$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA2AB/111E55E0097E11EEAE7F351FC4F9AE02/QOlPucJEwgzdpE57Dop6cZqXdA8.mft File: QOlPucJEwgzdpE57Dop6cZqXdA8.mft (raw, json) Hash identifier: wsOBZFmq8f3RJSPPnR8t6+5K4wDDomCuLBAgkfZcylg= Subject key identifier: 2D:82:6A:E5:E6:73:33:5C:CC:49:DC:C2:1A:BD:F3:B3:17:F8:27:0F Authority key identifier: 40:E9:4F:B9:C2:44:C2:0C:DD:A4:4E:7B:0E:8A:7A:71:9A:97:74:0F Certificate issuer: /CN=A91BA2AB/serialNumber=40E94FB9C244C20CDDA44E7B0E8A7A719A97740F Certificate serial: 0171 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOlPucJEwgzdpE57Dop6cZqXdA8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA2AB/111E55E0097E11EEAE7F351FC4F9AE02/QOlPucJEwgzdpE57Dop6cZqXdA8.mft Manifest number: 016F Signing time: Sat 31 May 2025 03:29:15 +0000 Manifest this update: Sat 31 May 2025 03:29:14 +0000 Manifest next update: Sat 07 Jun 2025 03:29:14 +0000 Files and hashes: 1: QOlPucJEwgzdpE57Dop6cZqXdA8.crl (hash: /HGroQRH5cGeHtxmEVXmrOmh7S0l5HuGjGmwF9khI04=) 2: 7A8706087CA011EF8491607DC4F9AE02.roa (hash: EAsHcyPYziRKahL54/4beVq18nLBLDrzExkB1EWt7iQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA2AB/111E55E0097E11EEAE7F351FC4F9AE02/QOlPucJEwgzdpE57Dop6cZqXdA8.crl rsync://rpki.apnic.net/member_repository/A91BA2AB/111E55E0097E11EEAE7F351FC4F9AE02/QOlPucJEwgzdpE57Dop6cZqXdA8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOlPucJEwgzdpE57Dop6cZqXdA8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:29:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 369 (0x171) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA2AB, serialNumber=40E94FB9C244C20CDDA44E7B0E8A7A719A97740F Validity Not Before: May 31 03:29:14 2025 GMT Not After : Jun 7 03:29:14 2025 GMT Subject: CN=683a778a-5495 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:04:6c:80:76:1c:aa:b9:ca:7d:a0:6e:23:9e: 8f:cb:e2:27:8c:75:64:9e:10:eb:4b:db:fe:57:f3: 0b:49:45:e0:49:17:8a:ca:d5:95:fd:f2:0d:d7:73: da:ca:68:47:6b:6f:7f:26:55:84:58:c5:03:ec:49: c5:fc:87:d1:d7:61:3a:57:01:6d:97:e7:05:7f:22: ee:fc:f4:64:94:ff:84:b3:9e:e4:1b:ea:2a:da:8e: 34:61:65:12:67:88:b4:8f:15:c0:69:3c:e7:a3:48: ab:38:44:34:14:5b:7f:a7:6c:17:ea:83:f6:5c:8e: 28:fe:5d:4c:32:91:b9:50:d7:f4:19:f3:ed:71:d1: f8:b2:2e:93:8d:72:f3:03:16:6e:83:8e:e9:7e:e6: 2e:11:86:5f:59:be:f4:59:43:a1:cb:34:29:0b:51: ff:c4:30:02:b6:d5:3a:6a:01:10:79:ca:30:70:39: 53:8c:ab:6c:65:c2:f2:a0:a5:68:b0:69:96:f3:5d: 09:d7:c9:55:ab:6b:b8:db:87:42:17:dd:7c:f5:be: 15:61:ca:b4:05:42:91:9d:05:a7:a4:8f:ec:02:76: f8:06:53:89:85:5d:6f:6f:01:cc:47:9e:26:e6:98: 90:49:02:2e:7e:28:6a:c1:b3:90:d8:29:dd:a3:b1: 40:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:82:6A:E5:E6:73:33:5C:CC:49:DC:C2:1A:BD:F3:B3:17:F8:27:0F X509v3 Authority Key Identifier: keyid:40:E9:4F:B9:C2:44:C2:0C:DD:A4:4E:7B:0E:8A:7A:71:9A:97:74:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA2AB/111E55E0097E11EEAE7F351FC4F9AE02/QOlPucJEwgzdpE57Dop6cZqXdA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOlPucJEwgzdpE57Dop6cZqXdA8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA2AB/111E55E0097E11EEAE7F351FC4F9AE02/QOlPucJEwgzdpE57Dop6cZqXdA8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:71:ba:04:48:f1:cb:77:43:a5:46:4e:05:eb:df:7e:d7:56: 68:fa:d9:c2:77:73:f9:e4:e1:5c:b3:3e:63:0b:cb:0f:53:38: dd:e6:75:59:6d:16:79:3d:69:a0:01:18:5e:29:08:3f:ac:45: 40:19:02:d5:fc:b2:b7:34:10:8a:29:5d:10:77:b2:2b:7d:b3: 52:28:af:5a:46:b6:81:45:ba:db:56:c9:fc:a2:16:b5:0c:95: 72:1d:03:8f:b6:da:07:8e:df:81:5f:5b:b1:0e:b5:bc:9f:e8: aa:4e:32:22:27:51:7a:59:3f:c8:9d:83:b8:4d:13:ce:ff:7e: 29:57:cf:85:9b:6a:8f:82:4d:5c:63:04:1b:ea:b2:ce:d7:e6: ba:a1:df:3d:1f:3e:30:fc:70:4b:63:28:a0:e3:1a:59:43:ee: 88:46:b9:69:4d:6a:48:40:10:9e:56:4e:c7:7c:4d:21:c7:ab: 29:6a:39:92:dc:4a:6f:18:f9:9d:9f:a2:17:17:7f:1e:13:d6: d2:e3:53:56:6d:be:fd:01:90:48:c2:7a:d3:31:f8:14:2f:8f: e6:31:0a:d7:d0:88:37:4a:04:72:50:33:69:39:16:e3:5b:3f: 6e:f9:e3:d5:0c:87:3f:ea:b5:1d:20:b2:56:a5:84:fd:9a:76: 7f:c2:b4:3d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkEyQUIxMTAvBgNVBAUTKDQwRTk0RkI5QzI0NEMyMENEREE0NEU3QjBFOEE3QTcx OUE5Nzc0MEYwHhcNMjUwNTMxMDMyOTE0WhcNMjUwNjA3MDMyOTE0WjAYMRYwFAYD VQQDEw02ODNhNzc4YS01NDk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzgRsgHYcqrnKfaBuI56Py+InjHVknhDrS9v+V/MLSUXgSReKytWV/fIN13Pa ymhHa29/JlWEWMUD7EnF/IfR12E6VwFtl+cFfyLu/PRklP+Es57kG+oq2o40YWUS Z4i0jxXAaTzno0irOEQ0FFt/p2wX6oP2XI4o/l1MMpG5UNf0GfPtcdH4si6TjXLz AxZug47pfuYuEYZfWb70WUOhyzQpC1H/xDACttU6agEQecowcDlTjKtsZcLyoKVo sGmW810J18lVq2u424dCF9189b4VYcq0BUKRnQWnpI/sAnb4BlOJhV1vbwHMR54m 5piQSQIufihqwbOQ2Cndo7FA2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC2CauXm czNczEncwhq987MX+CcPMB8GA1UdIwQYMBaAFEDpT7nCRMIM3aROew6KenGal3QP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTJBQi8xMTFFNTVFMDA5 N0UxMUVFQUU3RjM1MUZDNEY5QUUwMi9RT2xQdWNKRXdnemRwRTU3RG9wNmNacVhk QTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FPbFB1Y0pFd2d6ZHBFNTdEb3A2Y1pxWGRBOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTJBQi8xMTFFNTVFMDA5N0UxMUVFQUU3RjM1MUZDNEY5QUUwMi9RT2xQdWNKRXdn emRwRTU3RG9wNmNacVhkQTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCucboESPHLd0OlRk4F699+11Zo+tnCd3P55OFcsz5jC8sPUzjd5nVZ bRZ5PWmgARheKQg/rEVAGQLV/LK3NBCKKV0Qd7IrfbNSKK9aRraBRbrbVsn8oha1 DJVyHQOPttoHjt+BX1uxDrW8n+iqTjIiJ1F6WT/InYO4TRPO/34pV8+Fm2qPgk1c YwQb6rLO1+a6od89Hz4w/HBLYyig4xpZQ+6IRrlpTWpIQBCeVk7HfE0hx6spajmS 3EpvGPmdn6IXF38eE9bS41NWbb79AZBIwnrTMfgUL4/mMQrX0Ig3SgRyUDNpORbj Wz9u+ePVDIc/6rUdILJWpYT9mnZ/wrQ9 -----END CERTIFICATE-----Generated at Sat May 31 14:49:41 2025 by rpki-client