:FD:B9:84:C6:C4:9F:E1:AB:8B:83:A5:C4:11:18:C3:11:B8:D9 X509v3 Authority Key Identifier: keyid:B2:91:10:21:54:47:21:83:CF:50:D2:AE:6F:A3:0E:1B:DE:34:2B:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FB095/AABEB56A1A5311EEA4608814C4F9AE02/spEQIVRHIYPPUNKub6MOG940K_Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/spEQIVRHIYPPUNKub6MOG940K_Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB095/AABEB56A1A5311EEA4608814C4F9AE02/spEQIVRHIYPPUNKub6MOG940K_Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cb:dd:52:2e:03:9a:af:3a:9d:54:df:f9:53:a7:4c:c0:dc:36: 16:21:d8:f4:00:a1:ff:ec:1b:43:a1:b7:62:d6:56:31:5d:4a: f5:fb:15:f9:e9:e1:ba:48:cc:60:7b:cc:bb:c0:93:3f:d5:3b: 53:e9:45:03:c9:35:5e:d5:37:49:0f:5e:59:ee:fd:2b:e8:73: 87:b3:94:24:b4:e9:50:b0:0f:10:ff:cc:f2:9e:bb:cd:21:ef: 6e:21:0b:aa:91:7e:7d:d1:36:9f:26:58:b0:17:fe:be:fa:72: d5:1d:f0:86:87:06:92:6e:1a:7c:e8:11:40:b1:d1:49:fc:10: fe:eb:4f:56:9a:d2:b2:74:9b:0f:6d:71:cd:10:34:c0:c9:93: 5f:4c:28:99:28:fe:26:5a:6d:d1:9c:23:a9:4a:34:b7:6b:26: 43:6b:40:ae:be:a9:d6:74:0a:86:42:9c:cc:f0:d0:1d:44:e6: bd:a4:ce:d9:b1:d0:6c:57:16:47:08:69:a9:db:92:48:e2:24: 79:1f:95:95:c6:a3:ee:3a:fa:d3:85:38:8d:48:6f:b9:e3:a4: 26:cf:78:2d:a7:50:37:d8:65:92:f7:4a:24:4a:45:66:57:c8: a1:ba:9f:ac:ce:b6:33:6a:81:7d:e8:89:8a:92:c4:ad:f3:71: c4:18:94:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkIwOTUxMTAvBgNVBAUTKEIyOTExMDIxNTQ0NzIxODNDRjUwRDJBRTZGQTMwRTFC REUzNDJCRjQwHhcNMjUwNDAzMDMzMDEzWhcNMjUwNDEwMDMzMDEzWjAYMRYwFAYD VQQDEw02N2VlMDBjNS0xNjc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx2TPyJTNr6S2jv2htH1KXshR003kJaJTKC4UyCFm6xsgHmHZCW5tXVpdnJbo BD0cBZbrBkAeo1kkwgsfwVLbtHvNqaVISqBQrBz/Sz/DEXIi6MQoZDydViMf8kIF viEo4E3EI3y68XV7UjMr0uPxqYa/q3GX+O9VE6uDqT8m9oSb3fJqDxS++BnqqBGE 5m0Dm659u1oV8uB2nWeTiXTtnLkpL4PY8k1Hgy4ISgtye9wn9ZYGevRwJhvaeAVn TkpFVaQ87O6cT047lvQZ2b/y6fWCEcL/buk8Fxy38ytVvuAtoWB2/RRIxfqxNsy3 iH886icxNU+Y1L222SHl5dH/ywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNnn/bmE xsSf4auLg6XEERjDEbjZMB8GA1UdIwQYMBaAFLKRECFURyGDz1DSrm+jDhveNCv0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQjA5NS9BQUJFQjU2QTFB NTMxMUVFQTQ2MDg4MTRDNEY5QUUwMi9zcEVRSVZSSElZUFBVTkt1YjZNT0c5NDBL X1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NwRVFJVlJISVlQUFVOS3ViNk1PRzk0MEtfUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QjA5NS9BQUJFQjU2QTFBNTMxMUVFQTQ2MDg4MTRDNEY5QUUwMi9zcEVRSVZSSElZ UFBVTkt1YjZNT0c5NDBLX1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDL3VIuA5qvOp1U3/lTp0zA3DYWIdj0AKH/7BtDobdi1lYxXUr1+xX5 6eG6SMxge8y7wJM/1TtT6UUDyTVe1TdJD15Z7v0r6HOHs5QktOlQsA8Q/8zynrvN Ie9uIQuqkX590TafJliwF/6++nLVHfCGhwaSbhp86BFAsdFJ/BD+609WmtKydJsP bXHNEDTAyZNfTCiZKP4mWm3RnCOpSjS3ayZDa0CuvqnWdAqGQpzM8NAdROa9pM7Z sdBsVxZHCGmp25JI4iR5H5WVxqPuOvrThTiNSG+546Qmz3gtp1A32GWS90okSkVm V8ihup+szrYzaoF96ImKksSt83HEGJQ1 -----END CERTIFICATE-----Generated at Fri Apr 4 22:01:44 2025 by rpki-client