$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDEFE/1164CAE0A51611EF890ECD3EC4F9AE02/qCkvYgTIIT15H6bMqvV4UZTvgaA.mft File: qCkvYgTIIT15H6bMqvV4UZTvgaA.mft (raw, json) Hash identifier: +ISxhvtcsM6uHkKH2Ts/jn06ElgGKKcr6F2Zqmd6yGo= Subject key identifier: 25:BB:5B:3B:28:65:B0:14:5E:5D:0F:80:9D:65:05:45:D3:27:89:BC Authority key identifier: A8:29:2F:62:04:C8:21:3D:79:1F:A6:CC:AA:F5:78:51:94:EF:81:A0 Certificate issuer: /CN=A91FDEFE/serialNumber=A8292F6204C8213D791FA6CCAAF5785194EF81A0 Certificate serial: 53 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qCkvYgTIIT15H6bMqvV4UZTvgaA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDEFE/1164CAE0A51611EF890ECD3EC4F9AE02/qCkvYgTIIT15H6bMqvV4UZTvgaA.mft Manifest number: 52 Signing time: Mon 21 Apr 2025 06:05:06 +0000 Manifest this update: Mon 21 Apr 2025 06:05:05 +0000 Manifest next update: Mon 28 Apr 2025 06:05:05 +0000 Files and hashes: 1: qCkvYgTIIT15H6bMqvV4UZTvgaA.crl (hash: Vk86nvCVT2gQzxp49K+92r6oZWNR0EkVEjWRRdtV9lM=) 2: E7695EC6A53411EFB98AFE51C4F9AE02.roa (hash: Lu7YmWMIdl1OwrJtUhBGFe6+OAHwy7pjCKEXO1Xq/dY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDEFE/1164CAE0A51611EF890ECD3EC4F9AE02/qCkvYgTIIT15H6bMqvV4UZTvgaA.crl rsync://rpki.apnic.net/member_repository/A91FDEFE/1164CAE0A51611EF890ECD3EC4F9AE02/qCkvYgTIIT15H6bMqvV4UZTvgaA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qCkvYgTIIT15H6bMqvV4UZTvgaA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 06:05:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 83 (0x53) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDEFE, serialNumber=A8292F6204C8213D791FA6CCAAF5785194EF81A0 Validity Not Before: Apr 21 06:05:05 2025 GMT Not After : Apr 28 06:05:05 2025 GMT Subject: CN=6805e012-435f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:26:30:70:05:4e:56:7b:ed:d0:c0:3f:59:57: 87:17:25:35:2f:8f:cb:b6:18:c3:e0:31:b2:09:1e: 0e:83:29:92:5c:1f:42:38:91:0b:28:0a:07:0d:d7: 5b:fc:28:a7:e0:e4:af:06:e0:d7:96:d5:16:93:88: c6:0d:d1:90:fd:77:3a:ae:57:60:9f:c9:e6:ce:87: 2f:e1:05:c9:ba:58:3d:1b:17:b5:7c:44:11:72:68: 18:2c:76:9c:d8:b1:95:11:ff:37:f2:2e:c4:25:fd: 17:e4:54:a8:00:8b:e3:23:da:bd:eb:44:85:c2:b8: ab:f0:30:ce:b4:b8:00:af:d3:08:0b:63:7e:f3:c4: 5d:bc:78:84:af:74:43:4d:8c:3d:b3:6f:04:c4:e8: 3c:fc:5d:ac:c7:fe:da:ff:90:f8:08:2d:6b:9e:2c: e2:b1:23:be:7c:c5:66:c0:24:32:76:09:90:fe:c6: e7:61:0e:3d:f4:54:88:f0:30:df:21:8b:a1:8a:6f: 40:3e:88:25:a7:20:6c:06:c4:b5:e2:64:12:fe:55: 66:5b:cb:e4:9b:3e:43:fe:8c:ab:43:a3:fd:e8:29: 6d:dc:86:86:9e:a8:55:c6:b5:b1:e1:26:ec:5a:32: de:8c:c1:b3:e2:89:41:2f:27:61:a3:04:f6:3e:6d: 48:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:BB:5B:3B:28:65:B0:14:5E:5D:0F:80:9D:65:05:45:D3:27:89:BC X509v3 Authority Key Identifier: keyid:A8:29:2F:62:04:C8:21:3D:79:1F:A6:CC:AA:F5:78:51:94:EF:81:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDEFE/1164CAE0A51611EF890ECD3EC4F9AE02/qCkvYgTIIT15H6bMqvV4UZTvgaA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qCkvYgTIIT15H6bMqvV4UZTvgaA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDEFE/1164CAE0A51611EF890ECD3EC4F9AE02/qCkvYgTIIT15H6bMqvV4UZTvgaA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:3c:20:f1:05:13:66:fc:2c:78:cf:bd:a0:cd:dd:5b:6d:3e: 54:6e:b6:9c:64:df:10:d3:a9:22:3c:53:4c:0b:97:cc:fe:a6: e3:54:12:ee:eb:1a:c7:a1:2e:02:27:bf:c5:5d:f0:b8:96:30: d3:d8:90:cd:2b:eb:44:25:70:c0:51:c9:ee:97:16:5b:3b:0a: 04:8f:20:34:f9:f8:31:35:04:d4:c3:fe:e4:d3:aa:93:df:77: b2:04:6c:ac:ea:ce:3a:96:ae:c8:0b:f9:f8:0c:1c:10:8b:15: 36:f2:25:83:3c:22:3d:83:74:eb:04:d7:56:3b:c8:c1:ed:3b: ff:d9:74:1d:ef:ea:2f:d4:2e:a7:97:87:07:23:a4:85:76:45: 63:26:f8:0a:fb:b6:49:f2:8c:32:31:5f:b8:c1:c9:e7:30:b4: a6:8c:a3:67:da:43:a5:0a:e4:98:30:a9:8e:dc:83:cc:38:eb: f9:1e:66:bd:4f:57:53:63:01:b1:f9:54:ba:d5:ae:f7:43:08: 71:37:98:78:39:86:70:a9:b8:5b:f6:6d:de:f8:0b:82:2d:e0: 72:c3:b5:23:7a:a1:e0:c7:12:c5:9d:74:f1:aa:26:8d:77:41: 95:45:f1:2f:df:bf:ae:31:48:62:cf:9d:da:54:1e:cf:47:88: da:d8:6a:9b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG REVGRTExMC8GA1UEBRMoQTgyOTJGNjIwNEM4MjEzRDc5MUZBNkNDQUFGNTc4NTE5 NEVGODFBMDAeFw0yNTA0MjEwNjA1MDVaFw0yNTA0MjgwNjA1MDVaMBgxFjAUBgNV BAMTDTY4MDVlMDEyLTQzNWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDGJjBwBU5We+3QwD9ZV4cXJTUvj8u2GMPgMbIJHg6DKZJcH0I4kQsoCgcN11v8 KKfg5K8G4NeW1RaTiMYN0ZD9dzquV2CfyebOhy/hBcm6WD0bF7V8RBFyaBgsdpzY sZUR/zfyLsQl/RfkVKgAi+Mj2r3rRIXCuKvwMM60uACv0wgLY37zxF28eISvdENN jD2zbwTE6Dz8XazH/tr/kPgILWueLOKxI758xWbAJDJ2CZD+xudhDj30VIjwMN8h i6GKb0A+iCWnIGwGxLXiZBL+VWZby+SbPkP+jKtDo/3oKW3choaeqFXGtbHhJuxa Mt6MwbPiiUEvJ2GjBPY+bUhNAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUJbtbOyhl sBReXQ+AnWUFRdMnibwwHwYDVR0jBBgwFoAUqCkvYgTIIT15H6bMqvV4UZTvgaAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZERUZFLzExNjRDQUUwQTUx NjExRUY4OTBFQ0QzRUM0RjlBRTAyL3FDa3ZZZ1RJSVQxNUg2Yk1xdlY0VVpUdmdh QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvcUNrdllnVElJVDE1SDZiTXF2VjRVWlR2Z2FBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZE RUZFLzExNjRDQUUwQTUxNjExRUY4OTBFQ0QzRUM0RjlBRTAyL3FDa3ZZZ1RJSVQx NUg2Yk1xdlY0VVpUdmdhQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFw8IPEFE2b8LHjPvaDN3VttPlRutpxk3xDTqSI8U0wLl8z+puNUEu7r GsehLgInv8Vd8LiWMNPYkM0r60QlcMBRye6XFls7CgSPIDT5+DE1BNTD/uTTqpPf d7IEbKzqzjqWrsgL+fgMHBCLFTbyJYM8Ij2DdOsE11Y7yMHtO//ZdB3v6i/ULqeX hwcjpIV2RWMm+Ar7tknyjDIxX7jByecwtKaMo2faQ6UK5JgwqY7cg8w46/keZr1P V1NjAbH5VLrVrvdDCHE3mHg5hnCpuFv2bd74C4It4HLDtSN6oeDHEsWddPGqJo13 QZVF8S/fv64xSGLPndpUHs9HiNrYaps= -----END CERTIFICATE-----Generated at Mon Apr 21 21:25:19 2025 by rpki-client