$ rpki-client -vvf rpki.apnic.net/member_repository/A91E80FB/628D520C8FB611EC92BD2510C4F9AE02/QIWuE0tjOKEnZXKD67wWwS8guGI.mft File: QIWuE0tjOKEnZXKD67wWwS8guGI.mft (raw, json) Hash identifier: Z12ZATtfNmlrXVNc3628KqFIo9P55gihmKoXDEfHxuI= Subject key identifier: AD:E1:1D:24:38:29:AC:81:8F:CE:32:4B:40:04:D9:24:29:D1:95:41 Authority key identifier: 40:85:AE:13:4B:63:38:A1:27:65:72:83:EB:BC:16:C1:2F:20:B8:62 Certificate issuer: /CN=A91E80FB/serialNumber=4085AE134B6338A127657283EBBC16C12F20B862 Certificate serial: 03CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QIWuE0tjOKEnZXKD67wWwS8guGI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E80FB/628D520C8FB611EC92BD2510C4F9AE02/QIWuE0tjOKEnZXKD67wWwS8guGI.mft Manifest number: 03C2 Signing time: Sat 31 May 2025 00:52:39 +0000 Manifest this update: Sat 31 May 2025 00:52:39 +0000 Manifest next update: Sat 07 Jun 2025 00:52:39 +0000 Files and hashes: 1: QIWuE0tjOKEnZXKD67wWwS8guGI.crl (hash: sttxjvWfEPq338yPTexm+rlmRS9M8TCIhfeGy0hvh5w=) 2: 9FBFD358C0F911EFA63F3E64C4F9AE02.roa (hash: yc1nPimI0kUiUPjKIX7+rUbHKCs59csyBzZSSe87J8M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E80FB/628D520C8FB611EC92BD2510C4F9AE02/QIWuE0tjOKEnZXKD67wWwS8guGI.crl rsync://rpki.apnic.net/member_repository/A91E80FB/628D520C8FB611EC92BD2510C4F9AE02/QIWuE0tjOKEnZXKD67wWwS8guGI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QIWuE0tjOKEnZXKD67wWwS8guGI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:52:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 973 (0x3cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E80FB, serialNumber=4085AE134B6338A127657283EBBC16C12F20B862 Validity Not Before: May 31 00:52:39 2025 GMT Not After : Jun 7 00:52:39 2025 GMT Subject: CN=683a52d7-c83f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:e8:27:bb:04:26:cf:93:97:b9:18:76:58:f7: bf:2d:03:cb:da:9e:34:ad:21:e8:99:2e:aa:f4:38: 2a:28:5f:bc:0f:1c:03:a4:85:1e:c5:2f:bf:fd:39: d1:fe:97:ea:15:09:73:2f:73:d3:2f:79:80:89:6a: 1e:f6:44:47:00:67:a2:b9:46:26:14:90:6a:63:ec: 8a:e1:42:f4:c3:f1:a1:fc:43:5c:29:ea:e7:68:8b: fa:c1:43:b9:e9:b3:9b:29:a8:21:36:55:4f:eb:49: 1d:81:56:60:13:b2:aa:47:cd:94:b4:b7:cd:d0:f0: 63:fc:c7:17:41:23:8b:a2:62:76:66:f7:65:89:60: 3b:2a:d9:c9:89:64:52:32:73:b1:91:a4:09:ea:4e: 97:44:c6:5f:13:cc:16:82:6b:8b:9c:4e:5d:7d:bb: 86:e0:8d:42:8e:92:8f:84:88:40:f3:82:e7:e7:9b: 14:a1:ba:88:af:90:87:50:e5:3f:a7:1b:15:6a:23: 5f:95:ae:79:c5:5b:97:ef:29:95:1e:8f:1e:e5:00: 41:43:7e:bd:80:5a:a7:5b:2f:79:4c:01:56:14:30: 42:60:70:ca:25:22:b4:8f:86:d4:ce:d9:79:80:9a: cf:bd:19:19:3c:f5:a6:0e:bb:7b:e5:6e:23:0a:72: a7:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:E1:1D:24:38:29:AC:81:8F:CE:32:4B:40:04:D9:24:29:D1:95:41 X509v3 Authority Key Identifier: keyid:40:85:AE:13:4B:63:38:A1:27:65:72:83:EB:BC:16:C1:2F:20:B8:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E80FB/628D520C8FB611EC92BD2510C4F9AE02/QIWuE0tjOKEnZXKD67wWwS8guGI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QIWuE0tjOKEnZXKD67wWwS8guGI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E80FB/628D520C8FB611EC92BD2510C4F9AE02/QIWuE0tjOKEnZXKD67wWwS8guGI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:0f:cd:2a:41:09:3e:6d:6b:a8:9a:4a:e5:4c:bc:54:e6:a5: 58:a4:66:da:f3:e9:87:ed:35:43:85:40:88:bb:22:f6:ef:b8: 2d:82:30:6f:5a:50:b8:28:76:f6:46:09:de:85:31:ec:d6:d1: 95:4a:10:5d:f4:7f:e3:f1:33:53:0e:a0:d2:9b:51:de:0c:fd: a6:71:b9:80:4c:c9:13:71:bd:f4:a8:69:94:b5:be:7b:ef:9b: 71:3c:a0:1b:f4:03:75:09:75:d1:8f:cf:a6:8b:a9:cc:64:1b: 4d:7b:2b:ae:b4:86:22:ad:1f:44:37:5d:17:7f:7e:f5:31:07: 4f:2b:62:7d:6c:2c:98:ec:ac:f5:c0:e3:34:1a:ba:4e:26:37: 44:71:6e:15:3a:37:9d:2a:97:1c:3c:81:3d:0f:41:07:c6:01: cb:95:1f:19:0f:7a:c1:c5:50:47:e0:bb:d9:de:da:c3:07:b2: 28:82:4a:d0:0c:06:86:7a:16:33:3b:8d:16:f7:c2:34:33:35: 8b:66:0b:e3:79:db:b5:ad:1a:6e:0a:ee:ca:76:a1:d0:4a:89: cf:d9:81:4f:7c:4a:5d:36:ac:6b:81:97:bf:6a:f4:e6:8e:25: e9:50:a5:57:f0:f5:88:10:8f:46:1a:d3:11:2a:57:51:3b:6e: 7f:b7:27:3d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA80wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTgwRkIxMTAvBgNVBAUTKDQwODVBRTEzNEI2MzM4QTEyNzY1NzI4M0VCQkMxNkMx MkYyMEI4NjIwHhcNMjUwNTMxMDA1MjM5WhcNMjUwNjA3MDA1MjM5WjAYMRYwFAYD VQQDEw02ODNhNTJkNy1jODNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn+gnuwQmz5OXuRh2WPe/LQPL2p40rSHomS6q9DgqKF+8DxwDpIUexS+//TnR /pfqFQlzL3PTL3mAiWoe9kRHAGeiuUYmFJBqY+yK4UL0w/Gh/ENcKernaIv6wUO5 6bObKaghNlVP60kdgVZgE7KqR82UtLfN0PBj/McXQSOLomJ2ZvdliWA7KtnJiWRS MnOxkaQJ6k6XRMZfE8wWgmuLnE5dfbuG4I1CjpKPhIhA84Ln55sUobqIr5CHUOU/ pxsVaiNfla55xVuX7ymVHo8e5QBBQ369gFqnWy95TAFWFDBCYHDKJSK0j4bUztl5 gJrPvRkZPPWmDrt75W4jCnKnlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK3hHSQ4 KayBj84yS0AE2SQp0ZVBMB8GA1UdIwQYMBaAFECFrhNLYzihJ2Vyg+u8FsEvILhi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODBGQi82MjhENTIwQzhG QjYxMUVDOTJCRDI1MTBDNEY5QUUwMi9RSVd1RTB0ak9LRW5aWEtENjd3V3dTOGd1 R0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FJV3VFMHRqT0tFblpYS0Q2N3dXd1M4Z3VHSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODBGQi82MjhENTIwQzhGQjYxMUVDOTJCRDI1MTBDNEY5QUUwMi9RSVd1RTB0ak9L RW5aWEtENjd3V3dTOGd1R0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC7D80qQQk+bWuomkrlTLxU5qVYpGba8+mH7TVDhUCIuyL277gtgjBv WlC4KHb2RgnehTHs1tGVShBd9H/j8TNTDqDSm1HeDP2mcbmATMkTcb30qGmUtb57 75txPKAb9AN1CXXRj8+mi6nMZBtNeyuutIYirR9EN10Xf371MQdPK2J9bCyY7Kz1 wOM0GrpOJjdEcW4VOjedKpccPIE9D0EHxgHLlR8ZD3rBxVBH4LvZ3trDB7IogkrQ DAaGehYzO40W98I0MzWLZgvjedu1rRpuCu7KdqHQSonP2YFPfEpdNqxrgZe/avTm jiXpUKVX8PWIEI9GGtMRKldRO25/tyc9 -----END CERTIFICATE-----Generated at Sat May 31 17:30:22 2025 by rpki-client