$ rpki-client -vvf rpki.apnic.net/member_repository/A91D23D1/1F338AC490CC11EBB1BE102DC4F9AE02/SQP-uXRPViXit-FaT4CyXtPdCfM.mft File: SQP-uXRPViXit-FaT4CyXtPdCfM.mft (raw, json) Hash identifier: ZoRiOyqcwZLAMPDs/tbmtdFV7g1l3g8NW8rFueiVNv0= Subject key identifier: 67:12:29:33:9B:00:97:EB:9B:73:C5:E1:B3:2E:F9:96:F7:57:D9:AD Authority key identifier: 49:03:FE:B9:74:4F:56:25:E2:B7:E1:5A:4F:80:B2:5E:D3:DD:09:F3 Certificate issuer: /CN=A91D23D1/serialNumber=4903FEB9744F5625E2B7E15A4F80B25ED3DD09F3 Certificate serial: 0641 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SQP-uXRPViXit-FaT4CyXtPdCfM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D23D1/1F338AC490CC11EBB1BE102DC4F9AE02/SQP-uXRPViXit-FaT4CyXtPdCfM.mft Manifest number: 063C Signing time: Fri 30 May 2025 22:50:38 +0000 Manifest this update: Fri 30 May 2025 22:50:37 +0000 Manifest next update: Fri 06 Jun 2025 22:50:37 +0000 Files and hashes: 1: SQP-uXRPViXit-FaT4CyXtPdCfM.crl (hash: XxvdV74o4vd1380PotE+bHi1iq5z9PlWwgQt3N4Zwxs=) 2: 32BA4EE0913311EB96A8E810C4F9AE02.roa (hash: sQNOj4qancKoB72U0bVcoarcyKvmrTavihgBPexyxuM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D23D1/1F338AC490CC11EBB1BE102DC4F9AE02/SQP-uXRPViXit-FaT4CyXtPdCfM.crl rsync://rpki.apnic.net/member_repository/A91D23D1/1F338AC490CC11EBB1BE102DC4F9AE02/SQP-uXRPViXit-FaT4CyXtPdCfM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SQP-uXRPViXit-FaT4CyXtPdCfM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 22:50:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1601 (0x641) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D23D1, serialNumber=4903FEB9744F5625E2B7E15A4F80B25ED3DD09F3 Validity Not Before: May 30 22:50:37 2025 GMT Not After : Jun 6 22:50:37 2025 GMT Subject: CN=683a363e-7e2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:0e:d4:d0:f4:67:98:01:8d:12:e3:1d:05:eb: 70:24:90:2f:8e:e4:21:c3:4d:fa:fa:5b:7d:37:89: c6:93:b6:b7:b7:3f:09:01:75:18:ef:1c:4d:73:03: d0:f9:d5:17:ca:ef:cd:de:23:33:a9:7d:73:cd:bd: 7a:c5:12:e5:35:09:d7:48:d6:33:d7:ab:c6:ee:4c: 60:24:0d:17:f7:09:97:e5:ea:2b:af:4c:52:b6:f4: 05:ee:9c:95:99:b6:f5:c9:55:89:da:c6:fe:ac:23: 72:34:fd:bc:0f:ad:1c:72:b9:68:43:ed:b6:f5:f0: 94:b4:6e:9b:dc:cf:6f:f4:e0:18:3d:40:03:8e:30: 1c:47:92:f8:4b:92:9f:67:e4:0a:b9:6d:9a:cf:f3: 81:d1:cc:10:da:c0:10:62:b4:6d:92:48:16:46:7c: 7e:2a:70:c9:e4:42:2e:55:0e:a0:f4:f7:aa:9c:38: a8:3a:55:fb:43:73:b9:90:b8:e3:a5:31:e7:f0:de: 18:69:5e:1f:51:22:6f:3d:0c:e5:4f:e6:3c:4f:77: 8b:b7:79:42:e6:7b:a9:aa:40:35:68:31:73:35:72: 8e:88:c6:78:3a:32:99:5a:61:4b:fd:c5:36:dc:7a: 1c:e4:80:85:68:c2:86:a6:07:31:84:41:50:45:95: cf:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:12:29:33:9B:00:97:EB:9B:73:C5:E1:B3:2E:F9:96:F7:57:D9:AD X509v3 Authority Key Identifier: keyid:49:03:FE:B9:74:4F:56:25:E2:B7:E1:5A:4F:80:B2:5E:D3:DD:09:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D23D1/1F338AC490CC11EBB1BE102DC4F9AE02/SQP-uXRPViXit-FaT4CyXtPdCfM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SQP-uXRPViXit-FaT4CyXtPdCfM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D23D1/1F338AC490CC11EBB1BE102DC4F9AE02/SQP-uXRPViXit-FaT4CyXtPdCfM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:00:d5:0a:a5:93:34:c1:75:62:fb:af:0f:72:ad:e9:73:62: cd:10:69:9b:0e:8a:f5:94:d7:0d:83:d6:09:1d:9b:db:bd:fb: dd:55:62:37:e9:a1:8f:95:6b:88:bd:6e:fd:cc:ef:6a:1e:f3: 79:5a:dc:49:62:60:39:a9:9d:74:67:c1:9b:25:30:f9:75:ac: 2a:c3:01:c1:55:fb:96:f1:07:1f:35:98:1a:2d:a9:d3:74:27: 62:92:c5:90:e5:bc:68:fe:66:4b:d8:2a:f5:65:95:76:c2:d2: 02:e6:0a:b8:a6:45:ef:60:2e:92:e2:b3:7d:77:ba:cf:cb:c5: 7a:03:75:2d:9a:f7:c0:47:59:d7:35:41:8e:a3:6c:9f:44:39: 58:32:60:f3:ed:62:65:dc:29:7f:7a:5f:1b:71:ea:b3:72:ba: 44:d8:cd:f5:3f:96:4b:37:29:bd:84:57:ff:0a:ef:6e:73:65: 65:13:05:2a:26:44:33:fc:0e:54:6a:37:fb:32:05:ec:ea:2f: ab:c1:1a:64:61:37:f9:4a:be:a3:76:3a:93:68:c8:df:7a:1a: e0:65:db:01:a4:bf:20:7c:05:18:52:de:1c:bd:aa:f7:18:76: 2f:57:8f:70:6b:cd:d6:9c:ae:ae:c6:23:18:8d:7a:15:62:4a: 67:e8:45:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBkEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDIzRDExMTAvBgNVBAUTKDQ5MDNGRUI5NzQ0RjU2MjVFMkI3RTE1QTRGODBCMjVF RDNERDA5RjMwHhcNMjUwNTMwMjI1MDM3WhcNMjUwNjA2MjI1MDM3WjAYMRYwFAYD VQQDEw02ODNhMzYzZS03ZTJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtg7U0PRnmAGNEuMdBetwJJAvjuQhw036+lt9N4nGk7a3tz8JAXUY7xxNcwPQ +dUXyu/N3iMzqX1zzb16xRLlNQnXSNYz16vG7kxgJA0X9wmX5eorr0xStvQF7pyV mbb1yVWJ2sb+rCNyNP28D60ccrloQ+229fCUtG6b3M9v9OAYPUADjjAcR5L4S5Kf Z+QKuW2az/OB0cwQ2sAQYrRtkkgWRnx+KnDJ5EIuVQ6g9PeqnDioOlX7Q3O5kLjj pTHn8N4YaV4fUSJvPQzlT+Y8T3eLt3lC5nupqkA1aDFzNXKOiMZ4OjKZWmFL/cU2 3Hoc5ICFaMKGpgcxhEFQRZXPCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGcSKTOb AJfrm3PF4bMu+Zb3V9mtMB8GA1UdIwQYMBaAFEkD/rl0T1Yl4rfhWk+Asl7T3Qnz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjNEMS8xRjMzOEFDNDkw Q0MxMUVCQjFCRTEwMkRDNEY5QUUwMi9TUVAtdVhSUFZpWGl0LUZhVDRDeVh0UGRD Zk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NRUC11WFJQVmlYaXQtRmFUNEN5WHRQZENmTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MjNEMS8xRjMzOEFDNDkwQ0MxMUVCQjFCRTEwMkRDNEY5QUUwMi9TUVAtdVhSUFZp WGl0LUZhVDRDeVh0UGRDZk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBrANUKpZM0wXVi+68Pcq3pc2LNEGmbDor1lNcNg9YJHZvbvfvdVWI3 6aGPlWuIvW79zO9qHvN5WtxJYmA5qZ10Z8GbJTD5dawqwwHBVfuW8QcfNZgaLanT dCdiksWQ5bxo/mZL2Cr1ZZV2wtIC5gq4pkXvYC6S4rN9d7rPy8V6A3UtmvfAR1nX NUGOo2yfRDlYMmDz7WJl3Cl/el8bceqzcrpE2M31P5ZLNym9hFf/Cu9uc2VlEwUq JkQz/A5Uajf7MgXs6i+rwRpkYTf5Sr6jdjqTaMjfehrgZdsBpL8gfAUYUt4cvar3 GHYvV49wa83WnK6uxiMYjXoVYkpn6EVS -----END CERTIFICATE-----Generated at Sat May 31 14:58:05 2025 by rpki-client