$ rpki-client -vvf rpki.apnic.net/member_repository/A91705D7/96A36AA816D811EFBF901E5FC4F9AE02/qkQFsb-pbJxpsCkDPvSB2PWKd-U.mft File: qkQFsb-pbJxpsCkDPvSB2PWKd-U.mft (raw, json) Hash identifier: 0YQXbE3XxrYPBSzWOZT0Dans2mRZ/aWKDVnbNiYJX8I= Subject key identifier: 32:79:33:05:66:6F:75:6E:6F:C7:65:6D:50:3A:2A:73:6A:FB:F8:AF Authority key identifier: AA:44:05:B1:BF:A9:6C:9C:69:B0:29:03:3E:F4:81:D8:F5:8A:77:E5 Certificate issuer: /CN=A91705D7/serialNumber=AA4405B1BFA96C9C69B029033EF481D8F58A77E5 Certificate serial: D9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qkQFsb-pbJxpsCkDPvSB2PWKd-U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91705D7/96A36AA816D811EFBF901E5FC4F9AE02/qkQFsb-pbJxpsCkDPvSB2PWKd-U.mft Manifest number: CF Signing time: Tue 03 Jun 2025 05:32:51 +0000 Manifest this update: Tue 03 Jun 2025 05:32:51 +0000 Manifest next update: Tue 10 Jun 2025 05:32:51 +0000 Files and hashes: 1: qkQFsb-pbJxpsCkDPvSB2PWKd-U.crl (hash: 79833N3eqbi2ziimTFfHwKxIT1JWKWFqycqwxjQIUG0=) 2: 4FEDDA6831C511F0996C265EC4F9AE02.roa (hash: olMs+rDjG9xf551jbGQPxWRwvhz93Jq7nLiMc5zAfD0=) 3: 362B52EA31C511F0B796F75DC4F9AE02.roa (hash: CY2B70Cuo/7PA/pa+19+ZYZYV7eGsJlAt7KNzfOvYYw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91705D7/96A36AA816D811EFBF901E5FC4F9AE02/qkQFsb-pbJxpsCkDPvSB2PWKd-U.crl rsync://rpki.apnic.net/member_repository/A91705D7/96A36AA816D811EFBF901E5FC4F9AE02/qkQFsb-pbJxpsCkDPvSB2PWKd-U.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qkQFsb-pbJxpsCkDPvSB2PWKd-U.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 05:32:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 217 (0xd9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91705D7, serialNumber=AA4405B1BFA96C9C69B029033EF481D8F58A77E5 Validity Not Before: Jun 3 05:32:51 2025 GMT Not After : Jun 10 05:32:51 2025 GMT Subject: CN=683e8903-fae5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:8f:f0:de:01:7a:d0:93:00:ba:db:53:54:12: 53:1b:aa:21:35:01:84:44:e4:ca:b7:78:38:7e:e5: 54:21:86:1a:06:fa:49:a2:ec:39:4e:6b:44:7f:f7: 0f:28:91:0b:64:2b:2d:30:50:75:9a:06:ce:f1:80: 71:8b:b2:6c:ad:66:66:ef:4c:d8:d5:93:ff:3b:5a: 2a:c9:92:b8:60:67:23:4e:f8:b4:e1:59:d2:c9:ce: a1:69:de:d2:da:ee:56:b8:f3:31:bc:00:05:c1:47: 49:ea:f8:35:03:c9:eb:ba:fa:19:5d:0e:8a:20:8d: eb:04:78:25:14:09:82:e5:8a:e4:07:d1:38:0e:d7: 58:ab:87:24:b1:27:eb:54:f5:72:22:0d:3a:73:a1: 8c:1d:b8:ac:93:ca:0f:cb:b4:f7:a0:b5:5b:c8:26: 99:6a:ae:e2:bf:97:0d:ca:2f:98:0d:bd:e3:cf:a6: 60:91:ae:58:e5:32:5e:d8:30:31:e5:05:65:f7:4e: f8:b9:ea:47:38:07:e0:76:32:50:70:63:30:4e:f4: 5f:5c:48:0c:e9:39:de:8d:38:08:13:97:b9:ac:1f: a3:41:34:c1:0a:4a:81:8d:75:12:53:70:b6:70:e6: d5:8f:e6:57:be:a9:c8:91:41:e1:9c:f9:a4:a8:e2: 22:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:79:33:05:66:6F:75:6E:6F:C7:65:6D:50:3A:2A:73:6A:FB:F8:AF X509v3 Authority Key Identifier: keyid:AA:44:05:B1:BF:A9:6C:9C:69:B0:29:03:3E:F4:81:D8:F5:8A:77:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91705D7/96A36AA816D811EFBF901E5FC4F9AE02/qkQFsb-pbJxpsCkDPvSB2PWKd-U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qkQFsb-pbJxpsCkDPvSB2PWKd-U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91705D7/96A36AA816D811EFBF901E5FC4F9AE02/qkQFsb-pbJxpsCkDPvSB2PWKd-U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:f4:8a:47:0f:27:24:94:7c:7c:77:3f:de:d1:c8:a9:c2:47: cd:10:19:62:ec:62:bf:5d:e0:16:da:8f:79:83:54:d0:67:0d: e6:f6:80:25:b0:b7:b6:6a:5f:d2:34:79:ff:a7:9c:2e:f1:ff: c4:ee:5e:45:aa:bb:5a:92:93:4c:fa:1c:93:13:f0:98:07:9f: ff:cc:b1:1d:bf:c8:b5:38:22:af:9d:e0:27:41:5a:ec:68:ee: 1c:29:46:a6:d0:04:84:83:9b:21:ad:1d:60:0c:6a:a4:0a:15: 8f:71:17:f9:9e:bf:33:59:61:50:a3:6f:be:6f:d9:be:58:9f: bb:0e:f1:42:79:62:6a:ab:c3:d5:d1:8c:9c:0f:0b:7f:fd:8a: e7:2e:98:cb:6f:88:86:ff:5d:32:90:9d:b0:51:ac:cd:d5:fc: 64:e1:1c:97:95:57:d3:e5:ea:cb:51:77:8c:95:fe:73:13:6c: cb:ed:3d:94:b9:ad:0d:57:f1:db:5a:fb:4c:87:18:c6:1c:5b: 23:b8:96:0b:8e:8c:b8:78:91:90:bb:fb:15:d1:d7:ca:24:2a: b7:71:8b:16:f7:e0:8e:be:92:60:0b:a2:72:66:2b:bc:18:80: a6:53:13:97:46:be:e4:10:32:2d:24:0e:68:7d:b2:96:59:f9: 68:34:62:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzA1RDcxMTAvBgNVBAUTKEFBNDQwNUIxQkZBOTZDOUM2OUIwMjkwMzNFRjQ4MUQ4 RjU4QTc3RTUwHhcNMjUwNjAzMDUzMjUxWhcNMjUwNjEwMDUzMjUxWjAYMRYwFAYD VQQDEw02ODNlODkwMy1mYWU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyI/w3gF60JMAuttTVBJTG6ohNQGEROTKt3g4fuVUIYYaBvpJouw5TmtEf/cP KJELZCstMFB1mgbO8YBxi7JsrWZm70zY1ZP/O1oqyZK4YGcjTvi04VnSyc6had7S 2u5WuPMxvAAFwUdJ6vg1A8nruvoZXQ6KII3rBHglFAmC5YrkB9E4DtdYq4cksSfr VPVyIg06c6GMHbisk8oPy7T3oLVbyCaZaq7iv5cNyi+YDb3jz6Zgka5Y5TJe2DAx 5QVl9074uepHOAfgdjJQcGMwTvRfXEgM6TnejTgIE5e5rB+jQTTBCkqBjXUSU3C2 cObVj+ZXvqnIkUHhnPmkqOIiAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDJ5MwVm b3Vub8dlbVA6KnNq+/ivMB8GA1UdIwQYMBaAFKpEBbG/qWycabApAz70gdj1infl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDVENy85NkEzNkFBODE2 RDgxMUVGQkY5MDFFNUZDNEY5QUUwMi9xa1FGc2ItcGJKeHBzQ2tEUHZTQjJQV0tk LVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3FrUUZzYi1wYkp4cHNDa0RQdlNCMlBXS2QtVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDVENy85NkEzNkFBODE2RDgxMUVGQkY5MDFFNUZDNEY5QUUwMi9xa1FGc2ItcGJK eHBzQ2tEUHZTQjJQV0tkLVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAM9IpHDycklHx8dz/e0cipwkfNEBli7GK/XeAW2o95g1TQZw3m9oAl sLe2al/SNHn/p5wu8f/E7l5FqrtakpNM+hyTE/CYB5//zLEdv8i1OCKvneAnQVrs aO4cKUam0ASEg5shrR1gDGqkChWPcRf5nr8zWWFQo2++b9m+WJ+7DvFCeWJqq8PV 0YycDwt//YrnLpjLb4iG/10ykJ2wUazN1fxk4RyXlVfT5erLUXeMlf5zE2zL7T2U ua0NV/HbWvtMhxjGHFsjuJYLjoy4eJGQu/sV0dfKJCq3cYsW9+COvpJgC6JyZiu8 GICmUxOXRr7kEDItJA5ofbKWWfloNGIC -----END CERTIFICATE-----Generated at Wed Jun 4 00:15:22 2025 by rpki-client