$ rpki-client -vvf rpki.apnic.net/member_repository/A91160BB/41CD5D66209D11F0823D4847C4F9AE02/qbvtLXO41L4BFjc9V0g6CwGY6RQ.mft File: qbvtLXO41L4BFjc9V0g6CwGY6RQ.mft (raw, json) Hash identifier: XsoYqGe0IYXIMt32oSy28HVdy+Sw3B5h636obpP3+0k= Subject key identifier: 76:57:1D:8A:AB:59:52:C1:8B:B9:C8:55:53:7A:BA:CF:1E:F8:21:85 Authority key identifier: A9:BB:ED:2D:73:B8:D4:BE:01:16:37:3D:57:48:3A:0B:01:98:E9:14 Certificate issuer: /CN=A91160BB/serialNumber=A9BBED2D73B8D4BE0116373D57483A0B0198E914 Certificate serial: 14 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbvtLXO41L4BFjc9V0g6CwGY6RQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91160BB/41CD5D66209D11F0823D4847C4F9AE02/qbvtLXO41L4BFjc9V0g6CwGY6RQ.mft Manifest number: 13 Signing time: Sat 31 May 2025 07:34:56 +0000 Manifest this update: Sat 31 May 2025 07:34:56 +0000 Manifest next update: Sat 07 Jun 2025 07:34:56 +0000 Files and hashes: 1: qbvtLXO41L4BFjc9V0g6CwGY6RQ.crl (hash: qHSDu70jPN+2LwxAoaAeX1VRX+dfZkwOXFNmM5xdzpA=) 2: B3AF09C0209D11F0B81D0B48C4F9AE02.roa (hash: hWtosufayWdgaVHIvvIcT7QIe+pwqrjTdl4WzVjv7Xg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91160BB/41CD5D66209D11F0823D4847C4F9AE02/qbvtLXO41L4BFjc9V0g6CwGY6RQ.crl rsync://rpki.apnic.net/member_repository/A91160BB/41CD5D66209D11F0823D4847C4F9AE02/qbvtLXO41L4BFjc9V0g6CwGY6RQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbvtLXO41L4BFjc9V0g6CwGY6RQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:34:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20 (0x14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91160BB, serialNumber=A9BBED2D73B8D4BE0116373D57483A0B0198E914 Validity Not Before: May 31 07:34:56 2025 GMT Not After : Jun 7 07:34:56 2025 GMT Subject: CN=683ab120-75cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:7a:21:0f:de:14:26:b2:53:bc:86:93:90:3f: a0:2f:8b:1d:5c:94:4d:77:de:e3:f7:a5:f3:d8:0e: fb:b4:e8:85:0f:b7:b8:37:dd:e4:78:04:f1:1c:47: 4d:16:83:07:8e:1c:a8:a6:a9:b6:bf:e8:18:fe:f4: f4:1e:f9:f1:f0:b0:4b:67:de:c1:14:18:2a:ba:9d: 17:2a:b1:14:aa:68:3c:ae:f1:fa:43:e5:0f:59:fb: 7e:39:ec:09:fb:98:69:30:1d:26:38:4a:d1:43:b1: a9:be:f6:2c:ae:03:5d:8b:18:b3:90:2d:28:63:ba: 0d:0d:af:98:c8:68:20:09:f6:43:a3:c3:95:2d:7a: 9a:69:02:7b:07:db:02:8c:6f:64:48:9b:98:a9:51: 11:fe:51:8b:46:01:f4:64:b9:44:f8:0b:39:69:be: 8d:73:14:29:ea:e4:37:c0:8a:a6:2b:4d:e9:87:43: 38:19:b5:b9:2e:1a:1a:e1:78:5e:45:65:75:c0:a2: 65:89:70:bf:65:a8:2a:c6:a2:6d:96:b0:e6:c4:2d: af:54:2c:a4:62:92:44:a4:b6:aa:77:ae:a4:4e:45: b8:fe:6a:f8:e2:4c:d8:a9:1e:20:cb:11:64:2a:cd: 00:18:64:c5:b1:9d:4e:71:b3:27:5f:83:47:cb:16: 09:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:57:1D:8A:AB:59:52:C1:8B:B9:C8:55:53:7A:BA:CF:1E:F8:21:85 X509v3 Authority Key Identifier: keyid:A9:BB:ED:2D:73:B8:D4:BE:01:16:37:3D:57:48:3A:0B:01:98:E9:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91160BB/41CD5D66209D11F0823D4847C4F9AE02/qbvtLXO41L4BFjc9V0g6CwGY6RQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbvtLXO41L4BFjc9V0g6CwGY6RQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91160BB/41CD5D66209D11F0823D4847C4F9AE02/qbvtLXO41L4BFjc9V0g6CwGY6RQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:bb:39:a4:cc:50:06:20:05:93:e7:d7:53:31:37:bc:8a:00: 34:15:8d:b7:40:59:ed:6c:68:07:9c:3d:47:3a:3a:6e:43:28: 1f:db:aa:2e:04:94:3c:b9:77:0e:c8:a5:51:41:bd:96:6a:30: 7b:c5:da:d0:22:e7:ee:11:80:fa:73:7e:3f:37:27:01:2d:43: a4:eb:20:72:39:4f:d5:2c:2f:b0:e0:e8:cc:a3:72:a7:77:32: 2b:56:f9:67:80:6a:4a:6d:8b:0e:f4:d2:30:7c:f3:5c:ac:5a: d2:b7:3d:eb:35:60:d8:bd:10:bf:2a:71:e6:33:2d:c2:10:00: 34:a6:17:97:da:ec:5e:80:4e:d0:db:4b:be:30:d3:92:93:51: c2:5b:06:02:9c:f5:b7:f5:75:1f:8d:ea:42:e4:73:67:6c:6c: 6c:d8:93:db:62:17:14:22:38:22:23:93:61:c8:e9:41:47:d2: 2a:ba:63:4f:cb:b2:5a:ce:28:f7:09:5a:49:b6:5e:21:ed:0f: ba:8a:7f:49:63:45:3d:5c:ab:31:bc:55:72:de:75:f2:85:4e: 99:f2:ae:1e:64:ed:82:82:33:a7:95:f3:67:e8:6c:8a:70:cc: c2:cb:07:47:55:21:77:49:56:34:9b:c3:3e:30:71:28:f2:53: 84:b2:b6:0c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx NjBCQjExMC8GA1UEBRMoQTlCQkVEMkQ3M0I4RDRCRTAxMTYzNzNENTc0ODNBMEIw MTk4RTkxNDAeFw0yNTA1MzEwNzM0NTZaFw0yNTA2MDcwNzM0NTZaMBgxFjAUBgNV BAMTDTY4M2FiMTIwLTc1Y2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDbeiEP3hQmslO8hpOQP6Avix1clE133uP3pfPYDvu06IUPt7g33eR4BPEcR00W gweOHKimqba/6Bj+9PQe+fHwsEtn3sEUGCq6nRcqsRSqaDyu8fpD5Q9Z+3457An7 mGkwHSY4StFDsam+9iyuA12LGLOQLShjug0Nr5jIaCAJ9kOjw5UtepppAnsH2wKM b2RIm5ipURH+UYtGAfRkuUT4Czlpvo1zFCnq5DfAiqYrTemHQzgZtbkuGhrheF5F ZXXAomWJcL9lqCrGom2WsObELa9ULKRikkSktqp3rqRORbj+avjiTNipHiDLEWQq zQAYZMWxnU5xsydfg0fLFgmdAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUdlcdiqtZ UsGLuchVU3q6zx74IYUwHwYDVR0jBBgwFoAUqbvtLXO41L4BFjc9V0g6CwGY6RQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE2MEJCLzQxQ0Q1RDY2MjA5 RDExRjA4MjNENDg0N0M0RjlBRTAyL3FidnRMWE80MUw0QkZqYzlWMGc2Q3dHWTZS US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcWJ2dExYTzQxTDRCRmpjOVYwZzZDd0dZNlJRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE2 MEJCLzQxQ0Q1RDY2MjA5RDExRjA4MjNENDg0N0M0RjlBRTAyL3FidnRMWE80MUw0 QkZqYzlWMGc2Q3dHWTZSUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHG7OaTMUAYgBZPn11MxN7yKADQVjbdAWe1saAecPUc6Om5DKB/bqi4E lDy5dw7IpVFBvZZqMHvF2tAi5+4RgPpzfj83JwEtQ6TrIHI5T9UsL7Dg6Myjcqd3 MitW+WeAakptiw700jB881ysWtK3Pes1YNi9EL8qceYzLcIQADSmF5fa7F6ATtDb S74w05KTUcJbBgKc9bf1dR+N6kLkc2dsbGzYk9tiFxQiOCIjk2HI6UFH0iq6Y0/L slrOKPcJWkm2XiHtD7qKf0ljRT1cqzG8VXLedfKFTpnyrh5k7YKCM6eV82fobIpw zMLLB0dVIXdJVjSbwz4wcSjyU4Sytgw= -----END CERTIFICATE-----Generated at Sat May 31 17:09:00 2025 by rpki-client