$ rpki-client -vvf rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.mft File: rQWVkiI-gWrFPEM7llhG950wUjQ.mft (raw, json) Hash identifier: 1aTm3ZSTJW8vLs21wzRuLa7vAEihVfmyJ1xnojLTpws= Subject key identifier: 29:3A:5C:95:14:DD:9B:C1:67:24:57:4C:71:87:BA:6F:F3:BC:48:2D Authority key identifier: AD:05:95:92:22:3E:81:6A:C5:3C:43:3B:96:58:46:F7:9D:30:52:34 Certificate issuer: /CN=A91BAEDC/serialNumber=AD059592223E816AC53C433B965846F79D305234 Certificate serial: 1B95 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQWVkiI-gWrFPEM7llhG950wUjQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.mft Manifest number: 1B7E Signing time: Fri 30 May 2025 16:26:50 +0000 Manifest this update: Fri 30 May 2025 16:26:49 +0000 Manifest next update: Fri 06 Jun 2025 16:26:49 +0000 Files and hashes: 1: rQWVkiI-gWrFPEM7llhG950wUjQ.crl (hash: PlKi01XMOy48pkDHIMPwcgHeTa1QDXw72jdvA+D9HQY=) 2: C85D0F7E477711EBB4044E31C4F9AE02.roa (hash: d9C+rmMNQQZELmuy5aIPVlKeATtzTC5JJ8WoYiMXlHI=) 3: C98708BE477711EBB4044E31C4F9AE02.roa (hash: V0J+K3DJnN+osBZ9dwTDUPh/HvfjgBzZSWLUoCMaCuE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.crl rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQWVkiI-gWrFPEM7llhG950wUjQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 16:26:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7061 (0x1b95) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BAEDC, serialNumber=AD059592223E816AC53C433B965846F79D305234 Validity Not Before: May 30 16:26:49 2025 GMT Not After : Jun 6 16:26:49 2025 GMT Subject: CN=6839dc49-ab0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:1e:4a:6d:08:f4:20:6b:a7:4f:4c:43:c1:67: 84:ca:ef:97:31:d4:af:da:50:5d:d9:07:9e:13:a7: 67:08:e0:14:29:8e:4e:1c:14:9b:67:4d:07:86:c8: 3e:df:7a:a4:0d:18:9d:b2:f1:c6:b1:4d:c6:18:aa: 35:c2:f7:bd:a7:85:a1:1e:26:de:eb:63:00:36:7f: aa:3c:9b:4b:43:6f:e5:38:99:f2:7c:fc:9f:af:10: cc:09:3f:cf:06:7d:6a:05:90:04:ec:fc:ae:9a:ad: c3:5c:2e:54:51:98:bb:97:f5:e4:02:cd:98:1a:78: 4e:c9:2d:cc:de:0a:c6:1b:a6:23:57:29:f1:63:a2: f5:08:c2:0d:34:39:cc:e5:06:37:19:86:01:e2:68: 5c:86:14:ef:5c:ed:a2:e9:a5:ea:83:70:d2:c6:31: 76:a0:23:db:c3:d2:c5:a1:4a:cc:56:f5:9d:f1:37: e8:16:2b:4d:cf:15:44:ab:c4:47:4c:80:a2:a5:3c: 7b:7a:db:ec:dc:61:41:2c:61:f0:01:28:e2:04:ff: 30:f2:5c:99:f5:c6:d6:8a:d2:26:2e:4f:fc:e0:d9: 42:49:de:20:a7:71:0c:57:df:2e:99:94:a9:04:10: 1b:4f:dd:55:44:73:a3:95:97:6b:90:27:59:33:da: 85:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:3A:5C:95:14:DD:9B:C1:67:24:57:4C:71:87:BA:6F:F3:BC:48:2D X509v3 Authority Key Identifier: keyid:AD:05:95:92:22:3E:81:6A:C5:3C:43:3B:96:58:46:F7:9D:30:52:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQWVkiI-gWrFPEM7llhG950wUjQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:64:1d:36:db:e6:8c:ff:02:ce:9d:01:ae:80:a3:98:97:18: 27:ba:20:26:a5:8d:37:8a:e4:fe:cf:df:c6:c8:f6:a2:e4:29: e5:43:57:dd:f7:9a:e2:aa:61:a4:4a:bc:d4:bc:be:d5:45:53: f9:31:09:85:3d:22:ff:44:da:74:d8:ca:a0:42:3a:17:44:bf: cf:f7:66:4b:8e:55:04:e3:31:30:62:09:4e:66:2d:55:72:c7: 04:6f:07:a2:20:31:52:3a:1b:d4:7c:6e:5e:70:0d:29:af:24: 6b:50:fe:51:a5:8d:2d:c9:90:5c:b5:d3:2e:0d:3c:25:33:0c: 40:90:27:8c:da:cf:b2:32:95:c3:13:97:99:a7:cd:83:b1:d3: b0:e1:05:29:b3:ed:6a:0b:ff:ef:7f:c9:08:22:09:70:95:76: 98:13:c4:09:c4:e4:7d:ec:6d:5d:a9:fb:58:f0:5f:81:2c:7b: f8:7a:b1:01:01:e9:fd:bc:c5:17:6c:fe:8c:74:92:5a:8f:24: ae:b9:fb:e7:4f:fc:70:33:6b:e0:a7:d8:21:d9:61:81:e6:31: 8a:58:a9:a6:c7:03:e5:79:75:fc:06:87:03:6b:06:d1:bf:c0: 0e:7b:bc:1f:f0:8d:58:b7:e6:c3:87:a4:11:f3:d9:a8:6b:29: d3:fb:c5:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICG5UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkFFREMxMTAvBgNVBAUTKEFEMDU5NTkyMjIzRTgxNkFDNTNDNDMzQjk2NTg0NkY3 OUQzMDUyMzQwHhcNMjUwNTMwMTYyNjQ5WhcNMjUwNjA2MTYyNjQ5WjAYMRYwFAYD VQQDEw02ODM5ZGM0OS1hYjBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwB5KbQj0IGunT0xDwWeEyu+XMdSv2lBd2QeeE6dnCOAUKY5OHBSbZ00Hhsg+ 33qkDRidsvHGsU3GGKo1wve9p4WhHibe62MANn+qPJtLQ2/lOJnyfPyfrxDMCT/P Bn1qBZAE7Pyumq3DXC5UUZi7l/XkAs2YGnhOyS3M3grGG6YjVynxY6L1CMINNDnM 5QY3GYYB4mhchhTvXO2i6aXqg3DSxjF2oCPbw9LFoUrMVvWd8TfoFitNzxVEq8RH TICipTx7etvs3GFBLGHwASjiBP8w8lyZ9cbWitImLk/84NlCSd4gp3EMV98umZSp BBAbT91VRHOjlZdrkCdZM9qFHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCk6XJUU 3ZvBZyRXTHGHum/zvEgtMB8GA1UdIwQYMBaAFK0FlZIiPoFqxTxDO5ZYRvedMFI0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQUVEQy8yREMxQkFGMjA5 ODUxMUU3QjFGRkMyM0ZDNEY5QUUwMi9yUVdWa2lJLWdXckZQRU03bGxoRzk1MHdV alEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JRV1ZraUktZ1dyRlBFTTdsbGhHOTUwd1VqUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QUVEQy8yREMxQkFGMjA5ODUxMUU3QjFGRkMyM0ZDNEY5QUUwMi9yUVdWa2lJLWdX ckZQRU03bGxoRzk1MHdValEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBiZB022+aM/wLOnQGugKOYlxgnuiAmpY03iuT+z9/GyPai5CnlQ1fd 95riqmGkSrzUvL7VRVP5MQmFPSL/RNp02MqgQjoXRL/P92ZLjlUE4zEwYglOZi1V cscEbweiIDFSOhvUfG5ecA0pryRrUP5RpY0tyZBctdMuDTwlMwxAkCeM2s+yMpXD E5eZp82DsdOw4QUps+1qC//vf8kIIglwlXaYE8QJxOR97G1dqftY8F+BLHv4erEB Aen9vMUXbP6MdJJajySuufvnT/xwM2vgp9gh2WGB5jGKWKmmxwPleXX8BocDawbR v8AOe7wf8I1Yt+bDh6QR89moaynT+8Ug -----END CERTIFICATE-----Generated at Sat May 31 16:32:14 2025 by rpki-client