$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/q2foL8hqrKgqz_jcNkXNcWEBP3Y.mft File: q2foL8hqrKgqz_jcNkXNcWEBP3Y.mft (raw, json) Hash identifier: j55jcbRi/cr5Kkskye3GXaIFDoRatuvxnc6g2snlnQc= Subject key identifier: 3D:2B:07:FB:D9:62:96:1C:C0:AB:2D:25:43:84:A1:A0:8F:65:06:69 Authority key identifier: AB:67:E8:2F:C8:6A:AC:A8:2A:CF:F8:DC:36:45:CD:71:61:01:3F:76 Certificate issuer: /CN=A91D1E4C/serialNumber=AB67E82FC86AACA82ACFF8DC3645CD7161013F76 Certificate serial: 02F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2foL8hqrKgqz_jcNkXNcWEBP3Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/q2foL8hqrKgqz_jcNkXNcWEBP3Y.mft Manifest number: 0AF5 Signing time: Fri 30 May 2025 21:04:46 +0000 Manifest this update: Fri 30 May 2025 21:04:45 +0000 Manifest next update: Fri 06 Jun 2025 21:04:45 +0000 Files and hashes: 1: q2foL8hqrKgqz_jcNkXNcWEBP3Y.crl (hash: G8DAq1EW4aR5i8MQfDzHLiYcJLUFFZjT+5mRndbTmqQ=) 2: 743B3188E57211ECBC81A87EC4F9AE02.roa (hash: ukecD2pxHGlgKyIFMtJzbdcdaqfvaNOkIkVTe1ei8KE=) 3: FC358296CFA011EDA4AC5B18C4F9AE02.roa (hash: Kfs6t0RkTXatIBLPnXrK64Ffg/DQYtGVawG99/fXQls=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/q2foL8hqrKgqz_jcNkXNcWEBP3Y.crl rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/q2foL8hqrKgqz_jcNkXNcWEBP3Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2foL8hqrKgqz_jcNkXNcWEBP3Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 21:04:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 754 (0x2f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1E4C, serialNumber=AB67E82FC86AACA82ACFF8DC3645CD7161013F76 Validity Not Before: May 30 21:04:45 2025 GMT Not After : Jun 6 21:04:45 2025 GMT Subject: CN=683a1d6d-c88d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:7c:30:9a:c0:e4:d2:37:1a:ef:e0:66:9c:d8: 6b:2a:81:a3:5c:b0:27:9b:43:b3:09:f0:27:8a:97: 2a:3e:41:ce:69:b8:ee:8e:7d:e2:26:e0:a8:02:aa: 38:cb:4d:3e:c7:0a:85:89:6a:81:73:38:9a:57:5c: c5:81:16:1d:47:5c:28:02:31:e4:1b:84:f5:dc:8c: 98:21:70:1b:3b:7e:2b:19:33:fa:bb:9c:63:08:ed: 4d:2b:d6:7f:29:82:5b:d7:88:83:76:8e:17:20:05: 67:cc:24:73:13:cb:8b:5f:1f:36:4d:30:01:f9:5d: 92:ca:b3:ea:52:18:2a:a8:d9:d9:80:20:ac:45:d9: 41:1d:5e:b3:f6:05:19:27:11:1c:d6:d1:fe:45:87: 1c:c6:50:5f:95:8b:35:92:05:86:57:de:ea:4b:05: 25:6f:89:3a:86:f1:e1:0a:be:43:bf:9a:c7:c8:2e: 32:82:c9:70:19:b6:de:e4:a4:2c:9d:4a:dd:fa:b5: b9:93:3e:99:c4:ca:bf:a0:37:14:9d:ed:a7:5f:30: 01:9e:58:30:23:0c:49:8d:f5:33:ca:e6:3e:e1:65: 22:48:0c:17:75:a8:c2:f6:45:a9:05:26:f9:0a:ec: 7a:b0:2c:f6:d0:33:46:5e:a9:3d:1e:1a:83:e2:7f: ef:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:2B:07:FB:D9:62:96:1C:C0:AB:2D:25:43:84:A1:A0:8F:65:06:69 X509v3 Authority Key Identifier: keyid:AB:67:E8:2F:C8:6A:AC:A8:2A:CF:F8:DC:36:45:CD:71:61:01:3F:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/q2foL8hqrKgqz_jcNkXNcWEBP3Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2foL8hqrKgqz_jcNkXNcWEBP3Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/q2foL8hqrKgqz_jcNkXNcWEBP3Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:5f:de:f3:0d:a9:a2:01:c2:c9:f0:fe:17:ce:a7:49:a7:f1: 7e:b9:6d:9d:bb:69:40:4e:f5:46:ca:26:37:7f:95:84:70:58: 11:40:90:f4:83:39:be:96:9e:5f:70:d7:cb:f7:c3:83:a8:55: 56:e1:f7:09:9e:80:a3:6d:c5:bf:77:dd:d1:62:82:b7:73:aa: c0:95:f6:87:31:9a:2e:19:67:a2:5b:e2:42:d4:f5:20:2b:7d: 45:bd:59:14:9f:f2:b5:62:e0:db:77:a8:b8:27:4d:86:7c:45: 66:bd:17:e8:b9:dd:d3:4e:4c:82:36:05:9a:cd:8c:50:7a:83: 00:b3:31:4e:e2:e7:47:8b:86:1e:de:0e:cc:46:63:df:c2:06: 0b:75:1d:36:10:53:b6:3a:11:16:91:0e:96:21:f0:b0:e2:2b: e0:11:d3:18:62:e9:d7:77:c6:c4:66:e0:fc:ec:c2:03:63:87: 92:c8:ee:b1:e7:12:43:27:6b:d9:6d:c5:d6:99:96:28:2b:cf: 48:87:fe:a7:58:32:af:39:ca:9f:ac:5c:a2:9a:c9:a7:1f:6d: aa:79:42:02:f9:39:27:23:f3:e6:ab:99:db:d1:3a:5c:4a:20: e5:c3:fd:af:f8:56:fc:4f:36:1b:b0:16:a2:91:c2:ad:48:cb: 1d:cf:71:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAvIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDFFNEMxMTAvBgNVBAUTKEFCNjdFODJGQzg2QUFDQTgyQUNGRjhEQzM2NDVDRDcx NjEwMTNGNzYwHhcNMjUwNTMwMjEwNDQ1WhcNMjUwNjA2MjEwNDQ1WjAYMRYwFAYD VQQDEw02ODNhMWQ2ZC1jODhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo3wwmsDk0jca7+BmnNhrKoGjXLAnm0OzCfAnipcqPkHOabjujn3iJuCoAqo4 y00+xwqFiWqBcziaV1zFgRYdR1woAjHkG4T13IyYIXAbO34rGTP6u5xjCO1NK9Z/ KYJb14iDdo4XIAVnzCRzE8uLXx82TTAB+V2SyrPqUhgqqNnZgCCsRdlBHV6z9gUZ JxEc1tH+RYccxlBflYs1kgWGV97qSwUlb4k6hvHhCr5Dv5rHyC4ygslwGbbe5KQs nUrd+rW5kz6ZxMq/oDcUne2nXzABnlgwIwxJjfUzyuY+4WUiSAwXdajC9kWpBSb5 Cux6sCz20DNGXqk9HhqD4n/v6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD0rB/vZ YpYcwKstJUOEoaCPZQZpMB8GA1UdIwQYMBaAFKtn6C/IaqyoKs/43DZFzXFhAT92 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMUU0Qy83REFEQTU2Q0Q5 NEQxMUVBQTYwNEFDNTNDNEY5QUUwMi9xMmZvTDhocXJLZ3F6X2pjTmtYTmNXRUJQ M1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3EyZm9MOGhxcktncXpfamNOa1hOY1dFQlAzWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MUU0Qy83REFEQTU2Q0Q5NEQxMUVBQTYwNEFDNTNDNEY5QUUwMi9xMmZvTDhocXJL Z3F6X2pjTmtYTmNXRUJQM1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBcX97zDamiAcLJ8P4XzqdJp/F+uW2du2lATvVGyiY3f5WEcFgRQJD0 gzm+lp5fcNfL98ODqFVW4fcJnoCjbcW/d93RYoK3c6rAlfaHMZouGWeiW+JC1PUg K31FvVkUn/K1YuDbd6i4J02GfEVmvRfoud3TTkyCNgWazYxQeoMAszFO4udHi4Ye 3g7MRmPfwgYLdR02EFO2OhEWkQ6WIfCw4ivgEdMYYunXd8bEZuD87MIDY4eSyO6x 5xJDJ2vZbcXWmZYoK89Ih/6nWDKvOcqfrFyimsmnH22qeUIC+TknI/Pmq5nb0Tpc SiDlw/2v+Fb8TzYbsBaikcKtSMsdz3EU -----END CERTIFICATE-----Generated at Sat May 31 14:39:51 2025 by rpki-client