$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFBA1/2AD51F4C990311E7A5E95C6FC4F9AE02/QVQG7YC02Sekeai6BCEWri0RoaY.mft File: QVQG7YC02Sekeai6BCEWri0RoaY.mft (raw, json) Hash identifier: R+g/L6wTG0mrYIQzLKiFZDZ6Tkju4WbX9G96bBbPJjw= Subject key identifier: C9:60:18:3E:12:3B:2E:41:78:65:39:2E:05:36:C3:75:59:DC:E6:BE Authority key identifier: 41:54:06:ED:80:B4:D9:27:A4:79:A8:BA:04:21:16:AE:2D:11:A1:A6 Certificate issuer: /CN=A91EFBA1/serialNumber=415406ED80B4D927A479A8BA042116AE2D11A1A6 Certificate serial: 18E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVQG7YC02Sekeai6BCEWri0RoaY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EFBA1/2AD51F4C990311E7A5E95C6FC4F9AE02/QVQG7YC02Sekeai6BCEWri0RoaY.mft Manifest number: 18BC Signing time: Fri 30 May 2025 16:40:38 +0000 Manifest this update: Fri 30 May 2025 16:40:37 +0000 Manifest next update: Fri 06 Jun 2025 16:40:37 +0000 Files and hashes: 1: QVQG7YC02Sekeai6BCEWri0RoaY.crl (hash: JZh1F/5JMwx0blA2lpzAkh/+0GwEWVHuyz3+rdttL70=) 2: 62C9C1CEE03111EEBECE581EC4F9AE02.roa (hash: /HjqJb3HeVbYY01kD6wIaTbG/Ekr2hN/Y4VOZSnVUZ8=) 3: 43E9842C185A11EF9D0C4338C4F9AE02.roa (hash: irpR0h3jscaijLl59Cc3m/8UUXHvczEBFVSowrAT4Uk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EFBA1/2AD51F4C990311E7A5E95C6FC4F9AE02/QVQG7YC02Sekeai6BCEWri0RoaY.crl rsync://rpki.apnic.net/member_repository/A91EFBA1/2AD51F4C990311E7A5E95C6FC4F9AE02/QVQG7YC02Sekeai6BCEWri0RoaY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVQG7YC02Sekeai6BCEWri0RoaY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 16:40:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6374 (0x18e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EFBA1, serialNumber=415406ED80B4D927A479A8BA042116AE2D11A1A6 Validity Not Before: May 30 16:40:37 2025 GMT Not After : Jun 6 16:40:37 2025 GMT Subject: CN=6839df85-f158 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:b8:f9:22:50:56:c4:69:f0:9c:cb:fc:f6:ac: b2:11:74:07:d5:f6:4a:c7:ee:4e:da:34:59:1b:77: 4b:13:71:3d:7c:59:22:b3:f1:93:31:35:93:15:e9: 8e:8f:0f:5d:2a:5f:62:be:cc:38:04:65:83:5a:94: 79:cd:b8:f0:01:45:bf:91:c1:3c:b1:54:72:92:8f: c1:03:ce:c3:0e:8b:ab:e2:a8:ea:be:93:52:1b:66: e0:29:23:51:3b:55:9b:8a:bc:6f:ed:fe:2f:25:7d: b8:fd:aa:10:fc:38:d1:4e:cc:51:81:7a:40:bb:4d: ed:0f:58:3d:cd:3e:40:c2:14:c1:ef:c7:6b:4e:4c: 70:25:7b:2d:6c:0c:9e:cf:61:51:52:cd:13:28:8e: e5:f9:3d:d8:1b:e0:b4:3a:b0:ab:12:ca:fa:3c:79: 71:69:f9:e3:60:38:b7:04:0b:6d:31:2d:c9:81:a8: 32:10:88:a8:a5:75:fd:80:7b:68:99:d3:0b:80:0e: 2f:b8:ed:04:95:d4:6c:b7:a0:f7:f7:5b:6d:6b:c1: 46:6d:f0:86:92:b6:1f:5d:32:3c:f0:6c:9b:b3:d3: 29:18:34:dc:69:fa:85:db:f0:c0:1b:69:19:a9:15: 73:6d:23:7e:65:3b:77:b2:57:20:fc:53:b1:df:af: 36:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:60:18:3E:12:3B:2E:41:78:65:39:2E:05:36:C3:75:59:DC:E6:BE X509v3 Authority Key Identifier: keyid:41:54:06:ED:80:B4:D9:27:A4:79:A8:BA:04:21:16:AE:2D:11:A1:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EFBA1/2AD51F4C990311E7A5E95C6FC4F9AE02/QVQG7YC02Sekeai6BCEWri0RoaY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVQG7YC02Sekeai6BCEWri0RoaY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFBA1/2AD51F4C990311E7A5E95C6FC4F9AE02/QVQG7YC02Sekeai6BCEWri0RoaY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:44:2f:37:c2:df:6c:d6:6b:b0:42:f0:6e:6c:4f:58:22:16: 81:2a:83:fa:9b:2a:6c:6f:fc:12:24:7b:07:25:be:f2:ad:bf: 0d:e6:71:20:3e:67:b1:52:0b:a0:b4:f2:ba:6c:75:f2:96:ba: 37:6f:c2:ce:8e:88:04:d8:21:a0:7b:cf:22:38:bb:1e:5d:8b: 17:95:51:f0:33:2b:77:11:e4:e2:48:90:03:3f:f0:47:61:b8: 9c:1a:5f:ac:e5:17:a4:f7:1c:e3:4d:75:7f:2d:c0:20:48:4d: 4c:4a:01:20:5a:37:c3:0f:4e:81:ba:48:8e:82:0d:6b:97:2c: 8b:c7:11:c1:70:f1:c7:e4:b7:8e:24:71:32:18:55:c1:56:a0: 10:8b:17:53:f0:52:da:11:0e:c7:29:cc:e3:10:bc:60:f3:39: 8c:c6:a6:69:c9:97:19:9b:a4:92:8c:08:a2:f1:f7:bf:12:d2: fb:19:3a:45:cb:45:2b:84:9c:f6:bf:bc:ac:ad:26:75:56:41: 42:7d:f4:d3:83:60:0f:33:16:8f:ed:d7:14:af:71:ad:fa:0e: c0:19:84:ca:32:46:42:bc:d4:0d:7f:7d:4b:41:8d:35:0f:d0: e6:40:55:4f:e1:5a:63:bb:df:69:05:2a:f7:80:c2:02:c4:40: 2b:65:db:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGOYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUZCQTExMTAvBgNVBAUTKDQxNTQwNkVEODBCNEQ5MjdBNDc5QThCQTA0MjExNkFF MkQxMUExQTYwHhcNMjUwNTMwMTY0MDM3WhcNMjUwNjA2MTY0MDM3WjAYMRYwFAYD VQQDEw02ODM5ZGY4NS1mMTU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6Lj5IlBWxGnwnMv89qyyEXQH1fZKx+5O2jRZG3dLE3E9fFkis/GTMTWTFemO jw9dKl9ivsw4BGWDWpR5zbjwAUW/kcE8sVRyko/BA87DDour4qjqvpNSG2bgKSNR O1Wbirxv7f4vJX24/aoQ/DjRTsxRgXpAu03tD1g9zT5AwhTB78drTkxwJXstbAye z2FRUs0TKI7l+T3YG+C0OrCrEsr6PHlxafnjYDi3BAttMS3JgagyEIiopXX9gHto mdMLgA4vuO0EldRst6D391tta8FGbfCGkrYfXTI88Gybs9MpGDTcafqF2/DAG2kZ qRVzbSN+ZTt3slcg/FOx3682VQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMlgGD4S Oy5BeGU5LgU2w3VZ3Oa+MB8GA1UdIwQYMBaAFEFUBu2AtNknpHmougQhFq4tEaGm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRkJBMS8yQUQ1MUY0Qzk5 MDMxMUU3QTVFOTVDNkZDNEY5QUUwMi9RVlFHN1lDMDJTZWtlYWk2QkNFV3JpMFJv YVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FWUUc3WUMwMlNla2VhaTZCQ0VXcmkwUm9hWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RkJBMS8yQUQ1MUY0Qzk5MDMxMUU3QTVFOTVDNkZDNEY5QUUwMi9RVlFHN1lDMDJT ZWtlYWk2QkNFV3JpMFJvYVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCeRC83wt9s1muwQvBubE9YIhaBKoP6mypsb/wSJHsHJb7yrb8N5nEg PmexUgugtPK6bHXylro3b8LOjogE2CGge88iOLseXYsXlVHwMyt3EeTiSJADP/BH YbicGl+s5Rek9xzjTXV/LcAgSE1MSgEgWjfDD06BukiOgg1rlyyLxxHBcPHH5LeO JHEyGFXBVqAQixdT8FLaEQ7HKczjELxg8zmMxqZpyZcZm6SSjAii8fe/EtL7GTpF y0UrhJz2v7ysrSZ1VkFCffTTg2APMxaP7dcUr3Gt+g7AGYTKMkZCvNQNf31LQY01 D9DmQFVP4Vpju99pBSr3gMICxEArZduh -----END CERTIFICATE-----Generated at Sat May 31 17:32:58 2025 by rpki-client