$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE1BC/896C6C4846CE11E992850A3CC4F9AE02/Qp6b3aKWYgADzsXvq7gj0wP-T3E.mft File: Qp6b3aKWYgADzsXvq7gj0wP-T3E.mft (raw, json) Hash identifier: +esrbon+DH+FUE2+7jW40htaLGVROJZ9SL8StambPd4= Subject key identifier: BE:07:D1:95:7B:43:66:E3:3A:53:BB:D7:BD:93:B5:C6:D6:10:36:AD Authority key identifier: 42:9E:9B:DD:A2:96:62:00:03:CE:C5:EF:AB:B8:23:D3:03:FE:4F:71 Certificate issuer: /CN=A91BE1BC/serialNumber=429E9BDDA296620003CEC5EFABB823D303FE4F71 Certificate serial: 1025 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qp6b3aKWYgADzsXvq7gj0wP-T3E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BE1BC/896C6C4846CE11E992850A3CC4F9AE02/Qp6b3aKWYgADzsXvq7gj0wP-T3E.mft Manifest number: 1010 Signing time: Fri 30 May 2025 17:37:12 +0000 Manifest this update: Fri 30 May 2025 17:37:12 +0000 Manifest next update: Fri 06 Jun 2025 17:37:12 +0000 Files and hashes: 1: Qp6b3aKWYgADzsXvq7gj0wP-T3E.crl (hash: dR34GYSLzQkeGWW/WluA7f01iY0fmX4ypTAK+5uu57g=) 2: 58FDD2EA10C211EA977E7378C4F9AE02.roa (hash: ZNHHRF85+z4Is0+eLKcAwqdcHd29O7GXMUqQBRk0J/w=) 3: 8C2FEEE0708811ED95A9DC75C4F9AE02.roa (hash: N1sk6XLj5xgH93qOL/I5QuR42p2aQ914FnE3hKMRCac=) 4: 8B7BDC02708811ED95A9DC75C4F9AE02.roa (hash: 9+Gtcwt1HizyRVjiJLATuFRgohbLeetX6+Rnfri/zZI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BE1BC/896C6C4846CE11E992850A3CC4F9AE02/Qp6b3aKWYgADzsXvq7gj0wP-T3E.crl rsync://rpki.apnic.net/member_repository/A91BE1BC/896C6C4846CE11E992850A3CC4F9AE02/Qp6b3aKWYgADzsXvq7gj0wP-T3E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qp6b3aKWYgADzsXvq7gj0wP-T3E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 17:37:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4133 (0x1025) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BE1BC, serialNumber=429E9BDDA296620003CEC5EFABB823D303FE4F71 Validity Not Before: May 30 17:37:12 2025 GMT Not After : Jun 6 17:37:12 2025 GMT Subject: CN=6839ecc8-8468 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:aa:d8:81:da:3c:b3:96:0d:6b:7a:3f:ab:9c: 32:9a:f4:24:ed:8a:96:39:6b:b5:e2:69:65:9f:10: 46:a5:9e:70:89:9c:57:39:19:15:bb:03:de:f4:67: 87:58:88:9b:69:8d:f1:27:1a:cf:b7:35:f0:a7:fe: 2e:72:ac:1b:15:12:87:b0:ec:6e:36:f3:be:f0:92: 05:33:3a:67:3b:7e:d9:c1:32:1a:2d:49:3e:2a:a0: ec:be:5f:16:be:29:25:3b:42:02:90:48:6f:5b:9c: 17:6f:f6:05:43:28:6c:18:92:6c:9d:a7:70:bd:34: 61:be:72:2a:45:5d:67:d6:e5:f9:f3:c2:cb:d6:5a: 17:37:5d:05:28:af:78:83:5b:6a:c2:69:73:61:ca: 97:97:3c:32:77:ff:5e:b7:8e:5e:7d:0e:7d:5b:b6: a2:3b:82:02:18:85:e7:2a:ff:a3:7b:d1:96:aa:fb: 67:07:d0:db:81:2a:f1:22:b7:a2:0c:e3:05:2b:c5: 12:72:1b:e3:64:35:b5:b2:f6:35:d8:1f:f4:5c:95: f4:8f:b0:a5:fb:9b:92:1c:5f:f2:8f:bf:6c:32:cb: f3:47:1f:5a:da:c9:26:4b:3a:74:25:12:c9:7e:cd: 3b:83:cb:ca:da:ba:97:d5:94:38:2d:ee:bc:09:3b: 25:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:07:D1:95:7B:43:66:E3:3A:53:BB:D7:BD:93:B5:C6:D6:10:36:AD X509v3 Authority Key Identifier: keyid:42:9E:9B:DD:A2:96:62:00:03:CE:C5:EF:AB:B8:23:D3:03:FE:4F:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BE1BC/896C6C4846CE11E992850A3CC4F9AE02/Qp6b3aKWYgADzsXvq7gj0wP-T3E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qp6b3aKWYgADzsXvq7gj0wP-T3E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE1BC/896C6C4846CE11E992850A3CC4F9AE02/Qp6b3aKWYgADzsXvq7gj0wP-T3E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:7a:49:10:82:ed:25:cb:25:1d:3d:1f:85:42:2d:ce:c2:58: a8:64:a8:2b:31:4a:c1:b7:ba:91:70:d6:8f:dc:7b:61:d3:5c: 3a:ad:88:df:8a:e0:21:34:5d:66:c4:7f:6b:ef:b9:30:8e:d2: 1d:e4:02:c2:58:0b:7d:d2:c5:bd:f5:63:5e:f9:4e:e0:07:44: 4f:6e:c1:9d:92:b1:cc:89:8d:0c:26:57:43:99:db:96:28:3f: a6:a8:de:78:0b:42:6a:f1:5a:e8:52:e3:44:8d:f3:fa:13:c0: a6:0a:38:34:ce:58:0c:1c:ba:a2:96:72:83:96:41:32:70:e0: 36:a6:8f:2b:b2:65:5b:a4:b1:22:e2:7e:58:66:b0:cc:7d:9c: 85:f8:2c:99:3a:56:5e:00:cd:26:c7:f5:b1:57:e1:b2:88:f0: a5:01:d6:73:7d:f9:97:bf:68:2a:4b:25:d9:e3:39:e0:a9:70: 99:f4:e4:e2:5e:fb:f2:6f:b5:5b:67:2a:de:07:05:88:ce:8c: 1a:7e:26:a1:10:d7:83:dd:1f:b3:93:33:a8:e5:bb:bc:f6:4b: ad:4d:2b:3c:78:78:5c:ec:fa:9a:89:36:e2:75:95:08:5b:b2: 1f:cb:ab:0e:2c:69:a6:f5:97:73:d6:81:55:71:83:f9:73:22: b3:1a:ee:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICECUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkUxQkMxMTAvBgNVBAUTKDQyOUU5QkREQTI5NjYyMDAwM0NFQzVFRkFCQjgyM0Qz MDNGRTRGNzEwHhcNMjUwNTMwMTczNzEyWhcNMjUwNjA2MTczNzEyWjAYMRYwFAYD VQQDEw02ODM5ZWNjOC04NDY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu6rYgdo8s5YNa3o/q5wymvQk7YqWOWu14mllnxBGpZ5wiZxXORkVuwPe9GeH WIibaY3xJxrPtzXwp/4ucqwbFRKHsOxuNvO+8JIFMzpnO37ZwTIaLUk+KqDsvl8W viklO0ICkEhvW5wXb/YFQyhsGJJsnadwvTRhvnIqRV1n1uX588LL1loXN10FKK94 g1tqwmlzYcqXlzwyd/9et45efQ59W7aiO4ICGIXnKv+je9GWqvtnB9DbgSrxIrei DOMFK8USchvjZDW1svY12B/0XJX0j7Cl+5uSHF/yj79sMsvzRx9a2skmSzp0JRLJ fs07g8vK2rqX1ZQ4Le68CTslAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL4H0ZV7 Q2bjOlO7172TtcbWEDatMB8GA1UdIwQYMBaAFEKem92ilmIAA87F76u4I9MD/k9x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRTFCQy84OTZDNkM0ODQ2 Q0UxMUU5OTI4NTBBM0NDNEY5QUUwMi9RcDZiM2FLV1lnQUR6c1h2cTdnajB3UC1U M0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FwNmIzYUtXWWdBRHpzWHZxN2dqMHdQLVQzRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RTFCQy84OTZDNkM0ODQ2Q0UxMUU5OTI4NTBBM0NDNEY5QUUwMi9RcDZiM2FLV1ln QUR6c1h2cTdnajB3UC1UM0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCekkQgu0lyyUdPR+FQi3OwlioZKgrMUrBt7qRcNaP3Hth01w6rYjf iuAhNF1mxH9r77kwjtId5ALCWAt90sW99WNe+U7gB0RPbsGdkrHMiY0MJldDmduW KD+mqN54C0Jq8VroUuNEjfP6E8CmCjg0zlgMHLqilnKDlkEycOA2po8rsmVbpLEi 4n5YZrDMfZyF+CyZOlZeAM0mx/WxV+GyiPClAdZzffmXv2gqSyXZ4zngqXCZ9OTi Xvvyb7VbZyreBwWIzowafiahENeD3R+zkzOo5bu89kutTSs8eHhc7PqaiTbidZUI W7Ify6sOLGmm9Zdz1oFVcYP5cyKzGu6z -----END CERTIFICATE-----Generated at Sat May 31 17:32:55 2025 by rpki-client