$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4519/0426491E8CAE11EBAA1B1F5EC4F9AE02/qadVVe1wZy9x1S9lk7kbRCC6pws.mft File: qadVVe1wZy9x1S9lk7kbRCC6pws.mft (raw, json) Hash identifier: vZWPemxkh7xM7pSSq37fSY/1tpTE3a1fakfJnP0Z3Zw= Subject key identifier: B7:9B:38:F0:73:B9:44:1E:3E:72:77:93:51:7C:99:8A:B1:1C:10:8E Authority key identifier: A9:A7:55:55:ED:70:67:2F:71:D5:2F:65:93:B9:1B:44:20:BA:A7:0B Certificate issuer: /CN=A91E4519/serialNumber=A9A75555ED70672F71D52F6593B91B4420BAA70B Certificate serial: 064B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qadVVe1wZy9x1S9lk7kbRCC6pws.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4519/0426491E8CAE11EBAA1B1F5EC4F9AE02/qadVVe1wZy9x1S9lk7kbRCC6pws.mft Manifest number: 0646 Signing time: Fri 30 May 2025 22:47:41 +0000 Manifest this update: Fri 30 May 2025 22:47:41 +0000 Manifest next update: Fri 06 Jun 2025 22:47:41 +0000 Files and hashes: 1: qadVVe1wZy9x1S9lk7kbRCC6pws.crl (hash: cRKE9Bi7EJSvux8iHgNCKfvdxhHtjsWryI+b/0pa/3k=) 2: C2B5BE908CAF11EBBADF6F60C4F9AE02.roa (hash: Tp6yV6aNCHUMLxFxEsezUBZI5iOsrCF8OtHjSK1vpw0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4519/0426491E8CAE11EBAA1B1F5EC4F9AE02/qadVVe1wZy9x1S9lk7kbRCC6pws.crl rsync://rpki.apnic.net/member_repository/A91E4519/0426491E8CAE11EBAA1B1F5EC4F9AE02/qadVVe1wZy9x1S9lk7kbRCC6pws.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qadVVe1wZy9x1S9lk7kbRCC6pws.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 22:47:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1611 (0x64b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4519, serialNumber=A9A75555ED70672F71D52F6593B91B4420BAA70B Validity Not Before: May 30 22:47:41 2025 GMT Not After : Jun 6 22:47:41 2025 GMT Subject: CN=683a358d-da77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:cf:c7:3c:55:16:86:5a:9d:20:64:b9:2f:8a: 9a:24:dd:02:20:4b:fc:bd:b9:5e:5a:fb:a5:18:00: 3a:2a:da:20:91:78:96:b1:ab:36:14:01:c5:0a:62: 32:2b:cb:02:98:77:b5:3d:e1:08:ff:fc:49:e4:95: 99:92:58:34:40:9a:07:78:d2:36:15:cc:19:58:52: 3a:16:e7:ff:ea:22:d5:ea:01:05:d8:55:39:a8:aa: a0:1c:d5:fc:60:47:0f:1d:29:ed:b1:9c:6f:a4:9b: 53:f5:12:63:a0:00:64:82:4a:64:05:f8:17:54:37: e6:8b:9b:55:54:73:2a:51:b8:39:c3:3f:38:e3:86: 85:7d:6a:98:20:98:40:87:51:96:88:ce:38:f7:d4: 2d:f4:0a:71:9f:21:42:f8:49:01:d8:bb:ec:c3:a6: 47:c6:12:5b:61:a2:39:0f:ce:ee:9f:fe:22:3c:1a: cf:21:69:2c:5e:d1:cf:ca:12:eb:89:0b:98:d3:94: 19:f3:e3:0d:e6:43:c0:13:f8:e5:f7:60:e9:46:85: 72:17:1e:27:c4:2a:90:fc:3f:57:ef:00:86:19:35: 28:9e:02:c2:24:42:6a:cf:2f:5e:75:23:87:3a:a5: da:8d:eb:e5:cf:6e:93:a0:e8:07:04:bb:8c:a5:57: f8:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:9B:38:F0:73:B9:44:1E:3E:72:77:93:51:7C:99:8A:B1:1C:10:8E X509v3 Authority Key Identifier: keyid:A9:A7:55:55:ED:70:67:2F:71:D5:2F:65:93:B9:1B:44:20:BA:A7:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4519/0426491E8CAE11EBAA1B1F5EC4F9AE02/qadVVe1wZy9x1S9lk7kbRCC6pws.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qadVVe1wZy9x1S9lk7kbRCC6pws.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4519/0426491E8CAE11EBAA1B1F5EC4F9AE02/qadVVe1wZy9x1S9lk7kbRCC6pws.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:1e:5c:6f:d7:13:9e:bb:77:10:97:f7:ad:dc:2b:a2:cc:90: 45:ed:64:ec:39:08:37:db:7d:b1:4c:e8:b4:70:09:18:89:dd: 3c:c9:9c:97:28:39:69:c8:65:11:99:71:3c:8f:60:0b:a0:13: 8d:3b:4a:9f:7c:85:ca:4c:2e:d3:e5:3b:7d:0d:0a:39:56:47: 5f:f8:e2:01:5b:83:b0:e4:02:52:fe:e4:2c:3a:99:a0:e8:41: 6a:2d:18:f5:a7:84:5d:f1:0e:44:4c:0f:23:87:e8:3d:8d:90: bc:c5:20:5e:6f:3a:21:4b:89:0e:31:38:e9:2a:9d:6f:5e:5c: a6:6b:ce:50:64:ac:b7:d1:ed:b9:0e:c3:4d:a5:d3:94:0e:bd: b1:09:26:ae:c0:28:4d:97:5c:d7:c0:aa:9d:90:ac:cb:7f:50: 0d:34:45:dc:2d:d2:be:a8:29:a9:60:bf:59:fd:f0:2f:00:08: bd:ea:5f:5d:f4:f6:e1:64:09:62:4d:13:f6:12:06:ab:e3:e1: e6:4e:46:1f:1b:a4:09:81:92:e3:69:1a:e5:77:10:b2:ef:de: 30:1c:f6:8a:a1:0a:a2:f5:2c:ca:80:7c:e6:dd:e7:1e:24:d8: 6c:8c:fe:37:f0:0a:51:7f:35:c3:c0:4a:22:78:df:53:d4:8c: dd:f0:69:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBkswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQ1MTkxMTAvBgNVBAUTKEE5QTc1NTU1RUQ3MDY3MkY3MUQ1MkY2NTkzQjkxQjQ0 MjBCQUE3MEIwHhcNMjUwNTMwMjI0NzQxWhcNMjUwNjA2MjI0NzQxWjAYMRYwFAYD VQQDEw02ODNhMzU4ZC1kYTc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAys/HPFUWhlqdIGS5L4qaJN0CIEv8vbleWvulGAA6KtogkXiWsas2FAHFCmIy K8sCmHe1PeEI//xJ5JWZklg0QJoHeNI2FcwZWFI6Fuf/6iLV6gEF2FU5qKqgHNX8 YEcPHSntsZxvpJtT9RJjoABkgkpkBfgXVDfmi5tVVHMqUbg5wz8444aFfWqYIJhA h1GWiM4499Qt9ApxnyFC+EkB2Lvsw6ZHxhJbYaI5D87un/4iPBrPIWksXtHPyhLr iQuY05QZ8+MN5kPAE/jl92DpRoVyFx4nxCqQ/D9X7wCGGTUongLCJEJqzy9edSOH OqXajevlz26ToOgHBLuMpVf4XwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLebOPBz uUQePnJ3k1F8mYqxHBCOMB8GA1UdIwQYMBaAFKmnVVXtcGcvcdUvZZO5G0QguqcL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDUxOS8wNDI2NDkxRThD QUUxMUVCQUExQjFGNUVDNEY5QUUwMi9xYWRWVmUxd1p5OXgxUzlsazdrYlJDQzZw d3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FhZFZWZTF3Wnk5eDFTOWxrN2tiUkNDNnB3cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NDUxOS8wNDI2NDkxRThDQUUxMUVCQUExQjFGNUVDNEY5QUUwMi9xYWRWVmUxd1p5 OXgxUzlsazdrYlJDQzZwd3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVHlxv1xOeu3cQl/et3CuizJBF7WTsOQg3232xTOi0cAkYid08yZyX KDlpyGURmXE8j2ALoBONO0qffIXKTC7T5Tt9DQo5Vkdf+OIBW4Ow5AJS/uQsOpmg 6EFqLRj1p4Rd8Q5ETA8jh+g9jZC8xSBebzohS4kOMTjpKp1vXlyma85QZKy30e25 DsNNpdOUDr2xCSauwChNl1zXwKqdkKzLf1ANNEXcLdK+qCmpYL9Z/fAvAAi96l9d 9PbhZAliTRP2Egar4+HmTkYfG6QJgZLjaRrldxCy794wHPaKoQqi9SzKgHzm3ece JNhsjP438ApRfzXDwEoieN9T1Izd8GkB -----END CERTIFICATE-----Generated at Sat May 31 17:41:04 2025 by rpki-client