$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC068/781E7DC4D51611EEB35E6A60C4F9AE02/qjbeqgtIjXQ9MJajdNPOwwNOado.mft File: qjbeqgtIjXQ9MJajdNPOwwNOado.mft (raw, json) Hash identifier: 4ETwdqtDKtSc2fEC68dfKMbQJu1WZnxyNuHQuvRQg+g= Subject key identifier: C2:B3:8C:59:07:FF:BE:AF:B7:48:04:27:00:A8:09:65:C9:EB:F8:1F Authority key identifier: AA:36:DE:AA:0B:48:8D:74:3D:30:96:A3:74:D3:CE:C3:03:4E:69:DA Certificate issuer: /CN=A91DC068/serialNumber=AA36DEAA0B488D743D3096A374D3CEC3034E69DA Certificate serial: F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qjbeqgtIjXQ9MJajdNPOwwNOado.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC068/781E7DC4D51611EEB35E6A60C4F9AE02/qjbeqgtIjXQ9MJajdNPOwwNOado.mft Manifest number: F0 Signing time: Sat 31 May 2025 04:58:23 +0000 Manifest this update: Sat 31 May 2025 04:58:22 +0000 Manifest next update: Sat 07 Jun 2025 04:58:22 +0000 Files and hashes: 1: qjbeqgtIjXQ9MJajdNPOwwNOado.crl (hash: /I9Ey+b6oSkvPVmdtj7utpi7pIXMqLGndD06VTy0QYI=) 2: 4C798C5AD5DD11EEA5B1C711C4F9AE02.roa (hash: UehIW4ne9/pa7E+bJ7b7vlEagKFtkPy1RDy9gQNG8w4=) 3: 4CFFF0A6D5DD11EEA5B1C711C4F9AE02.roa (hash: 39NjyNN95zMryV/4gipoP40hgOhWq2OieGFrOUrcjx8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC068/781E7DC4D51611EEB35E6A60C4F9AE02/qjbeqgtIjXQ9MJajdNPOwwNOado.crl rsync://rpki.apnic.net/member_repository/A91DC068/781E7DC4D51611EEB35E6A60C4F9AE02/qjbeqgtIjXQ9MJajdNPOwwNOado.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qjbeqgtIjXQ9MJajdNPOwwNOado.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:58:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 244 (0xf4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC068, serialNumber=AA36DEAA0B488D743D3096A374D3CEC3034E69DA Validity Not Before: May 31 04:58:22 2025 GMT Not After : Jun 7 04:58:22 2025 GMT Subject: CN=683a8c6e-e131 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:67:75:bd:cb:28:61:4d:cc:e2:e5:66:f4:62: e0:94:48:04:32:c1:e8:6a:73:f3:8b:9c:f4:0d:07: b0:95:63:72:d9:95:d2:15:ee:da:b4:08:1e:1b:09: f5:1b:ac:ec:74:54:a5:ba:24:13:8f:63:84:77:88: 34:8d:d6:75:b7:9d:62:ca:75:be:40:02:6a:14:de: 4e:03:45:36:e5:e3:5f:ad:b8:8b:e1:11:05:e4:39: 1e:a8:30:80:89:62:0e:60:40:fe:fd:0d:82:7e:18: 1d:60:0e:75:cc:9b:6f:26:1f:95:6c:0d:78:6b:81: 8c:d4:64:22:51:3a:a4:da:d8:9d:d6:e2:83:c3:f8: 3a:9f:76:1f:bd:56:3c:1d:13:85:5c:7c:29:78:64: 7a:f6:48:53:a7:fc:26:a0:ad:ff:33:56:c8:b1:63: 85:90:e2:a0:78:80:cf:8c:b9:b2:a2:37:61:00:99: 2b:30:f4:f5:d3:80:11:26:6c:f0:ef:b9:b6:ce:f4: b3:9d:e8:4b:6a:b5:14:89:df:a7:cf:31:9d:ec:e3: 5d:fe:b1:b0:5b:10:61:fc:f7:aa:60:e3:c4:7f:b3: d5:49:37:be:0f:d9:7f:36:29:26:db:4b:a4:1d:d1: 9a:ef:50:80:67:cc:70:65:d2:59:98:3e:83:2b:8f: 1e:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:B3:8C:59:07:FF:BE:AF:B7:48:04:27:00:A8:09:65:C9:EB:F8:1F X509v3 Authority Key Identifier: keyid:AA:36:DE:AA:0B:48:8D:74:3D:30:96:A3:74:D3:CE:C3:03:4E:69:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC068/781E7DC4D51611EEB35E6A60C4F9AE02/qjbeqgtIjXQ9MJajdNPOwwNOado.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qjbeqgtIjXQ9MJajdNPOwwNOado.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC068/781E7DC4D51611EEB35E6A60C4F9AE02/qjbeqgtIjXQ9MJajdNPOwwNOado.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:0f:a2:45:07:25:f1:24:03:9f:d6:33:21:37:5e:d3:bd:4d: 1c:a1:00:b5:91:29:9a:58:af:6e:eb:bc:6f:86:f3:ba:a5:9e: 0b:6f:fa:7a:09:61:82:6f:49:e7:0c:07:52:ac:a5:5f:af:01: 16:9a:6a:1e:bd:2c:99:02:1e:a6:96:d3:f3:d4:02:1c:a0:2b: 1e:95:a3:06:66:1b:c6:7b:95:97:6a:cb:11:6b:83:21:04:0c: ab:eb:30:b5:c4:f9:2b:35:b4:4f:cd:74:91:73:f5:cc:3b:df: 2d:79:55:b3:38:1b:c9:ba:e8:33:f2:d2:30:af:b0:06:bc:b1: 34:3d:86:9b:70:86:ee:08:df:b9:0a:ef:2a:8f:01:50:16:4f: 6a:03:31:d9:43:2b:0b:15:12:f6:55:c5:a6:e1:96:3b:77:24: ab:64:91:f0:f9:7b:83:29:fc:e9:20:bb:8d:a4:57:f9:62:d6: 14:02:94:8f:59:9d:fd:c4:a8:b7:d7:53:b2:77:9a:40:7f:e5: 58:07:46:5a:83:f0:6b:13:f2:35:fb:49:6c:e6:51:ae:15:63: 6f:23:91:1f:12:c8:2c:df:45:a8:44:5e:a7:6a:f7:f1:4c:3d: 6f:93:17:21:11:29:63:46:95:3b:c2:b2:6c:b6:47:5f:94:eb: 6b:dc:06:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REMwNjgxMTAvBgNVBAUTKEFBMzZERUFBMEI0ODhENzQzRDMwOTZBMzc0RDNDRUMz MDM0RTY5REEwHhcNMjUwNTMxMDQ1ODIyWhcNMjUwNjA3MDQ1ODIyWjAYMRYwFAYD VQQDEw02ODNhOGM2ZS1lMTMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA02d1vcsoYU3M4uVm9GLglEgEMsHoanPzi5z0DQewlWNy2ZXSFe7atAgeGwn1 G6zsdFSluiQTj2OEd4g0jdZ1t51iynW+QAJqFN5OA0U25eNfrbiL4REF5DkeqDCA iWIOYED+/Q2CfhgdYA51zJtvJh+VbA14a4GM1GQiUTqk2tid1uKDw/g6n3YfvVY8 HROFXHwpeGR69khTp/wmoK3/M1bIsWOFkOKgeIDPjLmyojdhAJkrMPT104ARJmzw 77m2zvSznehLarUUid+nzzGd7ONd/rGwWxBh/PeqYOPEf7PVSTe+D9l/Nikm20uk HdGa71CAZ8xwZdJZmD6DK48ehQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMKzjFkH /76vt0gEJwCoCWXJ6/gfMB8GA1UdIwQYMBaAFKo23qoLSI10PTCWo3TTzsMDTmna MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzA2OC83ODFFN0RDNEQ1 MTYxMUVFQjM1RTZBNjBDNEY5QUUwMi9xamJlcWd0SWpYUTlNSmFqZE5QT3d3Tk9h ZG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FqYmVxZ3RJalhROU1KYWpkTlBPd3dOT2Fkby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzA2OC83ODFFN0RDNEQ1MTYxMUVFQjM1RTZBNjBDNEY5QUUwMi9xamJlcWd0SWpY UTlNSmFqZE5QT3d3Tk9hZG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmD6JFByXxJAOf1jMhN17TvU0coQC1kSmaWK9u67xvhvO6pZ4Lb/p6 CWGCb0nnDAdSrKVfrwEWmmoevSyZAh6mltPz1AIcoCselaMGZhvGe5WXassRa4Mh BAyr6zC1xPkrNbRPzXSRc/XMO98teVWzOBvJuugz8tIwr7AGvLE0PYabcIbuCN+5 Cu8qjwFQFk9qAzHZQysLFRL2VcWm4ZY7dySrZJHw+XuDKfzpILuNpFf5YtYUApSP WZ39xKi311Oyd5pAf+VYB0Zag/BrE/I1+0ls5lGuFWNvI5EfEsgs30WoRF6navfx TD1vkxchESljRpU7wrJstkdflOtr3AZd -----END CERTIFICATE-----Generated at Sat May 31 16:59:31 2025 by rpki-client