$ rpki-client -vvf rpki.apnic.net/member_repository/A91B72D9/AA23FA96697111ECB625930CC4F9AE02/QeXcIVUGn_MX5e44x1t4icIhl-M.mft File: QeXcIVUGn_MX5e44x1t4icIhl-M.mft (raw, json) Hash identifier: IGU7b4czaaxftdY+MDAxE+A/7ImB1XzHsQ4yW4cMVLk= Subject key identifier: CD:53:92:5E:23:16:57:93:76:F5:6A:A2:24:A9:F6:BD:52:F3:1F:29 Authority key identifier: 41:E5:DC:21:55:06:9F:F3:17:E5:EE:38:C7:5B:78:89:C2:21:97:E3 Certificate issuer: /CN=A91B72D9/serialNumber=41E5DC2155069FF317E5EE38C75B7889C22197E3 Certificate serial: 043F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QeXcIVUGn_MX5e44x1t4icIhl-M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B72D9/AA23FA96697111ECB625930CC4F9AE02/QeXcIVUGn_MX5e44x1t4icIhl-M.mft Manifest number: 042B Signing time: Sat 31 May 2025 00:36:14 +0000 Manifest this update: Sat 31 May 2025 00:36:13 +0000 Manifest next update: Sat 07 Jun 2025 00:36:13 +0000 Files and hashes: 1: QeXcIVUGn_MX5e44x1t4icIhl-M.crl (hash: ol1tXVNT10jkXCNFO9X+zdP0ovqKTpfU20D2XH5+WP8=) 2: 43E6BE1AF53411EF9DE3BD34C4F9AE02.roa (hash: d0073l1e/pxbjtRy8RJAwD/f1Qu4geicKXKAmauL91Y=) 3: 4FD9C050F53411EFBF7FCA34C4F9AE02.roa (hash: UdXjbAhF6oniMP9h+eQndIWcxlYyRMTp0LAX//sl/pw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B72D9/AA23FA96697111ECB625930CC4F9AE02/QeXcIVUGn_MX5e44x1t4icIhl-M.crl rsync://rpki.apnic.net/member_repository/A91B72D9/AA23FA96697111ECB625930CC4F9AE02/QeXcIVUGn_MX5e44x1t4icIhl-M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QeXcIVUGn_MX5e44x1t4icIhl-M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:36:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1087 (0x43f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B72D9, serialNumber=41E5DC2155069FF317E5EE38C75B7889C22197E3 Validity Not Before: May 31 00:36:13 2025 GMT Not After : Jun 7 00:36:13 2025 GMT Subject: CN=683a4efe-0251 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:a4:52:bf:c0:c8:48:dc:66:24:61:af:ca:f8: 1f:1c:cd:be:b1:42:61:4e:bc:91:73:70:ab:1e:28: 51:ea:2b:ce:90:fb:b6:77:16:f0:f0:7c:4c:db:64: 52:43:63:ec:fb:f8:09:29:ff:1e:06:3d:a9:4a:f6: 20:25:fb:f2:b0:54:95:a9:20:0d:d4:95:d6:2e:19: 65:d1:2f:54:98:33:da:20:ce:b5:15:e2:9c:cb:f1: 18:c2:61:13:59:07:36:27:08:bd:f2:13:fd:08:23: 45:d5:3d:4c:44:20:d9:ef:c2:59:8b:7b:ca:f9:d7: bb:4b:b5:09:47:13:98:79:68:f9:9a:9b:68:08:c4: ac:20:cb:ac:80:38:ba:86:80:e4:01:91:67:1d:0c: 77:0d:03:28:3a:5b:48:19:64:25:5b:8c:03:c7:75: e4:1d:e2:f2:6c:a0:16:53:88:f9:83:04:fe:36:86: 91:60:0f:4f:26:14:c9:7e:a2:f1:61:1c:6c:bb:f0: 4d:d2:0f:d2:a6:93:af:c1:bc:4e:b1:cf:b2:e3:8b: 56:c4:2a:d2:35:88:bb:b9:82:22:5e:9c:e9:07:7e: ca:67:ba:28:27:93:d9:46:de:7c:0c:67:8a:91:cb: b8:ec:af:8f:88:b1:36:b6:5e:31:c0:91:8c:27:88: 0e:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:53:92:5E:23:16:57:93:76:F5:6A:A2:24:A9:F6:BD:52:F3:1F:29 X509v3 Authority Key Identifier: keyid:41:E5:DC:21:55:06:9F:F3:17:E5:EE:38:C7:5B:78:89:C2:21:97:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B72D9/AA23FA96697111ECB625930CC4F9AE02/QeXcIVUGn_MX5e44x1t4icIhl-M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QeXcIVUGn_MX5e44x1t4icIhl-M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B72D9/AA23FA96697111ECB625930CC4F9AE02/QeXcIVUGn_MX5e44x1t4icIhl-M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:9c:a8:f5:ab:32:fc:fa:e4:55:ae:4c:96:e0:5a:83:14:98: f6:d0:b9:2d:73:67:00:e7:9f:c2:65:7b:c6:50:89:44:ec:0d: 5f:bc:18:53:df:8b:3e:b1:2c:c4:14:54:94:2e:a0:86:14:13: 07:e0:04:64:71:c9:9f:fa:19:e2:ba:74:24:20:39:c7:79:ba: e5:4c:12:6a:59:65:64:b8:fe:5c:1f:b8:d7:ac:1f:32:c9:68: eb:de:15:2c:e6:ea:d2:12:46:f8:01:8a:27:9a:8d:e2:a4:9f: b4:05:70:21:1b:54:96:b8:e0:21:31:99:66:70:0d:9d:d7:e5: 22:98:c7:95:50:3c:19:11:29:74:71:0f:56:56:29:7c:f1:1b: 67:a2:52:08:35:b6:10:2b:03:49:26:8c:1b:e2:c4:d0:7c:3c: 05:9f:1d:b8:04:1b:fc:ac:cc:fe:5a:38:c4:f6:37:0e:43:12: 6a:74:2c:93:ef:74:a9:fd:db:40:58:30:52:cb:4c:4e:41:25: 32:91:15:ff:f5:c9:e2:de:57:9a:9d:05:c1:37:49:20:c6:47: 87:36:d7:c1:ce:aa:ed:ca:29:bc:df:f2:72:e0:e7:a9:11:07: a9:3d:c6:89:e9:d9:e9:64:77:4e:aa:71:8d:36:72:eb:6d:29: 76:17:8c:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBD8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjcyRDkxMTAvBgNVBAUTKDQxRTVEQzIxNTUwNjlGRjMxN0U1RUUzOEM3NUI3ODg5 QzIyMTk3RTMwHhcNMjUwNTMxMDAzNjEzWhcNMjUwNjA3MDAzNjEzWjAYMRYwFAYD VQQDEw02ODNhNGVmZS0wMjUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA16RSv8DISNxmJGGvyvgfHM2+sUJhTryRc3CrHihR6ivOkPu2dxbw8HxM22RS Q2Ps+/gJKf8eBj2pSvYgJfvysFSVqSAN1JXWLhll0S9UmDPaIM61FeKcy/EYwmET WQc2Jwi98hP9CCNF1T1MRCDZ78JZi3vK+de7S7UJRxOYeWj5mptoCMSsIMusgDi6 hoDkAZFnHQx3DQMoOltIGWQlW4wDx3XkHeLybKAWU4j5gwT+NoaRYA9PJhTJfqLx YRxsu/BN0g/SppOvwbxOsc+y44tWxCrSNYi7uYIiXpzpB37KZ7ooJ5PZRt58DGeK kcu47K+PiLE2tl4xwJGMJ4gOlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM1Tkl4j FleTdvVqoiSp9r1S8x8pMB8GA1UdIwQYMBaAFEHl3CFVBp/zF+XuOMdbeInCIZfj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzJEOS9BQTIzRkE5NjY5 NzExMUVDQjYyNTkzMENDNEY5QUUwMi9RZVhjSVZVR25fTVg1ZTQ0eDF0NGljSWhs LU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FlWGNJVlVHbl9NWDVlNDR4MXQ0aWNJaGwtTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NzJEOS9BQTIzRkE5NjY5NzExMUVDQjYyNTkzMENDNEY5QUUwMi9RZVhjSVZVR25f TVg1ZTQ0eDF0NGljSWhsLU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVnKj1qzL8+uRVrkyW4FqDFJj20Lktc2cA55/CZXvGUIlE7A1fvBhT 34s+sSzEFFSULqCGFBMH4ARkccmf+hniunQkIDnHebrlTBJqWWVkuP5cH7jXrB8y yWjr3hUs5urSEkb4AYonmo3ipJ+0BXAhG1SWuOAhMZlmcA2d1+UimMeVUDwZESl0 cQ9WVil88RtnolIINbYQKwNJJowb4sTQfDwFnx24BBv8rMz+WjjE9jcOQxJqdCyT 73Sp/dtAWDBSy0xOQSUykRX/9cni3leanQXBN0kgxkeHNtfBzqrtyim83/Jy4Oep EQepPcaJ6dnpZHdOqnGNNnLrbSl2F4yM -----END CERTIFICATE-----Generated at Sat May 31 17:08:54 2025 by rpki-client