$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0435/D2885BC4445D11EBA517457EC4F9AE02/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.mft File: QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.mft (raw, json) Hash identifier: 8ANrYSLRmxTErGHyKd1IN4xL1ecdYzyaTfaJNWOY6I8= Subject key identifier: EB:6B:DD:B6:7E:E7:81:B6:CF:28:7A:2B:C8:B3:69:D3:69:28:98:01 Authority key identifier: 42:91:1B:10:9D:46:E8:86:61:FA:85:61:6C:81:28:03:C5:AB:3C:64 Certificate issuer: /CN=A91E0435/serialNumber=42911B109D46E88661FA85616C812803C5AB3C64 Certificate serial: 06FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0435/D2885BC4445D11EBA517457EC4F9AE02/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.mft Manifest number: 06F8 Signing time: Sat 10 May 2025 21:35:58 +0000 Manifest this update: Sat 10 May 2025 21:35:58 +0000 Manifest next update: Sat 17 May 2025 21:35:58 +0000 Files and hashes: 1: QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.crl (hash: WGYSf0bjWkbsn/vURfL001sox7g50zMvf2pZuEnrQLU=) 2: FCC3542E445E11EBB692887EC4F9AE02.roa (hash: mIOY2vhOsc+nNqge7lnkHLB5M4DsgX2WsmX/mvk1lyU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0435/D2885BC4445D11EBA517457EC4F9AE02/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.crl rsync://rpki.apnic.net/member_repository/A91E0435/D2885BC4445D11EBA517457EC4F9AE02/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 21:35:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1790 (0x6fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0435, serialNumber=42911B109D46E88661FA85616C812803C5AB3C64 Validity Not Before: May 10 21:35:58 2025 GMT Not After : May 17 21:35:58 2025 GMT Subject: CN=681fc6be-e99d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:71:5d:ab:3a:72:51:5b:29:79:c9:e7:35:bf: 8c:94:f5:10:74:ec:a2:0d:e0:98:e5:67:e4:05:81: 20:84:92:57:f0:c6:75:c1:95:81:8b:65:19:2e:42: 7c:ff:b6:0b:45:94:83:18:f0:5a:c9:2a:3d:9a:38: 8f:96:0f:b5:d7:4b:40:fa:eb:15:21:63:ce:18:29: 00:34:87:ac:35:97:93:6b:0f:a3:b7:32:27:40:96: 82:24:80:1d:11:40:04:52:ce:f8:80:4c:f8:36:bd: 92:0b:57:ea:bc:dc:fe:91:e2:d4:47:1e:f7:6e:6c: a5:43:9b:fe:d9:bd:d0:22:09:c6:08:f2:c0:67:b1: f9:7f:19:00:b8:26:40:62:f8:7f:de:fc:d3:9c:72: e9:79:7f:22:c6:e4:b2:1b:24:f5:44:a5:70:7b:15: fd:8c:a8:ba:45:d3:61:0e:20:15:c7:d7:c4:12:d3: 26:90:ff:a8:31:10:af:40:82:99:97:e3:ad:b5:c4: 6d:32:47:22:b1:d7:af:45:1b:ba:d7:a2:b9:a2:1e: c5:6c:11:88:5a:c2:44:e2:2e:53:f3:13:f8:e5:f4: 23:81:b8:3b:20:bd:7e:9e:d5:3b:bc:b9:36:28:ba: 99:8e:1f:e5:e7:74:7b:97:f8:6d:f8:4e:20:e4:f8: b4:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:6B:DD:B6:7E:E7:81:B6:CF:28:7A:2B:C8:B3:69:D3:69:28:98:01 X509v3 Authority Key Identifier: keyid:42:91:1B:10:9D:46:E8:86:61:FA:85:61:6C:81:28:03:C5:AB:3C:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0435/D2885BC4445D11EBA517457EC4F9AE02/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0435/D2885BC4445D11EBA517457EC4F9AE02/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:04:8f:c9:40:0f:1d:60:b5:43:aa:e7:b1:0e:c8:c0:15:53: f5:f8:57:a3:00:c9:d5:61:d6:3f:24:6c:76:a2:ce:4e:4b:7a: 6d:21:6b:55:69:5d:d3:d0:24:c5:4c:75:74:04:55:88:8f:f0: d0:a3:16:6a:69:65:d3:f8:90:e5:dc:ad:33:5a:3f:eb:ed:64: 88:3d:ea:67:1a:22:27:82:1c:c5:1d:2b:7b:66:88:ba:2b:76: d3:5f:df:43:34:76:e8:d5:41:c8:c0:4c:a6:ac:58:01:25:12: f2:7c:0c:f8:dc:2a:df:fd:2e:67:ca:47:04:02:3a:a8:6b:02: 32:10:40:9b:6d:d7:e6:93:19:97:82:70:46:41:27:50:ac:ee: c8:84:0b:3b:75:4f:38:22:3d:72:dc:e7:6f:a4:e7:18:b2:43: 9f:14:d2:54:b5:bd:19:d3:c4:8c:b4:91:f9:58:08:74:c6:30: c4:08:7b:a0:d6:67:30:17:ea:31:33:2e:ff:4d:e8:b5:ff:74: 6e:dd:fc:9b:a5:5e:a8:c3:f5:78:f7:9b:c6:a3:1a:94:2f:9e: 09:2c:fd:f1:3a:d4:19:3c:6b:40:1e:03:6c:c7:18:2b:ca:48: c8:0e:c5:e1:c6:d6:e7:ac:63:ab:32:68:1b:9a:76:16:45:8f: 93:bf:17:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBv4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTA0MzUxMTAvBgNVBAUTKDQyOTExQjEwOUQ0NkU4ODY2MUZBODU2MTZDODEyODAz QzVBQjNDNjQwHhcNMjUwNTEwMjEzNTU4WhcNMjUwNTE3MjEzNTU4WjAYMRYwFAYD VQQDEw02ODFmYzZiZS1lOTlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnHFdqzpyUVspecnnNb+MlPUQdOyiDeCY5WfkBYEghJJX8MZ1wZWBi2UZLkJ8 /7YLRZSDGPBaySo9mjiPlg+110tA+usVIWPOGCkANIesNZeTaw+jtzInQJaCJIAd EUAEUs74gEz4Nr2SC1fqvNz+keLURx73bmylQ5v+2b3QIgnGCPLAZ7H5fxkAuCZA Yvh/3vzTnHLpeX8ixuSyGyT1RKVwexX9jKi6RdNhDiAVx9fEEtMmkP+oMRCvQIKZ l+OttcRtMkcisdevRRu616K5oh7FbBGIWsJE4i5T8xP45fQjgbg7IL1+ntU7vLk2 KLqZjh/l53R7l/ht+E4g5Pi03wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOtr3bZ+ 54G2zyh6K8izadNpKJgBMB8GA1UdIwQYMBaAFEKRGxCdRuiGYfqFYWyBKAPFqzxk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDQzNS9EMjg4NUJDNDQ0 NUQxMUVCQTUxNzQ1N0VDNEY5QUUwMi9RcEViRUoxRzZJWmgtb1ZoYklFb0E4V3JQ R1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FwRWJFSjFHNklaaC1vVmhiSUVvQThXclBHUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MDQzNS9EMjg4NUJDNDQ0NUQxMUVCQTUxNzQ1N0VDNEY5QUUwMi9RcEViRUoxRzZJ Wmgtb1ZoYklFb0E4V3JQR1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7BI/JQA8dYLVDquexDsjAFVP1+FejAMnVYdY/JGx2os5OS3ptIWtV aV3T0CTFTHV0BFWIj/DQoxZqaWXT+JDl3K0zWj/r7WSIPepnGiInghzFHSt7Zoi6 K3bTX99DNHbo1UHIwEymrFgBJRLyfAz43Crf/S5nykcEAjqoawIyEECbbdfmkxmX gnBGQSdQrO7IhAs7dU84Ij1y3OdvpOcYskOfFNJUtb0Z08SMtJH5WAh0xjDECHug 1mcwF+oxMy7/Tei1/3Ru3fybpV6ow/V495vGoxqUL54JLP3xOtQZPGtAHgNsxxgr ykjIDsXhxtbnrGOrMmgbmnYWRY+Tvxex -----END CERTIFICATE-----Generated at Mon May 12 12:37:08 2025 by rpki-client