$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4EF7/C46FD7741B8F11E7AC4C7229C4F9AE02/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.mft File: qrUk5ZWlMOEsE6ohHC7ya2ndnJs.mft (raw, json) Hash identifier: +yeolendIpxHC28Dhi4g/kWoawdTeE3mqPzVIw59j7Y= Subject key identifier: 44:F7:3D:C3:BA:3F:2F:F4:C0:F2:21:AB:19:83:4C:0C:66:FC:C5:49 Authority key identifier: AA:B5:24:E5:95:A5:30:E1:2C:13:AA:21:1C:2E:F2:6B:69:DD:9C:9B Certificate issuer: /CN=A91E4EF7/serialNumber=AAB524E595A530E12C13AA211C2EF26B69DD9C9B Certificate serial: 1B23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4EF7/C46FD7741B8F11E7AC4C7229C4F9AE02/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.mft Manifest number: 1B18 Signing time: Fri 30 May 2025 16:28:18 +0000 Manifest this update: Fri 30 May 2025 16:28:18 +0000 Manifest next update: Fri 06 Jun 2025 16:28:18 +0000 Files and hashes: 1: qrUk5ZWlMOEsE6ohHC7ya2ndnJs.crl (hash: G2K+evWz4rInsygjTUyNKDcW3GRQxV0dSn0rZTfhBVM=) 2: E24736EC9D9011EC89314083C4F9AE02.roa (hash: MQLW+ckG9k/91Edmhff4+dci4t4G4rJfBHrG+oHBPHU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4EF7/C46FD7741B8F11E7AC4C7229C4F9AE02/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.crl rsync://rpki.apnic.net/member_repository/A91E4EF7/C46FD7741B8F11E7AC4C7229C4F9AE02/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 16:28:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6947 (0x1b23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4EF7, serialNumber=AAB524E595A530E12C13AA211C2EF26B69DD9C9B Validity Not Before: May 30 16:28:18 2025 GMT Not After : Jun 6 16:28:18 2025 GMT Subject: CN=6839dca2-1865 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:ea:9f:75:7e:b3:df:08:1f:23:a6:61:96:da: 6b:1a:9a:97:77:6c:9c:b0:88:47:82:60:f6:a1:f7: f5:aa:5b:70:9e:89:e3:d7:64:cf:60:00:e4:5a:48: 73:a1:6b:e3:68:f2:ca:59:72:db:88:6e:9e:c5:2b: 66:65:03:b1:a4:50:29:fa:33:07:16:25:5a:d7:e3: 42:bb:82:4a:f8:51:bf:82:82:13:72:70:0b:d9:97: dc:f4:d0:96:c6:93:35:13:4c:97:22:18:de:ae:da: bd:25:c9:82:5e:4a:f6:27:69:2a:af:c9:29:01:43: ba:26:60:8a:ec:00:dc:67:f0:73:43:38:d7:b1:cd: c8:1b:61:28:fd:1f:ed:ee:5f:1b:ed:98:86:fe:7f: cc:ae:3e:4f:aa:44:6e:ab:fa:bd:64:98:c2:e6:ad: 8c:e1:88:8f:ba:9b:b7:38:78:61:91:e2:e5:2a:3b: d1:95:3c:8c:e6:4c:3b:c3:8b:36:30:cb:e0:3e:3e: bc:e8:77:eb:63:b1:47:c3:31:da:79:41:69:c1:33: 4b:60:ff:b7:f9:59:5b:d1:46:31:17:68:ec:e3:b2: 78:94:13:fb:1f:7f:20:25:de:25:2b:c6:d0:4a:31: ba:ad:c2:8d:2f:80:44:dd:86:fe:32:86:fe:7d:4e: 80:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:F7:3D:C3:BA:3F:2F:F4:C0:F2:21:AB:19:83:4C:0C:66:FC:C5:49 X509v3 Authority Key Identifier: keyid:AA:B5:24:E5:95:A5:30:E1:2C:13:AA:21:1C:2E:F2:6B:69:DD:9C:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4EF7/C46FD7741B8F11E7AC4C7229C4F9AE02/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4EF7/C46FD7741B8F11E7AC4C7229C4F9AE02/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:7d:87:ea:79:c3:85:5a:3c:b3:ab:73:b8:e3:4b:f7:31:ce: fb:61:59:e1:84:44:92:22:6c:f6:71:29:97:7c:18:b0:0d:11: d7:b0:40:6d:36:57:3b:a0:c1:79:c5:5d:09:0c:1f:40:2b:21: a0:ec:24:a0:3e:36:e8:80:a3:39:2e:d9:26:ae:9d:80:64:3d: ab:d8:1f:b0:ad:ae:30:5a:8e:da:6b:94:f7:f9:55:3b:be:d0: 40:bb:dc:d1:64:df:a5:09:6c:1d:55:32:c3:1b:39:c9:93:44: ed:ac:8c:e4:be:ef:f0:b3:df:25:79:a1:9f:91:1a:01:4f:3a: 72:50:63:3e:b3:9e:57:f6:32:17:51:fc:01:18:aa:a4:70:0e: 79:ca:a5:bf:f2:05:6b:64:e9:ab:60:3c:d5:3b:e4:d1:5c:69: 35:38:16:bf:77:3d:bb:e5:31:b0:a7:60:bc:f2:77:5a:75:2c: 44:66:09:e3:59:19:14:1f:75:f4:0a:bc:02:ef:0d:88:2b:0e: a6:6a:7c:cb:8a:ab:96:e8:43:04:ed:0f:bc:6c:b6:34:0a:a6: a2:e5:db:1c:2c:51:f1:8a:16:68:58:c4:b4:49:54:dc:1b:2a: 78:11:f3:cd:13:fe:d6:f6:fb:fe:55:40:92:0f:f1:6d:56:87: a9:5c:19:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGyMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTRFRjcxMTAvBgNVBAUTKEFBQjUyNEU1OTVBNTMwRTEyQzEzQUEyMTFDMkVGMjZC NjlERDlDOUIwHhcNMjUwNTMwMTYyODE4WhcNMjUwNjA2MTYyODE4WjAYMRYwFAYD VQQDEw02ODM5ZGNhMi0xODY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl+qfdX6z3wgfI6ZhltprGpqXd2ycsIhHgmD2off1qltwnonj12TPYADkWkhz oWvjaPLKWXLbiG6exStmZQOxpFAp+jMHFiVa1+NCu4JK+FG/goITcnAL2Zfc9NCW xpM1E0yXIhjertq9JcmCXkr2J2kqr8kpAUO6JmCK7ADcZ/BzQzjXsc3IG2Eo/R/t 7l8b7ZiG/n/Mrj5PqkRuq/q9ZJjC5q2M4YiPupu3OHhhkeLlKjvRlTyM5kw7w4s2 MMvgPj686HfrY7FHwzHaeUFpwTNLYP+3+Vlb0UYxF2js47J4lBP7H38gJd4lK8bQ SjG6rcKNL4BE3Yb+Mob+fU6AOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFET3PcO6 Py/0wPIhqxmDTAxm/MVJMB8GA1UdIwQYMBaAFKq1JOWVpTDhLBOqIRwu8mtp3Zyb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNEVGNy9DNDZGRDc3NDFC OEYxMUU3QUM0QzcyMjlDNEY5QUUwMi9xclVrNVpXbE1PRXNFNm9oSEM3eWEybmRu SnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FyVWs1WldsTU9Fc0U2b2hIQzd5YTJuZG5Kcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NEVGNy9DNDZGRDc3NDFCOEYxMUU3QUM0QzcyMjlDNEY5QUUwMi9xclVrNVpXbE1P RXNFNm9oSEM3eWEybmRuSnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZfYfqecOFWjyzq3O440v3Mc77YVnhhESSImz2cSmXfBiwDRHXsEBt Nlc7oMF5xV0JDB9AKyGg7CSgPjbogKM5Ltkmrp2AZD2r2B+wra4wWo7aa5T3+VU7 vtBAu9zRZN+lCWwdVTLDGznJk0TtrIzkvu/ws98leaGfkRoBTzpyUGM+s55X9jIX UfwBGKqkcA55yqW/8gVrZOmrYDzVO+TRXGk1OBa/dz275TGwp2C88ndadSxEZgnj WRkUH3X0CrwC7w2IKw6manzLiquW6EME7Q+8bLY0Cqai5dscLFHxihZoWMS0SVTc Gyp4EfPNE/7W9vv+VUCSD/FtVoepXBnh -----END CERTIFICATE-----Generated at Sat May 31 16:29:39 2025 by rpki-client