$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.mft File: qrDiti9jQ4lXMMBUiOf8TibFGmw.mft (raw, json) Hash identifier: g81gpwgbFSDTUTpVlzcuyl45J5OdmGsYQn9iY2tJ9MI= Subject key identifier: 27:95:54:98:8F:25:F1:31:07:A6:8A:8C:CF:31:3B:BD:B0:53:DC:22 Authority key identifier: AA:B0:E2:B6:2F:63:43:89:57:30:C0:54:88:E7:FC:4E:26:C5:1A:6C Certificate issuer: /CN=A91DCAE8/serialNumber=AAB0E2B62F6343895730C05488E7FC4E26C51A6C Certificate serial: 34D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrDiti9jQ4lXMMBUiOf8TibFGmw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.mft Manifest number: 34B2 Signing time: Fri 30 May 2025 14:48:25 +0000 Manifest this update: Fri 30 May 2025 14:48:25 +0000 Manifest next update: Fri 06 Jun 2025 14:48:25 +0000 Files and hashes: 1: qrDiti9jQ4lXMMBUiOf8TibFGmw.crl (hash: AbyQnU6+JsnaaumlTrImxSDvXfcViR05ozrFvtCr2S4=) 2: 006CE5442FBA11ECA05BB46EC4F9AE02.roa (hash: apmElx5HYADo3Em3FsRyatuvuOLQ9ijUTXsLu3KjKZY=) 3: 56F533B4A63011EEA6054D52C4F9AE02.roa (hash: 6oWZaqd4YEA2LX4UVdAVOpmAruJNhp7dksiMD1n7i0s=) 4: 2D89110A9A5311EE9CB13140C4F9AE02.roa (hash: 51Xns0oB8DIUPAAqRrljxkibyJY0Qjy6OKFbsk2hMYw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.crl rsync://rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrDiti9jQ4lXMMBUiOf8TibFGmw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 14:48:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13527 (0x34d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DCAE8, serialNumber=AAB0E2B62F6343895730C05488E7FC4E26C51A6C Validity Not Before: May 30 14:48:25 2025 GMT Not After : Jun 6 14:48:25 2025 GMT Subject: CN=6839c539-4128 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:20:94:a5:39:6a:c2:6d:6d:5a:47:8a:95:79: f5:7c:ac:08:42:33:a7:67:c7:a7:ac:c2:ab:d1:bd: 47:69:21:36:08:7c:dc:3c:f5:69:b2:e5:00:b6:9c: 9f:81:07:ce:f1:ec:6c:45:aa:bb:2b:d4:0d:7a:10: 1b:ba:87:77:eb:94:d1:0f:65:3e:8b:54:c7:dc:af: a2:38:eb:86:f1:4b:4b:4a:67:84:16:7e:74:ff:99: 83:77:d4:df:f2:8c:31:b6:e4:54:04:75:77:19:25: 2e:d5:ac:36:4f:89:c1:b9:48:39:37:69:6b:2f:f1: 5a:11:05:02:98:8a:e8:fc:2f:43:e3:34:6f:22:bb: 95:89:5e:03:57:2d:30:60:01:dd:54:be:4e:4f:db: 51:eb:68:4d:10:03:ba:8c:a4:64:93:02:fd:20:3c: 14:d1:b3:a3:9e:0b:d6:80:76:8d:e8:89:47:38:e3: 42:43:2b:70:dd:fd:1e:a0:64:94:bb:39:f1:98:64: 87:9b:7a:b2:6c:71:46:f2:51:8d:ab:1e:84:78:68: 6a:bd:a8:a2:6f:77:58:5d:00:1c:5b:86:04:1d:c6: 81:37:f5:c5:a8:c0:71:a3:98:96:27:c8:9a:41:e8: 66:ce:22:64:4b:44:38:c2:19:93:30:5e:d7:b5:45: 0b:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:95:54:98:8F:25:F1:31:07:A6:8A:8C:CF:31:3B:BD:B0:53:DC:22 X509v3 Authority Key Identifier: keyid:AA:B0:E2:B6:2F:63:43:89:57:30:C0:54:88:E7:FC:4E:26:C5:1A:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrDiti9jQ4lXMMBUiOf8TibFGmw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:4a:3e:aa:83:cf:e7:6f:00:4f:30:c0:25:66:d2:07:a1:96: 76:76:c0:da:4c:ff:16:ad:31:d3:62:a1:c2:bf:a7:46:53:94: 6d:e2:9a:b4:50:67:5e:14:40:7b:80:46:05:aa:fb:c7:fd:7d: ad:1c:1c:b8:4a:20:01:a5:35:ac:2f:56:65:93:55:81:ab:ca: 9a:d0:86:cb:23:3a:b9:e3:8d:ea:e0:10:66:14:fe:2b:1a:b6: c9:fc:54:7a:e8:63:d7:ab:11:1e:e4:84:3e:b3:fc:c5:b7:03: fd:16:a6:6e:87:ef:3e:97:c2:71:8e:51:01:34:6f:06:74:db: af:04:83:9c:18:a9:65:38:d2:ed:88:52:62:88:09:5d:d4:df: 41:c7:11:72:2f:ac:9c:f1:37:00:38:1d:52:d3:44:2d:32:41: 6d:1f:fc:56:96:9d:bb:81:02:ff:52:d0:f5:b4:86:c9:02:21: ab:83:da:38:32:96:62:58:74:0b:b1:86:2c:b9:06:55:0f:a6: 20:a4:68:fa:65:c6:e3:d9:61:0e:a5:98:25:d1:24:cb:55:46: 72:5a:52:fb:55:f6:f9:43:1f:c9:fb:f4:34:56:9d:cc:96:f7: b0:4b:30:6f:46:f6:13:4c:e2:b8:51:11:a3:50:44:26:28:59: 5d:2b:7a:6b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNNcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RENBRTgxMTAvBgNVBAUTKEFBQjBFMkI2MkY2MzQzODk1NzMwQzA1NDg4RTdGQzRF MjZDNTFBNkMwHhcNMjUwNTMwMTQ0ODI1WhcNMjUwNjA2MTQ0ODI1WjAYMRYwFAYD VQQDEw02ODM5YzUzOS00MTI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1SCUpTlqwm1tWkeKlXn1fKwIQjOnZ8enrMKr0b1HaSE2CHzcPPVpsuUAtpyf gQfO8exsRaq7K9QNehAbuod365TRD2U+i1TH3K+iOOuG8UtLSmeEFn50/5mDd9Tf 8owxtuRUBHV3GSUu1aw2T4nBuUg5N2lrL/FaEQUCmIro/C9D4zRvIruViV4DVy0w YAHdVL5OT9tR62hNEAO6jKRkkwL9IDwU0bOjngvWgHaN6IlHOONCQytw3f0eoGSU uznxmGSHm3qybHFG8lGNqx6EeGhqvaiib3dYXQAcW4YEHcaBN/XFqMBxo5iWJ8ia QehmziJkS0Q4whmTMF7XtUUL4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCeVVJiP JfExB6aKjM8xO72wU9wiMB8GA1UdIwQYMBaAFKqw4rYvY0OJVzDAVIjn/E4mxRps MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQ0FFOC84QjZBREUxNDFE OTMxMUUyOTJDQjIzRjcwOEIwMkNEMi9xckRpdGk5alE0bFhNTUJVaU9mOFRpYkZH bXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FyRGl0aTlqUTRsWE1NQlVpT2Y4VGliRkdtdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Q0FFOC84QjZBREUxNDFEOTMxMUUyOTJDQjIzRjcwOEIwMkNEMi9xckRpdGk5alE0 bFhNTUJVaU9mOFRpYkZHbXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASSj6qg8/nbwBPMMAlZtIHoZZ2dsDaTP8WrTHTYqHCv6dGU5Rt4pq0 UGdeFEB7gEYFqvvH/X2tHBy4SiABpTWsL1Zlk1WBq8qa0IbLIzq5443q4BBmFP4r GrbJ/FR66GPXqxEe5IQ+s/zFtwP9FqZuh+8+l8JxjlEBNG8GdNuvBIOcGKllONLt iFJiiAld1N9BxxFyL6yc8TcAOB1S00QtMkFtH/xWlp27gQL/UtD1tIbJAiGrg9o4 MpZiWHQLsYYsuQZVD6YgpGj6Zcbj2WEOpZgl0STLVUZyWlL7Vfb5Qx/J+/Q0Vp3M lvewSzBvRvYTTOK4URGjUEQmKFldK3pr -----END CERTIFICATE-----Generated at Sat May 31 16:30:30 2025 by rpki-client