$ rpki-client -vvf rpki.apnic.net/member_repository/A91C31B7/FCC334CC1E6B11EFAC0E914EC4F9AE02/qB0VXKQErkFFeBrwXrU6Ehni4GU.mft File: qB0VXKQErkFFeBrwXrU6Ehni4GU.mft (raw, json) Hash identifier: PtUG5P66sGJnx1LMV2oXvTTuZzVF92JS0Uzx1A1Lfi0= Subject key identifier: 14:C8:CA:6D:20:46:AA:AA:21:E3:12:11:C6:3E:04:63:E6:75:E2:38 Authority key identifier: A8:1D:15:5C:A4:04:AE:41:45:78:1A:F0:5E:B5:3A:12:19:E2:E0:65 Certificate issuer: /CN=A91C31B7/serialNumber=A81D155CA404AE4145781AF05EB53A1219E2E065 Certificate serial: BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qB0VXKQErkFFeBrwXrU6Ehni4GU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C31B7/FCC334CC1E6B11EFAC0E914EC4F9AE02/qB0VXKQErkFFeBrwXrU6Ehni4GU.mft Manifest number: BC Signing time: Sat 31 May 2025 05:28:19 +0000 Manifest this update: Sat 31 May 2025 05:28:18 +0000 Manifest next update: Sat 07 Jun 2025 05:28:18 +0000 Files and hashes: 1: qB0VXKQErkFFeBrwXrU6Ehni4GU.crl (hash: MJpm3xuOBOzosYVa0kSuvFsqc1NRfr+0Ah5BDnf5hGE=) 2: 42C6F6041E6F11EF898C1E38C4F9AE02.roa (hash: Nwxndbe8HVB4N9vkz2u0yYwDfuyP9L4g9kHPKAHCIos=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C31B7/FCC334CC1E6B11EFAC0E914EC4F9AE02/qB0VXKQErkFFeBrwXrU6Ehni4GU.crl rsync://rpki.apnic.net/member_repository/A91C31B7/FCC334CC1E6B11EFAC0E914EC4F9AE02/qB0VXKQErkFFeBrwXrU6Ehni4GU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qB0VXKQErkFFeBrwXrU6Ehni4GU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 05:28:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 189 (0xbd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C31B7, serialNumber=A81D155CA404AE4145781AF05EB53A1219E2E065 Validity Not Before: May 31 05:28:18 2025 GMT Not After : Jun 7 05:28:18 2025 GMT Subject: CN=683a9372-a97d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:9a:a1:02:f0:46:bf:82:2d:14:2b:a6:a7:54: 3a:00:89:5d:95:0a:b9:93:4d:73:10:47:0e:a2:b8: 1a:d5:3f:30:84:5c:7a:40:2f:00:f3:0a:29:e1:7b: 52:be:66:c8:1a:a1:15:29:bd:0e:2a:09:37:0b:46: 64:6f:42:39:e5:9d:84:0c:93:bb:6b:0b:61:c7:4f: 8e:b4:cc:e7:fd:4e:c2:04:5c:fe:f0:af:89:04:30: c9:09:85:ab:8f:38:6d:d7:e0:7f:fb:8e:cb:a0:a3: 85:88:0a:b3:b9:58:94:80:48:15:5c:59:ca:48:2b: ee:14:35:06:ff:61:cf:76:9a:7c:0f:7a:bb:09:bc: d3:38:66:6e:c9:13:0e:fa:ca:d7:8c:d8:3f:4a:11: 6f:88:d4:5e:84:80:5a:15:05:dd:e5:b1:5b:b8:7a: eb:3d:a2:08:74:d7:fc:b9:4d:6c:29:68:c4:2e:ce: 09:59:e4:2a:8e:be:d1:0e:1e:ef:0e:9e:71:d8:70: 2d:b6:bb:4f:d1:24:c6:a5:fd:d3:3c:5d:fc:56:dc: 6d:7d:36:58:db:56:e9:71:ce:ba:b5:c2:75:59:69: 1d:fa:36:74:c2:09:93:44:6b:87:e6:2d:6b:8c:78: c1:5b:66:93:fc:6c:bb:a6:7e:39:be:1d:6d:a2:c3: 5b:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:C8:CA:6D:20:46:AA:AA:21:E3:12:11:C6:3E:04:63:E6:75:E2:38 X509v3 Authority Key Identifier: keyid:A8:1D:15:5C:A4:04:AE:41:45:78:1A:F0:5E:B5:3A:12:19:E2:E0:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C31B7/FCC334CC1E6B11EFAC0E914EC4F9AE02/qB0VXKQErkFFeBrwXrU6Ehni4GU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qB0VXKQErkFFeBrwXrU6Ehni4GU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C31B7/FCC334CC1E6B11EFAC0E914EC4F9AE02/qB0VXKQErkFFeBrwXrU6Ehni4GU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:09:58:71:ed:ca:d9:67:22:80:c5:b3:09:57:d4:ce:2f:37: 85:24:e2:d1:78:ac:9f:c3:4a:ec:00:a0:74:e1:39:69:27:95: 23:cc:43:af:66:05:d9:45:c2:f2:be:30:94:5b:6c:9e:24:24: 08:99:51:ae:70:43:29:16:63:f4:6c:20:fe:98:ca:16:28:c4: d4:3b:77:16:c0:18:79:f0:cb:0b:2a:c8:38:e6:a4:d6:f1:5e: 1e:74:d7:c9:a0:a3:98:48:53:64:48:e4:f3:98:70:7c:dd:5e: 29:ae:9b:ec:41:ed:7e:17:63:4c:d3:0b:96:9a:cd:58:34:52: 1f:00:4f:88:0a:ef:4f:3a:85:bd:5f:06:71:22:f4:95:ea:10: 11:6b:96:88:5c:08:cc:12:1a:17:2a:6a:3a:30:10:78:79:71: 72:98:b5:0e:d4:fe:67:14:3a:e5:b5:b2:89:f7:2c:c3:3a:b1: 4c:15:7a:14:7a:2b:66:76:4c:fa:e4:1d:93:a1:fa:b2:1c:5f: 18:7a:03:26:5d:0f:10:90:3c:22:89:92:0a:d2:f1:74:72:93: c6:e8:12:3c:96:c4:4e:c7:1a:d2:81:61:ae:a6:0a:dd:0e:9a: 8f:ef:b9:69:2d:bf:b0:b7:5d:39:9b:4b:b1:b9:c3:cf:af:28: e6:34:84:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAL0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzMxQjcxMTAvBgNVBAUTKEE4MUQxNTVDQTQwNEFFNDE0NTc4MUFGMDVFQjUzQTEy MTlFMkUwNjUwHhcNMjUwNTMxMDUyODE4WhcNMjUwNjA3MDUyODE4WjAYMRYwFAYD VQQDEw02ODNhOTM3Mi1hOTdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt5qhAvBGv4ItFCump1Q6AIldlQq5k01zEEcOorga1T8whFx6QC8A8wop4XtS vmbIGqEVKb0OKgk3C0Zkb0I55Z2EDJO7awthx0+OtMzn/U7CBFz+8K+JBDDJCYWr jzht1+B/+47LoKOFiAqzuViUgEgVXFnKSCvuFDUG/2HPdpp8D3q7CbzTOGZuyRMO +srXjNg/ShFviNRehIBaFQXd5bFbuHrrPaIIdNf8uU1sKWjELs4JWeQqjr7RDh7v Dp5x2HAttrtP0STGpf3TPF38VtxtfTZY21bpcc66tcJ1WWkd+jZ0wgmTRGuH5i1r jHjBW2aT/Gy7pn45vh1tosNbZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBTIym0g RqqqIeMSEcY+BGPmdeI4MB8GA1UdIwQYMBaAFKgdFVykBK5BRXga8F61OhIZ4uBl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzFCNy9GQ0MzMzRDQzFF NkIxMUVGQUMwRTkxNEVDNEY5QUUwMi9xQjBWWEtRRXJrRkZlQnJ3WHJVNkVobmk0 R1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FCMFZYS1FFcmtGRmVCcndYclU2RWhuaTRHVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MzFCNy9GQ0MzMzRDQzFFNkIxMUVGQUMwRTkxNEVDNEY5QUUwMi9xQjBWWEtRRXJr RkZlQnJ3WHJVNkVobmk0R1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBCVhx7crZZyKAxbMJV9TOLzeFJOLReKyfw0rsAKB04TlpJ5UjzEOv ZgXZRcLyvjCUW2yeJCQImVGucEMpFmP0bCD+mMoWKMTUO3cWwBh58MsLKsg45qTW 8V4edNfJoKOYSFNkSOTzmHB83V4prpvsQe1+F2NM0wuWms1YNFIfAE+ICu9POoW9 XwZxIvSV6hARa5aIXAjMEhoXKmo6MBB4eXFymLUO1P5nFDrltbKJ9yzDOrFMFXoU eitmdkz65B2TofqyHF8YegMmXQ8QkDwiiZIK0vF0cpPG6BI8lsROxxrSgWGupgrd DpqP77lpLb+wt105m0uxucPPryjmNIS9 -----END CERTIFICATE-----Generated at Sat May 31 16:43:48 2025 by rpki-client