$ rpki-client -vvf rpki.apnic.net/member_repository/A91953AF/043160B0CA0411EEBCD01770C4F9AE02/qCS2Y_P1o0-C7iJyqK795Dt5vZM.mft File: qCS2Y_P1o0-C7iJyqK795Dt5vZM.mft (raw, json) Hash identifier: e16YxT3blLE6rvI2uUbqSZPw6KtVPvEZtH+uYn2pr50= Subject key identifier: F3:95:25:06:42:85:F4:1D:4C:85:18:F3:FE:40:63:65:87:FB:C1:32 Authority key identifier: A8:24:B6:63:F3:F5:A3:4F:82:EE:22:72:A8:AE:FD:E4:3B:79:BD:93 Certificate issuer: /CN=A91953AF/serialNumber=A824B663F3F5A34F82EE2272A8AEFDE43B79BD93 Certificate serial: F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qCS2Y_P1o0-C7iJyqK795Dt5vZM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91953AF/043160B0CA0411EEBCD01770C4F9AE02/qCS2Y_P1o0-C7iJyqK795Dt5vZM.mft Manifest number: F2 Signing time: Sat 31 May 2025 04:53:36 +0000 Manifest this update: Sat 31 May 2025 04:53:36 +0000 Manifest next update: Sat 07 Jun 2025 04:53:36 +0000 Files and hashes: 1: qCS2Y_P1o0-C7iJyqK795Dt5vZM.crl (hash: 0Sn4MSA4sjQ7IutvqLURfVvoaZ9sOQsfgsXhejJZd2o=) 2: 593AFF1ACA0611EEBA01A22CC4F9AE02.roa (hash: 5Igi5uwLEP9LNSo1jtb9EAzRP4JXP+61tZCh/iJ8p+M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91953AF/043160B0CA0411EEBCD01770C4F9AE02/qCS2Y_P1o0-C7iJyqK795Dt5vZM.crl rsync://rpki.apnic.net/member_repository/A91953AF/043160B0CA0411EEBCD01770C4F9AE02/qCS2Y_P1o0-C7iJyqK795Dt5vZM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qCS2Y_P1o0-C7iJyqK795Dt5vZM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:53:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 244 (0xf4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91953AF, serialNumber=A824B663F3F5A34F82EE2272A8AEFDE43B79BD93 Validity Not Before: May 31 04:53:36 2025 GMT Not After : Jun 7 04:53:36 2025 GMT Subject: CN=683a8b50-a405 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:a0:a7:55:5d:fe:19:6e:d4:77:6f:d8:82:db: 36:9e:03:73:31:8e:46:0d:2c:89:15:63:b0:91:3a: b3:a2:22:c5:03:0b:97:2f:67:0d:dc:9a:3d:ce:8a: 79:9a:60:2a:23:6f:9f:f2:bf:44:89:b7:eb:c9:03: d0:f7:ee:de:81:97:0b:37:d8:da:30:bf:c3:0a:7c: a2:dc:d3:ce:ff:cf:41:db:13:2e:20:6a:de:cb:7d: 64:5d:85:52:dc:53:22:fc:d9:06:dc:ed:b1:45:53: 3c:fa:f8:fc:45:40:db:c1:eb:be:99:f4:7a:e8:d8: 98:b6:8f:5e:01:f1:40:79:f2:51:9e:e2:5d:ad:34: 85:08:c2:b4:c3:15:43:ef:e3:97:e5:18:5b:6b:3f: 89:9f:92:b4:6a:be:94:c5:ef:bc:b8:ae:80:f1:cc: 75:20:2a:a0:40:67:6a:d4:34:0f:88:70:5f:18:9b: 82:7e:26:f5:b9:5c:71:d1:08:71:e1:76:61:a5:de: c8:6c:2c:f0:9e:9f:e8:37:fa:a8:90:50:66:40:02: cb:77:dc:27:4c:a5:f9:c4:17:f8:56:0b:18:ae:d5: ed:5d:22:1a:32:e1:ce:2d:68:e9:80:15:ac:af:ab: ea:a6:f5:ee:97:fc:61:eb:dc:f0:17:46:bb:b8:34: e6:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:95:25:06:42:85:F4:1D:4C:85:18:F3:FE:40:63:65:87:FB:C1:32 X509v3 Authority Key Identifier: keyid:A8:24:B6:63:F3:F5:A3:4F:82:EE:22:72:A8:AE:FD:E4:3B:79:BD:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91953AF/043160B0CA0411EEBCD01770C4F9AE02/qCS2Y_P1o0-C7iJyqK795Dt5vZM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qCS2Y_P1o0-C7iJyqK795Dt5vZM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91953AF/043160B0CA0411EEBCD01770C4F9AE02/qCS2Y_P1o0-C7iJyqK795Dt5vZM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:33:7d:31:8c:03:9f:83:4e:dd:f2:75:d4:5c:9e:ff:fd:1b: d8:ed:14:3f:b0:8a:45:be:cf:39:39:cc:90:82:f3:3b:e2:ce: e7:59:47:88:82:b9:75:c0:6f:75:94:c2:f0:ca:c7:df:90:47: 8d:20:5d:9f:cc:2d:0b:aa:85:d7:59:89:79:6b:10:d0:66:34: b4:b5:bc:74:d2:d2:b3:36:ff:9a:c2:70:a9:04:17:90:99:31: 57:bd:d3:40:99:7b:25:46:4e:a7:ee:23:22:a1:fb:9e:44:87: 78:96:f8:4e:48:67:d6:81:3a:71:53:7e:e6:0c:9a:bf:24:d6: c8:c5:af:ac:75:2c:83:5a:35:3c:1a:00:cf:35:53:d5:02:8c: b3:87:db:06:d7:49:f0:c6:93:8c:32:0b:b4:bd:55:95:13:8f: 3f:1f:e5:8e:18:2e:60:cd:45:c9:94:6f:ac:cc:1d:5c:ce:26: 21:38:04:db:20:7d:3b:41:8e:cc:3c:65:0e:15:a9:4b:fc:09: 99:93:de:b6:f3:27:72:81:bf:b9:d6:3f:91:e9:34:4d:00:46: ed:fe:2b:10:71:e2:eb:b8:03:21:b6:a2:dc:e4:ee:1b:c8:ff: b8:83:0b:fc:3f:2e:a4:a8:fd:69:24:eb:24:0f:f1:e0:ee:48: 7b:a5:72:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTUzQUYxMTAvBgNVBAUTKEE4MjRCNjYzRjNGNUEzNEY4MkVFMjI3MkE4QUVGREU0 M0I3OUJEOTMwHhcNMjUwNTMxMDQ1MzM2WhcNMjUwNjA3MDQ1MzM2WjAYMRYwFAYD VQQDEw02ODNhOGI1MC1hNDA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyKCnVV3+GW7Ud2/Ygts2ngNzMY5GDSyJFWOwkTqzoiLFAwuXL2cN3Jo9zop5 mmAqI2+f8r9EibfryQPQ9+7egZcLN9jaML/DCnyi3NPO/89B2xMuIGrey31kXYVS 3FMi/NkG3O2xRVM8+vj8RUDbweu+mfR66NiYto9eAfFAefJRnuJdrTSFCMK0wxVD 7+OX5Rhbaz+Jn5K0ar6Uxe+8uK6A8cx1ICqgQGdq1DQPiHBfGJuCfib1uVxx0Qhx 4XZhpd7IbCzwnp/oN/qokFBmQALLd9wnTKX5xBf4VgsYrtXtXSIaMuHOLWjpgBWs r6vqpvXul/xh69zwF0a7uDTmLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPOVJQZC hfQdTIUY8/5AY2WH+8EyMB8GA1UdIwQYMBaAFKgktmPz9aNPgu4icqiu/eQ7eb2T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTNBRi8wNDMxNjBCMENB MDQxMUVFQkNEMDE3NzBDNEY5QUUwMi9xQ1MyWV9QMW8wLUM3aUp5cUs3OTVEdDV2 Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FDUzJZX1AxbzAtQzdpSnlxSzc5NUR0NXZaTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NTNBRi8wNDMxNjBCMENBMDQxMUVFQkNEMDE3NzBDNEY5QUUwMi9xQ1MyWV9QMW8w LUM3aUp5cUs3OTVEdDV2Wk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHM30xjAOfg07d8nXUXJ7//RvY7RQ/sIpFvs85OcyQgvM74s7nWUeI grl1wG91lMLwysffkEeNIF2fzC0LqoXXWYl5axDQZjS0tbx00tKzNv+awnCpBBeQ mTFXvdNAmXslRk6n7iMiofueRId4lvhOSGfWgTpxU37mDJq/JNbIxa+sdSyDWjU8 GgDPNVPVAoyzh9sG10nwxpOMMgu0vVWVE48/H+WOGC5gzUXJlG+szB1cziYhOATb IH07QY7MPGUOFalL/AmZk9628ydygb+51j+R6TRNAEbt/isQceLruAMhtqLc5O4b yP+4gwv8Py6kqP1pJOskD/Hg7kh7pXLc -----END CERTIFICATE-----Generated at Sat May 31 16:47:43 2025 by rpki-client