$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDD3F/C1A47FD895AF11E6B7854371C4F9AE02/p-QTTZsR3qt1sReR1V450XROC_E.mft File: p-QTTZsR3qt1sReR1V450XROC_E.mft (raw, json) Hash identifier: hsebdDxzPPh42aKGln9QQE+zLRSPCDGBMKP5du9i4Ck= Subject key identifier: 7C:5E:3E:DC:AA:E3:19:E6:74:0F:EB:E8:9E:E9:BB:C6:52:49:93:42 Authority key identifier: A7:E4:13:4D:9B:11:DE:AB:75:B1:17:91:D5:5E:39:D1:74:4E:0B:F1 Certificate issuer: /CN=A91DDD3F/serialNumber=A7E4134D9B11DEAB75B11791D55E39D1744E0BF1 Certificate serial: 1DCA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-QTTZsR3qt1sReR1V450XROC_E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DDD3F/C1A47FD895AF11E6B7854371C4F9AE02/p-QTTZsR3qt1sReR1V450XROC_E.mft Manifest number: 1DC1 Signing time: Fri 30 May 2025 16:17:39 +0000 Manifest this update: Fri 30 May 2025 16:17:38 +0000 Manifest next update: Fri 06 Jun 2025 16:17:38 +0000 Files and hashes: 1: p-QTTZsR3qt1sReR1V450XROC_E.crl (hash: HQV14ThVJ+hLHAqvo+qJkYKXvmel7vS8Z/cm/jZS2FM=) 2: AE58A24695B011E696EFE472C4F9AE02.roa (hash: iaqQr5dNZ60TDLIhN3MftiKcnJuy69N4C5+umHfRLFA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DDD3F/C1A47FD895AF11E6B7854371C4F9AE02/p-QTTZsR3qt1sReR1V450XROC_E.crl rsync://rpki.apnic.net/member_repository/A91DDD3F/C1A47FD895AF11E6B7854371C4F9AE02/p-QTTZsR3qt1sReR1V450XROC_E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-QTTZsR3qt1sReR1V450XROC_E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 16:17:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7626 (0x1dca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DDD3F, serialNumber=A7E4134D9B11DEAB75B11791D55E39D1744E0BF1 Validity Not Before: May 30 16:17:38 2025 GMT Not After : Jun 6 16:17:38 2025 GMT Subject: CN=6839da23-3eb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:88:56:db:d4:ce:b4:6c:4c:48:bd:da:29:88: 2a:76:d9:f2:22:3b:c4:ee:26:b1:2c:23:4b:a5:dd: 0b:8c:cc:6d:c4:85:b7:4b:00:a1:e8:c4:77:ef:48: 0e:1d:af:90:68:a9:3e:ce:86:be:28:d4:1e:70:9c: 50:9f:57:92:13:02:28:6f:9d:0f:83:97:c5:a0:a3: 09:19:3d:98:a3:d1:ad:9b:f7:60:10:e7:71:ac:f7: 84:cb:2c:1f:d3:fa:b6:a8:de:13:4c:3c:fb:e0:27: 2c:9a:64:70:78:ed:41:bc:ec:03:22:85:05:1b:8c: 1e:86:1f:86:ca:fb:32:6b:5c:21:0c:c3:1d:bd:56: dc:bf:64:78:21:90:0b:c1:c4:91:d9:df:ed:d8:3d: b2:c9:04:7f:c9:43:6f:33:24:2a:ab:41:c6:04:86: 6d:00:56:39:ca:e9:e3:8b:08:d0:7d:98:57:fc:7f: bc:77:a7:a1:3e:f2:37:b6:66:8f:55:b0:f0:fc:c9: ff:7a:18:c3:62:28:15:25:ac:e5:3d:21:97:3e:60: f2:e9:41:9c:d6:47:89:6e:99:85:d9:31:ca:9d:93: c6:4d:4a:c2:86:81:45:e7:80:0c:9f:34:5f:0c:8a: f7:31:78:65:94:74:3e:de:c7:fd:2e:68:30:c9:fc: ba:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:5E:3E:DC:AA:E3:19:E6:74:0F:EB:E8:9E:E9:BB:C6:52:49:93:42 X509v3 Authority Key Identifier: keyid:A7:E4:13:4D:9B:11:DE:AB:75:B1:17:91:D5:5E:39:D1:74:4E:0B:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DDD3F/C1A47FD895AF11E6B7854371C4F9AE02/p-QTTZsR3qt1sReR1V450XROC_E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-QTTZsR3qt1sReR1V450XROC_E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDD3F/C1A47FD895AF11E6B7854371C4F9AE02/p-QTTZsR3qt1sReR1V450XROC_E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:5b:bc:ac:fa:fe:30:e8:c9:6a:a4:f0:3e:96:2e:5f:70:5b: 06:60:b3:9d:7b:7b:06:5b:07:62:4e:6d:43:2a:2f:cc:f4:ef: f5:d8:57:36:f4:dd:24:d0:62:b2:8c:91:18:5b:b6:f9:d5:30: aa:8d:22:20:49:98:dc:97:e4:f1:21:a4:1e:6c:76:8e:74:e3: 50:6e:07:4d:cb:a9:d2:e5:36:8b:e2:95:7a:4b:89:c4:6a:6f: 9d:67:6d:8d:40:44:f4:46:e3:51:02:e9:16:e6:3c:45:ea:cb: 5c:e6:45:59:8d:42:3e:76:bd:93:32:73:f3:5c:15:5b:bc:38: 8b:ed:cd:74:6f:fa:f1:6a:65:9f:64:ee:04:66:2b:4a:cb:b6: 23:3d:97:04:0f:b5:81:ba:51:5d:c8:7f:7f:53:0f:bb:45:16: c3:81:d6:0b:dc:a5:6e:c8:83:81:65:7b:81:ac:57:2e:2e:d2: 0b:73:7d:e5:f1:8f:24:1c:ab:e6:22:58:c9:cb:2f:89:ec:57: cb:c5:10:bc:1b:ca:9b:99:1b:c7:6d:54:5c:e1:b2:5b:0f:6c: 38:1d:4e:3c:e3:ed:86:cb:1e:c7:87:d3:d4:c0:26:7d:6e:2f: af:c3:df:06:20:08:b0:0a:a0:c3:9d:c3:e6:88:4e:c0:d7:d5: 4b:26:1d:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHcowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REREM0YxMTAvBgNVBAUTKEE3RTQxMzREOUIxMURFQUI3NUIxMTc5MUQ1NUUzOUQx NzQ0RTBCRjEwHhcNMjUwNTMwMTYxNzM4WhcNMjUwNjA2MTYxNzM4WjAYMRYwFAYD VQQDEw02ODM5ZGEyMy0zZWI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3IhW29TOtGxMSL3aKYgqdtnyIjvE7iaxLCNLpd0LjMxtxIW3SwCh6MR370gO Ha+QaKk+zoa+KNQecJxQn1eSEwIob50Pg5fFoKMJGT2Yo9Gtm/dgEOdxrPeEyywf 0/q2qN4TTDz74CcsmmRweO1BvOwDIoUFG4wehh+Gyvsya1whDMMdvVbcv2R4IZAL wcSR2d/t2D2yyQR/yUNvMyQqq0HGBIZtAFY5yunjiwjQfZhX/H+8d6ehPvI3tmaP VbDw/Mn/ehjDYigVJazlPSGXPmDy6UGc1keJbpmF2THKnZPGTUrChoFF54AMnzRf DIr3MXhllHQ+3sf9Lmgwyfy6ZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHxePtyq 4xnmdA/r6J7pu8ZSSZNCMB8GA1UdIwQYMBaAFKfkE02bEd6rdbEXkdVeOdF0Tgvx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEREQzRi9DMUE0N0ZEODk1 QUYxMUU2Qjc4NTQzNzFDNEY5QUUwMi9wLVFUVFpzUjNxdDFzUmVSMVY0NTBYUk9D X0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3AtUVRUWnNSM3F0MXNSZVIxVjQ1MFhST0NfRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE REQzRi9DMUE0N0ZEODk1QUYxMUU2Qjc4NTQzNzFDNEY5QUUwMi9wLVFUVFpzUjNx dDFzUmVSMVY0NTBYUk9DX0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7W7ys+v4w6MlqpPA+li5fcFsGYLOde3sGWwdiTm1DKi/M9O/12Fc2 9N0k0GKyjJEYW7b51TCqjSIgSZjcl+TxIaQebHaOdONQbgdNy6nS5TaL4pV6S4nE am+dZ22NQET0RuNRAukW5jxF6stc5kVZjUI+dr2TMnPzXBVbvDiL7c10b/rxamWf ZO4EZitKy7YjPZcED7WBulFdyH9/Uw+7RRbDgdYL3KVuyIOBZXuBrFcuLtILc33l 8Y8kHKvmIljJyy+J7FfLxRC8G8qbmRvHbVRc4bJbD2w4HU484+2Gyx7Hh9PUwCZ9 bi+vw98GIAiwCqDDncPmiE7A19VLJh1q -----END CERTIFICATE-----Generated at Sat May 31 16:30:31 2025 by rpki-client