$ rpki-client -vvf rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/qeq8JGURbtEdbIza4gESN88fWd8.mft File: qeq8JGURbtEdbIza4gESN88fWd8.mft (raw, json) Hash identifier: jLNoLatTTZXKBOB510TpaAxksri9inQxnsCap1/K43A= Subject key identifier: 64:8F:CF:D0:5C:B6:9A:A9:45:F5:7B:0D:E0:1B:D2:75:F9:5F:47:B7 Authority key identifier: A9:EA:BC:24:65:11:6E:D1:1D:6C:8C:DA:E2:01:12:37:CF:1F:59:DF Certificate issuer: /CN=A91871C2/serialNumber=A9EABC2465116ED11D6C8CDAE2011237CF1F59DF Certificate serial: 0756 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qeq8JGURbtEdbIza4gESN88fWd8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/qeq8JGURbtEdbIza4gESN88fWd8.mft Manifest number: 0723 Signing time: Fri 30 May 2025 22:16:00 +0000 Manifest this update: Fri 30 May 2025 22:15:59 +0000 Manifest next update: Fri 06 Jun 2025 22:15:59 +0000 Files and hashes: 1: qeq8JGURbtEdbIza4gESN88fWd8.crl (hash: O897sPFu7RbnKsbRm5htyZBiNj788eHYQZSvK+q5RqA=) 2: 3BCBA04AE97211ECB2067F31C4F9AE02.roa (hash: S20AgwmMD32xuDu5IGHvW4IWHrtUSQ1t37c8fQjNokk=) 3: B43753D005AC11ECB86F694EC4F9AE02.roa (hash: 4k+rKheNnbTveN1MujuQeZF7WX147LGgGeCmhBGihc4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/qeq8JGURbtEdbIza4gESN88fWd8.crl rsync://rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/qeq8JGURbtEdbIza4gESN88fWd8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qeq8JGURbtEdbIza4gESN88fWd8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 22:15:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1878 (0x756) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91871C2, serialNumber=A9EABC2465116ED11D6C8CDAE2011237CF1F59DF Validity Not Before: May 30 22:15:59 2025 GMT Not After : Jun 6 22:15:59 2025 GMT Subject: CN=683a2e20-d42d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ad:22:1a:fe:5a:a8:74:fe:3b:60:85:f1:4b: e7:2e:d9:7b:b2:2d:f0:ce:69:29:e6:6f:50:02:d9: 6a:29:66:8c:37:d1:8f:6c:02:2f:92:53:ec:89:38: 0c:a3:83:5f:c0:4f:72:3b:e8:3c:94:5f:ca:8e:f1: 7b:c9:d8:c7:a3:a9:a6:47:60:5e:b3:e6:da:df:23: d7:c7:ef:99:48:53:c2:a5:bf:f5:06:b0:c1:d2:df: ef:03:88:04:6d:3b:c7:38:14:a1:76:51:82:d2:2b: 2d:29:e0:f1:84:65:3b:03:25:1e:5b:0a:6c:a3:a9: 57:3b:b1:38:36:88:1a:22:54:3f:a6:75:fc:e5:d9: 95:c2:81:93:f3:7b:58:05:60:a5:36:90:3f:70:5b: 14:16:a9:38:0b:e1:7f:4b:d1:1a:98:50:bb:85:f7: 43:1b:f7:d9:e5:68:d2:2f:4e:00:64:12:d5:13:51: a7:ac:d8:58:a9:19:a6:d2:aa:f8:52:b3:c6:f7:c0: 97:25:8c:d7:43:2a:dd:e7:19:99:4e:aa:b4:a8:6b: 6e:94:de:ad:db:86:b9:3c:0d:34:03:74:67:f3:e6: 7a:21:4b:0f:9e:ee:7e:47:53:9e:7e:18:d1:02:ce: 5c:30:aa:55:5c:0b:5b:c0:9b:8b:28:27:87:b7:cb: 55:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:8F:CF:D0:5C:B6:9A:A9:45:F5:7B:0D:E0:1B:D2:75:F9:5F:47:B7 X509v3 Authority Key Identifier: keyid:A9:EA:BC:24:65:11:6E:D1:1D:6C:8C:DA:E2:01:12:37:CF:1F:59:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/qeq8JGURbtEdbIza4gESN88fWd8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qeq8JGURbtEdbIza4gESN88fWd8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/qeq8JGURbtEdbIza4gESN88fWd8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:61:79:1b:19:e2:0b:44:99:89:8c:0d:61:e4:3f:58:75:10: 52:46:1c:13:0d:88:0f:a5:bd:c8:76:c8:c1:03:b4:d5:f4:a0: 32:74:1d:ae:2a:fa:28:05:60:3e:d7:89:eb:d0:4c:ee:00:f6: 05:65:b7:ce:02:fd:98:ec:ca:6b:d6:c2:e2:d9:e8:2d:26:b9: 52:fd:d7:f2:26:41:26:86:fb:e4:02:8c:5b:7c:9f:d5:ad:66: 0a:c6:0a:89:e8:fa:63:65:5b:79:27:4f:2a:53:93:ce:61:9d: 7a:11:71:c0:10:2b:f5:4b:0d:86:fe:66:87:ed:c0:1a:49:58: de:ee:f8:b0:be:a6:2d:19:8a:50:4a:f3:01:56:ad:ef:9f:7c: 26:7b:ca:3c:bb:4d:98:0f:20:73:7d:8e:a5:27:e0:10:6a:4b: 58:b5:89:16:e5:74:bb:f4:00:fd:0e:d9:1f:ce:d5:70:be:e1: 54:63:fe:84:e1:e3:fa:b7:84:fe:ef:bf:04:55:70:a1:9a:f1: 23:e4:a5:78:ed:71:08:5f:df:d9:b3:4c:e0:bc:d4:6f:28:cf: 72:bd:35:4e:fb:1d:a3:af:30:ec:6b:e6:c5:e0:b8:ef:12:19: c8:cb:8a:78:0a:33:c0:19:4e:7a:91:f7:c0:cc:80:95:68:cb: 27:27:a4:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB1YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODcxQzIxMTAvBgNVBAUTKEE5RUFCQzI0NjUxMTZFRDExRDZDOENEQUUyMDExMjM3 Q0YxRjU5REYwHhcNMjUwNTMwMjIxNTU5WhcNMjUwNjA2MjIxNTU5WjAYMRYwFAYD VQQDEw02ODNhMmUyMC1kNDJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsq0iGv5aqHT+O2CF8UvnLtl7si3wzmkp5m9QAtlqKWaMN9GPbAIvklPsiTgM o4NfwE9yO+g8lF/KjvF7ydjHo6mmR2Bes+ba3yPXx++ZSFPCpb/1BrDB0t/vA4gE bTvHOBShdlGC0istKeDxhGU7AyUeWwpso6lXO7E4NogaIlQ/pnX85dmVwoGT83tY BWClNpA/cFsUFqk4C+F/S9EamFC7hfdDG/fZ5WjSL04AZBLVE1GnrNhYqRmm0qr4 UrPG98CXJYzXQyrd5xmZTqq0qGtulN6t24a5PA00A3Rn8+Z6IUsPnu5+R1OefhjR As5cMKpVXAtbwJuLKCeHt8tVyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGSPz9Bc tpqpRfV7DeAb0nX5X0e3MB8GA1UdIwQYMBaAFKnqvCRlEW7RHWyM2uIBEjfPH1nf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzFDMi9ERTYxNjY2ODU1 QTkxMUVCOTlBRkRBNURDNEY5QUUwMi9xZXE4SkdVUmJ0RWRiSXphNGdFU044OGZX ZDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FlcThKR1VSYnRFZGJJemE0Z0VTTjg4ZldkOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzFDMi9ERTYxNjY2ODU1QTkxMUVCOTlBRkRBNURDNEY5QUUwMi9xZXE4SkdVUmJ0 RWRiSXphNGdFU044OGZXZDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6YXkbGeILRJmJjA1h5D9YdRBSRhwTDYgPpb3IdsjBA7TV9KAydB2u KvooBWA+14nr0EzuAPYFZbfOAv2Y7Mpr1sLi2egtJrlS/dfyJkEmhvvkAoxbfJ/V rWYKxgqJ6PpjZVt5J08qU5POYZ16EXHAECv1Sw2G/maH7cAaSVje7viwvqYtGYpQ SvMBVq3vn3wme8o8u02YDyBzfY6lJ+AQaktYtYkW5XS79AD9DtkfztVwvuFUY/6E 4eP6t4T+778EVXChmvEj5KV47XEIX9/Zs0zgvNRvKM9yvTVO+x2jrzDsa+bF4Ljv EhnIy4p4CjPAGU56kffAzICVaMsnJ6S2 -----END CERTIFICATE-----Generated at Sat May 31 17:24:43 2025 by rpki-client