$ rpki-client -vvf rpki.apnic.net/member_repository/A91BEE0F/5E11148E9BA911EDA33EEC6BC4F9AE02/QRzJhRGOMuB6FVTV6boLTNKKSu8.mft File: QRzJhRGOMuB6FVTV6boLTNKKSu8.mft (raw, json) Hash identifier: xKmd2Z5G2o/vk/syzu0lIwRdemjVtvR60tKDwiq2phE= Subject key identifier: F5:72:21:CE:9F:8E:7B:DE:19:35:C1:1F:24:BA:70:E8:E1:8A:7F:F9 Authority key identifier: 41:1C:C9:85:11:8E:32:E0:7A:15:54:D5:E9:BA:0B:4C:D2:8A:4A:EF Certificate issuer: /CN=A91BEE0F/serialNumber=411CC985118E32E07A1554D5E9BA0B4CD28A4AEF Certificate serial: 01B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRzJhRGOMuB6FVTV6boLTNKKSu8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BEE0F/5E11148E9BA911EDA33EEC6BC4F9AE02/QRzJhRGOMuB6FVTV6boLTNKKSu8.mft Manifest number: 01B4 Signing time: Sat 31 May 2025 02:49:26 +0000 Manifest this update: Sat 31 May 2025 02:49:26 +0000 Manifest next update: Sat 07 Jun 2025 02:49:26 +0000 Files and hashes: 1: QRzJhRGOMuB6FVTV6boLTNKKSu8.crl (hash: QX05lOCO32TEsb/grMAr1k8H9CucJp1x50qPdDxNFhw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BEE0F/5E11148E9BA911EDA33EEC6BC4F9AE02/QRzJhRGOMuB6FVTV6boLTNKKSu8.crl rsync://rpki.apnic.net/member_repository/A91BEE0F/5E11148E9BA911EDA33EEC6BC4F9AE02/QRzJhRGOMuB6FVTV6boLTNKKSu8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRzJhRGOMuB6FVTV6boLTNKKSu8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 02:49:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 436 (0x1b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BEE0F, serialNumber=411CC985118E32E07A1554D5E9BA0B4CD28A4AEF Validity Not Before: May 31 02:49:26 2025 GMT Not After : Jun 7 02:49:26 2025 GMT Subject: CN=683a6e36-c0e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:22:fb:04:a5:5f:d8:d1:ec:42:49:c7:d6:9a: 51:0a:25:49:8c:4d:9e:3c:51:cd:f8:47:31:c6:ac: fc:c8:5a:96:02:58:f0:ec:e9:c4:40:bb:94:65:01: 4f:47:7c:b0:7b:19:83:cf:88:54:0c:a7:b2:aa:4e: 8a:6c:d5:57:c7:fb:c8:0e:d4:f3:1a:e1:ee:fa:d5: 78:ad:7a:d5:c9:80:b5:5c:40:12:3d:59:db:b9:2a: b7:12:27:46:fe:0e:50:26:9c:ed:10:f1:99:51:38: 5c:86:b3:4b:ad:cc:2c:03:21:e3:f6:54:00:6c:13: e5:a9:b6:29:2e:07:ea:b3:66:d5:e7:41:1f:00:fe: 61:93:8e:85:d1:bd:7b:e6:7f:6c:76:94:be:27:33: 54:bc:f2:1a:51:ab:cb:05:e5:45:38:38:1d:af:b5: 6e:28:81:cd:55:d4:9b:0e:8e:2c:b5:1d:18:70:94: 58:60:fe:b9:64:9e:9b:d0:68:e7:59:52:1f:52:77: 59:62:5c:dd:1e:65:83:8e:15:cd:6c:9c:2c:98:97: c7:58:e1:06:d9:c5:05:e2:08:a6:f1:05:49:b1:05: 6c:e5:0a:37:94:6b:99:e9:cb:25:8a:bb:c2:bf:75: 2c:ed:4e:3d:a2:cc:7e:39:6a:f4:48:ef:52:a3:af: 95:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:72:21:CE:9F:8E:7B:DE:19:35:C1:1F:24:BA:70:E8:E1:8A:7F:F9 X509v3 Authority Key Identifier: keyid:41:1C:C9:85:11:8E:32:E0:7A:15:54:D5:E9:BA:0B:4C:D2:8A:4A:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BEE0F/5E11148E9BA911EDA33EEC6BC4F9AE02/QRzJhRGOMuB6FVTV6boLTNKKSu8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRzJhRGOMuB6FVTV6boLTNKKSu8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEE0F/5E11148E9BA911EDA33EEC6BC4F9AE02/QRzJhRGOMuB6FVTV6boLTNKKSu8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:ac:19:f4:7a:61:eb:ad:de:d1:7f:a1:fc:25:e4:f1:ad:0e: 26:19:e8:18:3d:ad:ca:a4:a8:61:f4:dc:54:1e:96:92:f0:3b: 2e:2a:1c:77:7a:54:a1:79:9b:38:00:62:a2:dc:f3:d3:79:ec: e2:2c:27:cc:a7:14:6b:9b:a6:1b:89:83:98:d6:d7:a9:f4:5e: 16:19:e2:44:b5:3b:aa:f7:42:ef:55:92:da:be:a7:a7:81:c7: 97:35:5a:02:6a:8b:15:3e:c0:28:b8:40:86:f0:8b:e2:80:af: 6b:7d:9e:34:9c:78:fd:bf:06:8d:3e:27:07:ec:ab:fb:92:82: 5b:fc:44:a7:b8:18:5a:45:f6:ff:6e:ab:af:8a:2a:37:2c:c2: b1:95:61:52:91:91:ab:de:41:25:7d:8a:d7:5d:da:47:e7:c9: 37:5b:fe:e2:2b:d9:fb:c1:65:7d:0a:e6:cf:9f:b9:b9:54:c8: b0:34:c0:9c:55:fe:3a:b4:17:50:e7:61:67:bf:eb:01:fc:7c: 94:b5:67:f3:e7:5a:46:9f:14:9f:72:52:97:09:65:60:b9:ec: 9b:45:53:0c:08:33:11:90:65:8c:c7:0c:51:f1:9f:28:d6:a9: 0b:07:e4:23:e6:68:1f:a4:c4:cf:82:eb:fc:10:2e:2d:02:f3: 2d:c8:70:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkVFMEYxMTAvBgNVBAUTKDQxMUNDOTg1MTE4RTMyRTA3QTE1NTRENUU5QkEwQjRD RDI4QTRBRUYwHhcNMjUwNTMxMDI0OTI2WhcNMjUwNjA3MDI0OTI2WjAYMRYwFAYD VQQDEw02ODNhNmUzNi1jMGU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwiL7BKVf2NHsQknH1ppRCiVJjE2ePFHN+Ecxxqz8yFqWAljw7OnEQLuUZQFP R3ywexmDz4hUDKeyqk6KbNVXx/vIDtTzGuHu+tV4rXrVyYC1XEASPVnbuSq3EidG /g5QJpztEPGZUThchrNLrcwsAyHj9lQAbBPlqbYpLgfqs2bV50EfAP5hk46F0b17 5n9sdpS+JzNUvPIaUavLBeVFODgdr7VuKIHNVdSbDo4stR0YcJRYYP65ZJ6b0Gjn WVIfUndZYlzdHmWDjhXNbJwsmJfHWOEG2cUF4gim8QVJsQVs5Qo3lGuZ6cslirvC v3Us7U49osx+OWr0SO9So6+VPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPVyIc6f jnveGTXBHyS6cOjhin/5MB8GA1UdIwQYMBaAFEEcyYURjjLgehVU1em6C0zSikrv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRUUwRi81RTExMTQ4RTlC QTkxMUVEQTMzRUVDNkJDNEY5QUUwMi9RUnpKaFJHT011QjZGVlRWNmJvTFROS0tT dTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FSekpoUkdPTXVCNkZWVFY2Ym9MVE5LS1N1OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RUUwRi81RTExMTQ4RTlCQTkxMUVEQTMzRUVDNkJDNEY5QUUwMi9RUnpKaFJHT011 QjZGVlRWNmJvTFROS0tTdTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBorBn0emHrrd7Rf6H8JeTxrQ4mGegYPa3KpKhh9NxUHpaS8DsuKhx3 elSheZs4AGKi3PPTeeziLCfMpxRrm6YbiYOY1tep9F4WGeJEtTuq90LvVZLavqen gceXNVoCaosVPsAouECG8IvigK9rfZ40nHj9vwaNPicH7Kv7koJb/ESnuBhaRfb/ bquviio3LMKxlWFSkZGr3kElfYrXXdpH58k3W/7iK9n7wWV9CubPn7m5VMiwNMCc Vf46tBdQ52Fnv+sB/HyUtWfz51pGnxSfclKXCWVgueybRVMMCDMRkGWMxwxR8Z8o 1qkLB+Qj5mgfpMTPguv8EC4tAvMtyHC5 -----END CERTIFICATE-----Generated at Sat May 31 16:36:45 2025 by rpki-client