$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8B4F/DD73264868BC11EC87807948C4F9AE02/QNueLLrezam5cjUQIVB63NGlYn8.mft File: QNueLLrezam5cjUQIVB63NGlYn8.mft (raw, json) Hash identifier: Sh5DRxSHvH/YzjfT2HKkmsCdIbfDRyEocem5dg+Rh2g= Subject key identifier: C0:E9:A5:B9:28:3D:61:8D:10:74:00:31:E4:3A:30:AA:BA:D1:EF:75 Authority key identifier: 40:DB:9E:2C:BA:DE:CD:A9:B9:72:35:10:21:50:7A:DC:D1:A5:62:7F Certificate issuer: /CN=A91C8B4F/serialNumber=40DB9E2CBADECDA9B972351021507ADCD1A5627F Certificate serial: 0428 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QNueLLrezam5cjUQIVB63NGlYn8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8B4F/DD73264868BC11EC87807948C4F9AE02/QNueLLrezam5cjUQIVB63NGlYn8.mft Manifest number: 041F Signing time: Sat 31 May 2025 00:35:57 +0000 Manifest this update: Sat 31 May 2025 00:35:56 +0000 Manifest next update: Sat 07 Jun 2025 00:35:56 +0000 Files and hashes: 1: QNueLLrezam5cjUQIVB63NGlYn8.crl (hash: RlzRbSITt2Z9pYmHktgs3vGqHNplxse4D0PiWlAOrt8=) 2: 18E79956BAA811ECB07DA44BC4F9AE02.roa (hash: 5latq2+YRolk+7/RCZ77DIkjarUkzR1toXI6OoV7ng8=) 3: 43540B7A0EE311EF9E24862BC4F9AE02.roa (hash: 06e2Kd9kP50w5XlMiJZ3tSgrZONMMPBPJ5HjMD4Ujzw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8B4F/DD73264868BC11EC87807948C4F9AE02/QNueLLrezam5cjUQIVB63NGlYn8.crl rsync://rpki.apnic.net/member_repository/A91C8B4F/DD73264868BC11EC87807948C4F9AE02/QNueLLrezam5cjUQIVB63NGlYn8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QNueLLrezam5cjUQIVB63NGlYn8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:35:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1064 (0x428) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8B4F, serialNumber=40DB9E2CBADECDA9B972351021507ADCD1A5627F Validity Not Before: May 31 00:35:56 2025 GMT Not After : Jun 7 00:35:56 2025 GMT Subject: CN=683a4eec-cb56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:7f:80:3c:11:18:57:4f:99:99:bc:58:1d:77: b4:51:b1:0c:26:b7:c6:5f:b5:cc:43:e7:ae:19:a3: 71:60:66:1b:f8:8e:07:be:e7:35:01:25:f9:34:bd: da:a5:da:c3:bd:1e:44:0b:c6:ac:64:4f:dd:8f:f0: 51:1e:e8:6e:1e:bb:f9:20:67:b3:c2:47:f5:47:92: 92:d8:83:e5:39:67:f1:91:24:82:c0:e8:19:86:95: a1:67:4d:79:9e:17:d6:71:bd:55:33:ca:35:ab:a7: 07:6d:1e:56:1c:f8:62:81:22:33:af:2c:d8:27:02: e6:85:de:b4:86:86:24:50:05:71:86:df:4d:8b:49: d9:51:03:72:8e:cc:e3:9a:f0:bd:65:2a:a7:39:77: 3f:83:d6:e9:72:e8:50:ad:90:8e:4b:37:45:ff:31: 5f:2e:d3:72:1f:03:ef:81:44:51:8e:7b:bd:05:1b: 8c:7a:4f:6f:ae:a8:a1:a6:e5:ea:bb:b1:5a:fa:76: 71:92:51:8c:2f:51:9b:50:b2:b5:56:0b:68:72:9b: e4:af:98:e0:f7:90:17:54:39:10:cd:34:19:11:3d: 40:a8:c8:85:33:f1:19:e4:bb:fa:42:0e:4b:af:0f: d2:c3:a1:99:b3:79:ed:7b:b4:16:66:f8:f9:82:86: d7:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:E9:A5:B9:28:3D:61:8D:10:74:00:31:E4:3A:30:AA:BA:D1:EF:75 X509v3 Authority Key Identifier: keyid:40:DB:9E:2C:BA:DE:CD:A9:B9:72:35:10:21:50:7A:DC:D1:A5:62:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8B4F/DD73264868BC11EC87807948C4F9AE02/QNueLLrezam5cjUQIVB63NGlYn8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QNueLLrezam5cjUQIVB63NGlYn8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8B4F/DD73264868BC11EC87807948C4F9AE02/QNueLLrezam5cjUQIVB63NGlYn8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:06:e5:c1:05:77:c8:2f:50:a4:88:f4:90:ec:58:40:75:8b: 29:49:4d:21:13:70:d0:3e:9a:0c:b9:49:c6:af:8d:a3:c7:4d: 29:1d:49:e3:31:a0:ec:94:80:0f:48:6d:51:86:c0:47:1d:f5: c1:8c:41:f5:48:72:9f:51:f4:4e:ab:c7:e2:6e:8d:7a:a0:7b: 33:1f:bc:99:b4:c9:8e:ed:5f:d0:08:e3:d7:6f:37:0c:43:df: ca:5e:33:7d:0b:03:2e:77:1e:c1:02:ff:84:fb:27:e0:84:7d: 21:d3:79:c0:9b:16:84:a7:43:44:8a:d7:e3:19:78:a9:4f:7b: 28:ab:71:3e:71:ef:86:12:28:46:9e:c1:0d:59:78:6d:62:03: 1a:bf:67:ac:5d:6d:a6:12:9a:86:a4:e9:f1:2c:78:70:1f:58: 52:1f:a5:ed:35:46:6c:12:35:d3:1e:48:44:90:64:46:26:cf: 66:a9:70:10:81:c8:08:73:29:f0:de:12:e2:cc:d0:c0:1f:3a: 74:96:9b:8e:53:3a:17:e8:1b:c6:a5:f1:db:7b:7e:55:84:a7: 00:d3:c1:59:5b:ba:df:1c:a6:a1:ff:d2:2e:11:4a:47:d3:1f: e7:23:9b:39:f7:8d:39:43:f4:ce:22:56:0f:cc:6b:75:67:db: b8:21:3d:23 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBCgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzhCNEYxMTAvBgNVBAUTKDQwREI5RTJDQkFERUNEQTlCOTcyMzUxMDIxNTA3QURD RDFBNTYyN0YwHhcNMjUwNTMxMDAzNTU2WhcNMjUwNjA3MDAzNTU2WjAYMRYwFAYD VQQDEw02ODNhNGVlYy1jYjU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmn+APBEYV0+ZmbxYHXe0UbEMJrfGX7XMQ+euGaNxYGYb+I4Hvuc1ASX5NL3a pdrDvR5EC8asZE/dj/BRHuhuHrv5IGezwkf1R5KS2IPlOWfxkSSCwOgZhpWhZ015 nhfWcb1VM8o1q6cHbR5WHPhigSIzryzYJwLmhd60hoYkUAVxht9Ni0nZUQNyjszj mvC9ZSqnOXc/g9bpcuhQrZCOSzdF/zFfLtNyHwPvgURRjnu9BRuMek9vrqihpuXq u7Fa+nZxklGML1GbULK1Vgtocpvkr5jg95AXVDkQzTQZET1AqMiFM/EZ5Lv6Qg5L rw/Sw6GZs3nte7QWZvj5gobXQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMDppbko PWGNEHQAMeQ6MKq60e91MB8GA1UdIwQYMBaAFEDbniy63s2puXI1ECFQetzRpWJ/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOEI0Ri9ERDczMjY0ODY4 QkMxMUVDODc4MDc5NDhDNEY5QUUwMi9RTnVlTExyZXphbTVjalVRSVZCNjNOR2xZ bjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FOdWVMTHJlemFtNWNqVVFJVkI2M05HbFluOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OEI0Ri9ERDczMjY0ODY4QkMxMUVDODc4MDc5NDhDNEY5QUUwMi9RTnVlTExyZXph bTVjalVRSVZCNjNOR2xZbjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMBuXBBXfIL1CkiPSQ7FhAdYspSU0hE3DQPpoMuUnGr42jx00pHUnj MaDslIAPSG1RhsBHHfXBjEH1SHKfUfROq8fibo16oHszH7yZtMmO7V/QCOPXbzcM Q9/KXjN9CwMudx7BAv+E+yfghH0h03nAmxaEp0NEitfjGXipT3soq3E+ce+GEihG nsENWXhtYgMav2esXW2mEpqGpOnxLHhwH1hSH6XtNUZsEjXTHkhEkGRGJs9mqXAQ gcgIcynw3hLizNDAHzp0lpuOUzoX6BvGpfHbe35VhKcA08FZW7rfHKah/9IuEUpH 0x/nI5s59405Q/TOIlYPzGt1Z9u4IT0j -----END CERTIFICATE-----Generated at Sat May 31 17:13:01 2025 by rpki-client