$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDD4D/660E0588D27D11ED8E9A2580C4F9AE02/1QwpV9-oQKlDD7nuJdTc-hcSnBg.mft File: 1QwpV9-oQKlDD7nuJdTc-hcSnBg.mft (raw, json) Hash identifier: y+1DVNhCHXFegOV8Gtfl5+NFVO0ou322WFJiJfmZbCQ= Subject key identifier: 80:A9:E8:E3:BB:BE:AA:FF:66:26:91:F3:17:C8:08:AA:01:93:5C:43 Authority key identifier: D5:0C:29:57:DF:A8:40:A9:43:0F:B9:EE:25:D4:DC:FA:17:12:9C:18 Certificate issuer: /CN=A91FDD4D/serialNumber=D50C2957DFA840A9430FB9EE25D4DCFA17129C18 Certificate serial: 0187 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/1QwpV9-oQKlDD7nuJdTc-hcSnBg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDD4D/660E0588D27D11ED8E9A2580C4F9AE02/1QwpV9-oQKlDD7nuJdTc-hcSnBg.mft Manifest number: 0184 Signing time: Fri 04 Apr 2025 15:59:15 +0000 Manifest this update: Fri 04 Apr 2025 15:59:14 +0000 Manifest next update: Fri 11 Apr 2025 15:59:14 +0000 Files and hashes: 1: 1QwpV9-oQKlDD7nuJdTc-hcSnBg.crl (hash: RHwVsg742vEIHbhJJM9hlSQJcbMO4yPFEb4tIlFC/5k=) 2: 1046CB98D28311EDB1655152C4F9AE02.roa (hash: Kqt9mEj0giKftuB2DBO692CGsOF5kZIoQznyePkJFyk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDD4D/660E0588D27D11ED8E9A2580C4F9AE02/1QwpV9-oQKlDD7nuJdTc-hcSnBg.crl rsync://rpki.apnic.net/member_repository/A91FDD4D/660E0588D27D11ED8E9A2580C4F9AE02/1QwpV9-oQKlDD7nuJdTc-hcSnBg.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/1QwpV9-oQKlDD7nuJdTc-hcSnBg.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 15:59:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 391 (0x187) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDD4D Validity Not Before: Apr 4 15:59:14 2025 GMT Not After : Apr 11 15:59:14 2025 GMT Subject: CN=67f001d3-0200 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:10:b8:8e:ae:31:50:da:ca:87:29:50:7d:20: b4:41:20:6a:63:e1:7e:63:3d:89:5f:3f:5c:e5:10: 23:a1:1e:e0:65:67:3e:86:f9:97:79:b4:16:ad:b7: 6d:13:a0:2f:39:d0:9a:8e:6f:97:72:99:94:f7:18: 92:91:25:71:10:84:ab:59:c1:00:1d:7e:70:ab:9b: 70:bf:17:c0:e8:f3:9f:86:da:ed:bf:12:e7:ff:78: a1:52:ce:33:7e:f9:b5:1e:c2:20:62:50:ff:24:0a: d9:3b:fe:7a:74:ef:b3:c5:6e:a0:bf:c5:05:f3:1d: 82:e0:77:52:cd:10:01:fa:96:9f:35:8b:e0:ef:35: e5:63:f5:3f:80:47:f0:12:12:0f:fc:8b:e3:28:8c: e4:8e:16:75:66:82:7a:e3:4c:0f:23:a5:da:fc:04: 16:8e:9f:c2:1e:be:98:22:5d:5d:e0:b7:ce:b5:0d: 75:0b:d3:8f:a7:db:ff:03:2a:6d:a9:00:46:02:c8: a5:f9:8d:cb:7f:b8:09:6d:74:06:49:8d:bd:ff:e3: 02:bd:5e:a0:b0:99:e6:4f:65:f4:69:33:11:85:71: ca:fa:b0:75:02:cd:3c:ae:7b:82:ae:12:d8:a0:f4: ed:c8:ab:3b:c3:3d:82:30:d8:25:4f:1f:9b:86:83: b6:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:A9:E8:E3:BB:BE:AA:FF:66:26:91:F3:17:C8:08:AA:01:93:5C:43 X509v3 Authority Key Identifier: keyid:D5:0C:29:57:DF:A8:40:A9:43:0F:B9:EE:25:D4:DC:FA:17:12:9C:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDD4D/660E0588D27D11ED8E9A2580C4F9AE02/1QwpV9-oQKlDD7nuJdTc-hcSnBg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/1QwpV9-oQKlDD7nuJdTc-hcSnBg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDD4D/660E0588D27D11ED8E9A2580C4F9AE02/1QwpV9-oQKlDD7nuJdTc-hcSnBg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:93:13:63:8d:c3:c0:75:8d:ed:a3:e2:33:68:ee:6c:51:e4: 11:e7:0c:16:91:cc:b2:08:13:2b:62:6c:c9:1b:7e:f9:df:15: 4c:f0:17:50:4b:d2:a6:61:0e:55:18:3c:76:00:15:24:a8:34: b3:0c:ce:25:0c:db:a6:2b:e9:dd:66:72:c4:d6:f5:c1:85:27: 6e:d9:60:42:6b:9b:b2:f0:e2:03:2f:6d:9a:31:39:d1:02:01: 1d:5a:db:18:1a:8b:6d:4f:cd:84:46:0c:10:fe:41:a1:b4:9d: d3:88:ca:3b:7d:33:55:b8:5e:1d:78:b4:73:f5:7b:4d:6b:a4: 27:5a:54:3d:23:37:50:9e:a6:7d:c2:82:3f:ba:5c:b1:a8:8b: 60:af:7c:ea:c4:f5:21:92:48:d3:02:70:fc:f2:4a:b3:3f:8b: 2b:5c:10:53:9a:46:a6:07:16:7e:1a:81:e5:35:9d:f8:e3:37: 97:36:80:cd:ae:36:6d:f0:1a:82:55:07:79:bb:33:fa:d5:ad: 41:b8:e4:e8:96:c1:b3:af:9c:ca:79:3c:cb:49:3d:63:bb:d2: 73:38:41:7a:2d:87:c4:19:73:36:8b:44:37:19:e9:ea:37:38: 50:9b:dc:27:9c:c8:bb:4b:1f:49:84:4c:43:c5:7a:4d:9d:35: 4b:c9:bb:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRENEQxMTAvBgNVBAUTKEQ1MEMyOTU3REZBODQwQTk0MzBGQjlFRTI1RDREQ0ZB MTcxMjlDMTgwHhcNMjUwNDA0MTU1OTE0WhcNMjUwNDExMTU1OTE0WjAYMRYwFAYD VQQDEw02N2YwMDFkMy0wMjAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApxC4jq4xUNrKhylQfSC0QSBqY+F+Yz2JXz9c5RAjoR7gZWc+hvmXebQWrbdt E6AvOdCajm+XcpmU9xiSkSVxEISrWcEAHX5wq5twvxfA6POfhtrtvxLn/3ihUs4z fvm1HsIgYlD/JArZO/56dO+zxW6gv8UF8x2C4HdSzRAB+pafNYvg7zXlY/U/gEfw EhIP/IvjKIzkjhZ1ZoJ640wPI6Xa/AQWjp/CHr6YIl1d4LfOtQ11C9OPp9v/Aypt qQBGAsil+Y3Lf7gJbXQGSY29/+MCvV6gsJnmT2X0aTMRhXHK+rB1As08rnuCrhLY oPTtyKs7wz2CMNglTx+bhoO2+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFICp6OO7 vqr/ZiaR8xfICKoBk1xDMB8GA1UdIwQYMBaAFNUMKVffqECpQw+57iXU3PoXEpwY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREQ0RC82NjBFMDU4OEQy N0QxMUVEOEU5QTI1ODBDNEY5QUUwMi8xUXdwVjktb1FLbEREN251SmRUYy1oY1Nu QmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyLzFRd3BWOS1vUUtsREQ3bnVKZFRjLWhjU25CZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG REQ0RC82NjBFMDU4OEQyN0QxMUVEOEU5QTI1ODBDNEY5QUUwMi8xUXdwVjktb1FL bEREN251SmRUYy1oY1NuQmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAEkxNjjcPAdY3to+IzaO5sUeQR5wwWkcyyCBMrYmzJG3753xVM8BdQ S9KmYQ5VGDx2ABUkqDSzDM4lDNumK+ndZnLE1vXBhSdu2WBCa5uy8OIDL22aMTnR AgEdWtsYGottT82ERgwQ/kGhtJ3TiMo7fTNVuF4deLRz9XtNa6QnWlQ9IzdQnqZ9 woI/ulyxqItgr3zqxPUhkkjTAnD88kqzP4srXBBTmkamBxZ+GoHlNZ344zeXNoDN rjZt8BqCVQd5uzP61a1BuOTolsGzr5zKeTzLST1ju9JzOEF6LYfEGXM2i0Q3Genq NzhQm9wnnMi7Sx9JhExDxXpNnTVLybuy -----END CERTIFICATE-----Generated at Sun Apr 6 15:57:43 2025 by rpki-client