$ rpki-client -vvf rpki.apnic.net/member_repository/A91DAAAF/56B01DC0F85111EDA86FC820C4F9AE02/q-I6igEe0yhhVdpR9a14wbb8yT0.mft File: q-I6igEe0yhhVdpR9a14wbb8yT0.mft (raw, json) Hash identifier: NHjwGrtfXMFd0JUwablwqR2iKl55UyeOheK4KkpKD/s= Subject key identifier: FC:F1:29:2B:40:F3:7D:22:85:F7:B2:E5:B5:27:FC:D4:29:C1:EE:7A Authority key identifier: AB:E2:3A:8A:01:1E:D3:28:61:55:DA:51:F5:AD:78:C1:B6:FC:C9:3D Certificate issuer: /CN=A91DAAAF/serialNumber=ABE23A8A011ED3286155DA51F5AD78C1B6FCC93D Certificate serial: 0180 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q-I6igEe0yhhVdpR9a14wbb8yT0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DAAAF/56B01DC0F85111EDA86FC820C4F9AE02/q-I6igEe0yhhVdpR9a14wbb8yT0.mft Manifest number: 017D Signing time: Sat 31 May 2025 03:22:31 +0000 Manifest this update: Sat 31 May 2025 03:22:31 +0000 Manifest next update: Sat 07 Jun 2025 03:22:31 +0000 Files and hashes: 1: q-I6igEe0yhhVdpR9a14wbb8yT0.crl (hash: trO9F0AGPqE104905qX/qCJtpebtIDqXmz33OhXDXW0=) 2: 34EEA87C040511EEA466E336C4F9AE02.roa (hash: obDYb1FFvr0mB7iBHTgY83tEv9YylCIEzp5d/KneH78=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DAAAF/56B01DC0F85111EDA86FC820C4F9AE02/q-I6igEe0yhhVdpR9a14wbb8yT0.crl rsync://rpki.apnic.net/member_repository/A91DAAAF/56B01DC0F85111EDA86FC820C4F9AE02/q-I6igEe0yhhVdpR9a14wbb8yT0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q-I6igEe0yhhVdpR9a14wbb8yT0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:22:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 384 (0x180) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DAAAF, serialNumber=ABE23A8A011ED3286155DA51F5AD78C1B6FCC93D Validity Not Before: May 31 03:22:31 2025 GMT Not After : Jun 7 03:22:31 2025 GMT Subject: CN=683a75f7-d178 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:31:f8:fb:b5:7d:53:33:20:7d:75:13:e5:d3: ad:40:cc:28:91:ea:2a:7e:0e:a9:0c:ba:c0:3a:b2: c0:6e:92:d0:27:38:c1:56:4f:86:7d:a5:73:54:bc: e2:5c:08:d6:40:b2:a3:44:e5:ae:f3:b3:c5:c3:47: 04:d9:0a:3a:36:57:2f:b0:86:74:9b:98:16:ed:cd: 95:24:d9:3f:1e:aa:b1:ab:71:55:24:8c:ce:cf:b4: a8:a9:91:58:a5:aa:2d:a8:4b:cb:44:97:1c:72:1a: f7:f0:bc:e5:db:39:37:b2:26:a1:e0:8c:6f:94:c5: 6c:97:eb:53:88:fc:92:14:6e:76:c4:21:87:11:e3: 43:cd:31:ef:62:4c:5a:0d:72:44:fc:5a:b3:61:c4: e6:69:4a:8c:2b:13:af:68:da:54:3e:86:40:f9:d8: 83:51:a6:5f:e5:ad:fa:bf:e9:f6:ec:50:31:60:7e: bb:81:96:6a:01:a2:1e:36:6b:ca:74:81:75:a7:ce: d8:13:3f:be:c7:15:08:e5:0a:43:83:c9:34:bb:32: 46:0a:c8:3b:bd:5b:d8:ad:10:5a:ba:fd:62:17:be: cc:12:94:31:47:32:4e:04:b2:3d:0d:85:8b:18:89: a3:0c:12:ca:69:0e:7f:e3:fa:93:bf:f1:1e:8a:a4: 10:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:F1:29:2B:40:F3:7D:22:85:F7:B2:E5:B5:27:FC:D4:29:C1:EE:7A X509v3 Authority Key Identifier: keyid:AB:E2:3A:8A:01:1E:D3:28:61:55:DA:51:F5:AD:78:C1:B6:FC:C9:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DAAAF/56B01DC0F85111EDA86FC820C4F9AE02/q-I6igEe0yhhVdpR9a14wbb8yT0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q-I6igEe0yhhVdpR9a14wbb8yT0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DAAAF/56B01DC0F85111EDA86FC820C4F9AE02/q-I6igEe0yhhVdpR9a14wbb8yT0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:cb:af:ca:1b:91:3c:94:22:f7:50:e6:32:e3:34:e0:a5:8c: 15:3f:67:f8:ee:e4:02:3b:6e:b6:dc:c4:2d:ad:d4:a8:80:d7: 75:74:dd:1e:f4:02:89:98:83:2e:00:87:69:af:18:42:64:70: 05:67:2c:20:9f:aa:58:58:99:ca:5e:63:5d:42:5c:95:d2:c9: 1b:2a:4f:71:9c:2e:be:7a:21:38:40:20:79:2e:0d:f3:6e:d4: 59:fb:b5:b0:07:44:cd:5c:d4:e5:75:64:04:d6:b3:91:dc:02: 5c:26:47:a2:d5:4a:55:b6:f0:4d:e4:96:10:39:a9:67:cf:2c: ea:4d:e1:c3:e2:69:e2:17:31:ca:66:5a:10:5b:2a:94:6f:f4: 37:34:68:88:46:d6:51:56:cf:72:96:06:8f:43:b6:ba:50:3f: eb:7f:ad:99:49:24:d9:72:e7:7a:61:af:22:51:10:48:9d:4a: 33:7c:22:2b:ab:5c:c6:98:39:46:08:86:bd:5b:46:9e:4f:86: 2b:ab:99:24:45:23:73:59:40:d4:01:8f:3f:bf:e3:f8:aa:55: e6:9b:12:aa:a3:49:2a:ec:59:b1:29:d2:cc:a4:3e:df:ee:85: 30:df:04:78:43:27:4b:d8:74:60:0d:14:78:ba:c4:0a:24:c8: 7c:75:b8:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REFBQUYxMTAvBgNVBAUTKEFCRTIzQThBMDExRUQzMjg2MTU1REE1MUY1QUQ3OEMx QjZGQ0M5M0QwHhcNMjUwNTMxMDMyMjMxWhcNMjUwNjA3MDMyMjMxWjAYMRYwFAYD VQQDEw02ODNhNzVmNy1kMTc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsjH4+7V9UzMgfXUT5dOtQMwokeoqfg6pDLrAOrLAbpLQJzjBVk+GfaVzVLzi XAjWQLKjROWu87PFw0cE2Qo6NlcvsIZ0m5gW7c2VJNk/Hqqxq3FVJIzOz7SoqZFY paotqEvLRJccchr38Lzl2zk3siah4IxvlMVsl+tTiPySFG52xCGHEeNDzTHvYkxa DXJE/FqzYcTmaUqMKxOvaNpUPoZA+diDUaZf5a36v+n27FAxYH67gZZqAaIeNmvK dIF1p87YEz++xxUI5QpDg8k0uzJGCsg7vVvYrRBauv1iF77MEpQxRzJOBLI9DYWL GImjDBLKaQ5/4/qTv/EeiqQQdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPzxKStA 830ihfey5bUn/NQpwe56MB8GA1UdIwQYMBaAFKviOooBHtMoYVXaUfWteMG2/Mk9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQUFBRi81NkIwMURDMEY4 NTExMUVEQTg2RkM4MjBDNEY5QUUwMi9xLUk2aWdFZTB5aGhWZHBSOWExNHdiYjh5 VDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3EtSTZpZ0VlMHloaFZkcFI5YTE0d2JiOHlUMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QUFBRi81NkIwMURDMEY4NTExMUVEQTg2RkM4MjBDNEY5QUUwMi9xLUk2aWdFZTB5 aGhWZHBSOWExNHdiYjh5VDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCby6/KG5E8lCL3UOYy4zTgpYwVP2f47uQCO2623MQtrdSogNd1dN0e 9AKJmIMuAIdprxhCZHAFZywgn6pYWJnKXmNdQlyV0skbKk9xnC6+eiE4QCB5Lg3z btRZ+7WwB0TNXNTldWQE1rOR3AJcJkei1UpVtvBN5JYQOalnzyzqTeHD4mniFzHK ZloQWyqUb/Q3NGiIRtZRVs9ylgaPQ7a6UD/rf62ZSSTZcud6Ya8iURBInUozfCIr q1zGmDlGCIa9W0aeT4Yrq5kkRSNzWUDUAY8/v+P4qlXmmxKqo0kq7FmxKdLMpD7f 7oUw3wR4QydL2HRgDRR4usQKJMh8dbgt -----END CERTIFICATE-----Generated at Sat May 31 16:42:04 2025 by rpki-client